last executing test programs: 2m23.067461912s ago: executing program 3 (id=129): setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a1d8ff20f20c50624246010203010902240001000410000904"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) 2m21.8341858s ago: executing program 3 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv(r3, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1, 0x1fffff, 0xa3ab) write$UHID_INPUT(r2, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000380)={0x1, @win={{0x0, 0x0, 0x32314247, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) setpgid(0x0, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) poll(0x0, 0xffffff3d, 0x8) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010429ec2c6724dbdf257500000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20000004) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2d, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000080)={[{@grpquota}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 2m20.961632181s ago: executing program 3 (id=139): r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ifreq(r0, 0xae, &(0x7f0000000040)={'wlan1\x00', @ifru_ivalue=0x8}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) 2m18.548849021s ago: executing program 3 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000001040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x140) chdir(&(0x7f0000000140)='./file1\x00') r1 = socket(0x2, 0x80805, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x88081, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 2m18.391409294s ago: executing program 3 (id=151): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x8000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x1, {0x12, 0x3, 0xc, 0xdb4}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000080)={0x0, 0x64}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m17.931172746s ago: executing program 3 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv(r3, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1, 0x1fffff, 0xa3ab) write$UHID_INPUT(r2, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000380)={0x1, @win={{0x0, 0x0, 0x32314247, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) setpgid(0x0, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) poll(0x0, 0xffffff3d, 0x8) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010429ec2c6724dbdf257500000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20000004) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2d, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000080)={[{@grpquota}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 2m17.698428858s ago: executing program 32 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv(r3, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1, 0x1fffff, 0xa3ab) write$UHID_INPUT(r2, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000380)={0x1, @win={{0x0, 0x0, 0x32314247, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) setpgid(0x0, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) poll(0x0, 0xffffff3d, 0x8) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010429ec2c6724dbdf257500000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20000004) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2d, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000080)={[{@grpquota}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 1m21.431060429s ago: executing program 2 (id=541): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="1000000200000000", @ANYRES64=r1], 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xfffffffe, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x11, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x7, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0xffffffff, 0x8, 0x0, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80000000, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe5, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x4, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e21, 0x9, @private1, 0x9}}, 0x81, 0x9, 0x8, 0x9, 0x10, 0x73, 0x1}, &(0x7f0000000100)=0x9c) 1m21.324479562s ago: executing program 2 (id=542): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d00070100000000000000c7047c000004f8ffff0f000180", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m21.294436045s ago: executing program 2 (id=543): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000680)={0x20, 0xf, 0x3, "8d0c42"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="b715997c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = dup2(r3, r2) close_range(r5, 0xffffffffffffffff, 0x0) 1m20.265383673s ago: executing program 4 (id=548): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x58f7a000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x8, [0x81, 0xd603, 0x1, 0x800, 0x9, 0x1000, 0x4, 0x4]}, &(0x7f0000000080)=0x14) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xa, 0xffffff81, {0xffffffffffffffff}, {}, 0xffffffffffff0001, 0x5}) (async) r3 = syz_clone(0x10200000, &(0x7f00000012c0)="e42aaf1d85e0197a0cfeab3ff281ed3a4a7874e4e5ba808b220332becc8bb0aa4e24aea8376d6e5ab9934f7e806e70b91f4d18de091f27528607e45b93bd08f2f5f7c18e01a31e8b2f7acbc9d74bdd5fc30eaf8e46c1b0d866e8390100809c4d48f302577cdb29edf514cc98be584a798a4dc92a58a176f5", 0x78, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="917cf71f87861a5ab83bb8962212f40816cde2bde72ce839aa7e36f49f0f928d5238ced39c76aef1781c33c6b2b790593d17390cd44a2a8d419c9809161d8ab14fff1ccdda5a9fed77f971decff355a478d9550fd167584d9e7ff02b8ec833f76ffd54af5c3f20c352564b854397d2ffc3755ee8da602632e9cda4496f2f82f035e35c64693b4fc1d0d22b73fab4f5de95c2b6f258a31de8318d774c44133712a4969dd65a852b1ec1ffee") r4 = getpid() r5 = geteuid() (async, rerun: 64) r6 = getgid() (rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000140)={0x1158, 0x27, 0x8, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0xab, 0x0, 0x0, @pid=r2}, @nested={0x10f6, 0x32, 0x0, 0x1, [@typed={0x1004, 0x54, 0x0, 0x0, @binary="fe4906b10c1072a5907eea35ad526da3ca754e950e7b83a61d4edfa2a2d5f344189befde955c6aaa3adbb737cec8e6a0696378ce1f781ea46fc9479c5ae47f8a1061ff927c7bb78e29293495ef751c68a4e1ca1375a48dfa42642e6cb0ee92c4ba3ece94d2cdd9015ddc8794c454b0a5b74dc9259f4b89a42f157d91457a8b6733473aec640b6cda6d1ea0151fffd5a89ddc683f58f24513cf8778bb434f8945cd2fd981e1dfe75522e4d96f003a0808aace61480d9ab61d4935421a0311f5708e385ebf912daf590d19cd97a4928478c1799ee31b15e9024ce7f9fac70ebdb0b060e195a9d050a7508d39d2b7b695b0c13719d4fb80cfede10a6dec15a98c524afae62051e7b783bc3e05ebd927eb419b9650dfa2c4d1d8f018ba92d4e4dda4356900182324cd2ee4789f8996c8445dd6f9c21cf4742de3e2d4990043e093ff0bc457edb971c7e0a030f17e757e6780f01ce3ca62d37ff4d6e49e22db10670b2d10e47304fa58c12c6482a99b0f2d3c91aa27655a88fbd916ab56f75350518025b4d9fbdca175858d07ff17e99c46f74d9f374995dc8f427757b1a5a6067257ca30a8ebc755853d84e64cd1c885f01788d41a4d370ad2c253f6846ad3819e766d7b067d8e019c8f1054e099c6e56391bd346261f1628e6cab94b9f2a4faedfc2e19c604fbcb66a931fbbdd425baf09e141e8403d8054f51a213cd202e9f3bd1c441c0cf44747a0242f3019d8aad8f2d22f6341eeec26480c178fe0ff9a99034e3e75eb76b38fb0d43f940a836146e59ac201930e4fb15379115fb0a97ad4503ece9e52de2fc098d4b25c8cd269797d37efadf6e58aa6b16e6520a005f8c3f66caf7ceefdad5781073c11a4c7549b332817ca5f3ef87a176100b07247f8e5445d78189bdc2c43236b4cee325bf3af1bae39e82f974fb46e54ed5a459fb682657594c32b4c54c6ab96caceda01ac26e173995431e8f5450c8a1b353fcbf5b49aa565769ec1a100c2f9eda8a48be832656c337a1a5c918a6cca58ee52613514c96d9f720c66d5e3cfc8a4ba9d8f279a38ad896591ef640de3631a9b60023af00bdcded9f65e2c05a72367c83ce5a37a7e59f2589ce69fb92c337840d04af801d1d6681b5c54c9e1b729a8e0fa2a17d2251ad82ca79cd543a48f53cf408b6f3c41fba8eb6c20035a365c5cbe7b3c02c5e063b05bee1aeb2eaea98b911de77b3eae2ce651b3055102e2755ec3de3284acddbfc1ad670b4acae69292e53ef3053eee99b8294c818bcb685eeb0959decc3ec2a3f9a9d7d31f0a8150a4ece26065339fc7f3b8c3b6a3cdbe616405319d862e817733c1795874541419d0acfc9b182ce9b271d094718e8167c2d235cee0ced98db557dbcc47516e922dbf5d2de9910044c0a9d327d473e9d34d4a4a5cec25a499a361041b6a2fda0b4543cf04fdf64d06eba808220737c7d631c7d7b7f8514c78992e83bd770b482ad69bae65750f9ad1561a6a318cf068aa318181ed4e91211da52c8e3a727da0ac7065481b39d8e79506a7486c54433fd6c43b2111ac3a692d83d3f918ec75087457992eb1552fcfd2247fbd5025628b42ddd99579c8b06e10dd8028409f3b990ef9f53fb378db87fb1c25bd241a9b0baf1626ad68a039ead9a09b5b279c42df3489ae9ba2c4a31c7d81424c8807a3b7df33bd31cf5be9d27b8f75ea9e4e6d552c1392041b2a617c9b20e412cf26a0056b402b856451364b45017cc11f8cfb95e26883447dc7d6033705dde3b7f89a84c9df0be1a92188acae7eb8c96a7788d24ec0978fea036e9b1a2e668c506020db60c6041dd0b124d7b0903fe9f1175c4451f166f793adbcfbe1ee0fcd556e77ce42088f402a5db774f714c034c6c3076d33031fd3e312636a9ead2738e500664d79512b02c732d401952e7c3937d0622692e16f9b235cac36460c6dda5744e22c3bdc2fc61464cfae29d48d1c93efde8ececb1eb9e061da924478f8ec8d0a70f2c2a7eaff69cb4af092d338cd49f95e4f8af2e57728d7ec7be6728c078b3ae6893b813819c7b58a83702ded2067632652515ad4cb193a8a97ff61e128ffff414fda7ad770369fd73f2c6cde4b2e09f18697fe356a78798014d50d2ac9529b4863e4dd71dd1349f698b720afa5c6d6f31bd57ecbee521e55286492378c801e354743a2d5c92d6031f0024dffdfd4c4c444f5417300b8e8ee1e9a3270d45b7fa8b407243735e862873ab139b9dc04a6cd09fc0155ad29cb5dfc4590e7e8093abceaaa7d4d6cc018c6fd0dffb1329314ea6182bd103000cd8fdaed4d369e406f9848586ab91793849924cf64801b41528d0d02c77a854b13ff90f4444ebea9945888b0404cfbf88182e84770f7235efabb2d6327eff62932b2e0074a1ba5218d393503b623f713633109ffba7ba4e400335ae0c4bff96ef7756cb7ffeb3d55c9fe79203ae04e93d998ab658f9a21c82b885049dfba9ae91217c25b5219f265b90590acce9bae0aa25459b570584255a56a8ced93691491c6566429f97d27bd7a8ec25f82a08b3a3bf0d0b7ea8cc5caed73616ad5a6f0f38eecdd20f660bf0684da2f9510c6e751ef24331016f3805157059b2c8a78b4fdbe65be308f1d61c49f2b96e907f30eceb2780c7afe6a526f920cfbbb320d27602ea3d12b747c01a2c3e05b3796daf0e135a5407b2d3727b59cb3fa39cf625cc540807b02df31d579c920df058207a4e2f288f6b5b4790581b0f18b8bd024301e5bec11956ea9ec33b538347e8e3ab7390d34580e7373437593b3dc2673515753cfa977066d94c2e9d62c7f37009ac46e3ea59f41351c7f2d3458cd344ee4d0a06e6bed145e6c173c491e5b0824cf24663402baa5942f63fbc3f890938235c475e71e3adc4177d37d3c2ea61e25ad30da2c49c6921729d49ad3ccd02d245db9b5c4c3e03299037cb51c2d4dec4245ed80dace193a0f418ec8f80b622dca8b3f50e1f409303ae0562ba9bafa689e578bfef4571cded034e438b7bb0115a4f6451d23dadcaea27aea60a4e9409e910b3a87a22eb62f2b5450d66708d59caa9783d9df444f72fbf192975e40bb2e71054acf4c8b31b4bcab368c46d32cd06b3f317040eece879dac82303eab9c08d93ce448e558fa0146a13cf11e26cae19ebe3b84b8d821a53511c3b31ddc1c36ef9ae4dbece478eb8678e62576d32f36b195d5d86ddfa9d38ff3b60375cd090d814aed523356a35e1b71cb01f7667172f82af857191419f4c13950e124f90c46b7895937b6f11df547f66be3b0970f7ace2f1c384f8901c67d548f9e895ced1b1d62f1834e70397fcccadba84d7c672da6dd3effa8ad196b5401a747ce88a830c96895d1a53bb979988d360b9626a88dd1a2f952456881164bf7e25ec78a0a93b63030810df482b72b7845d7e406442635820ec9747f5fbc8fda5ad5a0969df66381f9730e025466768c42e9acf96d359725f309250abbc0d22e6fd5a7edbc24d369fde3e84d59ccf1f01c244d2a66de05f0ad12fcb6847e8d5843f0e1696e51cc9faf6129f9534edc6cc750670815dba94c60356c67e7481d6bf2bf5655e8a14e5678d86164856e5c857576f50158d921b169494e44ec11f807b5704a2be50fadbf53f59b71229d7804aee4a5012f7f980edd28d13df77b9a0ad032002fce1015929d4addeeca36d2ec71b3e746912c0fee135fff3b8487dbe3f714b698749beccb3363025342ad8ab7fd6b305f2c3a768dee7cffe0180af17c0a722a3c44de3b028d15ac1bfa98402082c61ba7a72ee17fe60544fe372bcaa82d520521f2867c1312d9978db95efe1ea342e112b4588192d2db6717329f46cca7fca4a7520b9d2314f75041e98bf5b6672780b8f3611b187721bec4ec0c37ec50b10d9db8f7e940884f41b2d5afc2ee2ebaf9c70608f950697eb5696c5f306ef425a1223686d0f40bbcb09e2ca3e353e84982732653e07fd6b9b72fec130adec5a412910a2216160a4ea2485632b33508c3a7050d83cde9341cddcd1667af3bc7ccb0b1480f1a8ceaba0d4a197df4802057152f667fa5eb7b0b1a77c25a3a88fff780f0541276ed4046b69289a00996f5ee8b381b7cc6e5225c871c4803e6eba922644ca5d3b3dfb5956e0de55ff15d5fbb0939a7130d473accaeadd267eccfcf1c1308b2c491d30334757e6e03e696407ade7c5f9963ab02bb76b0e90d50a55661db99437dc1177488072080db2c7cc83e134d3523be96755a5fe1683583d8153eb19b4cb9915b997526418c17748db434c741b3ee79f80a0cce916f658a1dc3df4197cd699ae2c3777119cfd2db8348a11f1e67ddacd3fd30b77c5efed2532990374ea809bdee53bf0710ecee1326f302ce897f1022c328f6f526b6e39b0725fa3d0566da137d4a5e06310be2c4769c3ed4d69ce15b7ac24721e49236e9f73f86acfdd0b4d62ec3dc6fafd61edfa00ff4f8d9d985d3d0368e8b92a471a7bf17300a7047c92c2adabddda9a9b01895c05e2383cc4de280f896c365897f6ad18f5fead749bca59a9218bb78e4a5546e73a652a434b2a2a532f26ffa0639e7edbb071343083c54a70e050ec95e73c55e0096c0f7d3ba0baf9464681f2b824726fef26a682b60363bac21664a79a85616ae30d668ba2e398750ee736d7d46bfa1efb966b9d820019cc1918a77f06d742d60b4e205e04efc7dbe3a8eb3a906af737fed587119f4f0c1cb5d82910854b5497aba493abfb31235001273e31d24ca63d7f09087715850bb126aa9dac679d1b9b22fb1331e502a8cec0fc772804c41c8ac3d510b6d7dd5572782e54e98758ac240b1f9d341b134bce87afc5bc2e0fd9554228602fbff9bde1ed8c6e1d567a6a082ce45180405a26037b87ae41158ebd052811f6b92d6dadd4af5d0ece37dff9b28948f5156ffa810a5bc908dc31f3e5455f4a6a6c6abafe2ebe994e9aa0fd0ddcc463f2ecfdf217703852156cd455f7e7074d376db8799c13502725d7f1cdfa6e1f83c117b28b771084acf38b266681522b149892d5c014cbbc66cd16153ecf01cbe25b6534bcb1448484263854102ca9f4c4e3583a15670f5c55b1f8ed58377b1933a8d94c88b761c1b3eeac68c2cca782c5585f4410ebbba26640ffa91a27ea89f424475fb406ab7d10c19305097959903b78e9cb932edf46d1997556bdf9a79cb5bb8d91a51d297eeff444d6ac8b45277f091dd0faf886bef9be939d607e0a822ac05131eb2b4d513ff7dd5606edc9abfc3abf21772fcce3de986d6e5df880f2757ac5cfe519d247cea6313cd753f11d59260063d1e6bfd055c76aca2cf3e494ede702c9a8be671778c496b51cef81dd6b676f7ebf9fc34d13ecb16d5db2fcca408afb4ce0882580867fbccd9fe6f06ccdf85ce20c35989b3c3a3de16c4ebcb85657e4bc001443f1bc0631b5931a80730013df2b7e2d9295701a0e75aaf1361604411ff8f50eae56dd47691d5fc727a1bfb55fddaf437978265b8932ca2dafb4e850fb42dd86faa2d93d156ba3382381f592a747788120c3258fc86b48e084a8b19a7cd9926e1288310c29df4df4f87c23c65bdd9dc1d201a8ff79902a4437eabb2b054ff34afaaefd2b90df439efe138aa1d6d73d9c52f7eeec5f7a72a210c5be2e20c1ca46efc85b079c328ae8bb56032c52a3245891009cb72e8ae8fb5e10ba8e4213ae9f6e6e9511f579a381350df51ca7fc8689abf386961a1120241b662feba8c9a4c21b4bfc5402402b62da0ec0fab869f9b538838e54b79cc6516f3861e3675764169062a4186c31c6"}, @generic="9ebb2ed3dd4056a72fc270dee366ec10d143ee65e4aaddee646c91f9844d71fa9894085ed57bb5393617cee7aa62d767eb54bfc8266bb281efb31d58c44c7b26bc56a8426070ef53543ba50406dd5ac664f9bd06a5ea5de4d897f1d4498b09d49240a2ca67392af98217c80e2b25fd13e495fe8386f054683c5cd1c7fc421a70163aafed61eefdd4ab072e27f338d2018adee81a62b982f269f3cb334b3da7f9b3f0aa8cc061d05d592c3284701190bdf7c04ed680f4e08edb152e23de1ad85f3c0c", @nested={0x4, 0x108}, @generic="d3daebeb63ed21feead017a0ef0d1ff971a6f9e369c36038ac54508986c99d82cbfc0629c0908eef"]}, @generic="383d23e6e5290ee29824ab469bee268b6a5c22464ca2d60cc41e444e4a4bd56ad071063c79d15c4b4c16695b390e49beda20b989e5553883d81d083ab5a2bfb97420ed5b0460"]}, 0x1158}, {&(0x7f0000001480)={0x1ec, 0x30, 0x400, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @typed={0x8, 0xa4, 0x0, 0x0, @pid=r3}, @typed={0x54, 0x107, 0x0, 0x0, @binary="d3a64a5103593d1a3fd3e8aacd8ae7495bf9793662027468d35968680f201ceafa60032efc744add854bc9b4d12bf75aed363f74a182f2a99bd25edac880cd6414e839d2e93bcb95c1794d3360a8ad2c"}, @nested={0x1c, 0x10c, 0x0, 0x1, [@typed={0xc, 0xae, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x128}, @typed={0x8, 0x13a, 0x0, 0x0, @u32=0x1}]}, @nested={0xdf, 0x13, 0x0, 0x1, [@nested={0x4, 0x100}, @nested={0x4, 0x148}, @generic="efaca697ea545bfb00cf707140599ffb73a97cfd609f096064515ce418ade1c1f76861e78b8c5ebd901cdef4968cf052a7ab2571ec03639acb4f8fddfd645bd9c65e36ec4c4afd91d69e8989648e7064245233f84dabf084edaf2795190f311e5806de2a3158800d7912d0e7fcb85a1a13da1097979957c7d297543a07d7c1e04c3ad03a70da7a7d3bfb1f8acf063804ff499fdb40a8b7cb96a4b5b17627820829ec2e759b8257948c7d8b4a152fea0653adc08c36032a0a63890f92a77cad986a77f6adbb29a09258c4b297cb4d0e2fa2f5c6"]}, @generic="81ba3b87b63edf7cc8265bbedcccea594a50251ebf22442511cbc4ae4175d41a00d2ee8e9796868059bd2141fc42103d352b69d4d7978dbb285625cddef36b8d8d21a93f14f516a9642198302752c0f1be8e731e25822beb84a9fe7f95a37b48416cde1163674af194221ee2cbd356ef70c769320c35c23113fd"]}, 0x1ec}], 0x2, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x20040005}, 0x20010080) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000001740)={0x0, @adiantum, 0x0, @desc2}) (async, rerun: 32) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001780)={'virt_wifi0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}}) (async) recvmsg(r7, &(0x7f0000001a40)={&(0x7f00000017c0)=@sco, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/235, 0xeb}], 0x1, &(0x7f0000001980)=""/185, 0xb9}, 0x0) (async, rerun: 32) getgid() (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x6, &(0x7f0000001a80)) process_vm_readv(r3, &(0x7f0000001d00)=[{&(0x7f0000001ac0)=""/17, 0x11}, {&(0x7f0000001b00)=""/243, 0xf3}, {&(0x7f0000001c00)=""/210, 0xd2}], 0x3, &(0x7f0000003f80)=[{&(0x7f0000001d40)=""/30, 0x1e}, {&(0x7f0000001d80)=""/81, 0x51}, {&(0x7f0000001e00)=""/147, 0x93}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/19, 0x13}, {&(0x7f0000002f00)=""/71, 0x47}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x7, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000004040)={0x2020}, 0x2020) connect$inet(r7, &(0x7f0000006080)={0x2, 0x4e22, @empty}, 0x10) fcntl$setlease(r8, 0x400, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000007580)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000007540)={&(0x7f0000006140)={0x13cc, r10, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf27b}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x222b}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x41e3}]}, @TIPC_NLA_NODE={0x1194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000000}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "426feb442508a905b06d09be1dac092865a9f1b2"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "25eada18865083c2b5ff499dcd3ab2c5ad0189cab3ce559d02b41dbbed"}}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff0ae}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x990}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x13cc}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000075c0)=0x96, 0x2, 0x7) (async) r11 = openat$cgroup_procs(r0, &(0x7f0000007600)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000008840)={0x100000080, &(0x7f0000007640)=0xffffffffffffffff, &(0x7f0000007680)=0x0, &(0x7f00000076c0), {0x13}, &(0x7f0000007700)=""/251, 0xfb, &(0x7f0000007800)=""/4096, &(0x7f0000008800)=[r3], 0x1, {r0}}, 0x58) (rerun: 32) write$cgroup_pid(r11, &(0x7f00000088c0)=r13, 0x12) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000008900)={0xc9, r12, 'id0\x00'}) ioctl$KVM_HYPERV_EVENTFD(r14, 0x4018aebd, &(0x7f0000008980)={0x0, r1}) 1m20.123063263s ago: executing program 4 (id=551): r0 = epoll_create1(0x80000) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000280)=0xc, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000003d40), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="930d27bd70fa00fbdadf2505fcffffffefb59997eeca790f720002e88e01291000be70b55b6ef5faaa038a0e8ba19e4fd2a606969e372856d6dd7e751347a6af9f5be0a1e9ebaa0487a31794dd354d5183292d9f8e65768c1452753ef22b4caca99c6dcfeb55"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f00000002c0)) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x4f29, 0x5, 0x10004, 0x4, 0x5, 0x40cc3, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x100, 0x1a445, 0x3, 0x40000003, 0x89, 0x2, 0x0, 0x20001e58, 0x5, 0xe69, 0x7f, 0x8, 0x6, 0x0, 0xfffffff8]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f0000000100)={0x20000014}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r11 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000c47f9624c8248f7100"}, 0x0, 0x1000000}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x1, r12, 0x1c, 0xeb5585e46ba929c8, @in={0x2, 0x4e21, @private=0xa010100}}}, 0xa0) socket$kcm(0x2, 0xa, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x5, 0x4, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 1m20.003520128s ago: executing program 4 (id=552): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d00070100000000000000c7047c000004f8ffff0f000180", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m19.95793323s ago: executing program 4 (id=553): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001) setpgid(0x0, r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 1m19.813781073s ago: executing program 4 (id=554): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) listen(r0, 0xf) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000340), 0x4) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x224002, 0x24) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x1000, &(0x7f00000001c0)={[{@xino_off}, {@nfs_export_on}, {@xino_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@xino_auto}], [{@fowner_lt={'fowner<', 0xee01}}]}) 1m19.551118111s ago: executing program 4 (id=555): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r2, 0x0, 0x0) setregid(0x0, r2) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101a02, 0x0) write$sysctl(r3, &(0x7f0000000000)='4\x00', 0x2) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = socket$inet(0x2, 0x2, 0x6a113fc2) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m19.397312222s ago: executing program 33 (id=555): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r2, 0x0, 0x0) setregid(0x0, r2) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101a02, 0x0) write$sysctl(r3, &(0x7f0000000000)='4\x00', 0x2) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = socket$inet(0x2, 0x2, 0x6a113fc2) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m18.199369638s ago: executing program 2 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x1, 0x7, 0xfff}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) wait4(r0, &(0x7f0000000100), 0x1000000, &(0x7f0000000240)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 1m18.009613399s ago: executing program 2 (id=562): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d00070100000000000000c7047c000004f8ffff0f000180", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m17.625602278s ago: executing program 2 (id=564): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xcd3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x52424752}}) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r1], 0x0) 1m17.255118319s ago: executing program 34 (id=564): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xcd3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x52424752}}) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r1], 0x0) 4.8465718s ago: executing program 5 (id=1075): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x9, 0x80000000000000, 0x0, 0xfffffffd, 0xca8, 0x4}, {0x0, 0x0, 0x0, 0x5}, 0x0, 0x6e6bbb, 0x2, 0x1}}, 0xb8}}, 0x4) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 4.824379772s ago: executing program 5 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)={0x370, 0x40, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x358, 0x1, 0x0, 0x1, [@nested={0x353, 0x1c, 0x0, 0x1, [@nested={0x292, 0xe4, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x9}, @generic="d828371d090dc2b8a7eac81b677414ea59fe1d236b914c4d61ea7f59da53812d529f879f2fde7abaf14c0cfc3588099d432855736072650edff0bfbef78ade54d396979bee9c3be9ceaec4a198cd9341fa4c43059c1f85fcee2b21f25c2f1c782f8eaacb8e0ed71aefac4dabfc4352015c1d21204222e6415aa378c6cb3eec4f265839c41765161c1d80b3b5815f6b8ab4d00d3486917376861a910af4f230c4b5f36709811acf48fdbb88cd958c8fadae1fb16c861ac32c75ce8ecaf354285d51e85c3d54a9223520a913eab625a0b047b656f655694f72a8a38b0a47c8149ce51084829b7d", @nested={0x199, 0x150, 0x0, 0x1, [@generic="e41845db827398e206ca38b15bffd5ffadeccd61a654ce9bcbb174b061511c0041abb0a09847c7a6a01e0f9cc448c49e92ec5c19f74b14ac3060419b33cb32d8dcae5111dae076f89c650cb3172af4eefbf773fc9b9541b3f1d6340ab3b7f437798611381a37ace963fbf359f6f98c135a6fef578f737d01f085b558b39a92fd728900b589b92f7a90766fd54920d67f2ab2831f746ef8f42231ce6d53ef7c29f21d581b", @typed={0x4, 0xe9}, @generic="d8aba57f952f6b02e3a102c5983fa33f899ad5e5dbe29354ef01d42a544f64abba8eda71bbaa3ddbeb53e754415f911b1582f46322706fa74406e42a167787af7b0fbaff2e179892eacdc3b31142e61b5c952b86cc4426cea84f4bcc416a2d37bfc742053cebe2c546b6fb9f5d3384b89caa37eb3e5a183b6b99e415dd90c0251be34449935216d3fd247b19c988fa7c69d0cd36dd6061a98cf0a565f9", @generic="61cde5e5eb47ef716f03b21562022436c33c0054ce54e01afe17fb571b9d1581411b6af9165419e12c1a6d5cc68f4b31e3a388b787f9b6deb368b032f44d766a8b3cccc8784c8ebf", @nested={0x4, 0xa}, @nested={0x4, 0x130}]}, @nested={0x4, 0x41}]}, @generic="9171482f8c38ad5d73fd79b260d949f4bc33c5907e8534099bd3647838a62e1d8d1fea9b8cc3659cb839fc14405817ae916e77a0b1bfd9419db707d44d2275cbc40ca69d5d7569ecbd8c3346cf072a6790e58a61dff44c5eb088ddd20957e64700bf8e4de45b5edb5dcf2a730180ef2ffadaa62d1812dfe8ad56270c1c97a77b40bfb537a4be7397e3861e6857b3ff9987efdc2835963e05280c72f576745a9f8dbc2735d287e8b7aac00ee0fb63f0abe955163a12f1f952c19448"]}]}]}, 0x370}}, 0x0) (fail_nth: 3) 4.795050389s ago: executing program 5 (id=1077): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x2100000000000000) 4.723402619s ago: executing program 5 (id=1078): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0049364, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @mcast2, 0x5}, 0x1c) fanotify_mark(r1, 0x0, 0x800001a, r1, &(0x7f0000000100)='./file0\x00') r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x49783, 0x0) setresuid(0x0, r4, 0x0) setresuid(r4, r4, r4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 4.722466467s ago: executing program 5 (id=1079): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0xe55, 0x33565348, 0x9, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x8, 0x2000000}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x1, 0x8000, 0x6, 0x0, {{0xd, 0x4, 0x0, 0x28, 0x34, 0x68, 0x0, 0x81, 0x2f, 0x0, @local, @remote, {[@cipso={0x86, 0x20, 0x3, [{0x5, 0xe, "6e1d6991781472000c15a5a8"}, {0x0, 0x3, "dc"}, {0x6, 0x4, "e0a9"}, {0x5, 0x5, "aa1a95"}]}]}}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000fd4500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000200)=0x14) r7 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x700, 0x80, 0x9, 0xffffe96f, {{0xe, 0x4, 0x1, 0x6, 0x38, 0x66, 0x0, 0xf9, 0x2f, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x1f, [@multicast1]}, @lsrr={0x83, 0xb, 0xfe, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x9, 0x8, {{0x20, 0x4, 0x2, 0x38, 0x80, 0x64, 0x0, 0xa2, 0x2f, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x0, [{@multicast1, 0x5}, {@rand_addr=0x6, 0x2}, {@multicast2, 0x40}, {@private=0xa010102, 0x7ff}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x10, 0x7f, 0x0, 0x1, [0x9, 0x0, 0x1]}, @generic={0x94, 0xc, "a9a4caac2eab6143686a"}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x7, 0x2}, {0x7, 0xb, "747fd274ec3f9052ee"}, {0x7, 0x7, "b9b9b61892"}, {0x6, 0xa, "03ff632c7a327d5b"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x5, 0x5, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x3, 0xd7}, @timestamp={0x44, 0x14, 0x8d, 0x0, 0x5, [0xdb000000, 0x9, 0x1, 0x1]}, @generic={0x94, 0x3, "17"}, @end, @cipso={0x86, 0x6, 0x2}, @cipso={0x86, 0x12, 0x3, [{0x1, 0xc, "a31e6042d254710e426f"}]}, @noop]}}}}}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}, [@typed={0xa, 0x120, 0x0, 0x0, @str='*\xc4\'\'%\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x6, 0x8, 0x3, 0x8, 0x4, @remote, @private0, 0x707, 0x20, 0x80000000, 0xe}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x200, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x41040}, 0x0) 4.507595715s ago: executing program 5 (id=1080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac05440200000000000109022402000921"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0xffffff50, 0x700000, 0x7, 0x8000, 0x4, 0x6}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x780, 0x438, 0x1, @discrete={0x7fff, 0xfff}}) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x0, {[0x9, 0x4, 0xfffffffc, 0xfffffef9, 0x0, 0xb9d5, 0x101]}}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.294729372s ago: executing program 35 (id=1080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac05440200000000000109022402000921"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0xffffff50, 0x700000, 0x7, 0x8000, 0x4, 0x6}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x780, 0x438, 0x1, @discrete={0x7fff, 0xfff}}) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x0, {[0x9, 0x4, 0xfffffffc, 0xfffffef9, 0x0, 0xb9d5, 0x101]}}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.012346719s ago: executing program 6 (id=1088): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x40000) fanotify_mark(r1, 0x1, 0x8000018, r0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80880) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 3.838825478s ago: executing program 6 (id=1090): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000500)={0x20, 0x3, 0x2}, 0xffffffa4, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="400f1e000000a1"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.813864218s ago: executing program 0 (id=1099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r5 = eventfd(0x3) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000040)={0x1, r5}) (async) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x20, 0xa, 0xc, {0xc, 0x22, "c5cb3807f639e7f79a2f"}}, &(0x7f0000000080)={0x0, 0x3, 0x23, @string={0x23, 0x3, "b424947d8a1bb88c2bd8a492fecb1b7cbab7f52dcc6b1579ee2dc2816d02af67e7"}}, 0x0, 0x0}, 0x0) 2.405857059s ago: executing program 1 (id=1104): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)="ac8a6ef6c8b551c2eb8e265746e2ebb34b5847819c", 0x15}, 0x1, 0x0, 0x0, 0x80}, 0x4080) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2509000000280003801400020062726964676530000000000000000208"], 0x3c}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x54, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x4081) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_loaded', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x1c, "1dba2cc46098c68a227f2fe640a67aa1e615debbff6b43db46031456"}, &(0x7f00000003c0)=0x24) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000004c0)={r7, 0x80}, 0x8) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @empty, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = dup(r0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="04000000031401002ab77000fedbdf356a46eef844113bbbadb8425f77b6ca4df93f787338dc97cd90"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "e7b226d36b73a271", "f4cd60b84286ab0824b7b524ac1f8275", "45947f4c", "02f666176a9b6eca"}, 0x28) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff1, @empty, 0x5}}, 0x10001fc, 0x5, 0xffff1896, 0xfffffff5, 0x26, 0x8, 0x1a}, 0x9c) 2.320642989s ago: executing program 1 (id=1105): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/121, 0x90, 0x7fffffffffffffff) (async) pread64(r0, &(0x7f0000000000)=""/121, 0x90, 0x7fffffffffffffff) socket$inet(0x2, 0x5, 0x6) (async) r1 = socket$inet(0x2, 0x5, 0x6) r2 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) connect$inet(r1, &(0x7f0000002780)={0x2, 0x4e24, @loopback}, 0x10) write(r1, &(0x7f0000000440)="08008edf773c8000", 0x8) (async) write(r1, &(0x7f0000000440)="08008edf773c8000", 0x8) syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xe9, 0x11, 0xbd, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0xf, 0x2}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xe9, 0x11, 0xbd, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0xf, 0x2}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/39, 0x27) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$COMEDI_SETWSUBD(r7, 0x6411) 2.087425855s ago: executing program 1 (id=1106): socket$inet6_sctp(0xa, 0x5, 0x84) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x4000000000000}) 2.026380556s ago: executing program 1 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0xff98, {0x3, 0x0, 0x1, 0xfffffffffffffffe, 0x3, 0x14, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, r2, 0x800, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x4, 0x3, 0x6, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xa}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r3, 0x401070ca, &(0x7f0000000000)=0xfff5) 1.812333388s ago: executing program 1 (id=1108): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f07000000002a0c08570f00000083000000000b09007ada0000000000"], 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) (async) sendto$packet(r2, &(0x7f00000014c0)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000ce47532e156c6c28df8dbbfd310a070710ea25d134faabc3c7a4a86e091165de1657696", 0x48, 0x200000d4, &(0x7f0000000140)={0xc9, 0x0, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='[', 0x1}], 0x1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async, rerun: 32) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) ioctl$FBIOGET_CON2FBMAP(r5, 0x460f, &(0x7f0000000080)={0x40014, 0x2}) r6 = socket(0x6, 0xa, 0x2) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x40, 0x21, 0x9f, {0x9f, 0x31, "627e7352d80b513449210a1685c6202619164c29b1accb5eb75b104946e226e601e80819306a5a0c9dc73842e41ec16c114d589a200d5a63ce3a4d43c9a908aec667d09f3ec4cd452f6b719d325912e1c32fb34ec2a4263a1310ec934e9655ed5fc58543bd2f15e11ba0e863185d83cd1e9b1e4d398f1b6acf591c9c5e9f5b6ace144550175207967931a1f9e923960060b8acf622ad03e05177519756"}}, &(0x7f00000006c0)={0x0, 0x3, 0x51, @string={0x51, 0x3, "7b608b0ff383b553a2cfe6c645066015c2e8c6452997ea960971a0f97a72ba2093252b34a785ec7e983a0158d6633476cadc05c715352c1c2ae6fac217b59f002045139e95af6ccf194bfbc2b2c8b2"}}, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, "07d3"}, @local=@item_012={0x1, 0x2, 0xe, "99"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x0, 0x1, {0x22, 0x8c6}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x0, 0x10, 0x66, "30a67a689d703545eb5ef98057d57f06ba777dc2783216edd89da5ff036d5f8e627b2d82ea6a82466d99f3d84231bce2d12d47db514cbf83cfd32e86f9f8af886577546bfd7bd812dbd263e7798f90ca03ca814e160387c391ef7b4d91ca50469f2a15079e04"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x1, 0xed, "03a6d6702e6a35bd19339b02c55c207db92caf6502314230d601d2b819e64eebcc713dd6321e881f6acdc22d3f5f4496ed575ca1cb57a5186ca70e634f6fe260a92bf211e8b1c53563c9bb154b67c80193f87140b71a6496eb458e13366f60255257ae261d296e201e79a4dfc4f246e9c9654c2c1d83ab47e80e70d40999b5cce0a3408c82973e5e580c09a42c3fbe7d01240b6bbacd7cdd5d19ba966dba3da5a323ffb38db04a9cac4260ea13dce069dbab3d50a7cf5ba46d2e58e1696112fa9d65aee5b056c703c5cbf57183fbfdef16675820f057ec66143648e505c21f477233ccdef9861a56214c4b0d01"}, &(0x7f0000000640)={0x20, 0x3, 0x1}}) (async, rerun: 32) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f00000002c0)={0x3e, {0x0, 0x0, 0xa000003, 0x0, 0x4, 0xdbd1}}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) write$uinput_user_dev(r8, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r8, 0x5501) setsockopt$inet6_int(r6, 0x29, 0xa, &(0x7f0000000000)=0xd, 0x4) 1.2033794s ago: executing program 0 (id=1109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @local, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000021c0)="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", 0x3c1}], 0x1, &(0x7f0000005480)=ANY=[@ANYBLOB="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"], 0x198}}], 0x2, 0x4000001) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000580)="69c1", 0x2}], 0x1) 1.166479529s ago: executing program 0 (id=1110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x480c2) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x4c084, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @loopback={0xfe80000000000000}, 0xc5f}, 0x1c) 1.100963097s ago: executing program 7 (id=1082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x3c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/157, 0x9d, 0x2, 0x24}, @fd, @fd={0x66642a85, 0x1000000}}, &(0x7f0000000440)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 983.363843ms ago: executing program 7 (id=1111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'bond_slave_1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000380)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0xa, 0x0, 0x408d}, @mpls={[], @ipv6=@udp={0x4, 0x6, "c80f59", 0x9c, 0x11, 0x0, @local, @mcast2, {[], {0x4e24, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "e80b6f8f7cd3b21bc06dd0763fc137a91fefdaab281b1641675431a29ff4bc92", "8e3d2f790e5dc42663b511057830823081ea24bb58c461085c97df45b0336c421a35f0e347b860178affe8494421a849", "c9aaaaf4938c6d134de7df40d0a8c074bb5782639699660dc4ae1363", {"9ab3f3e5817be9b45020c98df665d722", "5f0fc9b600"}}}}}}}, 0xd2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400200, 0x12) (async) shutdown(r0, 0x1) 902.584145ms ago: executing program 7 (id=1112): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'ip6gre0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x8880) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x34000, 0x0) 783.225409ms ago: executing program 6 (id=1113): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xedc000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 703.288138ms ago: executing program 1 (id=1114): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_connect(0x1, 0x27e, &(0x7f0000000180)={{0x12, 0x1, 0x140, 0x80, 0xcd, 0xe5, 0x20, 0x19d2, 0x118, 0x432f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26c, 0x1, 0x9, 0x2, 0x0, 0x4, [{{0x9, 0x4, 0xe1, 0x7, 0x6, 0xff, 0xff, 0xff, 0x7, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "4748a5153f"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x3e7, 0x5, 0x5, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x8001}, @dmm={0x7, 0x24, 0x14, 0xf, 0xe7}, @acm={0x4, 0x24, 0x2, 0x6}, @obex={0x5, 0x24, 0x15, 0x95d}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}}], [{{0x9, 0x5, 0xbf7da6ffe383529, 0x0, 0x3ff, 0x81, 0x7, 0xb0}}, {{0x9, 0x5, 0xf, 0x10, 0x640, 0xf8, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x7, 0x8, 0x2, [@generic={0xa4, 0x24, "2170a276c4164c92808c3cbb9a013f6fbe5fa788b7e71bd4ef4dbcb324a70c8adb2014629891627fd9f29812673b6e5a6c8d01089671a12c2f7e81dd4eb4fab0bb6945191b6f91f1e5c3783bc9b9e0bd38d570d0fccc813fcad8f050404d3de17d6faa0087a39845f8c3c4f2c6c544f919269c232aa49eb779fe01bf96ad77d95815e389c07f598b895bc6ac8385e5bfe364ee3b3d224ad215b06c0a8b8c3ed2f0e8"}, @generic={0x3c, 0x8, "fc0dfb46d85594929c846627f29227b18541873c96e9afedc5c1353f2e2df16d7227ec857312e4d0c67f46bef06a92be63006adffd03a7888666"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x3, 0xe0, 0x7, [@generic={0xde, 0x31, "01f373a5c5b5131aa688e8087088ab590a560be97852d2b58b575c27de61578a1402d46952e4f1a36775d46360b7cdbe4737842f6766fe826c1d9f069a7df58689e41469ee995ee1edbbb7984eae2c6d07ac49f3751a5857c2a0b718a1e2c1d585a76c5e29ebf1092880669155f45f6089aceb1ff508f59c6ae820f8450ea2e945236017338e6195e7337e8f416fe39929e9f959fe4a4919d1cf00d38f9ff79f712020a13ade26d78964f930c9570e7321d7adfcff9a5287010a0c1add9b70f0d3c13e856a050aa6f945fe8d8006e1c75d3bb72eae1196b253feffc0"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0x1000}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7f, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x46, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb7, 0x2}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x8, 0x7, 0x4}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xfc, 0x2, 0x5, 0x10, 0x2}, 0x2d, &(0x7f0000000040)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x3, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x1, 0x401}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "37149d7241f8b479232535b0b995146f"}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc77}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x427}}, {0xdc, &(0x7f0000000400)=@string={0xdc, 0x3, "210a05f4c02b9805735ef34926a8d17711f73bdacbd89c65952a5b2f996d529d8ac75c6e08bdb1741273107377dbff15328609a450b3408b50a101b3bbb2c6d622fc7ae8e50de46dca400a52ead3d7e2e5060d24f270f754e041989413cf8f168eadb1be8994066203835132a5eb92210ca24d5a4a4175bb3dc094e560586c6bf155903a3910b5adbf9e049a650e5b7335008b00e61066a11ef95c572e87f3ee79afc193158a7ccb7b8d8cd2e2a03d7a190f8ff8c6057f8d60ae71c5378692999d9c4e9f5c535b5828ce921345be40ba6db016a4ef76fc208a59"}}, {0x7c, &(0x7f0000000540)=@string={0x7c, 0x3, "1b4191296fda7e2333937b36941e61441d7abf5b7e5a9352aa8c795eda4654081247eccaa6b9268863bc865d87c6caa162cbc101a566e04b393f5284cbd28aa102416906affba2859864307de331a3796c7b26384c41c9fb36de187eb66cbdd98c963968d1028b6b6e3a6237b306bab28609010c39765ef4038e"}}]}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002100)=""/4150, 0x1036}], 0x1}, 0x42) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e00003"], 0x18}}], 0x1, 0x4880) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000100)={0x3b, 0x2, 0x0, 0x7, 0x0, [@loopback]}, 0x18) mount(0x0, 0x0, 0x0, 0x100090, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) 635.665164ms ago: executing program 6 (id=1115): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x8, 0x6, "4944fb3c240fe4dc"}) 577.730223ms ago: executing program 6 (id=1116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xfcffffff, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 483.55033ms ago: executing program 6 (id=1117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x24663d22d03df839, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x83, 0xfe, 0x1, {0x22, 0xa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x42, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x24663d22d03df839, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x83, 0xfe, 0x1, {0x22, 0xa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x42, 0xff}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 483.258283ms ago: executing program 7 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)={0x34, 0x40, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x1c, 0x0, 0x1, [@nested={0x12, 0xe4, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x9}, @generic="d828371d090d"]}]}]}]}, 0x34}}, 0x0) (fail_nth: 6) 343.801458ms ago: executing program 7 (id=1119): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='^\x00') syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x100000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 210.621912ms ago: executing program 0 (id=1120): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0xff00) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x234, 0x15, 0x458, 0x70bd2a, 0x25dfdbff, {0x9, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "1641252606cfd8eec331cef3acaf719e6c19fe258fbdfe227aa0930a6b9bc51f07520063a962525734f02ae1f0893be8636131e2"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "0b11d3dd954d3cb589c4d995f9a9c389d0f8daed1c2966d9f6f267af11ec94c4d794115032561edd08c63d7e1fb51731d1297259fa13109844e280b14e08c55e050b0a59f9f42ce6376a5470a71302a19279a9baa56f22f08e148fd8a57b371497c94b9f7c74203afbaedc2384616b4f41bda616b0a504"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "f2a45349cfe7179a209eb2"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "1b9b5f5d65bdbd1fd1e42921d142c0a35885a084e96684fa915897f291316b8979bff3320d923635da843c2e3d922447fb58a0e6b584891e5ebf9e273aaaebd2d447f9186f9bfaf1e671e8d4baa76e4da6a048412b67b775dd9a9077caea7db8c1d24b7b984024406787f05bcd2c6a0fc8cdcc111d74ec67441beb7d9dd6c3502555bb063a90fd77b61ffeef1f967dccb37e55a70c9efde432d1632f3d4b79935b08820a9ed96c1dbe2cf1329ffe4f5b60aa6be802a143222645511a8e047afd42096fa87b87921c680c3dfa31869f26eb"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "3e6d5deac760f0516deef344978ac6adeeb77995a86090ccea0c76c39891a144ee75b403d4cbb0213d26826077d97788721541ad61fc46371dfc6486bf6fd9bc94dadc751549129253a6dafe333462745d9bee4afac496704ab23abe7c43a95e1814a5aed53e7f3ee4e23756f95e18734dbcecd78789752e0395c6de032d15"}]}, 0x234}, 0x1, 0x0, 0x0, 0x10}, 0x44801) r5 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0xffffff72, 0x5, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x67, 0x0, 0x40, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1400000013000159993dde440113e90005"], 0x14}], 0x1, 0x0, 0x0, 0x24049080}, 0x0) 115.429204ms ago: executing program 0 (id=1121): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x1, 0xf, 0x6}}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)={0x34, 0x40, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x1c, 0x0, 0x1, [@nested={0x12, 0xe4, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x9}, @generic="d828371d090d"]}]}]}]}, 0x34}}, 0x0) 0s ago: executing program 0 (id=1122): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000500)={0x20, 0x3, 0x2}, 0xffffffa4, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="400f1e000000a1"], 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): slave. Adding VLANs will be blocked as long as it is part of bond. [ 184.069980][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 184.114972][ T10] usb 1-1: device descriptor read/8, error -71 [ 184.115759][ T812] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 184.116385][ T812] em28xx 2-1:0.0: Config register raw data: 0x41 [ 184.217506][ T10] usb usb1-port1: unable to enumerate USB device [ 184.457285][ T43] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 184.631963][ T43] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 184.631991][ T43] usb 7-1: config 0 has no interface number 0 [ 184.633987][ T43] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 184.634014][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.634032][ T43] usb 7-1: Product: syz [ 184.634046][ T43] usb 7-1: Manufacturer: syz [ 184.634060][ T43] usb 7-1: SerialNumber: syz [ 184.636847][ T43] usb 7-1: config 0 descriptor?? [ 184.987435][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.716'. [ 185.017574][ T8348] openvswitch: netlink: Message has 11 unknown bytes. [ 185.258731][ T43] usb 7-1: Firmware version (0.0) predates our first public release. [ 185.283725][ T43] usb 7-1: Please update to version 0.2 or newer [ 185.346484][ T43] usb 7-1: USB disconnect, device number 6 [ 185.517235][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 185.585443][ T8369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.684478][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.696762][ T9] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 185.723440][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.742836][ T9] usb 6-1: config 0 descriptor?? [ 185.827653][ T43] usb 2-1: USB disconnect, device number 50 [ 185.834888][ T43] em28xx 2-1:0.0: Disconnecting em28xx [ 185.888442][ T43] em28xx 2-1:0.0: Freeing device [ 185.959876][ T8380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.212452][ T9] itetech 0003:258A:6A88.000D: unbalanced collection at end of report description [ 186.248445][ T9] itetech 0003:258A:6A88.000D: probe with driver itetech failed with error -22 [ 186.286774][ T8398] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 186.388302][ T9] usb 6-1: USB disconnect, device number 7 [ 186.402559][ T8404] 9pnet_fd: Insufficient options for proto=fd [ 186.408577][ T8395] FAULT_INJECTION: forcing a failure. [ 186.408577][ T8395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.437625][ T8395] CPU: 0 UID: 0 PID: 8395 Comm: syz.6.727 Not tainted syzkaller #0 PREEMPT(full) [ 186.437650][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.437661][ T8395] Call Trace: [ 186.437669][ T8395] [ 186.437676][ T8395] dump_stack_lvl+0x189/0x250 [ 186.437714][ T8395] ? __pfx____ratelimit+0x10/0x10 [ 186.437732][ T8395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.437756][ T8395] ? __pfx__printk+0x10/0x10 [ 186.437777][ T8395] ? __might_fault+0xb0/0x130 [ 186.437810][ T8395] should_fail_ex+0x414/0x560 [ 186.437838][ T8395] _copy_from_user+0x2d/0xb0 [ 186.437860][ T8395] restore_altstack+0x9d/0x4b0 [ 186.437884][ T8395] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 186.437904][ T8395] ? __pfx_restore_altstack+0x10/0x10 [ 186.437932][ T8395] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.437948][ T8395] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.437969][ T8395] __ia32_sys_rt_sigreturn+0x281/0x860 [ 186.437991][ T8395] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.438009][ T8395] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 186.438025][ T8395] ? _raw_spin_unlock_irq+0x2e/0x50 [ 186.438046][ T8395] ? __lock_acquire+0xab9/0xd20 [ 186.438081][ T8395] ? __task_pid_nr_ns+0x28/0x490 [ 186.438107][ T8395] ? do_syscall_64+0xbe/0xfa0 [ 186.438127][ T8395] do_syscall_64+0xfa/0xfa0 [ 186.438142][ T8395] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.438159][ T8395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.438175][ T8395] ? clear_bhb_loop+0x60/0xb0 [ 186.438193][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.438209][ T8395] RIP: 0033:0x7f91b5b2af79 [ 186.438228][ T8395] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 186.438240][ T8395] RSP: 002b:00007f91b6a94a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 186.438262][ T8395] RAX: ffffffffffffffda RBX: 00007f91b5de5fa0 RCX: 00007f91b5b2af79 [ 186.438275][ T8395] RDX: 00007f91b6a94a80 RSI: 00007f91b6a94bb0 RDI: 0000000000000021 [ 186.438284][ T8395] RBP: 00007f91b6a95090 R08: 0000000000000000 R09: 0000000000000000 [ 186.438292][ T8395] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 186.438301][ T8395] R13: 00007f91b5de6038 R14: 00007f91b5de5fa0 R15: 00007ffd1a3465a8 [ 186.438328][ T8395] [ 186.830794][ T812] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 187.013499][ T812] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 187.022798][ T812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.051830][ T812] usb 2-1: config 0 descriptor?? [ 187.063595][ T812] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 187.077299][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 187.237392][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 187.248454][ T9] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 187.265584][ T9] usb 7-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.267298][ T812] gp8psk: usb in 128 operation failed. [ 187.279600][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 187.303705][ T9] usb 7-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.40 [ 187.314009][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.322261][ T9] usb 7-1: Product: syz [ 187.326657][ T9] usb 7-1: Manufacturer: syz [ 187.331632][ T9] usb 7-1: SerialNumber: syz [ 187.437571][ T5920] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 187.592154][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 187.611040][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.624154][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.650904][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.665633][ T5920] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.674950][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 187.682363][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.690744][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 187.698319][ T812] gp8psk: usb in 146 operation failed. [ 187.718105][ T9] usb 7-1: USB disconnect, device number 7 [ 187.726457][ T812] gp8psk: failed to get FW version [ 187.745200][ T5920] usb 1-1: config 0 descriptor?? [ 187.749884][ T812] gp8psk: usb in 149 operation failed. [ 187.755749][ T812] gp8psk: failed to get FPGA version [ 187.771297][ T812] gp8psk: usb in 138 operation failed. [ 187.783684][ T812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.825987][ T812] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 187.838364][ T812] usb 2-1: media controller created [ 187.883733][ T812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.932392][ T8448] loop6: detected capacity change from 0 to 7 [ 187.943327][ T6017] Dev loop6: unable to read RDB block 7 [ 187.950854][ T812] gp8psk_fe: Frontend attached [ 187.951514][ T6017] loop6: unable to read partition table [ 187.962061][ T6017] loop6: partition table beyond EOD, truncated [ 187.962352][ T812] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 187.983100][ T812] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 187.983401][ T8448] Dev loop6: unable to read RDB block 7 [ 187.998688][ T8448] loop6: unable to read partition table [ 188.009479][ T8448] loop6: partition table beyond EOD, truncated [ 188.015890][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.028210][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.047971][ T8428] No source specified [ 188.054088][ T8448] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.117236][ T812] gp8psk: usb in 138 operation failed. [ 188.124039][ T812] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 188.136327][ T812] gp8psk: found Genpix USB device pID = 203 (hex) [ 188.187645][ T812] usb 2-1: USB disconnect, device number 51 [ 188.260300][ T5920] microsoft 0003:045E:07DA.000E: report_id 1459618028 is invalid [ 188.271321][ T5920] microsoft 0003:045E:07DA.000E: item 0 4 1 8 parsing failed [ 188.296178][ T5920] microsoft 0003:045E:07DA.000E: parse failed [ 188.317289][ T5920] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22 [ 188.471625][ T812] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 188.505814][ T8465] 9pnet_fd: Insufficient options for proto=fd [ 188.541948][ T5920] usb 1-1: USB disconnect, device number 59 [ 188.639216][ T8469] netlink: 'syz.5.741': attribute type 27 has an invalid length. [ 188.756287][ T8476] netlink: 48 bytes leftover after parsing attributes in process `syz.1.743'. [ 188.847987][ T8479] FAULT_INJECTION: forcing a failure. [ 188.847987][ T8479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.861637][ T8479] CPU: 1 UID: 0 PID: 8479 Comm: syz.1.745 Not tainted syzkaller #0 PREEMPT(full) [ 188.861661][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.861671][ T8479] Call Trace: [ 188.861679][ T8479] [ 188.861686][ T8479] dump_stack_lvl+0x189/0x250 [ 188.861715][ T8479] ? __pfx____ratelimit+0x10/0x10 [ 188.861734][ T8479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.861757][ T8479] ? __pfx__printk+0x10/0x10 [ 188.861777][ T8479] ? __might_fault+0xb0/0x130 [ 188.861809][ T8479] should_fail_ex+0x414/0x560 [ 188.861839][ T8479] _copy_from_user+0x2d/0xb0 [ 188.861861][ T8479] ___sys_recvmsg+0x12e/0x510 [ 188.861888][ T8479] ? __pfx____sys_recvmsg+0x10/0x10 [ 188.861930][ T8479] ? __fget_files+0x3a0/0x420 [ 188.861960][ T8479] do_recvmmsg+0x307/0x770 [ 188.861988][ T8479] ? __pfx_do_recvmmsg+0x10/0x10 [ 188.862028][ T8479] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.862064][ T8479] __x64_sys_recvmmsg+0x190/0x240 [ 188.862087][ T8479] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 188.862111][ T8479] ? do_syscall_64+0xbe/0xfa0 [ 188.862132][ T8479] do_syscall_64+0xfa/0xfa0 [ 188.862148][ T8479] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.862165][ T8479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.862181][ T8479] ? clear_bhb_loop+0x60/0xb0 [ 188.862201][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.862216][ T8479] RIP: 0033:0x7f4abff8eec9 [ 188.862232][ T8479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.862246][ T8479] RSP: 002b:00007f4ac0e08038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 188.862263][ T8479] RAX: ffffffffffffffda RBX: 00007f4ac01e5fa0 RCX: 00007f4abff8eec9 [ 188.862275][ T8479] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 188.862284][ T8479] RBP: 00007f4ac0e08090 R08: 0000000000000000 R09: 0000000000000000 [ 188.862295][ T8479] R10: 0000000060000100 R11: 0000000000000246 R12: 0000000000000001 [ 188.862305][ T8479] R13: 00007f4ac01e6038 R14: 00007f4ac01e5fa0 R15: 00007fffe1976c28 [ 188.862333][ T8479] [ 189.423254][ T8498] netlink: 48 bytes leftover after parsing attributes in process `syz.6.753'. [ 189.467730][ T812] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 189.627397][ T812] usb 2-1: Using ep0 maxpacket: 32 [ 189.634320][ T812] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 189.643509][ T812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.653885][ T812] usb 2-1: config 0 descriptor?? [ 189.664094][ T812] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 189.864969][ T812] gspca_nw80x: reg_r err -32 [ 189.865719][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.878985][ T812] nw80x 2-1:0.0: probe with driver nw80x failed with error -32 [ 189.879335][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.026811][ T8505] FAULT_INJECTION: forcing a failure. [ 190.026811][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 190.039612][ T8505] CPU: 0 UID: 0 PID: 8505 Comm: syz.6.755 Not tainted syzkaller #0 PREEMPT(full) [ 190.039635][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.039645][ T8505] Call Trace: [ 190.039652][ T8505] [ 190.039658][ T8505] dump_stack_lvl+0x189/0x250 [ 190.039677][ T8505] ? __pfx____ratelimit+0x10/0x10 [ 190.039688][ T8505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.039701][ T8505] ? __pfx__printk+0x10/0x10 [ 190.039714][ T8505] ? save_netdev_trace_buffer+0x4e2/0x5e0 [ 190.039735][ T8505] should_fail_ex+0x414/0x560 [ 190.039752][ T8505] should_failslab+0xa8/0x100 [ 190.039763][ T8505] kmem_cache_alloc_noprof+0x74/0x6e0 [ 190.039778][ T8505] ? skb_clone+0x212/0x3a0 [ 190.039792][ T8505] skb_clone+0x212/0x3a0 [ 190.039806][ T8505] __netlink_deliver_tap+0x424/0x8b0 [ 190.039823][ T8505] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.039834][ T8505] netlink_deliver_tap+0x19c/0x1b0 [ 190.039844][ T8505] netlink_unicast+0x7fa/0x9e0 [ 190.039862][ T8505] ? __pfx_netlink_unicast+0x10/0x10 [ 190.039877][ T8505] ? netlink_sendmsg+0x642/0xb30 [ 190.039893][ T8505] ? skb_put+0x11b/0x210 [ 190.039905][ T8505] netlink_sendmsg+0x805/0xb30 [ 190.039920][ T8505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.039932][ T8505] ? aa_sock_msg_perm+0xf1/0x1d0 [ 190.039945][ T8505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.039955][ T8505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.039965][ T8505] __sock_sendmsg+0x21c/0x270 [ 190.039988][ T8505] ____sys_sendmsg+0x505/0x830 [ 190.040002][ T8505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.040031][ T8505] ? import_iovec+0x74/0xa0 [ 190.040045][ T8505] ___sys_sendmsg+0x21f/0x2a0 [ 190.040057][ T8505] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.040087][ T8505] ? __fget_files+0x2a/0x420 [ 190.040098][ T8505] ? __fget_files+0x3a0/0x420 [ 190.040114][ T8505] __x64_sys_sendmsg+0x19b/0x260 [ 190.040127][ T8505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.040146][ T8505] ? __pfx_ksys_write+0x10/0x10 [ 190.040158][ T8505] ? do_syscall_64+0xbe/0xfa0 [ 190.040171][ T8505] do_syscall_64+0xfa/0xfa0 [ 190.040190][ T8505] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.040201][ T8505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.040210][ T8505] ? clear_bhb_loop+0x60/0xb0 [ 190.040221][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.040230][ T8505] RIP: 0033:0x7f91b5b8eec9 [ 190.040240][ T8505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.040247][ T8505] RSP: 002b:00007f91b6a95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.040258][ T8505] RAX: ffffffffffffffda RBX: 00007f91b5de5fa0 RCX: 00007f91b5b8eec9 [ 190.040265][ T8505] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 190.040271][ T8505] RBP: 00007f91b6a95090 R08: 0000000000000000 R09: 0000000000000000 [ 190.040277][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.040283][ T8505] R13: 00007f91b5de6038 R14: 00007f91b5de5fa0 R15: 00007ffd1a3465a8 [ 190.040299][ T8505] [ 190.040344][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.755'. [ 190.276203][ T812] usb 2-1: USB disconnect, device number 52 [ 190.303743][ T8505] openvswitch: netlink: Flow key attr not present in new flow. [ 190.662295][ T8524] netlink: 48 bytes leftover after parsing attributes in process `syz.1.763'. [ 190.677305][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 190.720970][ T8526] __vm_enough_memory: pid: 8526, comm: syz.1.764, bytes: 4503599627366400 not enough memory for the allocation [ 190.735690][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 190.831809][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.842480][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.859946][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.875178][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.883443][ T1072] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 190.896984][ T9] usb 7-1: SerialNumber: syz [ 191.038501][ T1072] usb 1-1: config 0 has an invalid interface number: 104 but max is 0 [ 191.046746][ T1072] usb 1-1: config 0 has no interface number 0 [ 191.052977][ T1072] usb 1-1: config 0 interface 104 has no altsetting 0 [ 191.062419][ T1072] usb 1-1: New USB device found, idVendor=045e, idProduct=04e2, bcdDevice=1c.4d [ 191.071547][ T1072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.079605][ T1072] usb 1-1: Product: syz [ 191.083773][ T1072] usb 1-1: Manufacturer: syz [ 191.088426][ T1072] usb 1-1: SerialNumber: syz [ 191.095253][ T1072] usb 1-1: config 0 descriptor?? [ 191.103585][ T1072] ipaq 1-1:0.104: PocketPC PDA converter detected [ 191.111413][ T1072] usb 1-1: active config #0 != 1 ?? [ 191.159560][ T812] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 191.198839][ T9] usb 7-1: 0:2 : does not exist [ 191.203798][ T9] usb 7-1: unit 5 not found! [ 191.249623][ T9] usb 7-1: USB disconnect, device number 8 [ 191.290354][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.299694][ T8542] overlayfs: missing 'workdir' [ 191.321305][ T5989] usb 1-1: USB disconnect, device number 60 [ 191.333130][ T812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.352432][ T812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 191.363875][ T812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.374010][ T812] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 191.389258][ T812] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.401753][ T812] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.411652][ T812] usb 2-1: Manufacturer: syz [ 191.419958][ T812] usb 2-1: config 0 descriptor?? [ 191.678490][ T812] rc_core: IR keymap rc-hauppauge not found [ 191.684521][ T812] Registered IR keymap rc-empty [ 191.690239][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.717317][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.738760][ T812] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 191.753923][ T812] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 191.772499][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.797405][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.808075][ T5989] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 191.817285][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.837596][ T8555] netlink: 'syz.6.775': attribute type 21 has an invalid length. [ 191.845476][ T8555] netlink: 'syz.6.775': attribute type 30 has an invalid length. [ 191.846305][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.877373][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.897303][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.918208][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.937625][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.957393][ T5989] usb 6-1: Using ep0 maxpacket: 16 [ 191.962774][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.971661][ T5989] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.979754][ T5989] usb 6-1: config 0 has no interface number 0 [ 191.987843][ T812] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.995786][ T5989] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 192.005036][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.015635][ T812] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.024897][ T5989] usb 6-1: Product: syz [ 192.029177][ T5989] usb 6-1: Manufacturer: syz [ 192.033810][ T5989] usb 6-1: SerialNumber: syz [ 192.038486][ T812] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.049569][ T5989] usb 6-1: config 0 descriptor?? [ 192.060976][ T5989] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 192.151281][ T9] usb 2-1: USB disconnect, device number 53 [ 192.674159][ T8554] orangefs_mount: mount request failed with -4 [ 193.069699][ T5989] gspca_spca1528: reg_w err -71 [ 193.075528][ T5989] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 193.085807][ T5989] usb 6-1: USB disconnect, device number 8 [ 193.167328][ T1072] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 193.175019][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 193.307255][ T1072] usb 2-1: device descriptor read/64, error -71 [ 193.331528][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.341979][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.352315][ T9] usb 1-1: Product: syz [ 193.356501][ T9] usb 1-1: Manufacturer: syz [ 193.361233][ T9] usb 1-1: SerialNumber: syz [ 193.376575][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.396317][ T5185] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 193.422088][ T5927] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.557338][ T1072] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 193.638312][ T43] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 193.684417][ T8586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.699640][ T1072] usb 2-1: device descriptor read/64, error -71 [ 193.799799][ T43] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 193.810746][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.817929][ T1072] usb usb2-port1: attempt power cycle [ 193.822895][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 193.847361][ T9] usb 1-1: USB disconnect, device number 61 [ 193.847666][ T43] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 193.866349][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.876550][ T43] usb 7-1: config 0 descriptor?? [ 194.157301][ T1072] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 194.178286][ T1072] usb 2-1: device descriptor read/8, error -71 [ 194.304210][ T43] logitech 0003:046D:CA04.000F: hidraw0: USB HID v0.05 Device [HID 046d:ca04] on usb-dummy_hcd.6-1/input0 [ 194.312247][ T8591] FAULT_INJECTION: forcing a failure. [ 194.312247][ T8591] name failslab, interval 1, probability 0, space 0, times 0 [ 194.319673][ T43] logitech 0003:046D:CA04.000F: no inputs found [ 194.336936][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.5.793 Not tainted syzkaller #0 PREEMPT(full) [ 194.336957][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.336966][ T8591] Call Trace: [ 194.336973][ T8591] [ 194.336980][ T8591] dump_stack_lvl+0x189/0x250 [ 194.337006][ T8591] ? __pfx____ratelimit+0x10/0x10 [ 194.337023][ T8591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.337043][ T8591] ? __pfx__printk+0x10/0x10 [ 194.337067][ T8591] ? __pfx___might_resched+0x10/0x10 [ 194.337090][ T8591] should_fail_ex+0x414/0x560 [ 194.337116][ T8591] should_failslab+0xa8/0x100 [ 194.337136][ T8591] __kmalloc_noprof+0xcb/0x7f0 [ 194.337160][ T8591] ? video_usercopy+0x18d/0x1450 [ 194.337183][ T8591] video_usercopy+0x18d/0x1450 [ 194.337210][ T8591] ? __pfx___video_do_ioctl+0x10/0x10 [ 194.337228][ T8591] ? __pfx_video_usercopy+0x10/0x10 [ 194.337261][ T8591] ? __fget_files+0x3a0/0x420 [ 194.337282][ T8591] v4l2_ioctl+0x18d/0x1e0 [ 194.337302][ T8591] ? __pfx_v4l2_ioctl+0x10/0x10 [ 194.337322][ T8591] __se_sys_ioctl+0xfc/0x170 [ 194.337339][ T8591] do_syscall_64+0xfa/0xfa0 [ 194.337356][ T8591] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.337373][ T8591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.337389][ T8591] ? clear_bhb_loop+0x60/0xb0 [ 194.337409][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.337425][ T8591] RIP: 0033:0x7f07a018eec9 [ 194.337441][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.337455][ T8591] RSP: 002b:00007f07a0f90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.337472][ T8591] RAX: ffffffffffffffda RBX: 00007f07a03e5fa0 RCX: 00007f07a018eec9 [ 194.337485][ T8591] RDX: 0000200000000180 RSI: 00000000c0845658 RDI: 0000000000000003 [ 194.337496][ T8591] RBP: 00007f07a0f90090 R08: 0000000000000000 R09: 0000000000000000 [ 194.337506][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.337516][ T8591] R13: 00007f07a03e6038 R14: 00007f07a03e5fa0 R15: 00007ffc0a72ab28 [ 194.337546][ T8591] [ 194.541731][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.549512][ T5927] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 194.556775][ T5927] ath9k_htc: Failed to initialize the device [ 194.565421][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 194.611061][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.617486][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.636681][ T5920] usb 7-1: USB disconnect, device number 9 [ 194.674188][ T1072] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 194.731869][ T1072] usb 2-1: device descriptor read/8, error -71 [ 194.765225][ T8598] netlink: 187320 bytes leftover after parsing attributes in process `syz.5.795'. [ 194.776255][ T8598] netlink: zone id is out of range [ 194.790833][ T8598] netlink: zone id is out of range [ 194.796004][ T8598] netlink: zone id is out of range [ 194.802185][ T8598] netlink: zone id is out of range [ 194.807442][ T8598] netlink: zone id is out of range [ 194.812558][ T8598] netlink: zone id is out of range [ 194.818318][ T8598] netlink: zone id is out of range [ 194.823584][ T8598] netlink: zone id is out of range [ 194.828938][ T8598] netlink: zone id is out of range [ 194.857698][ T1072] usb usb2-port1: unable to enumerate USB device [ 195.077251][ T5920] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 195.236886][ T5920] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 195.250093][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.258312][ T5920] usb 7-1: Product: syz [ 195.262662][ T5920] usb 7-1: Manufacturer: syz [ 195.268603][ T5920] usb 7-1: SerialNumber: syz [ 195.281354][ T5920] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 195.299418][ T1072] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 195.675413][ T43] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 195.817056][ T5989] usb 7-1: USB disconnect, device number 10 [ 195.874310][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 195.986550][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.000479][ T43] usb 1-1: config 0 descriptor?? [ 196.101812][ T8622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.115726][ T8622] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 196.390278][ T1072] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 196.416124][ T1072] ath9k_htc: Failed to initialize the device [ 196.434467][ T43] ath6kl: Unsupported hardware version: 0x52785cbf [ 196.441640][ T5989] usb 7-1: ath9k_htc: USB layer deinitialized [ 196.474736][ T8635] FAULT_INJECTION: forcing a failure. [ 196.474736][ T8635] name failslab, interval 1, probability 0, space 0, times 0 [ 196.484624][ T43] ath6kl: Failed to init ath6kl core: -22 [ 196.495829][ T43] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 196.511512][ T8635] CPU: 0 UID: 0 PID: 8635 Comm: syz.6.810 Not tainted syzkaller #0 PREEMPT(full) [ 196.511536][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.511547][ T8635] Call Trace: [ 196.511554][ T8635] [ 196.511561][ T8635] dump_stack_lvl+0x189/0x250 [ 196.511588][ T8635] ? __pfx____ratelimit+0x10/0x10 [ 196.511606][ T8635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.511627][ T8635] ? __pfx__printk+0x10/0x10 [ 196.511661][ T8635] ? __pfx___might_resched+0x10/0x10 [ 196.511681][ T8635] ? fs_reclaim_acquire+0x7d/0x100 [ 196.511701][ T8635] should_fail_ex+0x414/0x560 [ 196.511730][ T8635] should_failslab+0xa8/0x100 [ 196.511750][ T8635] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 196.511773][ T8635] ? v9fs_mount+0xb2/0xa50 [ 196.511785][ T8635] ? v9fs_session_init+0xfd/0x19a0 [ 196.511802][ T8635] ? kstrdup+0x81/0x100 [ 196.511825][ T8635] kstrdup+0x42/0x100 [ 196.511844][ T8635] v9fs_session_init+0xfd/0x19a0 [ 196.511887][ T8635] ? __pfx_v9fs_session_init+0x10/0x10 [ 196.511915][ T8635] ? __kasan_kmalloc+0x93/0xb0 [ 196.511932][ T8635] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 196.511962][ T8635] v9fs_mount+0xc8/0xa50 [ 196.511978][ T8635] ? __kasan_kmalloc+0x93/0xb0 [ 196.511994][ T8635] ? __pfx_v9fs_mount+0x10/0x10 [ 196.512020][ T8635] legacy_get_tree+0xfd/0x1a0 [ 196.512039][ T8635] ? __pfx_v9fs_mount+0x10/0x10 [ 196.512056][ T8635] vfs_get_tree+0x92/0x2b0 [ 196.512077][ T8635] do_new_mount+0x302/0x9e0 [ 196.512094][ T8635] ? apparmor_capable+0x137/0x1b0 [ 196.512122][ T8635] ? __pfx_do_new_mount+0x10/0x10 [ 196.512140][ T8635] ? ns_capable+0x8a/0xf0 [ 196.512162][ T8635] ? path_mount+0x61c/0xfe0 [ 196.512178][ T8635] ? kmem_cache_free+0x19b/0x690 [ 196.512210][ T8635] __se_sys_mount+0x313/0x410 [ 196.512235][ T8635] ? __pfx___se_sys_mount+0x10/0x10 [ 196.512257][ T8635] ? do_syscall_64+0xbe/0xfa0 [ 196.512274][ T8635] ? __x64_sys_mount+0x20/0xc0 [ 196.512294][ T8635] do_syscall_64+0xfa/0xfa0 [ 196.512310][ T8635] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.512328][ T8635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.512344][ T8635] ? clear_bhb_loop+0x60/0xb0 [ 196.512363][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.512379][ T8635] RIP: 0033:0x7f91b5b8eec9 [ 196.512394][ T8635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.512408][ T8635] RSP: 002b:00007f91b6a95038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.512427][ T8635] RAX: ffffffffffffffda RBX: 00007f91b5de5fa0 RCX: 00007f91b5b8eec9 [ 196.512439][ T8635] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 196.512449][ T8635] RBP: 00007f91b6a95090 R08: 0000200000000000 R09: 0000000000000000 [ 196.512458][ T8635] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 196.512467][ T8635] R13: 00007f91b5de6038 R14: 00007f91b5de5fa0 R15: 00007ffd1a3465a8 [ 196.512496][ T8635] [ 196.904847][ T8642] FAULT_INJECTION: forcing a failure. [ 196.904847][ T8642] name failslab, interval 1, probability 0, space 0, times 0 [ 196.923750][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.5.814 Not tainted syzkaller #0 PREEMPT(full) [ 196.923773][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.923784][ T8642] Call Trace: [ 196.923791][ T8642] [ 196.923798][ T8642] dump_stack_lvl+0x189/0x250 [ 196.923827][ T8642] ? __pfx____ratelimit+0x10/0x10 [ 196.923845][ T8642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.923868][ T8642] ? __pfx__printk+0x10/0x10 [ 196.923896][ T8642] ? __pfx___might_resched+0x10/0x10 [ 196.923921][ T8642] should_fail_ex+0x414/0x560 [ 196.923950][ T8642] should_failslab+0xa8/0x100 [ 196.923971][ T8642] __kmalloc_noprof+0xcb/0x7f0 [ 196.923992][ T8642] ? iter_file_splice_write+0x1c6/0x10e0 [ 196.924019][ T8642] iter_file_splice_write+0x1c6/0x10e0 [ 196.924037][ T8642] ? __vfs_getxattr+0x3f4/0x430 [ 196.924079][ T8642] ? __pfx_iter_file_splice_write+0x10/0x10 [ 196.924107][ T8642] ? rcu_read_lock_any_held+0xb3/0x120 [ 196.924129][ T8642] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 196.924151][ T8642] ? ovl_real_file_path+0x145/0x310 [ 196.924176][ T8642] backing_file_splice_write+0x3c1/0x5e0 [ 196.924211][ T8642] ovl_splice_write+0x43d/0x580 [ 196.924228][ T8642] ? __lock_acquire+0xab9/0xd20 [ 196.924252][ T8642] ? __pfx_ovl_splice_write+0x10/0x10 [ 196.924270][ T8642] ? __pfx_ovl_file_end_write+0x10/0x10 [ 196.924289][ T8642] ? rcu_read_lock_any_held+0xb3/0x120 [ 196.924324][ T8642] ? __pfx_ovl_splice_write+0x10/0x10 [ 196.924343][ T8642] direct_splice_actor+0x101/0x160 [ 196.924366][ T8642] splice_direct_to_actor+0x5a8/0xcc0 [ 196.924411][ T8642] ? __pfx_direct_splice_actor+0x10/0x10 [ 196.924430][ T8642] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 196.924460][ T8642] do_splice_direct+0x181/0x270 [ 196.924482][ T8642] ? __pfx_do_splice_direct+0x10/0x10 [ 196.924502][ T8642] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 196.924530][ T8642] ? rw_verify_area+0x255/0x4d0 [ 196.924552][ T8642] do_sendfile+0x4da/0x7e0 [ 196.924584][ T8642] ? __pfx_do_sendfile+0x10/0x10 [ 196.924618][ T8642] __se_sys_sendfile64+0xd9/0x190 [ 196.924641][ T8642] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 196.924666][ T8642] ? do_syscall_64+0xbe/0xfa0 [ 196.924688][ T8642] do_syscall_64+0xfa/0xfa0 [ 196.924705][ T8642] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.924722][ T8642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.924738][ T8642] ? clear_bhb_loop+0x60/0xb0 [ 196.924758][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.924774][ T8642] RIP: 0033:0x7f07a018eec9 [ 196.924790][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.924804][ T8642] RSP: 002b:00007f07a0f90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 196.924823][ T8642] RAX: ffffffffffffffda RBX: 00007f07a03e5fa0 RCX: 00007f07a018eec9 [ 196.924835][ T8642] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 196.924845][ T8642] RBP: 00007f07a0f90090 R08: 0000000000000000 R09: 0000000000000000 [ 196.924855][ T8642] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 196.924866][ T8642] R13: 00007f07a03e6038 R14: 00007f07a03e5fa0 R15: 00007ffc0a72ab28 [ 196.924896][ T8642] [ 197.247381][ T812] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 197.407365][ T812] usb 2-1: device descriptor read/64, error -71 [ 197.520987][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.5.818'. [ 197.616974][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.6.819'. [ 197.626377][ T8654] net_ratelimit: 5 callbacks suppressed [ 197.626393][ T8654] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 197.648000][ T812] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 197.777990][ T812] usb 2-1: device descriptor read/64, error -71 [ 197.826166][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.822'. [ 197.887736][ T812] usb usb2-port1: attempt power cycle [ 197.894604][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.822'. [ 198.237240][ T812] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 198.268000][ T812] usb 2-1: device descriptor read/8, error -71 [ 198.349000][ T30] audit: type=1326 audit(1759161047.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.374717][ T30] audit: type=1326 audit(1759161047.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.397838][ T30] audit: type=1326 audit(1759161047.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.420396][ T30] audit: type=1326 audit(1759161047.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.442593][ T30] audit: type=1326 audit(1759161047.020:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.462624][ T5989] usb 1-1: USB disconnect, device number 62 [ 198.468866][ T30] audit: type=1326 audit(1759161047.020:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.496902][ T30] audit: type=1326 audit(1759161047.020:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.520174][ T30] audit: type=1326 audit(1759161047.020:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.542866][ T30] audit: type=1326 audit(1759161047.020:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.564956][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.571558][ T812] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 198.571923][ T30] audit: type=1326 audit(1759161047.020:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a018eec9 code=0x7fc00000 [ 198.607892][ T812] usb 2-1: device descriptor read/8, error -71 [ 198.717891][ T812] usb usb2-port1: unable to enumerate USB device [ 198.887291][ T5920] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 198.887306][ T5989] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 198.931791][ T8676] netlink: 256 bytes leftover after parsing attributes in process `syz.6.828'. [ 198.986238][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.829'. [ 198.996005][ T8678] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 199.037982][ T5989] usb 1-1: Using ep0 maxpacket: 8 [ 199.046009][ T5989] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 199.057768][ T5989] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 199.058019][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 199.066496][ T5989] usb 1-1: config 3 has no interface number 0 [ 199.079510][ T5989] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.085027][ T5920] usb 6-1: config 254 has an invalid interface number: 245 but max is 0 [ 199.092873][ T5989] usb 1-1: config 3 interface 45 has no altsetting 0 [ 199.123022][ T5989] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 199.125257][ T5920] usb 6-1: config 254 has an invalid interface number: 120 but max is 0 [ 199.132968][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.148371][ T5920] usb 6-1: config 254 has 2 interfaces, different from the descriptor's value: 1 [ 199.149739][ T5989] usb 1-1: Product: syz [ 199.162301][ T5920] usb 6-1: config 254 has no interface number 0 [ 199.162910][ T5989] usb 1-1: Manufacturer: syz [ 199.169441][ T5920] usb 6-1: config 254 has no interface number 1 [ 199.173886][ T5989] usb 1-1: SerialNumber: syz [ 199.179712][ T5920] usb 6-1: config 254 interface 245 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 199.196528][ T5920] usb 6-1: config 254 interface 245 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 199.214731][ T5920] usb 6-1: too many endpoints for config 254 interface 120 altsetting 253: 85, using maximum allowed: 30 [ 199.226167][ T5920] usb 6-1: config 254 interface 120 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 199.237918][ T5920] usb 6-1: config 254 interface 120 altsetting 253 bulk endpoint 0xD has invalid maxpacket 1024 [ 199.256485][ T5920] usb 6-1: config 254 interface 120 altsetting 253 endpoint 0xC has invalid maxpacket 1990, setting to 1024 [ 199.271168][ T5920] usb 6-1: config 254 interface 120 altsetting 253 endpoint 0x8 has invalid maxpacket 96, setting to 64 [ 199.282389][ T5920] usb 6-1: config 254 interface 120 altsetting 253 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 199.295755][ T5920] usb 6-1: config 254 interface 120 altsetting 253 has 6 endpoint descriptors, different from the interface descriptor's value: 85 [ 199.309517][ T5920] usb 6-1: config 254 interface 120 has no altsetting 0 [ 199.316804][ T5920] usb 6-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice=5f.4b [ 199.329172][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.345050][ T8666] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 199.380511][ T5920] vmk80xx 6-1:254.245: driver 'vmk80xx' failed to auto-configure device. [ 199.536934][ T5989] usb 1-1: USB disconnect, device number 63 [ 199.562715][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.813385][ T5920] usb 6-1: string descriptor 0 read error: -71 [ 199.836384][ T5920] vmk80xx 6-1:254.120: driver 'vmk80xx' failed to auto-configure device. [ 199.856147][ T5920] usb 6-1: USB disconnect, device number 9 [ 199.942467][ T8702] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.958416][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 200.022553][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 200.032960][ T8704] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 200.044506][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 200.367621][ T5989] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 200.479487][ T8722] netlink: 666 bytes leftover after parsing attributes in process `syz.6.845'. [ 200.517359][ T5989] usb 1-1: device descriptor read/64, error -71 [ 200.556507][ T8726] netlink: 'syz.6.849': attribute type 1 has an invalid length. [ 200.564392][ T8726] netlink: 'syz.6.849': attribute type 3 has an invalid length. [ 200.677002][ T8731] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 200.700041][ T5920] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 200.777303][ T5989] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 200.837917][ T5920] usb 2-1: device descriptor read/64, error -71 [ 200.907313][ T5989] usb 1-1: device descriptor read/64, error -71 [ 201.018094][ T5989] usb usb1-port1: attempt power cycle [ 201.087324][ T5920] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 201.218438][ T5920] usb 2-1: device descriptor read/64, error -71 [ 201.231690][ T8755] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 201.328403][ T5920] usb usb2-port1: attempt power cycle [ 201.357319][ T5989] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 201.377723][ T5989] usb 1-1: device descriptor read/8, error -71 [ 201.439568][ T8759] bond0: Error: Cannot enslave bond to itself. [ 201.617314][ T5989] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 201.639559][ T5989] usb 1-1: device descriptor read/8, error -71 [ 201.668058][ T5920] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 201.688333][ T5920] usb 2-1: device descriptor read/8, error -71 [ 201.727299][ T43] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 201.747551][ T5989] usb usb1-port1: unable to enumerate USB device [ 201.889834][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 201.898768][ T43] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 201.907658][ T43] usb 7-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config [ 201.917873][ T43] usb 7-1: config 1 interface 1 has no altsetting 0 [ 201.926968][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.927319][ T5920] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 201.936199][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.952748][ T43] usb 7-1: Product: syz [ 201.957011][ T43] usb 7-1: Manufacturer: syz [ 201.961780][ T43] usb 7-1: SerialNumber: syz [ 201.979190][ T5920] usb 2-1: device descriptor read/8, error -71 [ 202.088466][ T5920] usb usb2-port1: unable to enumerate USB device [ 202.155848][ T8763] netlink: 'syz.5.863': attribute type 1 has an invalid length. [ 202.164783][ T8763] netlink: 'syz.5.863': attribute type 2 has an invalid length. [ 202.189840][ T43] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 202.198849][ T43] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 202.206623][ T43] usb 7-1: 2:1: All rates were zero [ 202.228144][ T43] usb 7-1: USB disconnect, device number 11 [ 202.427264][ T5920] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 202.581975][ T5920] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 202.591088][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 202.599290][ T5920] usb 6-1: Product: syz [ 202.603450][ T5920] usb 6-1: Manufacturer: syz [ 202.608075][ T5920] usb 6-1: SerialNumber: syz [ 202.614483][ T5920] usb 6-1: config 0 descriptor?? [ 202.622419][ T5920] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 202.630109][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 202.639286][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.649279][ T5920] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 202.657394][ T5920] usb 6-1: media controller created [ 202.673850][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.987274][ T5989] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 203.148185][ T5989] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 203.157523][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.165554][ T5989] usb 7-1: Product: syz [ 203.171119][ T5989] usb 7-1: Manufacturer: syz [ 203.176690][ T5989] usb 7-1: SerialNumber: syz [ 203.199624][ T5989] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 203.217085][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 203.539626][ T8772] __nla_validate_parse: 7 callbacks suppressed [ 203.539665][ T8772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.866'. [ 203.628392][ T1072] usb 7-1: USB disconnect, device number 12 [ 203.660099][ T8774] syzkaller1: entered promiscuous mode [ 203.665650][ T8774] syzkaller1: entered allmulticast mode [ 203.710720][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.869'. [ 203.719740][ T8778] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 203.897948][ T8785] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.147260][ T43] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 204.297314][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 204.304901][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.315308][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 204.322616][ T24] ath9k_htc: Failed to initialize the device [ 204.330394][ T1072] usb 7-1: ath9k_htc: USB layer deinitialized [ 204.337535][ T43] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 204.347115][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.355279][ T43] usb 1-1: Product: syz [ 204.359689][ T43] usb 1-1: Manufacturer: syz [ 204.364367][ T43] usb 1-1: SerialNumber: syz [ 204.372315][ T43] usb 1-1: config 0 descriptor?? [ 204.380015][ T43] usb 1-1: bad CDC descriptors [ 204.385688][ T43] usb 1-1: unsupported MDLM descriptors [ 204.665569][ T1072] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 204.753134][ T9] usb 1-1: USB disconnect, device number 68 [ 204.862546][ T8793] loop6: detected capacity change from 0 to 524288000 [ 204.869537][ T1072] usb 7-1: device descriptor read/64, error -71 [ 205.026805][ T8795] netlink: 44 bytes leftover after parsing attributes in process `syz.1.876'. [ 205.091728][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'. [ 205.118317][ T1072] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 205.196965][ T5920] cxusb: set interface failed [ 205.212136][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 205.275974][ T1072] usb 7-1: device descriptor read/64, error -71 [ 205.282744][ T5920] DVB: Unable to find symbol mt352_attach() [ 205.296250][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'. [ 205.325276][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 205.332334][ T5920] zl10353_read_register: readreg error (reg=127, ret==-121) [ 205.333002][ T5185] Bluetooth: hci3: unexpected event for opcode 0x202a [ 205.361787][ T8805] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 205.370498][ T5920] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 205.400989][ T8810] Invalid logical block size (1660944384) [ 205.438206][ T1072] usb usb7-port1: attempt power cycle [ 205.538448][ T5920] rc_core: IR keymap rc-dvico-mce not found [ 205.550675][ T5920] Registered IR keymap rc-empty [ 205.567690][ T5920] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 205.577725][ T8820] trusted_key: syz.5.884 sent an empty control message without MSG_MORE. [ 205.603802][ T5920] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input22 [ 205.619603][ T5920] dvb-usb: schedule remote query interval to 100 msecs. [ 205.634075][ T5920] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 205.662756][ T5920] usb 6-1: USB disconnect, device number 10 [ 205.733449][ T8824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.886'. [ 205.767505][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 205.781641][ T1072] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 205.813959][ T5920] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 205.838273][ T1072] usb 7-1: device descriptor read/8, error -71 [ 205.948118][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 205.956260][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 205.972279][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.993159][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.003067][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 206.013136][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 206.022899][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.038858][ T9] usb 2-1: config 0 descriptor?? [ 206.055088][ T8815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.077396][ T1072] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 206.129711][ T1072] usb 7-1: device descriptor read/8, error -71 [ 206.237632][ T1072] usb usb7-port1: unable to enumerate USB device [ 206.407260][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 206.483429][ T24] usb 2-1: USB disconnect, device number 66 [ 206.489512][ T5185] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 206.579052][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.590773][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.601811][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 206.611639][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.624628][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.645780][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.668349][ T9] usb 6-1: config 0 descriptor?? [ 206.818986][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 206.827895][ T8843] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 206.944140][ T8847] netlink: zone id is out of range [ 206.952906][ T8847] netlink: zone id is out of range [ 206.959509][ T8847] netlink: zone id is out of range [ 206.966356][ T8847] netlink: zone id is out of range [ 206.977599][ T8847] netlink: zone id is out of range [ 206.982746][ T8847] netlink: zone id is out of range [ 207.091522][ T9] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 207.142604][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 207.167255][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.897'. [ 207.443526][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 208.097258][ T9] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 208.229355][ T9] usb 2-1: device descriptor read/64, error -71 [ 208.470383][ T9] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 208.568096][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.909'. [ 208.620943][ T9] usb 2-1: device descriptor read/64, error -71 [ 208.738249][ T9] usb usb2-port1: attempt power cycle [ 208.867267][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 208.937261][ T5920] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 209.028190][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 209.035258][ T24] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 209.044819][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.056139][ T24] usb 7-1: config 0 descriptor?? [ 209.070541][ T24] as10x_usb: device has been detected [ 209.080573][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 209.097387][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 209.103207][ T9] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 209.106429][ T24] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 209.116729][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 209.131334][ T9] usb 2-1: device descriptor read/8, error -71 [ 209.139074][ T24] as10x_usb: error during firmware upload part1 [ 209.143510][ T5920] usb 1-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.146083][ T24] Registered device nBox DVB-T Dongle [ 209.160466][ T5920] usb 1-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 209.177026][ T5920] usb 1-1: config 12 interface 0 has no altsetting 0 [ 209.186344][ T5920] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 209.197464][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.205479][ T5920] usb 1-1: Product: syz [ 209.209930][ T5920] usb 1-1: Manufacturer: syz [ 209.215236][ T5920] usb 1-1: SerialNumber: syz [ 209.258948][ T10] usb 6-1: USB disconnect, device number 11 [ 209.281392][ T24] usb 7-1: USB disconnect, device number 17 [ 209.309963][ T24] Unregistered device nBox DVB-T Dongle [ 209.315603][ T24] as10x_usb: device has been disconnected [ 209.400385][ T9] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 209.440222][ T9] usb 2-1: device descriptor read/8, error -71 [ 209.450635][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.457801][ T5920] usb 1-1: selecting invalid altsetting 0 [ 209.492406][ T5920] snd-usb-audio 1-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 209.506352][ T5920] usb 1-1: USB disconnect, device number 69 [ 209.528292][ T7961] udevd[7961]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.548260][ T9] usb usb2-port1: unable to enumerate USB device [ 209.717497][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 209.807403][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 209.870126][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.881269][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.890517][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.900909][ T10] usb 6-1: config 0 descriptor?? [ 209.968119][ T24] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 209.977637][ T24] usb 7-1: config 0 has no interfaces? [ 209.984508][ T24] usb 7-1: config 0 has no interfaces? [ 209.996064][ T24] usb 7-1: config 0 has no interfaces? [ 210.006133][ T24] usb 7-1: config 0 has no interfaces? [ 210.014552][ T24] usb 7-1: config 0 has no interfaces? [ 210.021129][ T24] usb 7-1: config 0 has no interfaces? [ 210.027504][ T24] usb 7-1: config 0 has no interfaces? [ 210.033874][ T24] usb 7-1: config 0 has no interfaces? [ 210.042493][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.051658][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.059790][ T24] usb 7-1: Product: syz [ 210.063956][ T24] usb 7-1: Manufacturer: syz [ 210.068777][ T24] usb 7-1: SerialNumber: syz [ 210.075804][ T24] usb 7-1: config 0 descriptor?? [ 210.110320][ T8897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.120139][ T8897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.227474][ T5920] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 210.333309][ T10] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 210.345962][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0011/input/input23 [ 210.391008][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.403122][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.414083][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 210.427722][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.455833][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.466822][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.476518][ T10] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 210.489770][ T1072] usb 7-1: USB disconnect, device number 18 [ 210.522366][ T5920] usb 1-1: config 0 descriptor?? [ 210.745346][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.754354][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.763938][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.772880][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.827260][ T24] usb 6-1: USB disconnect, device number 12 [ 210.937916][ T1072] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 210.994495][ T5920] usbhid 1-1:0.0: can't add hid device: -71 [ 211.001473][ T5920] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.003745][ T8905] tmpfs: Bad value for 'mpol' [ 211.021918][ T5920] usb 1-1: USB disconnect, device number 70 [ 211.088065][ T1072] usb 7-1: Using ep0 maxpacket: 32 [ 211.094822][ T1072] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 211.103923][ T1072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.113822][ T1072] usb 7-1: config 0 descriptor?? [ 211.125181][ T1072] as10x_usb: device has been detected [ 211.131450][ T1072] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 211.152321][ T1072] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 211.165176][ T1072] as10x_usb: error during firmware upload part1 [ 211.172578][ T1072] Registered device nBox DVB-T Dongle [ 211.287350][ T5912] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 211.322886][ T24] usb 7-1: USB disconnect, device number 19 [ 211.345337][ T24] Unregistered device nBox DVB-T Dongle [ 211.347899][ T24] as10x_usb: device has been disconnected [ 211.407064][ T8907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.457528][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 211.457598][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.920'. [ 211.464815][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.487223][ T5912] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 211.496367][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.532017][ T5912] usb 2-1: config 0 descriptor?? [ 211.586858][ T8913] syzkaller1: entered promiscuous mode [ 211.593327][ T8913] syzkaller1: entered allmulticast mode [ 211.952875][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 211.959929][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 211.966791][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 211.974519][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 211.982989][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 211.989994][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 211.996860][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 212.003822][ T43] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 212.011512][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 212.018416][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 212.025285][ T5912] apple 0003:05AC:025B.0012: unknown main item tag 0x0 [ 212.036304][ T5912] apple 0003:05AC:025B.0012: hidraw0: USB HID v0.09 Device [HID 05ac:025b] on usb-dummy_hcd.1-1/input0 [ 212.154999][ T5912] usb 2-1: USB disconnect, device number 71 [ 212.168227][ T43] usb 1-1: device descriptor read/64, error -71 [ 212.407305][ T43] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 212.431320][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.926'. [ 212.537257][ T43] usb 1-1: device descriptor read/64, error -71 [ 212.657633][ T43] usb usb1-port1: attempt power cycle [ 212.858465][ T5989] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 212.863147][ T8939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.931'. [ 213.007451][ T43] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 213.037926][ T43] usb 1-1: device descriptor read/8, error -71 [ 213.045460][ T5989] usb 7-1: config 0 has an invalid interface number: 32 but max is 0 [ 213.054105][ T5989] usb 7-1: config 0 has no interface number 0 [ 213.060502][ T5989] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 213.070750][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.084118][ T5989] usb 7-1: config 0 descriptor?? [ 213.227260][ T1072] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 213.287243][ T43] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 213.307870][ T43] usb 1-1: device descriptor read/8, error -71 [ 213.379207][ T1072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.390844][ T1072] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.405451][ T1072] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 213.416754][ T1072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.427820][ T43] usb usb1-port1: unable to enumerate USB device [ 213.436652][ T1072] usb 2-1: config 0 descriptor?? [ 213.864309][ T1072] megaworld 0003:07B5:0312.0013: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 213.875850][ T1072] megaworld 0003:07B5:0312.0013: no inputs found [ 213.877311][ T5912] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 214.041148][ T5912] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 214.050408][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.058730][ T5912] usb 6-1: Product: syz [ 214.062954][ T5912] usb 6-1: Manufacturer: syz [ 214.063521][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'. [ 214.067958][ T5912] usb 6-1: SerialNumber: syz [ 214.086429][ T5912] usb 6-1: config 0 descriptor?? [ 214.096884][ T1072] usb 2-1: USB disconnect, device number 72 [ 214.105497][ T5912] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 214.122955][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.134410][ T5912] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 214.144359][ T5912] usb 6-1: media controller created [ 214.163666][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.207629][ T5912] DVB: Unable to find symbol mt352_attach() [ 214.240286][ T5912] DVB: Unable to find symbol nxt6000_attach() [ 214.246412][ T5912] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 214.258484][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 214.276321][ T5912] dvb-usb: schedule remote query interval to 1000 msecs. [ 214.283471][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 214.294037][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 214.302549][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 214.565160][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.573994][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.957787][ T5912] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 215.087334][ T5912] usb 2-1: device descriptor read/64, error -71 [ 215.170996][ T1072] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 215.186714][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.196666][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.307242][ T1072] usb 1-1: device descriptor read/64, error -71 [ 215.327348][ T5912] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 215.348924][ T43] dvb-usb: bulk message failed: -22 (7/0) [ 215.354808][ T43] dvb-usb: error while querying for an remote control event. [ 215.395964][ T5989] usb 7-1: Cannot read MAC address [ 215.405780][ T5989] MOSCHIP usb-ethernet driver 7-1:0.32: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 215.420144][ T5989] usb 7-1: USB disconnect, device number 20 [ 215.458130][ T5912] usb 2-1: device descriptor read/64, error -71 [ 215.459501][ T8968] netlink: 48 bytes leftover after parsing attributes in process `syz.6.941'. [ 215.557506][ T1072] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 215.567656][ T5912] usb usb2-port1: attempt power cycle [ 215.687349][ T1072] usb 1-1: device descriptor read/64, error -71 [ 215.797275][ T5989] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 215.799019][ T1072] usb usb1-port1: attempt power cycle [ 215.892891][ T8978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.901843][ T8978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.919299][ T5912] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 215.948646][ T5912] usb 2-1: device descriptor read/8, error -71 [ 215.957494][ T5989] usb 7-1: Using ep0 maxpacket: 32 [ 215.963959][ T5989] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 215.972153][ T5989] usb 7-1: config 0 has no interface number 0 [ 215.980951][ T5989] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 215.990527][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.998709][ T5989] usb 7-1: Product: syz [ 216.002875][ T5989] usb 7-1: Manufacturer: syz [ 216.007620][ T5989] usb 7-1: SerialNumber: syz [ 216.015179][ T5989] usb 7-1: config 0 descriptor?? [ 216.022337][ T5989] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 216.147341][ T1072] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 216.167926][ T1072] usb 1-1: device descriptor read/8, error -71 [ 216.187224][ T5912] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 216.208621][ T5912] usb 2-1: device descriptor read/8, error -71 [ 216.224871][ T5989] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 216.237429][ T5989] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 216.328322][ T5912] usb usb2-port1: unable to enumerate USB device [ 216.397239][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 216.403046][ T5912] dvb-usb: error while querying for an remote control event. [ 216.407375][ T1072] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 216.447205][ T1072] usb 1-1: device descriptor read/8, error -71 [ 216.553660][ T8984] input: syz1 as /devices/virtual/input/input25 [ 216.557635][ T1072] usb usb1-port1: unable to enumerate USB device [ 216.628295][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 216.628678][ T1072] usb 7-1: USB disconnect, device number 21 [ 216.646889][ T1072] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 216.664126][ T1072] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 216.676142][ T1072] quatech2 7-1:0.51: device disconnected [ 217.427594][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 217.435986][ T5912] dvb-usb: error while querying for an remote control event. [ 217.447648][ T1072] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 217.487379][ T8992] netlink: 48 bytes leftover after parsing attributes in process `syz.5.951'. [ 217.607259][ T1072] usb 7-1: Using ep0 maxpacket: 32 [ 217.614820][ T1072] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.627962][ T1072] usb 7-1: config 0 interface 0 has no altsetting 0 [ 217.634597][ T1072] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 217.643709][ T1072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.653574][ T1072] usb 7-1: config 0 descriptor?? [ 217.795296][ T9002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.804250][ T9002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.066405][ T1072] hid_parser_main: 151 callbacks suppressed [ 218.066427][ T1072] elecom 0003:056E:00E6.0014: unknown main item tag 0x7 [ 218.090483][ T1072] elecom 0003:056E:00E6.0014: hidraw0: USB HID v10.00 Device [HID 056e:00e6] on usb-dummy_hcd.6-1/input0 [ 218.102386][ T9006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722248192 (7444496384 ns) > initial count (24 ns). Using initial count to start timer. [ 218.157338][ T5920] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 218.255004][ T9012] (syz.0.958,9012,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.265447][ T5912] usb 7-1: USB disconnect, device number 22 [ 218.361359][ T5920] usb 2-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 218.390954][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.409250][ T5920] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.430477][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 218.430504][ T5920] usb 2-1: SerialNumber: syz [ 218.468203][ T5989] dvb-usb: bulk message failed: -22 (7/0) [ 218.468240][ T5989] dvb-usb: error while querying for an remote control event. [ 218.669850][ T5920] usb 2-1: 0:2 : does not exist [ 218.669930][ T5920] usb 2-1: unit 5: unexpected type 0x09 [ 218.682540][ T5920] usb 2-1: USB disconnect, device number 77 [ 218.714807][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 218.714831][ T9019] net_ratelimit: 157 callbacks suppressed [ 218.714841][ T9019] openvswitch: netlink: Key type 1558 is out of range max 32 [ 218.745109][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.952228][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.963'. [ 218.952258][ T9026] openvswitch: netlink: Key type 1046 is out of range max 32 [ 219.021214][ T9028] FAULT_INJECTION: forcing a failure. [ 219.021214][ T9028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.021246][ T9028] CPU: 1 UID: 0 PID: 9028 Comm: syz.6.964 Not tainted syzkaller #0 PREEMPT(full) [ 219.021265][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.021275][ T9028] Call Trace: [ 219.021282][ T9028] [ 219.021289][ T9028] dump_stack_lvl+0x189/0x250 [ 219.021318][ T9028] ? __pfx____ratelimit+0x10/0x10 [ 219.021336][ T9028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.021358][ T9028] ? __pfx__printk+0x10/0x10 [ 219.021379][ T9028] ? __might_fault+0xb0/0x130 [ 219.021412][ T9028] should_fail_ex+0x414/0x560 [ 219.021440][ T9028] _copy_from_user+0x2d/0xb0 [ 219.021462][ T9028] ___sys_sendmsg+0x158/0x2a0 [ 219.021485][ T9028] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.021537][ T9028] ? __fget_files+0x2a/0x420 [ 219.021556][ T9028] ? __fget_files+0x3a0/0x420 [ 219.021584][ T9028] __x64_sys_sendmsg+0x19b/0x260 [ 219.021606][ T9028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.021635][ T9028] ? __pfx_ksys_write+0x10/0x10 [ 219.021655][ T9028] ? do_syscall_64+0xbe/0xfa0 [ 219.021678][ T9028] do_syscall_64+0xfa/0xfa0 [ 219.021700][ T9028] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.021718][ T9028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.021734][ T9028] ? clear_bhb_loop+0x60/0xb0 [ 219.021755][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.021771][ T9028] RIP: 0033:0x7f91b5b8eec9 [ 219.021786][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.021800][ T9028] RSP: 002b:00007f91b6a95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.021818][ T9028] RAX: ffffffffffffffda RBX: 00007f91b5de5fa0 RCX: 00007f91b5b8eec9 [ 219.021830][ T9028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 219.021840][ T9028] RBP: 00007f91b6a95090 R08: 0000000000000000 R09: 0000000000000000 [ 219.021851][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.021861][ T9028] R13: 00007f91b5de6038 R14: 00007f91b5de5fa0 R15: 00007ffd1a3465a8 [ 219.021890][ T9028] [ 219.317543][ T5920] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 219.467463][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 219.474979][ T5920] usb 7-1: config 0 has an invalid interface number: 148 but max is 0 [ 219.483860][ T5920] usb 7-1: config 0 has no interface number 0 [ 219.494450][ T5920] usb 7-1: config 0 interface 148 has no altsetting 0 [ 219.504438][ T5920] usb 7-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=c5.61 [ 219.515153][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.517987][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 219.525655][ T5920] usb 7-1: Product: syz [ 219.535032][ T5912] dvb-usb: error while querying for an remote control event. [ 219.536586][ T5920] usb 7-1: Manufacturer: syz [ 219.547577][ T5920] usb 7-1: SerialNumber: syz [ 219.555606][ T5920] usb 7-1: config 0 descriptor?? [ 219.617275][ T10] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 219.627277][ T5989] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 219.766121][ T5920] snd-usb-audio 7-1:0.148: probe with driver snd-usb-audio failed with error -71 [ 219.769311][ T5989] usb 1-1: device descriptor read/64, error -71 [ 219.783019][ T10] usb 2-1: no configurations [ 219.788208][ T5920] usb 7-1: USB disconnect, device number 23 [ 219.794548][ T10] usb 2-1: can't read configurations, error -22 [ 219.937468][ T10] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 220.017599][ T5989] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 220.098041][ T10] usb 2-1: no configurations [ 220.102689][ T10] usb 2-1: can't read configurations, error -22 [ 220.110351][ T10] usb usb2-port1: attempt power cycle [ 220.148578][ T5989] usb 1-1: device descriptor read/64, error -71 [ 220.149870][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.175298][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.257727][ T5989] usb usb1-port1: attempt power cycle [ 220.322703][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.971'. [ 220.385195][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.971'. [ 220.447345][ T10] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 220.468414][ T10] usb 2-1: no configurations [ 220.473121][ T10] usb 2-1: can't read configurations, error -22 [ 220.547353][ T812] dvb-usb: bulk message failed: -22 (7/0) [ 220.553480][ T812] dvb-usb: error while querying for an remote control event. [ 220.607289][ T5989] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 220.608280][ T10] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 220.628299][ T5989] usb 1-1: device descriptor read/8, error -71 [ 220.648649][ T10] usb 2-1: no configurations [ 220.653300][ T10] usb 2-1: can't read configurations, error -22 [ 220.660631][ T10] usb usb2-port1: unable to enumerate USB device [ 220.753604][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.763000][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.867452][ T5989] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 220.887809][ T5989] usb 1-1: device descriptor read/8, error -71 [ 220.997464][ T5989] usb usb1-port1: unable to enumerate USB device [ 221.598220][ T812] dvb-usb: bulk message failed: -22 (7/0) [ 221.603989][ T812] dvb-usb: error while querying for an remote control event. [ 221.903040][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.914881][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.933060][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.948947][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.049886][ T9083] FAULT_INJECTION: forcing a failure. [ 222.049886][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 222.063231][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: syz.0.987 Not tainted syzkaller #0 PREEMPT(full) [ 222.063256][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.063266][ T9083] Call Trace: [ 222.063273][ T9083] [ 222.063281][ T9083] dump_stack_lvl+0x189/0x250 [ 222.063310][ T9083] ? __pfx____ratelimit+0x10/0x10 [ 222.063328][ T9083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.063351][ T9083] ? __pfx__printk+0x10/0x10 [ 222.063378][ T9083] ? __pfx___might_resched+0x10/0x10 [ 222.063406][ T9083] ? fs_reclaim_acquire+0x7d/0x100 [ 222.063427][ T9083] should_fail_ex+0x414/0x560 [ 222.063457][ T9083] should_failslab+0xa8/0x100 [ 222.063476][ T9083] __kmalloc_noprof+0xcb/0x7f0 [ 222.063496][ T9083] ? is_bpf_text_address+0x26/0x2b0 [ 222.063514][ T9083] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 222.063544][ T9083] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 222.063572][ T9083] genl_family_rcv_msg_doit+0xb8/0x300 [ 222.063600][ T9083] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 222.063630][ T9083] ? apparmor_capable+0x137/0x1b0 [ 222.063654][ T9083] ? bpf_lsm_capable+0x9/0x20 [ 222.063672][ T9083] ? security_capable+0x7e/0x2e0 [ 222.063696][ T9083] genl_rcv_msg+0x60e/0x790 [ 222.063723][ T9083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.063740][ T9083] ? ref_tracker_free+0x63a/0x7d0 [ 222.063756][ T9083] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 222.063774][ T9083] ? ____sys_sendmsg+0x505/0x830 [ 222.063791][ T9083] ? ___sys_sendmsg+0x21f/0x2a0 [ 222.063807][ T9083] ? __x64_sys_sendmsg+0x19b/0x260 [ 222.063847][ T9083] ? do_syscall_64+0xfa/0xfa0 [ 222.063862][ T9083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.063883][ T9083] netlink_rcv_skb+0x208/0x470 [ 222.063896][ T9083] ? __lock_acquire+0xab9/0xd20 [ 222.063916][ T9083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.063934][ T9083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.063964][ T9083] ? down_read+0x1ad/0x2e0 [ 222.063983][ T9083] genl_rcv+0x28/0x40 [ 222.063997][ T9083] netlink_unicast+0x82f/0x9e0 [ 222.064027][ T9083] ? __pfx_netlink_unicast+0x10/0x10 [ 222.064052][ T9083] ? netlink_sendmsg+0x642/0xb30 [ 222.064067][ T9083] ? skb_put+0x11b/0x210 [ 222.064089][ T9083] netlink_sendmsg+0x805/0xb30 [ 222.064116][ T9083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.064136][ T9083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 222.064157][ T9083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.064173][ T9083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.064192][ T9083] __sock_sendmsg+0x21c/0x270 [ 222.064222][ T9083] ____sys_sendmsg+0x505/0x830 [ 222.064247][ T9083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.064275][ T9083] ? import_iovec+0x74/0xa0 [ 222.064299][ T9083] ___sys_sendmsg+0x21f/0x2a0 [ 222.064320][ T9083] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.064375][ T9083] ? __fget_files+0x2a/0x420 [ 222.064405][ T9083] ? __fget_files+0x3a0/0x420 [ 222.064432][ T9083] __x64_sys_sendmsg+0x19b/0x260 [ 222.064451][ T9083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.064474][ T9083] ? __pfx_ksys_write+0x10/0x10 [ 222.064492][ T9083] ? do_syscall_64+0xbe/0xfa0 [ 222.064509][ T9083] do_syscall_64+0xfa/0xfa0 [ 222.064523][ T9083] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.064536][ T9083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.064549][ T9083] ? clear_bhb_loop+0x60/0xb0 [ 222.064565][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.064577][ T9083] RIP: 0033:0x7f98e1d8eec9 [ 222.064590][ T9083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.064601][ T9083] RSP: 002b:00007f98e2b68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.064616][ T9083] RAX: ffffffffffffffda RBX: 00007f98e1fe5fa0 RCX: 00007f98e1d8eec9 [ 222.064626][ T9083] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 222.064635][ T9083] RBP: 00007f98e2b68090 R08: 0000000000000000 R09: 0000000000000000 [ 222.064643][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.064651][ T9083] R13: 00007f98e1fe6038 R14: 00007f98e1fe5fa0 R15: 00007ffc78561248 [ 222.064675][ T9083] [ 222.511122][ T9085] FAULT_INJECTION: forcing a failure. [ 222.511122][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 222.552349][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.1.988 Not tainted syzkaller #0 PREEMPT(full) [ 222.552372][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.552381][ T9085] Call Trace: [ 222.552387][ T9085] [ 222.552394][ T9085] dump_stack_lvl+0x189/0x250 [ 222.552422][ T9085] ? __pfx____ratelimit+0x10/0x10 [ 222.552441][ T9085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.552462][ T9085] ? __pfx__printk+0x10/0x10 [ 222.552485][ T9085] ? __pfx___might_resched+0x10/0x10 [ 222.552504][ T9085] ? fs_reclaim_acquire+0x7d/0x100 [ 222.552523][ T9085] should_fail_ex+0x414/0x560 [ 222.552551][ T9085] should_failslab+0xa8/0x100 [ 222.552569][ T9085] kmem_cache_alloc_noprof+0x74/0x6e0 [ 222.552591][ T9085] ? __kernfs_new_node+0xd7/0x7e0 [ 222.552611][ T9085] __kernfs_new_node+0xd7/0x7e0 [ 222.552626][ T9085] ? __lock_acquire+0xab9/0xd20 [ 222.552650][ T9085] ? __pfx___kernfs_new_node+0x10/0x10 [ 222.552666][ T9085] ? kernfs_root+0x1c/0x230 [ 222.552694][ T9085] ? kernfs_root+0x1c/0x230 [ 222.552716][ T9085] ? kernfs_root+0x1c/0x230 [ 222.552736][ T9085] ? kernfs_root+0x1c/0x230 [ 222.552764][ T9085] kernfs_new_node+0x102/0x210 [ 222.552785][ T9085] __kernfs_create_file+0x4b/0x2e0 [ 222.552807][ T9085] sysfs_add_file_mode_ns+0x238/0x300 [ 222.552836][ T9085] sysfs_merge_group+0x177/0x310 [ 222.552854][ T9085] ? __pfx_sysfs_merge_group+0x10/0x10 [ 222.552867][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 222.552885][ T9085] ? _raw_spin_unlock+0x28/0x50 [ 222.552903][ T9085] dpm_sysfs_add+0xd2/0x270 [ 222.552926][ T9085] device_add+0x4d8/0xb50 [ 222.552942][ T9085] ? iommufd_test+0x2b8b/0x5180 [ 222.552968][ T9085] iommufd_test+0x2f95/0x5180 [ 222.553002][ T9085] ? __pfx_iommufd_test+0x10/0x10 [ 222.553027][ T9085] ? __lock_acquire+0xab9/0xd20 [ 222.553054][ T9085] ? __might_fault+0xb0/0x130 [ 222.553106][ T9085] iommufd_fops_ioctl+0x45e/0x580 [ 222.553128][ T9085] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 222.553157][ T9085] ? __fget_files+0x3a0/0x420 [ 222.553179][ T9085] ? __fget_files+0x2a/0x420 [ 222.553199][ T9085] ? bpf_lsm_file_ioctl+0x9/0x20 [ 222.553219][ T9085] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 222.553238][ T9085] __se_sys_ioctl+0xfc/0x170 [ 222.553256][ T9085] do_syscall_64+0xfa/0xfa0 [ 222.553272][ T9085] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.553295][ T9085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.553310][ T9085] ? clear_bhb_loop+0x60/0xb0 [ 222.553327][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.553342][ T9085] RIP: 0033:0x7f4abff8eec9 [ 222.553356][ T9085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.553369][ T9085] RSP: 002b:00007f4ac0e08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.553387][ T9085] RAX: ffffffffffffffda RBX: 00007f4ac01e5fa0 RCX: 00007f4abff8eec9 [ 222.553398][ T9085] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 222.553408][ T9085] RBP: 00007f4ac0e08090 R08: 0000000000000000 R09: 0000000000000000 [ 222.553417][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.553427][ T9085] R13: 00007f4ac01e6038 R14: 00007f4ac01e5fa0 R15: 00007fffe1976c28 [ 222.553453][ T9085] [ 222.869152][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.875171][ T812] dvb-usb: bulk message failed: -22 (7/0) [ 222.882156][ T812] dvb-usb: error while querying for an remote control event. [ 222.946246][ T9094] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 223.160476][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.170717][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.467395][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 223.517077][ T9118] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 223.625399][ T10] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 223.634703][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.648401][ T10] usb 7-1: config 0 descriptor?? [ 223.727112][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.741842][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.876667][ T10] kaweth 7-1:0.0: Firmware present in device. [ 223.891301][ T10] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 223.891316][ T9137] FAULT_INJECTION: forcing a failure. [ 223.891316][ T9137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.901178][ T10] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 223.914623][ T812] dvb-usb: bulk message failed: -22 (7/0) [ 223.927088][ T9137] CPU: 1 UID: 0 PID: 9137 Comm: syz.1.1005 Not tainted syzkaller #0 PREEMPT(full) [ 223.927108][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.927117][ T9137] Call Trace: [ 223.927123][ T9137] [ 223.927129][ T9137] dump_stack_lvl+0x189/0x250 [ 223.927159][ T9137] ? __pfx____ratelimit+0x10/0x10 [ 223.927176][ T9137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.927197][ T9137] ? __pfx__printk+0x10/0x10 [ 223.927217][ T9137] ? __might_fault+0xb0/0x130 [ 223.927245][ T9137] should_fail_ex+0x414/0x560 [ 223.927272][ T9137] _copy_from_user+0x2d/0xb0 [ 223.927290][ T9137] ___sys_sendmsg+0x158/0x2a0 [ 223.927311][ T9137] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.927370][ T9137] ? __might_fault+0xb0/0x130 [ 223.927395][ T9137] __sys_sendmmsg+0x227/0x430 [ 223.927420][ T9137] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.927447][ T9137] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.927481][ T9137] ? ksys_write+0x22a/0x250 [ 223.927501][ T9137] ? __pfx_ksys_write+0x10/0x10 [ 223.927523][ T9137] __x64_sys_sendmmsg+0xa0/0xc0 [ 223.927545][ T9137] do_syscall_64+0xfa/0xfa0 [ 223.927563][ T9137] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.927581][ T9137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.927597][ T9137] ? clear_bhb_loop+0x60/0xb0 [ 223.927616][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.927632][ T9137] RIP: 0033:0x7f4abff8eec9 [ 223.927646][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.927660][ T9137] RSP: 002b:00007f4ac0e08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.927678][ T9137] RAX: ffffffffffffffda RBX: 00007f4ac01e5fa0 RCX: 00007f4abff8eec9 [ 223.927690][ T9137] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 223.927701][ T9137] RBP: 00007f4ac0e08090 R08: 0000000000000000 R09: 0000000000000000 [ 223.927711][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.927720][ T9137] R13: 00007f4ac01e6038 R14: 00007f4ac01e5fa0 R15: 00007fffe1976c28 [ 223.927749][ T9137] [ 224.133871][ T812] dvb-usb: error while querying for an remote control event. [ 224.137886][ T10] usb 7-1: USB disconnect, device number 24 [ 224.561846][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.593872][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.727256][ T812] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 224.744866][ T9157] binder: 9156:9157 ioctl c0306201 2000000001c0 returned -22 [ 224.762173][ T9159] binder: 9156:9159 ioctl c0306201 2000000001c0 returned -22 [ 224.833285][ T9163] tipc: Started in network mode [ 224.838266][ T9163] tipc: Node identity 4, cluster identity 4711 [ 224.844425][ T9163] tipc: Node number set to 4 [ 224.891158][ T812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.906384][ T812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.915774][ T812] usb 2-1: config 1 has no interface number 0 [ 224.922518][ T812] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.934200][ T812] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 224.943594][ T812] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.969005][ T812] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.978387][ T812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.987520][ T812] usb 2-1: Product: syz [ 224.991839][ T812] usb 2-1: Manufacturer: syz [ 224.996437][ T812] usb 2-1: SerialNumber: syz [ 225.086943][ T9170] sp0: Synchronizing with TNC [ 225.188206][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 225.195394][ T5912] dvb-usb: error while querying for an remote control event. [ 225.252051][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.261308][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.477621][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 225.647257][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 225.654941][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.663724][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.674481][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.686449][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.695801][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.704241][ T10] usb 7-1: Product: syz [ 225.708480][ T10] usb 7-1: Manufacturer: syz [ 225.713069][ T10] usb 7-1: SerialNumber: syz [ 225.727271][ T9] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 225.818133][ T812] cdc_ncm 2-1:1.1: bind() failure [ 225.888998][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.902341][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.916188][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 225.927585][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.941551][ T9] usb 1-1: config 0 descriptor?? [ 226.026312][ T5920] usb 2-1: USB disconnect, device number 82 [ 226.041561][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.053120][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.128278][ T10] usb 7-1: 0:2 : does not exist [ 226.227372][ T812] dvb-usb: bulk message failed: -22 (7/0) [ 226.233139][ T812] dvb-usb: error while querying for an remote control event. [ 226.359232][ T9] uclogic 0003:28BD:0042.0015: interface is invalid, ignoring [ 226.731548][ T9175] overlayfs: failed to resolve './file0': -2 [ 226.764980][ T10] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 226.789091][ T10] usb 7-1: USB disconnect, device number 25 [ 226.897295][ T5912] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 226.976559][ T9204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.985748][ T9204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.996087][ T9204] Bluetooth: MGMT ver 1.23 [ 227.002941][ T9204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.011919][ T9204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.029200][ T9204] loop8: detected capacity change from 0 to 7 [ 227.039653][ T9204] Dev loop8: unable to read RDB block 7 [ 227.045271][ T9204] loop8: unable to read partition table [ 227.048925][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.051947][ T9204] loop8: partition table beyond EOD, truncated [ 227.070706][ T9204] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 227.091791][ T5912] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.099378][ T9204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722248192 (7444496384 ns) > initial count (24 ns). Using initial count to start timer. [ 227.116655][ T5912] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 227.129596][ T812] usb 1-1: USB disconnect, device number 83 [ 227.156306][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.185298][ T5912] usb 2-1: Product: syz [ 227.191290][ T5912] usb 2-1: Manufacturer: syz [ 227.195903][ T5912] usb 2-1: SerialNumber: syz [ 227.207920][ T5912] usb 2-1: config 0 descriptor?? [ 227.267386][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 227.273258][ T5912] dvb-usb: error while querying for an remote control event. [ 227.547908][ T812] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 227.607350][ T5912] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 227.697262][ T812] usb 1-1: Using ep0 maxpacket: 8 [ 227.709198][ T812] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 227.721928][ T812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.735775][ T812] usb 1-1: config 0 descriptor?? [ 227.772737][ T5912] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 227.790091][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.821564][ T5912] usb 7-1: config 0 descriptor?? [ 228.164348][ T812] logitech 0003:046D:C295.0016: item fetching failed at offset 4/5 [ 228.172881][ T812] logitech 0003:046D:C295.0016: parse failed [ 228.179013][ T812] logitech 0003:046D:C295.0016: probe with driver logitech failed with error -22 [ 228.234186][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.243112][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.256123][ T5912] ath6kl: Failed to submit usb control message: -71 [ 228.264496][ T5912] ath6kl: unable to send the bmi data to the device: -71 [ 228.273195][ T5912] ath6kl: Unable to send get target info: -71 [ 228.280036][ T5912] ath6kl: Failed to init ath6kl core: -71 [ 228.287053][ T5912] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 228.300233][ T5912] usb 7-1: USB disconnect, device number 26 [ 228.309127][ T5989] dvb-usb: bulk message failed: -22 (7/0) [ 228.314886][ T5989] dvb-usb: error while querying for an remote control event. [ 228.850353][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1043'. [ 228.862016][ T9239] veth1_macvtap: left promiscuous mode [ 229.018533][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 229.025247][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 229.072769][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.083459][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.101611][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.116971][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.290054][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 229.296192][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 229.347453][ T5989] dvb-usb: bulk message failed: -22 (7/0) [ 229.354328][ T5989] dvb-usb: error while querying for an remote control event. [ 229.677688][ T5920] usb 2-1: USB disconnect, device number 83 [ 229.809407][ T10] libceph: connect (1)[c::]:6789 error -101 [ 229.822480][ T9244] ceph: No mds server is up or the cluster is laggy [ 229.835047][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 230.035696][ T9262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722248192 (7444496384 ns) > initial count (24 ns). Using initial count to start timer. [ 230.113490][ T9264] netlink: zone id is out of range [ 230.120286][ T9264] netlink: zone id is out of range [ 230.125415][ T9264] netlink: zone id is out of range [ 230.131567][ T9264] netlink: zone id is out of range [ 230.136695][ T9264] netlink: zone id is out of range [ 230.142474][ T9264] netlink: zone id is out of range [ 230.163398][ T9264] netlink: zone id is out of range [ 230.178914][ T9264] netlink: zone id is out of range [ 230.190248][ T9264] netlink: zone id is out of range [ 230.201825][ T9264] netlink: zone id is out of range [ 230.276201][ T10] usb 1-1: USB disconnect, device number 84 [ 230.387370][ T5989] dvb-usb: bulk message failed: -22 (7/0) [ 230.393954][ T5989] dvb-usb: error while querying for an remote control event. [ 230.559476][ T5185] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 230.595338][ T9281] support for cryptoloop has been removed. Use dm-crypt instead. [ 230.622212][ T9281] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1058'. [ 230.677960][ T9] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 230.688231][ T9283] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 230.840661][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.852611][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.871780][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 230.882141][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.890841][ T9] usb 2-1: Product: syz [ 230.895038][ T9] usb 2-1: Manufacturer: syz [ 230.899202][ T5989] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 230.899933][ T9] usb 2-1: SerialNumber: syz [ 230.914907][ T9] usb 2-1: config 0 descriptor?? [ 231.045733][ T9293] capability: warning: `syz.5.1063' uses 32-bit capabilities (legacy support in use) [ 231.069025][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 231.075723][ T5989] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 231.085297][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.116732][ T5989] usb 7-1: config 0 descriptor?? [ 231.118100][ T9297] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1064'. [ 231.139406][ T9297] NCSI netlink: No device for ifindex 29216 [ 231.320526][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.329488][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.427400][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 231.433195][ T5912] dvb-usb: error while querying for an remote control event. [ 231.538424][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.548209][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.758730][ T5989] video4linux radio48: keene_cmd_set failed (-71) [ 231.766471][ T5989] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 231.776778][ T5989] usb 7-1: USB disconnect, device number 27 [ 231.872752][ T9308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.881597][ T9308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.891431][ T9308] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1068'. [ 231.905688][ T9308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.914817][ T9308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.978448][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1068'. [ 231.988665][ T9308] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1068'. [ 232.292839][ T9310] netlink: 'syz.6.1069': attribute type 3 has an invalid length. [ 232.300809][ T9310] netlink: 1332 bytes leftover after parsing attributes in process `syz.6.1069'. [ 232.339600][ T9312] FAULT_INJECTION: forcing a failure. [ 232.339600][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 232.352659][ T9312] CPU: 1 UID: 0 PID: 9312 Comm: syz.6.1070 Not tainted syzkaller #0 PREEMPT(full) [ 232.352673][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.352680][ T9312] Call Trace: [ 232.352684][ T9312] [ 232.352688][ T9312] dump_stack_lvl+0x189/0x250 [ 232.352709][ T9312] ? __pfx____ratelimit+0x10/0x10 [ 232.352720][ T9312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.352734][ T9312] ? __pfx__printk+0x10/0x10 [ 232.352750][ T9312] ? __pfx___might_resched+0x10/0x10 [ 232.352762][ T9312] ? fs_reclaim_acquire+0x7d/0x100 [ 232.352774][ T9312] should_fail_ex+0x414/0x560 [ 232.352792][ T9312] should_failslab+0xa8/0x100 [ 232.352803][ T9312] __kmalloc_noprof+0xcb/0x7f0 [ 232.352816][ T9312] ? is_bpf_text_address+0x26/0x2b0 [ 232.352830][ T9312] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 232.352857][ T9312] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 232.352884][ T9312] genl_family_rcv_msg_doit+0xb8/0x300 [ 232.352911][ T9312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.352931][ T9312] ? apparmor_capable+0x137/0x1b0 [ 232.352947][ T9312] ? bpf_lsm_capable+0x9/0x20 [ 232.352959][ T9312] ? security_capable+0x7e/0x2e0 [ 232.352973][ T9312] genl_rcv_msg+0x60e/0x790 [ 232.352990][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.353001][ T9312] ? ref_tracker_free+0x63a/0x7d0 [ 232.353010][ T9312] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 232.353024][ T9312] ? __pfx_nl80211_start_ap+0x10/0x10 [ 232.353032][ T9312] ? __pfx_nl80211_post_doit+0x10/0x10 [ 232.353051][ T9312] ? ____sys_sendmsg+0x505/0x830 [ 232.353063][ T9312] ? ___sys_sendmsg+0x21f/0x2a0 [ 232.353072][ T9312] ? __x64_sys_sendmsg+0x19b/0x260 [ 232.353082][ T9312] ? do_syscall_64+0xfa/0xfa0 [ 232.353091][ T9312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.353105][ T9312] netlink_rcv_skb+0x208/0x470 [ 232.353114][ T9312] ? __lock_acquire+0xab9/0xd20 [ 232.353125][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.353138][ T9312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.353158][ T9312] ? down_read+0x1ad/0x2e0 [ 232.353171][ T9312] genl_rcv+0x28/0x40 [ 232.353182][ T9312] netlink_unicast+0x82f/0x9e0 [ 232.353202][ T9312] ? __pfx_netlink_unicast+0x10/0x10 [ 232.353217][ T9312] ? netlink_sendmsg+0x642/0xb30 [ 232.353226][ T9312] ? skb_put+0x11b/0x210 [ 232.353241][ T9312] netlink_sendmsg+0x805/0xb30 [ 232.353257][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.353268][ T9312] ? aa_sock_msg_perm+0xf1/0x1d0 [ 232.353281][ T9312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.353290][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.353301][ T9312] __sock_sendmsg+0x21c/0x270 [ 232.353317][ T9312] ____sys_sendmsg+0x505/0x830 [ 232.353331][ T9312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.353347][ T9312] ? import_iovec+0x74/0xa0 [ 232.353361][ T9312] ___sys_sendmsg+0x21f/0x2a0 [ 232.353374][ T9312] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.353404][ T9312] ? __fget_files+0x2a/0x420 [ 232.353415][ T9312] ? __fget_files+0x3a0/0x420 [ 232.353431][ T9312] __x64_sys_sendmsg+0x19b/0x260 [ 232.353444][ T9312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.353461][ T9312] ? __pfx_ksys_write+0x10/0x10 [ 232.353473][ T9312] ? do_syscall_64+0xbe/0xfa0 [ 232.353490][ T9312] do_syscall_64+0xfa/0xfa0 [ 232.353500][ T9312] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.353510][ T9312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.353519][ T9312] ? clear_bhb_loop+0x60/0xb0 [ 232.353531][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.353544][ T9312] RIP: 0033:0x7f91b5b8eec9 [ 232.353554][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.353561][ T9312] RSP: 002b:00007f91b6a95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.353573][ T9312] RAX: ffffffffffffffda RBX: 00007f91b5de5fa0 RCX: 00007f91b5b8eec9 [ 232.353579][ T9312] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 232.353585][ T9312] RBP: 00007f91b6a95090 R08: 0000000000000000 R09: 0000000000000000 [ 232.353591][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.353596][ T9312] R13: 00007f91b5de6038 R14: 00007f91b5de5fa0 R15: 00007ffd1a3465a8 [ 232.353612][ T9312] [ 232.759970][ T43] dvb-usb: bulk message failed: -22 (7/0) [ 232.765706][ T43] dvb-usb: error while querying for an remote control event. [ 233.389766][ T5920] usb 6-1: USB disconnect, device number 13 [ 233.413870][ T10] usb 2-1: USB disconnect, device number 84 [ 233.493782][ T5920] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 233.506243][ T9277] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 233.827474][ T10] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 233.994227][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.002304][ T10] usb 2-1: config 8 has an invalid interface number: 127 but max is 0 [ 234.013599][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.022382][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.029931][ T10] usb 2-1: config 8 has no interface number 0 [ 234.036152][ T10] usb 2-1: config 8 interface 127 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 234.049753][ T10] usb 2-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=45.36 [ 234.059201][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.070825][ T10] usb 2-1: Product: syz [ 234.075103][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.086166][ T10] usb 2-1: Manufacturer: syz [ 234.091016][ T10] usb 2-1: SerialNumber: syz [ 234.095724][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.301000][ T5989] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 234.324261][ T10] io_ti 2-1:8.127: required endpoints missing [ 234.352586][ T10] usb 2-1: USB disconnect, device number 85 [ 234.482195][ T5989] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 234.507233][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.532594][ T9354] chnl_net:caif_netlink_parms(): no params data found [ 234.540638][ T5989] usb 7-1: Product: syz [ 234.544799][ T5989] usb 7-1: Manufacturer: syz [ 234.557327][ T5989] usb 7-1: SerialNumber: syz [ 234.571163][ T5989] usb 7-1: config 0 descriptor?? [ 234.667988][ T9370] netlink: 'syz.0.1093': attribute type 21 has an invalid length. [ 234.675937][ T9370] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1093'. [ 234.686827][ T9354] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.694434][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.702197][ T9354] bridge_slave_0: entered allmulticast mode [ 234.710210][ T9354] bridge_slave_0: entered promiscuous mode [ 234.721298][ T9354] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.728682][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.735932][ T9354] bridge_slave_1: entered allmulticast mode [ 234.745930][ T9354] bridge_slave_1: entered promiscuous mode [ 234.793912][ T9354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.809298][ T9354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.892010][ T9354] team0: Port device team_slave_0 added [ 234.896812][ T9376] exFAT-fs (nbd0): unable to read boot sector [ 234.908705][ T9354] team0: Port device team_slave_1 added [ 234.910998][ T9376] exFAT-fs (nbd0): failed to read boot sector [ 234.922588][ T9376] exFAT-fs (nbd0): failed to recognize exfat type [ 234.953746][ T9376] fuse: Bad value for 'fd' [ 234.966262][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.974428][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.003073][ T9354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.017030][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.025271][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.051320][ T9354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.101939][ T9386] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 235.117782][ T9386] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 235.125267][ T9386] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 235.133601][ T9386] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 235.142581][ T9386] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 235.150250][ T9386] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 235.156720][ T9386] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 235.163731][ T9386] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 235.170511][ T9386] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 235.177023][ T9386] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 235.185498][ T9354] hsr_slave_0: entered promiscuous mode [ 235.192161][ T9354] hsr_slave_1: entered promiscuous mode [ 235.198833][ T9354] debugfs: 'hsr0' already exists in 'hsr' [ 235.204572][ T9354] Cannot create hsr debugfs directory [ 235.358087][ T5953] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 235.502828][ T9354] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 235.532754][ T9406] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.534618][ T9354] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 235.546432][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 235.555989][ T5953] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.587665][ T5953] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.608321][ T5953] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 235.622885][ T5953] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 235.644056][ T9354] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 235.650945][ T5953] usb 1-1: Product: syz [ 235.655771][ T5953] usb 1-1: Manufacturer: syz [ 235.666701][ T9354] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 235.691303][ T5953] hub 1-1:4.0: USB hub found [ 235.869785][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.881093][ T5953] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 235.922618][ T9354] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.938674][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.945904][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.974569][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.982400][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.036202][ T9425] sd 0:0:1:0: PR command failed: 1026 [ 236.043571][ T9425] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 236.053029][ T9425] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 236.147707][ T53] Bluetooth: hci2: command tx timeout [ 236.187626][ T43] usb 1-1: USB disconnect, device number 85 [ 236.222668][ T9354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.388339][ T5920] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 236.414725][ T9354] veth0_vlan: entered promiscuous mode [ 236.428489][ T9354] veth1_vlan: entered promiscuous mode [ 236.458627][ T9354] veth0_macvtap: entered promiscuous mode [ 236.468278][ T9354] veth1_macvtap: entered promiscuous mode [ 236.488851][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.505241][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.521166][ T1522] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.531480][ T1522] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.542051][ T1522] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.551731][ T1522] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.561226][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 236.569457][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.580714][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.590902][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.626350][ T5920] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.639440][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.663224][ T5920] usb 2-1: config 0 descriptor?? [ 236.695628][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.709941][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.750588][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.759432][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.844653][ T9445] binder: 9444:9445 ioctl c0306201 200000000000 returned -14 [ 236.891395][ T5920] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 236.910562][ T5920] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 236.928436][ T5920] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 236.936598][ T5920] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 236.944740][ T5920] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 236.969226][ T5920] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 236.996543][ T5920] microsoft 0003:045E:07DA.0017: no inputs found [ 237.025334][ T5920] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 237.105348][ T812] usb 7-1: USB disconnect, device number 28 [ 237.146967][ T43] usb 2-1: USB disconnect, device number 86 [ 237.425434][ T9471] FAULT_INJECTION: forcing a failure. [ 237.425434][ T9471] name failslab, interval 1, probability 0, space 0, times 0 [ 237.439791][ T9471] CPU: 0 UID: 0 PID: 9471 Comm: syz.7.1118 Not tainted syzkaller #0 PREEMPT(full) [ 237.439816][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.439827][ T9471] Call Trace: [ 237.439834][ T9471] [ 237.439842][ T9471] dump_stack_lvl+0x189/0x250 [ 237.439870][ T9471] ? __pfx____ratelimit+0x10/0x10 [ 237.439888][ T9471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.439911][ T9471] ? __pfx__printk+0x10/0x10 [ 237.439938][ T9471] ? __pfx___might_resched+0x10/0x10 [ 237.439957][ T9471] ? fs_reclaim_acquire+0x7d/0x100 [ 237.439979][ T9471] should_fail_ex+0x414/0x560 [ 237.440008][ T9471] should_failslab+0xa8/0x100 [ 237.440027][ T9471] __kmalloc_noprof+0xcb/0x7f0 [ 237.440048][ T9471] ? is_bpf_text_address+0x26/0x2b0 [ 237.440065][ T9471] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 237.440094][ T9471] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 237.440123][ T9471] genl_family_rcv_msg_doit+0xb8/0x300 [ 237.440159][ T9471] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.440189][ T9471] ? apparmor_capable+0x137/0x1b0 [ 237.440217][ T9471] ? bpf_lsm_capable+0x9/0x20 [ 237.440235][ T9471] ? security_capable+0x7e/0x2e0 [ 237.440256][ T9471] genl_rcv_msg+0x60e/0x790 [ 237.440274][ T9471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.440285][ T9471] ? ref_tracker_free+0x63a/0x7d0 [ 237.440294][ T9471] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 237.440309][ T9471] ? ____sys_sendmsg+0x505/0x830 [ 237.440319][ T9471] ? ___sys_sendmsg+0x21f/0x2a0 [ 237.440328][ T9471] ? __x64_sys_sendmsg+0x19b/0x260 [ 237.440339][ T9471] ? do_syscall_64+0xfa/0xfa0 [ 237.440348][ T9471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.440362][ T9471] netlink_rcv_skb+0x208/0x470 [ 237.440371][ T9471] ? __lock_acquire+0xab9/0xd20 [ 237.440383][ T9471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.440396][ T9471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.440416][ T9471] ? down_read+0x1ad/0x2e0 [ 237.440429][ T9471] genl_rcv+0x28/0x40 [ 237.440440][ T9471] netlink_unicast+0x82f/0x9e0 [ 237.440460][ T9471] ? __pfx_netlink_unicast+0x10/0x10 [ 237.440475][ T9471] ? netlink_sendmsg+0x642/0xb30 [ 237.440484][ T9471] ? skb_put+0x11b/0x210 [ 237.440497][ T9471] netlink_sendmsg+0x805/0xb30 [ 237.440511][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.440523][ T9471] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.440536][ T9471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.440546][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.440557][ T9471] __sock_sendmsg+0x21c/0x270 [ 237.440573][ T9471] ____sys_sendmsg+0x505/0x830 [ 237.440587][ T9471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.440603][ T9471] ? import_iovec+0x74/0xa0 [ 237.440617][ T9471] ___sys_sendmsg+0x21f/0x2a0 [ 237.440630][ T9471] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.440660][ T9471] ? __fget_files+0x2a/0x420 [ 237.440671][ T9471] ? __fget_files+0x3a0/0x420 [ 237.440691][ T9471] __x64_sys_sendmsg+0x19b/0x260 [ 237.440704][ T9471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.440720][ T9471] ? __pfx_ksys_write+0x10/0x10 [ 237.440732][ T9471] ? do_syscall_64+0xbe/0xfa0 [ 237.440745][ T9471] do_syscall_64+0xfa/0xfa0 [ 237.440754][ T9471] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.440764][ T9471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.440773][ T9471] ? clear_bhb_loop+0x60/0xb0 [ 237.440784][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.440793][ T9471] RIP: 0033:0x7ff729b8eec9 [ 237.440803][ T9471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.440811][ T9471] RSP: 002b:00007ff727df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.440823][ T9471] RAX: ffffffffffffffda RBX: 00007ff729de5fa0 RCX: 00007ff729b8eec9 [ 237.440829][ T9471] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 237.440835][ T9471] RBP: 00007ff727df6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.440841][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.440847][ T9471] R13: 00007ff729de6038 R14: 00007ff729de5fa0 R15: 00007ffdd0808718 [ 237.440863][ T9471] [ 237.537303][ T43] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 237.688371][ T9439] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 237.820788][ T9477] net_ratelimit: 128 callbacks suppressed [ 237.820805][ T9477] netlink: zone id is out of range [ 237.873963][ T5920] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 237.901548][ T9439] usb 7-1: Using ep0 maxpacket: 8 [ 237.911863][ T9439] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 237.923196][ T9439] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.930027][ T9439] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 237.943215][ T9439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.954758][ T9439] usb 7-1: config 0 descriptor?? [ 237.979737][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 237.991686][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.003211][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.013454][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 238.022581][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.033346][ T43] usb 2-1: config 0 descriptor?? [ 238.037285][ T5920] usb 8-1: Using ep0 maxpacket: 8 [ 238.049966][ T5920] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 238.059583][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.074282][ T5920] usb 8-1: Product: syz [ 238.079643][ T5920] usb 8-1: Manufacturer: syz [ 238.084331][ T5920] usb 8-1: SerialNumber: syz [ 238.093710][ T5920] usb 8-1: config 0 descriptor?? [ 238.148650][ T5989] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 238.160581][ T5989] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 238.168991][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 238.178350][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.188400][ T5989] Workqueue: events l2cap_info_timeout [ 238.193879][ T5989] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 238.199850][ T5989] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 1d 65 09 cc 66 66 66 66 66 66 2e [ 238.219457][ T5989] RSP: 0018:ffffc900051df788 EFLAGS: 00010206 [ 238.225530][ T5989] RAX: dffffc0000000000 RBX: ffffffff896d9d18 RCX: c613ef10e0914300 [ 238.233490][ T5989] RDX: 0000000000000000 RSI: ffffffff896d9d18 RDI: 000000000000004b [ 238.241442][ T5989] RBP: ffffffff8a9a2835 R08: 0000000000000001 R09: 0000000000000000 [ 238.249534][ T5989] R10: dffffc0000000000 R11: ffffffff8a9a27f0 R12: 0000000000000000 [ 238.257492][ T5989] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 238.265447][ T5989] FS: 0000000000000000(0000) GS:ffff8881258b7000(0000) knlGS:0000000000000000 [ 238.274359][ T5989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.280924][ T5989] CR2: 00007ffe06281f18 CR3: 000000007e032000 CR4: 00000000003526f0 [ 238.288966][ T5989] Call Trace: [ 238.292315][ T5989] [ 238.295226][ T5989] __kasan_check_byte+0x12/0x40 [ 238.300071][ T5989] lock_acquire+0x8d/0x360 [ 238.304472][ T5989] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.309666][ T5989] lock_sock_nested+0x48/0x100 [ 238.314419][ T5989] ? l2cap_sock_ready_cb+0x45/0x140 [ 238.319615][ T5989] l2cap_sock_ready_cb+0x45/0x140 [ 238.324627][ T5989] l2cap_conn_start+0x76d/0xe50 [ 238.329464][ T5989] ? __pfx_l2cap_conn_start+0x10/0x10 [ 238.334817][ T5989] ? __lock_acquire+0xab9/0xd20 [ 238.339739][ T5989] ? __pfx___mutex_lock+0x10/0x10 [ 238.344769][ T5989] ? process_scheduled_works+0x9ef/0x17b0 [ 238.350562][ T5989] l2cap_info_timeout+0x68/0xa0 [ 238.355398][ T5989] ? process_scheduled_works+0x9ef/0x17b0 [ 238.361100][ T5989] process_scheduled_works+0xae1/0x17b0 [ 238.366643][ T5989] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.372697][ T5989] worker_thread+0x8a0/0xda0 [ 238.377268][ T5989] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.383580][ T5989] ? __kthread_parkme+0x7b/0x200 [ 238.388510][ T5989] kthread+0x711/0x8a0 [ 238.392568][ T5989] ? __pfx_worker_thread+0x10/0x10 [ 238.397669][ T5989] ? __pfx_kthread+0x10/0x10 [ 238.402252][ T5989] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.407450][ T5989] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.412646][ T5989] ? __pfx_kthread+0x10/0x10 [ 238.417241][ T5989] ret_from_fork+0x4bc/0x870 [ 238.421833][ T5989] ? __pfx_ret_from_fork+0x10/0x10 [ 238.426939][ T5989] ? __switch_to_asm+0x39/0x70 [ 238.431692][ T5989] ? __switch_to_asm+0x33/0x70 [ 238.436443][ T5989] ? __pfx_kthread+0x10/0x10 [ 238.441023][ T5989] ret_from_fork_asm+0x1a/0x30 [ 238.445863][ T5989] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 238.448871][ T5989] Modules linked in: [ 238.452779][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.459753][ T5989] ---[ end trace 0000000000000000 ]--- [ 238.467653][ T53] Bluetooth: hci2: command tx timeout [ 238.472051][ T9463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.473959][ T812] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 238.482905][ T5920] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 238.491565][ T5989] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 238.496590][ T9463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.503974][ T5989] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 1d 65 09 cc 66 66 66 66 66 66 2e [ 238.530565][ T5989] RSP: 0018:ffffc900051df788 EFLAGS: 00010206 [ 238.536994][ T5989] RAX: dffffc0000000000 RBX: ffffffff896d9d18 RCX: c613ef10e0914300 [ 238.545066][ T5989] RDX: 0000000000000000 RSI: ffffffff896d9d18 RDI: 000000000000004b [ 238.553413][ T5989] RBP: ffffffff8a9a2835 R08: 0000000000000001 R09: 0000000000000000 [ 238.561520][ T5989] R10: dffffc0000000000 R11: ffffffff8a9a27f0 R12: 0000000000000000 [ 238.569969][ T5989] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 238.578321][ T5989] FS: 0000000000000000(0000) GS:ffff8881258b7000(0000) knlGS:0000000000000000 [ 238.587322][ T5989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.593931][ T5989] CR2: 00007ffe06281f18 CR3: 0000000031f0c000 CR4: 00000000003526f0 [ 238.602091][ T5989] Kernel panic - not syncing: Fatal exception [ 238.608315][ T5989] Kernel Offset: disabled [ 238.612632][ T5989] Rebooting in 86400 seconds..