last executing test programs: 10m1.51714437s ago: executing program 3 (id=4361): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x88, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0) r1 = socket(0x26, 0x801, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r3, 0x1, 0x20000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x2, {0xfffffff3, 0xffffffff, 0x7, 0x9}}) 10m1.443404299s ago: executing program 3 (id=4362): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000002280)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) wait4(r2, 0x0, 0x2, 0x0) r3 = syz_clone(0x8084100, &(0x7f0000000080)="b72a0e514a7bfcad1c87cd5f44a1140f18b1113dcf4a6b234316e60501fb16996d04e506eb8c88bd1b95b0a1206fc1c19c0624baba6314311e11571a2421c95ebd5de0539f8f398e8667f1d85971d96ba8daffb73d0d8900358531dbaa30a58b853e598ba23ddf12a03adc74b7adc99d40aebfb5593f37ccc00e8045ea090c29a06db1686c8106c2cd72002a02e75554b7f75bdb0904b66fa31a16bccc06b9ec5b914a2ef0ac7e93c3cfe87fe8b4586062d3d5a50542c39f936ff26bd520c1de089c1f1f3d5f5f4e85dcee195add65c8e69fa245d636b57991d1ae43d892ae9e78264ff393cbe90fae73cdabaa4c409e11dbde6e8b224182b2b2c7c0d2", 0xfd, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000300)="cb1bdc7557162105cc17c81daa4997bef3de6edd6029d657ade410ab4f16142e2673be32cecb282843669475d445a08925d472335b2bdbfc81566a8372cbeb023c04bc10e5032a79cff508419665b404788e3310ec5ee8dc41884ce16aff63364e0097bc6a1ede535d603a0763b4ef616923fe90f382420a61718bf966ad140be026f329b281d636c900088c2bc5df085c219a0d5b8241") kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000003c0)={r1, r1, 0xf}) fstat(r1, &(0x7f0000000a80)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x4012d5c, 0x12d5c}}, 0x44) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f00000002c0)={0x0, 0x0, 0x1ff}) 10m0.50849614s ago: executing program 3 (id=4367): getpid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000180)='trans=rdma,\x8f\x1bv\x84\x9c\t\xd7Q+$\xb8M\x06G4\x00\x98\r)YX|\xab#\xb3\xe1\xa7\x7f2\x10v\x9e\x82\xab\xb5\xf1:\x00m\x9f\x88W\x1c\xb6\x01<\xb3\x9e\tAGn\x00\x00\x00\x00') 9m59.058001608s ago: executing program 3 (id=4372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) 9m58.883722506s ago: executing program 3 (id=4376): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000084}]}) syz_usb_connect$uac1(0x5, 0x85, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x48, 0xf3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x6, 0x7, '-rs'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x3, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x6, 0x3, {0x7, 0x25, 0x1, 0x4, 0x9, 0xa4b8}}}}}}}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000090603000000000000000000050000020900020073797a3100000000050001000700000038000780060004404e21000005010700ff0000001800018014000240fc0100000000000000000000000000000c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x5) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001280), 0x2) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000200)={0xc1, 0x0, 0x1}) r5 = socket$kcm(0x2, 0x3, 0x2) mount$overlay(0x0, 0x0, 0x0, 0x8008, &(0x7f00000001c0)={[{@redirect_dir_nofollow}]}) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000100)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405", @ANYRES64=r5], 0x48}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000140)={0x0, 0x0, 0x0, r7, 0xeeeeeeee}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x1e, 0x0, &(0x7f0000002000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) vmsplice(r1, &(0x7f0000003040)=[{&(0x7f0000000580)="87fc772d0bdca9623ff2329ad07600dd759cecc008e52750d4a0d0d3a1c22ed922b7ad60f2d570a07195cb6d4a366eac95e6c5685f77f609f798e9c48b298f1913b900af7a14bd12b19492a78be28161528c5054298cf96d385596632e3db1ed2a9cdb3b7d577c45d2ec27de59d07dd84bd6f2680bdf67e52b2b47e65bfe49ad654e832933d23d2deb2e00dbc5e28612be24484c15181dd1", 0x98}, {&(0x7f0000000640)="74bff3a9020c54af629dce5e84d0ff5411deef34589c121bdd380419fc2add98046fa7f2e1a4e55d6b159523452d5dcdcfc45d17697f4d5aa96789a3131ffa4496860a85933178f0a3c4715b142d0eafffb15554ff4dc776a352890a7b0fa30648189f05599954e204f190a62982ad359398b080171acd996837238f2231f92505569f85405806c41e8e40597225639b85d6de2fcb2eafba3ebdad41b5c49a9956c79fe4ab53d85ef78be0459cedbef56f235f7638f17efa12caed8880ae289cabace63b7f5ca3875c180fe24fcfbdf5ace448058cc57744d405d219cdb1541d3043b12806", 0xe5}, {&(0x7f0000002040)="77ba5302acee943ff251dd2b2ae0a8eeb8fd1a564e3b7883b7d3a91324a03a69181f8e52e54d8bb4b1ee84e190ff5e1e8d0fe5ce265e90336f52cbc5b735cf7bf1cf9a2a3d077ca5fd4a0613e0ed6b8e78e010e9b3132852d0745f382ea2e68f3259d768b02fa616a76e56e25d2ea14ff8293f9a69c1caa8911c284538f8363d13b2d871495f1592c87f15ec4472b1ef7613127d0802ae4166e3f1d300709f55380dceccf81d517da16317425d26e1b52a2379949480f55fb02d17764f96214d5efec29f87dc11c0325a45ebed6adb040e81e0bb0eac904a3db638f8fe3469ab06ef7450c873e1c36c21adc4b01b486390423f60b7ef9f90976e1221274372d737a976728b627dc16867b15dbded6d5beceeb15cfa44d859cb1be0f63fe4e05768ccbb2c08e3cd200f99550b65b1f08f93a418fc8a3ae4efe2ee9f710c2cdb9a9ce58b2ba012866e8d3fcfa3108d283887d0367f56694e6300fc94b3792e7195c14b1e3dd4e1140318b2fb71f653eb32a44b77a81cf5141bd59b1858efb2de03edc787c36a6816db87815180e24a13147618cbd49c27f719017072f69129d01d050b3658aa66cf7d05c3fb5b524eca49bdc2b1e2ebf362e704abe9ab74d516847a9c7f8dc1a22ff411058117c4170dc5a0e7083daf2ae259d8d25f9e84424ce0f69e280a3ebce224e2ee364f13cbced1e3297e9681c199e6190ca7ed1cb7e066f2d09cb2851b8b2566759ddd50d7feb194e5eb2c3725fcd488074c5cb1964b65e7cd344d4ab839477c2b9119e8bddff32256553bdb317f79cdf5d5d46709384da7a28768cb472f90d32bf42b378371b0a06fff58dcf430b6b13e67d64b041aa0f2dad3e26eeaa841b4dd28bf93211c2992dca26c784d65cbd7c2c6201230bc0351339d5cf6a7a9c5095a7ca8584dd16b12d296ae22fb9c852e524608b6b1c605e3104209db18ccf464088352e4fcb849fe15f5e96bd2b8a0f264fc2afd39ddfda2942b6211920a09555a8d47d915250faeba36e84f8b4ac111394bba10fa5520787859529cc4bdaad9eebea4113631c3f3091b310cecfd4808d4c137bfb22107dfb1f676b4d23f3a4a314e0414fe6c0a8a6b6430327a7a3b527eeced7372245cb05784730848e62e2ecdf339c78c9a5ae6c78943fada0277feb5238f4d5169e5e396a61dafbdf4ec9b7aba85f0b06dc890e7023f576bd8c7ffe54c1c6faa5ba85a16e18abb5ab6981e639c25c3b95f068ea437cd274744735c95d467a3747885f64d09ab4f466e74652ccd2bd103bf4fa86a2f2896da978bb4a9cc89d533e76d519efd36c1a8692ac5fef65796dfe94ed51a9098722a7ccdf1f9bbfc8055917a941c53c9cb80d6d052edd6f27de96b8248193d475725aedfa46db37df9b81813d7357ea1516567d24263ba2e04240ecb38434cf57994debf1b4be550cee15337cf2961c697dc6a030c032f14858afbdec99193e26a16ba43e534ddc3da2b82e7a709f926d2626f8c41d496b0058037c444b895339eeba2be008e6c787b136c91f90fd1c7ffdcfee5653504375b1c234c0f612d28df48a30ef84368d63cd01660992c99875ae3903f3c9dc39cf36d5bf08d464218b0b72e3fa06ac04dbb0f1e47d3c2f18186618fc19eeeafbc2482689bdc4b89e4dccfc03b693a003534095067f22fd2fa70c66b6ab6a9d5030c46e387dc50f6da2bf15f1b692dd4425bb07fdc29a9fdff831a6b31ab19b84f1e9d7e24563788cc16304bad92180de8233aedbcb5e67533ef01eab83a21150bcaca242be66de4a09cedea9525886b71dfcb29f1dc7a4d280e468843c79e9dc94c862a524cc413cd984f7c5c68082e2d4d63889d73f5f3a47574200f9e737bb7d8003a31a2def148b11d2380c58d8ea7aa5aa1af3d9d0a32f85c967cadbf327daeadd7609a1440deb4fd2506b9276cc4e97c2303fd06d8e2fb1e82ee3f47477cd5a9dba0cbfe5ccb01d51fe3be298b360f18c90b4712ba4b6196e65d0d93a487da5669050e5d05ec5c88d88d76c27efc0d8d684b31826938a2d1bb5cb624bff1e5a2d2e04ef46e2a65498d6a5003c544ad68ef3e9ebedbb235e2897d7e055297fbbab70e8061762446c78ec7c77f805cc39723757160e2d81285a5b0da6044dfebe28a9527e50f0c0d868d9f6106aaeb3fb13875c9e4a4a5490617b0931be00150c91afe0c6c13bf528b13793c829b1e1ede01bf6ea08edf4d6f20cf4a3efbac16b9e6d1b6b03c4aca2354c57d51f0746ff1131267207f42ae18ef66e380bb93cbb926d9f3899384c6d71bb1c7920f005f02e5a68afcdbd7bb1f00310ae93cf24fe55aed9491e842f8b56267221c0a22a7579183aac5242f2d716161b855d990b746dd0ec4dd4658360454e7eb7a0c1f9b47e86214e02405c95b6d3ec27bf9d91831d977ac5fab498046dfb39f1ffbfcc1fc026b0de77bc90df688ca0813a0b8b108587c84e0d78b6a642229e73f530ea71a028bd072e3fd86d5892cb5763ca5df2b32ffc0fb45bfa7d3c00feadb9679e83c497cc5f9df7fd279f144483609b731223915c6c0becf97a82280dd685d3bb2cfa644a8096c96d9bdbcbe93f5d2b9bc9d0258f7f76ca410991db3e858271ee603769cb72ce32c4cb4dc8ee6935cba3f931cf97f4bc11c3099ae14ef4ff19b5ff4ab025440b1a2cb4f1ae24f655c5c878a54316a9eca7427387b683a38168956d783cee287365db619c500db9dd3e222e28933619b0ed54c51f127ee47fc84eb58f51aabcf0f3eb4cd8002a71ef8bbcd72a7827754bfd902ee6227652f40e3553b34d77d8541a66703341ffae79bd0a59d9dce6969b27d9e2dd947f3934aafd17b14a08f3e2c392151c12fbd8bc62e65101f11e8d65f3f855e6300ef33734933477664822a34e791632f7733aacc7b1bbb1d9870342345c860e441470d7ab61f2060d7d4a172f4b22025a1862f0059f669dd27a51f2eb25e6884833e14529550df1274b8dacf7f2ab549f7142c37130170989d81c738f1b3d9543d94907e9b6c7708e5dd23f10a2248494230cf5141647af3b76f67ff042ddec95765eb847a3a884ac3d1f87d18e34807c6a735e42c423ca9397e1ed200810bde4252cb1242d335f4f053e1debcee3cb7d5a7a9dac73d1132e8a43f54d516d07e4894b71f57bdb219327f522c7af8031f6c10a1228fc8b028c86966c73a5bca6b573b04094328362047938d99e0eeff8e919ccd2402f6ae89d97dd597633d7638ada9c9ab62754d7234f10ddc289bf39c267be80d8b7a0cbf23c32d73b52d7116ce962ea68e781d262a7fecfd303c512aec55e8c62cbf789de5b8ab2ddd58d44a0de0da3ea773f8f4ae99881cb488e8953afa7ab931c183ded36ffd997752eac434d2aaa6204f4bed5e9661460a6ba41d9c749d48afbea68dcfa69cf388b244c926aa8d0a03110bbe9bc1dcfed9c1ea9d5c4d37a440183de141ba3e9d8eb100fbf01fce53cb30b8d86065624b1eb55d99c5d5ae8652d6f02f743b15fd0f559c51a72599443abbe914862956e11f2431b3ceadf014a7e212e484d049c654b2746b59a5272b78674b7e0b509fc47e5320cb46f50fe72c26b16a81e3a163e632e0277cd898510f5aebc835a88d144c30bd78e0cba18579d51dd0ea89b0e6df16fd1a0255bccc62c7afe43da805d3dbb8629011b532fe4b2b16eb8f94316a9b5e15981e809f9897a8d4192c23e4e44e2e1a030799a708a3b79309dd85f8c8a113ebe8846e6dc4ec7938e761fea4e52bda8262f7de9f26c2db6de35d92b9a70f6b4fe665aaef5467d01f7d61711990a5a8d8e54f56aae7006def3263baef8f5d41466edc709fcdf51f2ab1991b8abdc743fbf70f1d56e1553cc8565a289e54fef8099b2d55544af3caded50c972c1f20579fdf817676dba9b4aea083ee285a0ffdee8819b9326b4f2f2cd6b67d4d62aa9cba3a128e8a546eb41085fd29239f458932631d120752bb621ba1be62c25e5222eab6ce26b35f8f218dd46c74fc622a1cae050d98ebf9432bee4f4f3db52bdee2356a2ba4774b9413f0774da46f3f2fa623b9cc16bf7526824c5e7f1d2d12599beca734eba4a18e4531ad9601ba4722c467c7add145097df12ac7faea61216495b011636d7bf93ff9395bab8e7159129cf151f826842d9edf0297624a8feae360963c3c4d701c13e06d04360d9ef6e97af2e6c62995515af8629eccecd6a41745d78168572ad08f78fefe2197b5010fb20830cab9c37731a02927ecbb6ea8bfa315a60fcb9e03089a57ae7ca98ab4d26420c5890f807aedb573496260ed021bfa9b4ad5515e73848c116d90f41adb13aa97aa59e1e25684278d71eb60744255a322f739cb995928ab918fdcd360d1b3ee7491db676bee1b783514fdc2561b875bcf7db3feac92db5510721f990309dd524d8f1053d0f0b3e092fcc8ed68ee93507169aedbfeeb9cd7eccd41208113453ac2697fcc3db4fc790e665523160677df3d48934f56bede9bc11450abd0403762afb2671f39dec1eede7703b0624d11742c03062a24d059b5cb912b94b52b48f8f8b4bcdbe508c4e7f99a281bf2ed25037efa7f6d323908ee013f24c5b577b7032d5befd61b174ac7605ffcc57ce0dc9214000e69e085539e8487b9a5627d140f897a50ff1f05d42817b91f953a305dab4a701c33f781e7dce7d70352ef4b44616878bb741e5492ae3eaa891ab1e21f0fa2a7c7b0c237924d7de79989b5733a5e3e504d8d168c2307819e2609f3802953cdf608514215a3ca19b902261d661975e4e837e66afbc2072bc6ef6dfbada6978d601e9ba73ea5c4669025eb8dae77c6b48e7cb62db94db779ab30037ed3362ff0918f332cccd5894e7bdb5286402326e54ae07e4899eaccea115206d6af226dccdb57df6bcef1b2662c1b73f092f3342ef919c6a04b53a5134aaf59a70ec7349f2da0607d734df6948f9ce26214b28dcb2bccc577b02a33b5fc2a85e61a0c671591c96acf5b1083220bee6d1e8f7dcee30d2693967f655536e6d1499045deaa4bc5c8c11b32e5422d4ec6be8c23aa5091109ab18552794a7bb3c3d9f606911be2d1cfe545adcd91ad5f423e1cc195283f6c618b28f4d8bc7469a3083275164f044e1ceb911f267bb5fd47b1bec5e44a19570688cc2fca16137c19f0283860b5c0ba399559ee87d375bcba0a490f583d42e74100f12c66323551f09a2de2519abded5a15105564df47567e90d532c2abc1cbf9fa2148450b9d4c3e316d0e9cf2a498488c1023effb3f09ab5510b40170fcdd2f27cf1faf83ae2e19846284e2659eddd417b23c234073556b306dec48899d1ffadd157aed5c5ceab3b2e9daf3efd55e7a2384554bec4806a8fac61d7cbc1a7cb102499149effb26bc50bb3004aad1e9374b64f03431e7617b8674d83ed65e07a1adc9df1adfdc5569b8abb127284b117eccea8d407b899f787951ad0abf76d2a7eafd8f742df1a925bf1ff953aa284ed541117b935c432e0f06864684a0ca554d3bf165473e34d59381e11b702fba358afd0ab30cb1ed17ce083c6d9ac92d7b2f58e9ec9dc67efed76bed681ffae5099803388479e31acfdba60e67408feb0b7a71a2345ce57d6d5f7110fe8590a2c91d3c0fc4125fc4a0735b98878380dbdb7fb288d32b1bc12e76a703b64b8fd01a78d66674e31513d419a632d94a97f31b9302d100f49ceba459ea03a41c381b2d5226aaea043cd7383c3af30c01d939b5ddc3bd6e2235fe9a0c7ea9e98a4898715b1dd13a43b01b169aade3af6532a3ebb0d797b795487c96bb", 0x1000}], 0x3, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000740)={'#! ', '', [{}, {0x20, '#'}, {0x20, '/dev/nullb0\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '/d\x00v/dri/card#\x00\xf0\xd0e\x92\x16in\x8ck\x02@U\xe7\x10Peat\x06\xb6}J&\x90\xc9\xaf\x12\xe3\xc5\x1f\xc0<\xf4-\xb1\xf1\xc4\x0f\xcd\x00\x00\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '\xc0('}]}, 0x6e) 9m56.729972707s ago: executing program 3 (id=4382): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="000089"], 0xb2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 9m56.334010519s ago: executing program 32 (id=4382): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="000089"], 0xb2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 4m59.389970502s ago: executing program 4 (id=6266): syz_open_dev$vim2m(&(0x7f0000000000), 0x10, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4020, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x0, 0x7, 0x2f, {0x2f, 0x30, "e12fc671338290806a09f6fdb351a62ea2509da52ca14021090bbd8f90a6a67d6a84b70c0cd516c45a801f0ea8"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="3db2dc85a52b0916990e00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r3 = syz_usb_connect(0x4, 0x2d, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@volatile}]}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000300)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=0x0], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x1d, {0x1d, 0x21, "ab5a9f97186a81e942d744cd5e418ee37562cc46bcdd04467bf0d3"}}, &(0x7f0000000080)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "d994fa025ccd3b4ef458275d0361e0d5ed196180709c007df325c5e7a47b214638975575ec1cf03f5ec292f48e4a0ec4f2708af40ae9b7a7336dcf5c40eca3c4b89550bcb6529790206c1d3dc37cb97c3a8a8198414c794da3ba43e33d70fbfbc4c5d9b46c3a3150ec0041d2342b0546b4731d0de25a4ccf439e1d26f7f934ae7ee2a587a216ff3c81fafd11cd164e707161a39203f4a998ee75568f94df5972cd3bc5f84c3f124b843969629510faa562e67aaf06d638af7ff6a66ff7d142b4f9124f071ce66f35917530971fc4ee21ec94d7476c02bd8e4471033367a987bafa5a713f3665a3337f07f33f3ea8"}}}, &(0x7f00000006c0)={0x44, &(0x7f00000002c0)={0x40, 0x1, 0xb, "e7e23a6f50d9418dcee6a1"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "b3"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "ee2c23"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "a031c4"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "c4bf777f"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "81ffc3"}}) r5 = syz_usb_connect$cdc_ecm(0x5, 0x62, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x6, 0x6e}, [@obex={0x5, 0x24, 0x15, 0x7f}, @dmm={0x7, 0x24, 0x14, 0x5, 0xd27}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0xdb, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x72, 0x5}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x9, 0x3, 0x5, 0x0, 0x3}, 0xe0, &(0x7f0000000980)={0x5, 0xf, 0xe0, 0x1, [@generic={0xdb, 0x10, 0x4, "0be8b9dc5b897146fd24a0628fa3f4c91e8ef2db9f5a2a90069f1eef645058d33b20b215a9cc62f30e5d15fe3bd86a3622af1fabe5de6f97d5f3b1abfbdab4b14b77bfdc33ca6dd84554d0b0e8ca2f1cc8b354efb95e9bea0a81e288571281cb69a754c33343a185093b3399809e27153f128a36fc3e0657f2e7b8aaf531b0061115e90742bd152845e59b45cad580cfc7becef60625636bf3b8a0facf537896da5bec88e1249268ab154ba1a8f566b791e761c9485fb2022774c7d47449f8047e89481d7f63bdb3987357949260a9dcdaa72270dc3890e9"}]}, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000c00)={0x14, &(0x7f0000000b80)={0x40, 0x2, 0x2d, {0x2d, 0x1e, "2ec5e3134e9bbfd6ea30a4a755cee29c40ede4906fab9b5a06e67851db4c3393428cfaf4a278b304590fe2"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e40)={0x1c, &(0x7f0000000d00)={0x0, 0x17, 0xb4, "e9d19fd81f368668e618f0a0153ef998636db8d55f5a2f6349b31701dfe451c622a26583e8bfbe081c84d969484cb71f17a26f3c6243e05b56fd6748c6d8ab1346bb355a469c52d8d4e832047f02eb05d0087ed06b7cedeb1f22b7a5d33fa5efb97dbeec51ae5bf72d043b1f7d772569d7c78d88d191b48a3292e4194dba099b654cbcc1fea192b3fb4a6cf05a2f55ab23f949d7f12b6ce60bd494660dfbf89d431a9541d6f9cfbe3ee3e78fa97a2aec3304fbe9"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 4m56.1803273s ago: executing program 4 (id=6288): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x30, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xa) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_POISON(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) landlock_restrict_self(r6, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) syz_usb_control_io$uac2(r0, 0x0, 0x0) 4m53.079193872s ago: executing program 4 (id=6323): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x8000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000240)={0x60, 0xc, 0xc, 0x8, 0x5}) syz_open_dev$media(&(0x7f00000000c0), 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r2, 0xf6690000) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80004, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x200008, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfdffffff, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x6, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0xfffffffa, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x14, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x4, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x41000006, 0x100, 0x10b9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x4, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x400060a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0xa, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x4, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r4, &(0x7f00000003c0)="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", 0x1001, 0x48899, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/159, 0xfffffffffffffcd6, 0x0, 0x0, 0xfffffda8}, &(0x7f0000000380)=0x40) sendmsg$inet6(r4, 0x0, 0x20004011) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r5, 0x0, 0x0}) r7 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x1) fgetxattr(r7, &(0x7f0000000380)=@known='system.posix_acl_default\x00', 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4m52.978707798s ago: executing program 4 (id=6324): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff03, 0x0) 4m52.966229992s ago: executing program 4 (id=6325): setresuid(0xee00, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x3, 0x0, 0x2a0ffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000103000000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0xc040) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="050025bd7000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="2c00238006000d"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000002400)=0x100, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d"], 0xd4}}, 0x0) 4m52.903034838s ago: executing program 4 (id=6326): write(0xffffffffffffffff, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) r0 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340)={0x80, 0x6, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x0, r1, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) 4m44.055246674s ago: executing program 1 (id=6402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c0002800800024000000015050003000000000008000140000c000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 4m43.849028314s ago: executing program 1 (id=6404): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000280)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000010000080c0007800500030003000000050001000600000005000500c4e78d4905000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000000000)='R\x10rust\xe3\x9f*sgrVen:De', 0x0) 4m43.38605451s ago: executing program 1 (id=6406): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa109fe00", 0x38}], 0x1}, 0x0) 4m43.354019084s ago: executing program 1 (id=6408): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(0x0, 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001e00010a00000000000000002d"], 0x20}}, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 4m42.705681825s ago: executing program 1 (id=6411): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000026000701fcfffffffbdbdf25127c00000a004e00272f7d5e5d000000ae35ae616c172f2136f52ba3a4170d43c2a1fc83471f7c74bb924be25d0485fb5014c25a8a2957c1060561b668da1f955e5a20496260"], 0x20}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 4m41.806820272s ago: executing program 1 (id=6412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c000280080002400000001505000300000000000800014000000c0d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 4m37.842547936s ago: executing program 33 (id=6326): write(0xffffffffffffffff, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) r0 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340)={0x80, 0x6, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x0, r1, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) 4m26.732529126s ago: executing program 34 (id=6412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c000280080002400000001505000300000000000800014000000c0d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 3m11.028402345s ago: executing program 5 (id=6863): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f00000000c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x3d, 0xff, 0x7fffffffffffffff, 0x9}}, @nested_amd_vmsave={0x183, 0x18}, @nested_load_syzos={0x136, 0x88, {0x2, 0x9, [@nested_amd_vmload={0x182, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x7ff, 0xb4}}, @rdmsr={0x66, 0x18, {0xb42}}, @set_irq_handler={0xc8, 0x20, {0x97, 0x2}}]}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xfbcf, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x81, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x4, 0x80000001}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x101, 0xef, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x58c, 0x9e3f, 0x3ff80000000000, 0x200}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x449, 0xf, 0x0, 0x5}}, @in_dx={0x69, 0x20, {0xe77b}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xee, 0x0, 0x10000}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @code={0xa, 0x6f, {"c4c2c9a73f8fc970992ff3420f09c461615d2500200000b9c3090000b809000000ba000000000f3066ba2100ed66baf80cb82290bf80ef66bafc0c66b8000066ef0fc7b3b26dbe0db92d020000b800100000ba000000000f30c4017c5110"}}, @set_irq_handler={0xc8, 0x20, {0x84, 0x2}}, @cpuid={0x64, 0x18, {0x80000000, 0x3}}, @cpuid={0x64, 0x18, {0x7, 0x80}}, @wr_crn={0x67, 0x20, {0x4, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c03, 0x6000000000000000, 0x37d, 0x4}}], 0x3bf}) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000540)={0x2, 0x16, 0x8, 0x9, 0x2}) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f00000004c0)={0x7, [0x1000, 0x7, 0x1, 0x7, 0x19a, 0x7b7d, 0x80000000]}) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x8e, 0x42, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x0, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020045}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) dup2(0xffffffffffffffff, r5) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x3) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000580)={0x7fff, 0x6, 0x3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}], 0x1c) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)) 3m9.654009018s ago: executing program 5 (id=6869): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0xe, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7ffc, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x7, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r5}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f00000002c0)=0x3) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x300}], 0x1, 0x0, 0x0, 0x0) close(r0) 3m9.182905104s ago: executing program 5 (id=6872): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000dc0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x1c, r1, 0x501, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x3e}, 0x1, 0x0, 0x0, 0x860}, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x4000)=nil) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80383, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000040)=0xcc7) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0xa2, @SEQ_CONTROLLER=0xff, 0x7f, 0x7, 0x8}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3m8.924456775s ago: executing program 5 (id=6873): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xfffffee2) (async) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r6) (async) io_pgetevents(r5, 0x6, 0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) 3m8.231565489s ago: executing program 5 (id=6876): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000008008700fe88a43de1a400000000000000007d01ff020007000000000000000000000001"], 0xfdef) 3m6.939877422s ago: executing program 5 (id=6886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040)=0xfffffffffffffffc, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143042, 0xd0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0x8800000, 0x863, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000) connect$inet6(r4, 0xffffffffffffffff, 0x0) 2m51.42541721s ago: executing program 35 (id=6886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040)=0xfffffffffffffffc, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143042, 0xd0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0x8800000, 0x863, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000) connect$inet6(r4, 0xffffffffffffffff, 0x0) 2m36.124913549s ago: executing program 6 (id=6943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x7, 0x200009) capset(&(0x7f0000000080)={0x20080522, r2}, &(0x7f00000000c0)={0x400, 0x80000000, 0x8, 0x1, 0x1}) ptrace(0x4206, r1) tkill(r1, 0x12) ptrace(0x4208, r1) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003380)={0x2020}, 0x2020) ptrace$getregs(0xe, r1, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 2m35.489540431s ago: executing program 6 (id=6946): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x1, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x82001) write$sndseq(r4, &(0x7f00000002c0)=[{0x3, 0xb1, 0x5, 0x0, @tick=0x3, {0x6, 0x7}, {0x9}, @time=@time={0x1, 0x5}}, {0xe7, 0x6, 0x1, 0x4, @time={0x1, 0x5}, {0x9, 0x2}, {0xc, 0xdb}, @addr={0x0, 0xa}}], 0x38) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c00", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) read$FUSE(r1, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001d0083a600000000ffde00000700000008000000", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) unshare(0x22020600) socket$xdp(0x2c, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x17}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) 2m34.910477633s ago: executing program 6 (id=6955): socket$nl_netfilter(0x10, 0x3, 0xc) 2m34.723340316s ago: executing program 6 (id=6950): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/oss_mixer\x00', 0x600, 0x0) read(r0, &(0x7f0000000000)=""/221, 0xdd) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x20, r4, 0x536b76802b417313, 0x70bd25, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x14008080) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x1}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r6 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008005090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x5bc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x25d4, @private2, 0x81}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}, 0x5b5e}]}, &(0x7f0000000200)=0x10) 2m34.396380551s ago: executing program 6 (id=6954): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1, 0x0, 0x0, 0xfffe}, 0x0) 2m34.272375622s ago: executing program 6 (id=6957): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x4000, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000003c0)={[{}]}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m32.755187541s ago: executing program 2 (id=6963): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) userfaultfd(0x80001) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0x3, &(0x7f0000001080)="7c30d4", 0x5}) bind$xdp(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000440)={0x0, 0x100000, 0x800, 0x3b8}, 0x20) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) fcntl$addseals(r6, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r6, 0x0) 2m32.60680984s ago: executing program 2 (id=6964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000080500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 2m32.443321356s ago: executing program 2 (id=6965): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 2m32.33440157s ago: executing program 2 (id=6966): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000001000200861fa72e5b0150", 0x22, 0xffffffffffffffff) getsockopt$inet_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f00000002c0)) 2m32.312378364s ago: executing program 2 (id=6967): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000300000000000000000001"], 0xfdef) 2m31.643715096s ago: executing program 2 (id=6968): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x1c}}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2m31.08355662s ago: executing program 36 (id=6968): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x1c}}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2m19.14719891s ago: executing program 37 (id=6957): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x4000, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000003c0)={[{}]}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 6.521828611s ago: executing program 9 (id=7795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) listen(0xffffffffffffffff, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 5.597541969s ago: executing program 0 (id=7796): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_on}]}) 5.544880862s ago: executing program 9 (id=7797): syz_open_dev$swradio(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') r3 = landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x95) landlock_restrict_self(r3, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000d40), 0x0, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000d80)={0x1, 0x2, 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) tgkill(r0, r0, 0xd) 5.390030891s ago: executing program 0 (id=7798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000080)="7f4acf467f81c1") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d000100000000"], 0x1c}}, 0x40894) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fd9000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(r6, 0xfffffc01) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5.229815322s ago: executing program 7 (id=7799): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "ca384a10fc3661f2"}, 0x10}, 0x2, 0x0, 0x0, 0x200008d5}, 0x10044009) 5.157031811s ago: executing program 7 (id=7800): socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x3, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2.923457825s ago: executing program 8 (id=7802): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x4, 0x12) 2.910083875s ago: executing program 9 (id=7810): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@host}) 2.786171161s ago: executing program 0 (id=7803): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x10, 0x803, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 2.603534804s ago: executing program 8 (id=7804): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r7, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r0, r8, 0x0) 2.418423257s ago: executing program 9 (id=7805): prlimit64(0x0, 0xd, &(0x7f0000000480)={0x8, 0x8d}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x1000000000000, &(0x7f0000000340)="cb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)='m?'}) 1.35076655s ago: executing program 9 (id=7806): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x0, 0x590, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xfe, 0x400, 0x5, 0x722, 0xe72, 0x7, 0x7f, 0x3d, 0x14, {0xffff945a, 0x1}, 0x3, 0xed}}) 1.18833998s ago: executing program 8 (id=7807): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_on}]}) 1.086003818s ago: executing program 0 (id=7808): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0x8, 0x2}) 1.084666877s ago: executing program 9 (id=7809): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b67, 0x0, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x400, 0x0) syz_usbip_server_init(0x5) r0 = socket(0x8000000010, 0x2, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0xbb) close(r1) 1.027629974s ago: executing program 0 (id=7811): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0xffe, 0x0, &(0x7f0000000480)}) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 961.810419ms ago: executing program 8 (id=7812): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000002600)=0x4) 433.98967ms ago: executing program 7 (id=7813): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x4, 0x12) 259.524562ms ago: executing program 7 (id=7814): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001114010029bd70000300020208004a0000000000080001000000000008004b00130000000800030001000000"], 0x30}}, 0x0) 259.308109ms ago: executing program 8 (id=7815): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) 187.633949ms ago: executing program 0 (id=7816): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000100)={0x20, 0x1, &(0x7f0000000080), 0x1, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x200004) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r5 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', 0x0, 0x0) 139.484014ms ago: executing program 7 (id=7817): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0xd4}}, 0x0) 129.13679ms ago: executing program 8 (id=7818): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x2, 0xa1469d7b2581c3e8, 0x40, 0x2, 0x9, 0x1, 0x454}, &(0x7f00000001c0)=0x20) 0s ago: executing program 7 (id=7819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r1, 0xff, 0x40}, 0x8) kernel console output (not intermixed with test programs): lave_1 [ 1509.817708][T26310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.874095][T26310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.877034][T26310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.905405][T26310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.402910][T13604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.859586][T26310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.859616][T26310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.611477][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.611498][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.875348][T14051] comedi comedi1: 8255: I/O port conflict (0x1ffc0,4) [ 1511.942092][T13604] veth0_vlan: entered promiscuous mode [ 1511.996853][T13604] veth1_vlan: entered promiscuous mode [ 1512.130571][ T5326] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1512.133908][T13604] veth0_macvtap: entered promiscuous mode [ 1512.153477][T13604] veth1_macvtap: entered promiscuous mode [ 1512.217415][T13604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.253806][T13604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.277622][ T4763] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.277674][ T4763] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.277715][ T4763] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.277756][ T4763] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.287689][ T5326] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1512.287783][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1512.287860][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1512.287919][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1512.287990][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1512.377691][ T5326] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1512.377724][ T5326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.377746][ T5326] usb 1-1: Product: syz [ 1512.377761][ T5326] usb 1-1: Manufacturer: syz [ 1512.377777][ T5326] usb 1-1: SerialNumber: syz [ 1512.432757][ T5326] usb 1-1: config 0 descriptor?? [ 1512.865396][ T5326] input input50: Device does not respond to id packet M [ 1513.112903][ T5326] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1513.113035][ T5326] input input50: Device does not respond to id packet P [ 1513.116414][ T5326] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1513.116464][ T5326] input input50: Device does not respond to id packet B [ 1513.117043][ T5326] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1513.117092][ T5326] input input50: Device does not respond to id packet N [ 1513.117617][ T5326] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1513.118149][ T5326] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1513.118593][ T5326] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1513.119038][ T5326] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1513.235221][ T5326] iforce 1-1:0.0: usb_submit_urb failed -90 [ 1513.366810][ T5326] iforce 1-1:0.0: usb_submit_urb failed -90 [ 1513.563217][ T5326] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50 [ 1513.661707][ T5326] usb 1-1: USB disconnect, device number 8 [ 1513.952261][T14082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1514.157709][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.157732][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.542127][T26310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.542150][T26310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.572818][ T5326] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1514.730616][ T5326] usb 1-1: Using ep0 maxpacket: 16 [ 1514.733025][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.733060][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.733085][ T5326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1514.733131][ T5326] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1514.733157][ T5326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.812833][ T5326] usb 1-1: config 0 descriptor?? [ 1515.131215][T13604] Flush: task=syz-executor[13604] dev=loop7 state=2 [ 1515.207208][T13604] Teardown: task=syz-executor[13604] dev=loop7 state=2 [ 1515.267117][ T5326] hid_parser_main: 30 callbacks suppressed [ 1515.267143][ T5326] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1515.267174][ T5326] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1515.267204][ T5326] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1515.267232][ T5326] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1515.308065][ T5326] microsoft 0003:045E:07DA.0063: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1515.308098][ T5326] microsoft 0003:045E:07DA.0063: no inputs found [ 1515.308111][ T5326] microsoft 0003:045E:07DA.0063: could not initialize ff, continuing anyway [ 1515.644186][T14119] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6943'. [ 1515.644355][T14119] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6943'. [ 1515.722531][ T9897] usb 1-1: USB disconnect, device number 9 [ 1516.429819][T14164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1516.883296][ T5697] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1517.044243][ T5697] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1517.044277][ T5697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.044300][ T5697] usb 8-1: Product: syz [ 1517.044316][ T5697] usb 8-1: Manufacturer: syz [ 1517.044332][ T5697] usb 8-1: SerialNumber: syz [ 1517.371158][ T5326] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1517.520793][ T5326] usb 3-1: Using ep0 maxpacket: 32 [ 1517.523860][ T5326] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1517.532495][ T4909] Bluetooth: hci1: command 0x0406 tx timeout [ 1517.556398][ T5326] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1517.556476][ T5326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.556498][ T5326] usb 3-1: Product: syz [ 1517.556514][ T5326] usb 3-1: Manufacturer: syz [ 1517.556530][ T5326] usb 3-1: SerialNumber: syz [ 1517.595735][ T5697] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1517.595889][ T5697] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1517.631989][T14218] netlink: 'syz.0.6959': attribute type 10 has an invalid length. [ 1517.674267][ T5697] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1517.689793][ T5326] usb 3-1: config 0 descriptor?? [ 1517.695842][T14211] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1517.711198][ T5697] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1517.795060][ T5326] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1517.839860][T14218] team0: Device nlmon0 is of different type [ 1518.014792][ T5326] usb 3-1: USB disconnect, device number 53 [ 1518.101368][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1518.582339][ T821] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 1518.740855][ T821] usb 1-1: device descriptor read/64, error -71 [ 1518.930172][ T8237] do_umount: task=syz-executor[8237] propagate_mount_busy()!=0 [ 1518.930370][ T8237] do_umount: task=syz-executor[8237] propagate_mount_busy()!=0 [ 1518.980534][ T821] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 1519.110657][ T821] usb 1-1: device descriptor read/64, error -71 [ 1519.220886][ T821] usb usb1-port1: attempt power cycle [ 1519.578616][ T10] usb 8-1: USB disconnect, device number 2 [ 1519.654454][ T821] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 1519.677410][ T821] usb 1-1: device descriptor read/8, error -71 [ 1519.755603][T14281] netlink: 17 bytes leftover after parsing attributes in process `syz.7.6969'. [ 1519.773000][T14281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1519.984243][ T821] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 1520.003558][ T821] usb 1-1: device descriptor read/8, error -71 [ 1520.120941][ T821] usb usb1-port1: unable to enumerate USB device [ 1520.151783][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1520.370539][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1520.413636][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1520.415210][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.415234][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1520.418592][ T10] usb 8-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1520.418622][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.418640][ T10] usb 8-1: Product: syz [ 1520.418655][ T10] usb 8-1: Manufacturer: syz [ 1520.418670][ T10] usb 8-1: SerialNumber: syz [ 1520.491770][ T4909] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1520.558238][ T4909] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1520.560064][ T4909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1520.561377][ T4909] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1520.599201][ T4909] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1520.832635][ T10] usb 8-1: failed waiting for Axe-Fx III to boot: -71 [ 1520.832681][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1520.982119][ T10] usb 8-1: USB disconnect, device number 3 [ 1521.419130][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.651087][ T5697] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1521.810668][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 1521.812602][ T5697] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1521.812635][ T5697] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.812664][ T5697] usb 1-1: config 0 has no interface number 0 [ 1521.812705][ T5697] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1521.812727][ T5697] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1521.815793][ T5697] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1521.815823][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.815839][ T5697] usb 1-1: Product: syz [ 1521.815850][ T5697] usb 1-1: Manufacturer: syz [ 1521.815861][ T5697] usb 1-1: SerialNumber: syz [ 1521.950924][ T5697] usb 1-1: config 0 descriptor?? [ 1521.965793][ T5697] ipheth 1-1:0.196: Unable to find endpoints [ 1522.204299][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.237815][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.253904][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.264930][ T5697] usb 1-1: USB disconnect, device number 14 [ 1522.687609][T14349] netlink: 'syz.7.6973': attribute type 3 has an invalid length. [ 1522.723446][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.744123][ T5697] IPVS: starting estimator thread 0... [ 1522.832171][T14353] IPVS: using max 10 ests per chain, 24000 per kthread [ 1523.065900][ T4909] Bluetooth: hci3: command tx timeout [ 1523.210297][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.508650][T14375] binder: 14374:14375 ioctl c0306201 200000000080 returned -14 [ 1523.522063][T14375] binder: 14374:14375 ioctl c0306201 2000000003c0 returned -14 [ 1523.523966][T14375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1523.990686][ T9897] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1524.222511][ T9897] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1524.222546][ T9897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.222569][ T9897] usb 8-1: Product: syz [ 1524.222586][ T9897] usb 8-1: Manufacturer: syz [ 1524.222602][ T9897] usb 8-1: SerialNumber: syz [ 1524.285172][ T9897] usb 8-1: config 0 descriptor?? [ 1524.509651][ T9897] usb 8-1: ignoring: probably an ADSL modem [ 1524.524372][ T5779] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1524.678246][ T5779] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1524.678280][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.737640][ T5779] usb 1-1: config 0 descriptor?? [ 1524.914907][ T9897] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1524.952572][T14422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.955861][T14422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.979182][ T9897] usb 8-1: USB disconnect, device number 4 [ 1525.010897][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.045442][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.130850][ T4909] Bluetooth: hci3: command tx timeout [ 1525.212758][ T5779] hackrf 1-1:0.0: Board ID: 0f [ 1525.212784][ T5779] hackrf 1-1:0.0: Firmware version:  tt«Ù!€f«ñ™@õcjå”ù [ 1525.309116][ T5779] hackrf 1-1:0.0: Registered as swradio24 [ 1525.309145][ T5779] videodev: could not get a free minor [ 1525.309158][ T5779] hackrf 1-1:0.0: Failed to register as video device (-23) [ 1525.407729][ T5779] hackrf 1-1:0.0: probe with driver hackrf failed with error -23 [ 1525.446846][ T5779] usb 1-1: USB disconnect, device number 15 [ 1525.676577][T14512] openvswitch: netlink: Flow key attr not present in new flow. [ 1525.871767][ T57] bridge_slave_1: left allmulticast mode [ 1525.871793][ T57] bridge_slave_1: left promiscuous mode [ 1525.872094][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.052443][ T57] bridge_slave_0: left allmulticast mode [ 1526.052473][ T57] bridge_slave_0: left promiscuous mode [ 1526.053246][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.178116][ T57] pim6reg: left allmulticast mode [ 1526.190666][ T9897] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1526.351819][ T9897] usb 8-1: Using ep0 maxpacket: 8 [ 1526.357223][ T9897] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1526.357252][ T9897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1526.357279][ T9897] usb 8-1: Product: syz [ 1526.357291][ T9897] usb 8-1: Manufacturer: syz [ 1526.357302][ T9897] usb 8-1: SerialNumber: syz [ 1526.399971][ T9897] usb 8-1: config 0 descriptor?? [ 1526.417613][T14534] netlink: 4816 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1526.426444][ T9897] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1526.626288][T14528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.658516][T14528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.860161][ T9897] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1526.860294][ T9897] sq905 8-1:0.0: probe with driver sq905 failed with error -71 [ 1526.890126][ T9897] usb 8-1: USB disconnect, device number 5 [ 1527.210582][ T4909] Bluetooth: hci3: command tx timeout [ 1527.227106][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.311340][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.333223][ T57] bond0 (unregistering): Released all slaves [ 1527.386809][ T5255] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1527.609072][T14289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.609342][T14289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.609564][T14289] bridge_slave_0: entered allmulticast mode [ 1527.646961][T14289] bridge_slave_0: entered promiscuous mode [ 1527.667300][T14289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.667623][T14289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.667896][T14289] bridge_slave_1: entered allmulticast mode [ 1527.704096][T14289] bridge_slave_1: entered promiscuous mode [ 1528.004249][T14289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.032999][T14289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.255316][T14289] team0: Port device team_slave_0 added [ 1528.264742][T14289] team0: Port device team_slave_1 added [ 1528.971767][T14289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.971785][T14289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.971816][T14289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.034039][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1529.039078][ T5255] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1529.044022][T14289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.044067][T14289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.044145][T14289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.301326][ T4909] Bluetooth: hci3: command tx timeout [ 1529.630634][ T5779] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1529.783853][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 1529.796861][ T5779] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1529.796882][ T5779] usb 1-1: config 0 has no interface number 0 [ 1529.796916][ T5779] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1529.796946][ T5779] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1529.796964][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.843200][ T5779] usb 1-1: config 0 descriptor?? [ 1529.863579][ T5779] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1530.018028][T14289] hsr_slave_0: entered promiscuous mode [ 1530.022576][T14289] hsr_slave_1: entered promiscuous mode [ 1530.034546][T14289] debugfs: 'hsr0' already exists in 'hsr' [ 1530.034569][T14289] Cannot create hsr debugfs directory [ 1531.400986][ T5779] usb 1-1: USB disconnect, device number 16 [ 1531.425682][ T57] hsr_slave_0: left promiscuous mode [ 1531.460650][ T57] hsr_slave_1: left promiscuous mode [ 1531.461952][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1531.461974][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.503213][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.503235][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.612349][ T57] veth1_macvtap: left promiscuous mode [ 1531.612426][ T57] veth0_macvtap: left promiscuous mode [ 1531.612635][ T57] veth1_vlan: left promiscuous mode [ 1532.252523][T14801] overlayfs: failed to resolve './file0/file0/file0': -2 [ 1532.509371][ T9999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1532.565867][ T9999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1532.585714][ T9999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1532.586913][ T9999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1532.589048][ T9999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1532.890701][ T4909] Bluetooth: hci5: command 0x0406 tx timeout [ 1532.913384][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1532.978332][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1533.327397][ T5255] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1534.553571][T14289] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1534.611590][T14289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1534.641037][T14289] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1534.748244][T14289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1534.823410][ T7484] Bluetooth: hci4: command tx timeout [ 1534.832799][T14289] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1534.950335][T14289] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1534.969241][ T5255] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1534.969694][T14289] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1534.994475][T14289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1535.401101][T14289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.540917][T14289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.659538][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.659737][ T4763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.727498][T14802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.727805][T14802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.727997][T14802] bridge_slave_0: entered allmulticast mode [ 1535.730350][T14802] bridge_slave_0: entered promiscuous mode [ 1535.769111][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.769233][ T4763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.789248][T14802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.789474][T14802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.789662][T14802] bridge_slave_1: entered allmulticast mode [ 1535.799009][T14802] bridge_slave_1: entered promiscuous mode [ 1535.905458][T14802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.927162][T14802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.095589][T14802] team0: Port device team_slave_0 added [ 1536.156236][T14802] team0: Port device team_slave_1 added [ 1536.246658][T14802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.246671][T14802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.246692][T14802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.306981][T14802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.306994][T14802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.307015][T14802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.453909][T14802] hsr_slave_0: entered promiscuous mode [ 1536.455421][T14802] hsr_slave_1: entered promiscuous mode [ 1536.891603][ T7484] Bluetooth: hci4: command tx timeout [ 1537.416902][T14289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1537.492409][T14802] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1537.535558][T14802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1537.545316][T14802] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1537.580146][T14802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1537.598931][T14802] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1537.674790][T14802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1537.680649][T14802] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1537.743933][T14802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1537.999644][T14289] veth0_vlan: entered promiscuous mode [ 1538.069440][T14289] veth1_vlan: entered promiscuous mode [ 1538.088769][T14802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.188678][T14802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.216438][T12212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.216612][T12212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.244032][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.244148][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.245401][T14289] veth0_macvtap: entered promiscuous mode [ 1538.285158][T14289] veth1_macvtap: entered promiscuous mode [ 1538.428975][T14289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.456502][T14289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.517432][T12212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.518800][T12212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.541790][T12212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.544084][T12212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.983875][ T7484] Bluetooth: hci4: command tx timeout [ 1539.465378][ T4763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.465402][ T4763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.056349][T12219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.056369][T12219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.687514][T14802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.099138][ T7484] Bluetooth: hci4: command tx timeout [ 1541.928876][T15207] netlink: 'syz.8.7002': attribute type 10 has an invalid length. [ 1541.995802][T15207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.006890][T15207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.045894][T15207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.079710][T15207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.080145][T15207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.080304][T15207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.115986][T15207] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1542.324543][T14802] veth0_vlan: entered promiscuous mode [ 1542.336513][T15223] netlink: 216 bytes leftover after parsing attributes in process `syz.8.7007'. [ 1542.336530][T15223] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7007'. [ 1542.670583][ T5697] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1542.700733][T14802] veth1_vlan: entered promiscuous mode [ 1542.804340][T14802] veth0_macvtap: entered promiscuous mode [ 1542.819859][T14802] veth1_macvtap: entered promiscuous mode [ 1542.846537][ T5697] usb 9-1: not running at top speed; connect to a high speed hub [ 1542.848495][ T5697] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1542.866163][ T5697] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1542.866185][ T5697] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.866201][ T5697] usb 9-1: Product: syz [ 1542.866213][ T5697] usb 9-1: Manufacturer: syz [ 1542.866224][ T5697] usb 9-1: SerialNumber: syz [ 1542.919473][T14802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1543.254086][T14802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1543.318175][T32445] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.318723][T32445] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.318771][T32445] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.318825][T32445] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.193059][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.301473][ T5697] usb 9-1: USB disconnect, device number 2 [ 1546.465013][T26303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.465036][T26303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.660194][T26310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.660218][T26310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.551958][ T5697] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1547.716398][ T5697] usb 9-1: not running at top speed; connect to a high speed hub [ 1547.718440][ T5697] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1547.749210][ T5697] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1547.749243][ T5697] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.749266][ T5697] usb 9-1: Product: syz [ 1547.749282][ T5697] usb 9-1: Manufacturer: syz [ 1547.749299][ T5697] usb 9-1: SerialNumber: syz [ 1547.819690][T15317] netlink: 216 bytes leftover after parsing attributes in process `syz.9.7023'. [ 1547.819716][T15317] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7023'. [ 1548.810869][ T5698] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1549.400718][T15243] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1549.554940][T15243] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 1549.554972][T15243] usb 10-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.554995][T15243] usb 10-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1549.555021][T15243] usb 10-1: config 150 has no interface number 0 [ 1549.555162][T15243] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1549.625152][T15243] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1549.625238][T15243] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.625260][T15243] usb 10-1: Product: syz [ 1549.625276][T15243] usb 10-1: Manufacturer: syz [ 1549.625292][T15243] usb 10-1: SerialNumber: syz [ 1549.983636][T15243] usb 10-1: USB disconnect, device number 2 [ 1550.001640][ T5698] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1550.194748][ T5698] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1550.194810][ T5698] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.197659][ T5698] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1550.197710][ T5698] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1550.197735][ T5698] usb 8-1: Manufacturer: syz [ 1550.249031][ T5698] usb 8-1: config 0 descriptor?? [ 1550.439481][ T5697] usb 9-1: USB disconnect, device number 3 [ 1550.499997][T15375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.523886][T15375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.610603][ T5698] rc_core: IR keymap rc-hauppauge not found [ 1550.610625][ T5698] Registered IR keymap rc-empty [ 1550.637969][ T5698] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1550.689221][T15410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.706318][T15410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.742347][ T5698] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input52 [ 1551.043211][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 1551.050580][ T821] usb 8-1: USB disconnect, device number 7 [ 1551.157317][T15432] sg_write: data in/out 414172/80 bytes for SCSI command 0x0-- guessing data in; [ 1551.157317][T15432] program syz.9.7037 not setting count and/or reply_len properly [ 1551.189206][T15432] netlink: 'syz.9.7037': attribute type 10 has an invalid length. [ 1551.225036][T15432] sg_write: data in/out 414172/80 bytes for SCSI command 0x0-- guessing data in; [ 1551.225036][T15432] program syz.9.7037 not setting count and/or reply_len properly [ 1551.228589][T15434] i2c i2c-0: dtv_property_process_set: SET cmd 0x005750c0 undefined [ 1552.155578][T15472] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7045'. [ 1552.155606][T15472] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7045'. [ 1552.183039][ T5326] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1552.337279][ T5326] usb 10-1: not running at top speed; connect to a high speed hub [ 1552.339155][ T5326] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1552.364892][ T5326] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1552.364921][ T5326] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.364944][ T5326] usb 10-1: Product: syz [ 1552.364961][ T5326] usb 10-1: Manufacturer: syz [ 1552.364977][ T5326] usb 10-1: SerialNumber: syz [ 1552.990653][ T5697] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1553.140909][ T5697] usb 9-1: Using ep0 maxpacket: 8 [ 1553.145267][ T5697] usb 9-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1553.145875][ T5697] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1553.145916][ T5697] usb 9-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1553.145943][ T5697] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.205263][ T5697] usb 9-1: config 0 descriptor?? [ 1553.659213][ T5697] logitech-djreceiver 0003:046D:C52B.0064: ignoring exceeding usage max [ 1553.821966][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.839907][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.844808][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.866422][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.913350][ T821] usb 9-1: USB disconnect, device number 4 [ 1555.184371][ T5697] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1555.357456][ T5697] usb 8-1: Using ep0 maxpacket: 32 [ 1555.376905][ T5697] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.388447][ T5697] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1555.388479][ T5697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.388512][ T5697] usb 8-1: Product: syz [ 1555.388529][ T5697] usb 8-1: Manufacturer: syz [ 1555.388546][ T5697] usb 8-1: SerialNumber: syz [ 1555.497233][ T5697] usb 8-1: config 0 descriptor?? [ 1555.538935][ T5326] usb 10-1: USB disconnect, device number 3 [ 1555.605494][ T5697] cdc_ether 8-1:0.0: missing cdc header descriptor [ 1555.618704][ T5697] usb 8-1: unsupported MDLM descriptors [ 1555.724341][ T5697] usb 8-1: USB disconnect, device number 8 [ 1556.009239][T15607] netlink: 216 bytes leftover after parsing attributes in process `syz.9.7066'. [ 1556.009264][T15607] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7066'. [ 1557.070990][ T821] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1557.234652][ T821] usb 10-1: not running at top speed; connect to a high speed hub [ 1557.236178][ T821] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1557.238963][ T821] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1557.239004][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.239028][ T821] usb 10-1: Product: syz [ 1557.239048][ T821] usb 10-1: Manufacturer: syz [ 1557.239061][ T821] usb 10-1: SerialNumber: syz [ 1558.290747][ T5697] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1558.443131][ T5697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.443190][ T5697] usb 1-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1558.443222][ T5697] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1558.445052][ T5697] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1558.445083][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1558.445107][ T5697] usb 1-1: SerialNumber: syz [ 1558.522360][ T5697] cdc_ether 1-1:1.0: GUID doesn't match [ 1559.010229][ T5697] usb 1-1: USB disconnect, device number 17 [ 1559.908013][T15727] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7096'. [ 1559.908042][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7096'. [ 1559.934286][ T822] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1560.103929][ T822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.104887][ T822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.104915][ T822] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1560.104963][ T822] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1560.105005][ T822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.142585][ T821] usb 10-1: USB disconnect, device number 4 [ 1560.240609][ T822] usb 9-1: config 0 descriptor?? [ 1560.714526][ T822] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1560.949950][T15719] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7094'. [ 1561.511110][ T5690] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1561.601978][ T821] usb 9-1: USB disconnect, device number 5 [ 1561.680790][ T5690] usb 10-1: not running at top speed; connect to a high speed hub [ 1561.684459][ T5690] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1561.723577][ T5690] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1561.723614][ T5690] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.723638][ T5690] usb 10-1: Product: syz [ 1561.723654][ T5690] usb 10-1: Manufacturer: syz [ 1561.723670][ T5690] usb 10-1: SerialNumber: syz [ 1563.177174][T15834] netlink: 'syz.7.7119': attribute type 4 has an invalid length. [ 1563.177196][T15834] netlink: 17 bytes leftover after parsing attributes in process `syz.7.7119'. [ 1563.587299][T15843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1563.587595][T15843] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1563.833007][T15843] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1563.833150][T15843] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1563.899212][T15843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1563.899345][T15843] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1564.010075][T15843] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1564.718485][T15843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1564.718619][T15843] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1565.206816][T15843] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1565.424450][T15871] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7130'. [ 1565.424480][T15871] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7130'. [ 1565.528060][T15843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1565.528422][T15843] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1565.610685][ T7484] Bluetooth: hci1: command 0x0406 tx timeout [ 1565.614381][T15843] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1565.753585][T15843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1565.753724][T15843] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1565.855587][ T7484] Bluetooth: hci5: command 0x0406 tx timeout [ 1565.930600][ T7484] Bluetooth: hci0: command 0x0c1a tx timeout [ 1566.369814][T15843] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1566.730653][ T4909] Bluetooth: hci2: command 0x0c1a tx timeout [ 1566.867854][ T5690] usb 10-1: USB disconnect, device number 5 [ 1567.071138][ T822] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1567.220831][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 1567.223680][ T822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.227885][ T822] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1567.227916][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.227940][ T822] usb 1-1: Product: syz [ 1567.227956][ T822] usb 1-1: Manufacturer: syz [ 1567.227973][ T822] usb 1-1: SerialNumber: syz [ 1567.296556][ T822] usb 1-1: config 0 descriptor?? [ 1567.320592][ T822] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1567.452297][ T4909] Bluetooth: hci3: command 0x0c1a tx timeout [ 1567.502689][ T822] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1567.502814][ T822] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1567.532429][ T822] usb 1-1: USB disconnect, device number 18 [ 1567.691729][ T4909] Bluetooth: hci1: command 0x0406 tx timeout [ 1567.770632][ T4909] Bluetooth: hci4: command 0x0c1a tx timeout [ 1567.933937][ T4909] Bluetooth: hci5: command 0x0406 tx timeout [ 1567.980562][ T822] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1568.010718][ T4909] Bluetooth: hci0: command 0x0c1a tx timeout [ 1568.137386][ T822] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1568.137422][ T822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.137448][ T822] usb 10-1: Product: syz [ 1568.137467][ T822] usb 10-1: Manufacturer: syz [ 1568.137485][ T822] usb 10-1: SerialNumber: syz [ 1568.235397][T15243] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1568.748627][T15674] usb 10-1: USB disconnect, device number 6 [ 1568.810536][ T4909] Bluetooth: hci2: command 0x0c1a tx timeout [ 1568.913254][T17880] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1569.071193][T17880] usb 1-1: not running at top speed; connect to a high speed hub [ 1569.072746][T17880] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1569.090889][T17880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1569.090921][T17880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.090944][T17880] usb 1-1: Product: syz [ 1569.090959][T17880] usb 1-1: Manufacturer: syz [ 1569.090977][T17880] usb 1-1: SerialNumber: syz [ 1569.374162][T15243] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1569.515524][T15243] ath9k_htc: Failed to initialize the device [ 1569.539535][T15674] usb 10-1: ath9k_htc: USB layer deinitialized [ 1569.545237][ T4909] Bluetooth: hci3: command 0x0c1a tx timeout [ 1569.791878][T16006] netlink: 216 bytes leftover after parsing attributes in process `syz.8.7160'. [ 1569.791927][T16006] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7160'. [ 1569.864026][ T4909] Bluetooth: hci4: command 0x0c1a tx timeout [ 1570.892432][ T4909] Bluetooth: hci2: command 0x0c1a tx timeout [ 1571.140577][T15674] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1571.280596][T15674] usb 10-1: device descriptor read/64, error -71 [ 1571.525271][T15674] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1571.620859][ T4909] Bluetooth: hci3: command 0x0c1a tx timeout [ 1571.652895][T15674] usb 10-1: device descriptor read/64, error -71 [ 1571.763803][T15674] usb usb10-port1: attempt power cycle [ 1571.931120][ T4909] Bluetooth: hci4: command 0x0c1a tx timeout [ 1572.017807][T17880] usb 1-1: USB disconnect, device number 19 [ 1572.091013][ T821] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1572.112115][T15674] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1572.142883][T15674] usb 10-1: device descriptor read/8, error -71 [ 1572.260671][ T821] usb 8-1: Using ep0 maxpacket: 16 [ 1572.268220][ T821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.268257][ T821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.271398][ T821] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1572.271481][ T821] usb 8-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1572.271546][ T821] usb 8-1: Manufacturer: syz [ 1572.328473][ T821] usb 8-1: config 0 descriptor?? [ 1572.391343][T15674] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1572.417994][T15674] usb 10-1: device descriptor read/8, error -71 [ 1572.523704][T15674] usb usb10-port1: unable to enumerate USB device [ 1572.698079][ T821] creative-sb0540 0003:041E:3100.0066: unknown main item tag 0x2 [ 1572.698106][ T821] creative-sb0540 0003:041E:3100.0066: item fetching failed at offset 3/5 [ 1572.698639][ T821] creative-sb0540 0003:041E:3100.0066: parse failed [ 1572.698714][ T821] creative-sb0540 0003:041E:3100.0066: probe with driver creative-sb0540 failed with error -22 [ 1572.904808][T15674] usb 8-1: USB disconnect, device number 9 [ 1573.420636][T17880] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1573.579552][T17880] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1573.579587][T17880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.579611][T17880] usb 1-1: Product: syz [ 1573.579627][T17880] usb 1-1: Manufacturer: syz [ 1573.579644][T17880] usb 1-1: SerialNumber: syz [ 1573.622991][T17880] usb 1-1: config 0 descriptor?? [ 1573.643087][T17880] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1574.035598][T16143] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7191'. [ 1574.035617][T16143] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7191'. [ 1574.220570][ T822] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1574.227574][T17880] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1574.227763][T17880] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 1574.306945][T17880] usb 1-1: USB disconnect, device number 20 [ 1574.377443][ T822] usb 9-1: not running at top speed; connect to a high speed hub [ 1574.380289][ T822] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1574.403038][ T822] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1574.403071][ T822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.403093][ T822] usb 9-1: Product: syz [ 1574.403108][ T822] usb 9-1: Manufacturer: syz [ 1574.403124][ T822] usb 9-1: SerialNumber: syz [ 1575.257971][T16183] sg_write: data in/out 504197/136 bytes for SCSI command 0x0-- guessing data in; [ 1575.257971][T16183] program syz.0.7201 not setting count and/or reply_len properly [ 1576.458845][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7213'. [ 1577.124204][T16234] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7218'. [ 1577.124231][T16234] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7218'. [ 1577.294866][ T822] usb 9-1: USB disconnect, device number 6 [ 1577.466449][ T5690] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1577.683236][ T5690] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1577.683270][ T5690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.683293][ T5690] usb 8-1: Product: syz [ 1577.683309][ T5690] usb 8-1: Manufacturer: syz [ 1577.683326][ T5690] usb 8-1: SerialNumber: syz [ 1577.777722][ T5690] usb 8-1: config 0 descriptor?? [ 1578.032785][ T5690] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1578.126650][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7223'. [ 1578.566209][T16272] tipc: Started in network mode [ 1578.566243][T16272] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1578.566668][T16272] tipc: Enabled bearer , priority 10 [ 1579.110839][ T9894] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1579.286927][ T9894] usb 1-1: not running at top speed; connect to a high speed hub [ 1579.289380][ T9894] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1579.312192][ T9894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1579.312224][ T9894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.312808][ T9894] usb 1-1: Product: syz [ 1579.312826][ T9894] usb 1-1: Manufacturer: syz [ 1579.313132][ T9894] usb 1-1: SerialNumber: syz [ 1579.545649][ T5690] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1579.706452][T15243] tipc: Node number set to 8432298 [ 1579.760572][ T5326] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1579.866937][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7233'. [ 1579.910694][ T5326] usb 9-1: Using ep0 maxpacket: 32 [ 1579.914636][ T5326] usb 9-1: config 2 has an invalid interface number: 194 but max is 0 [ 1579.914667][ T5326] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.914690][ T5326] usb 9-1: config 2 has no interface number 0 [ 1579.914741][ T5326] usb 9-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1579.914769][ T5326] usb 9-1: config 2 interface 194 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1579.914819][ T5326] usb 9-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1579.914839][ T5326] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.015100][T16291] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1580.366976][ T5690] usb 8-1: USB disconnect, device number 10 [ 1580.385353][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.407239][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.212210][ T5326] usb 9-1: string descriptor 0 read error: -71 [ 1581.246013][ T5326] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1581.554187][T16355] bpf: Bad value for 'uid' [ 1581.616162][ T5326] usb 9-1: USB disconnect, device number 7 [ 1582.304391][ T9894] usb 1-1: USB disconnect, device number 21 [ 1582.360548][ T5326] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1582.513096][ T5326] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1582.513153][ T5326] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1582.513181][ T5326] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.551459][ T5326] usb 9-1: config 0 descriptor?? [ 1582.557629][T16359] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1582.816314][T16414] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7248'. [ 1582.816429][T16414] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7248'. [ 1582.964863][ T5326] hid (null): unknown global tag 0xd [ 1582.983014][ T5326] kye 0003:0458:5016.0067: control desc unexpectedly large [ 1583.006565][ T5326] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0067/input/input53 [ 1583.116495][ T5326] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0067/input/input54 [ 1583.349560][ T5326] kye 0003:0458:5016.0067: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 1583.409274][ T5326] usb 9-1: USB disconnect, device number 8 [ 1583.579631][T16444] fido_id[16444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1583.947163][T16470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.962166][T16470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.004480][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7257'. [ 1584.187732][ T9894] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1584.331225][ T9894] usb 8-1: device descriptor read/64, error -71 [ 1584.584101][ T9894] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1584.720711][ T9894] usb 8-1: device descriptor read/64, error -71 [ 1584.780962][ T5326] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1584.831164][ T9894] usb usb8-port1: attempt power cycle [ 1584.930587][ T5326] usb 9-1: Using ep0 maxpacket: 32 [ 1584.938357][ T5326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1584.938389][ T5326] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1584.938416][ T5326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1584.972266][ T5326] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1584.972298][ T5326] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.972322][ T5326] usb 9-1: Product: syz [ 1584.972338][ T5326] usb 9-1: Manufacturer: syz [ 1584.972355][ T5326] usb 9-1: SerialNumber: syz [ 1585.017758][ T5326] usb 9-1: config 0 descriptor?? [ 1585.190809][ T9894] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1585.191166][T17880] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1585.225935][ T9894] usb 8-1: device descriptor read/8, error -71 [ 1585.422164][T17880] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1585.425481][T17880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1585.425538][T17880] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1585.425570][T17880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1585.476392][T17880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1585.476456][T17880] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1585.476489][T17880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1585.512385][ T9894] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1585.533696][ T9894] usb 8-1: device descriptor read/8, error -71 [ 1585.535055][T17880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1585.535113][T17880] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1585.535146][T17880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1585.540039][T17880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1585.540096][T17880] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1585.540128][T17880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1585.609823][T17880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1585.609887][T17880] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1585.609919][T17880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1585.641132][ T9894] usb usb8-port1: unable to enumerate USB device [ 1585.641818][T17880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1585.641876][T17880] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1585.641907][T17880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1585.645482][T17880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1585.645539][T17880] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1585.645570][T17880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1585.648673][T17880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1585.648731][T17880] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1585.648762][T17880] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1585.750200][T17880] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1585.750232][T17880] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1585.750254][T17880] usb 1-1: Product: syz [ 1585.750276][T17880] usb 1-1: Manufacturer: syz [ 1585.750308][T17880] usb 1-1: SerialNumber: syz [ 1585.808320][T17880] usb 1-1: config 0 descriptor?? [ 1585.892442][T17880] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1585.971986][ T5326] gs_usb 9-1:0.0: Couldn't get device config: (err=-71) [ 1585.972035][ T5326] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -71 [ 1586.013330][ T5326] usb 9-1: USB disconnect, device number 9 [ 1586.069796][T17880] usb 1-1: USB disconnect, device number 22 [ 1586.142804][T17880] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1586.269826][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7268'. [ 1587.167812][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7277'. [ 1587.277163][T16577] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7278'. [ 1587.277198][T16577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7278'. [ 1587.427499][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7279'. [ 1588.193385][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7290'. [ 1588.600683][T17880] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1588.772205][T17880] usb 8-1: Using ep0 maxpacket: 8 [ 1588.774952][T17880] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 1588.774981][T17880] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 1588.775005][T17880] usb 8-1: config 0 has no interface number 0 [ 1588.775055][T17880] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1588.775085][T17880] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1588.775116][T17880] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1588.830584][T17880] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1588.830694][T17880] usb 8-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1588.830766][T17880] usb 8-1: Product: syz [ 1588.830784][T17880] usb 8-1: Manufacturer: syz [ 1588.882537][T17880] usb 8-1: config 0 descriptor?? [ 1588.888597][T16626] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1589.185969][T16651] netlink: 'syz.0.7299': attribute type 21 has an invalid length. [ 1589.186170][T16651] netlink: 13 bytes leftover after parsing attributes in process `syz.0.7299'. [ 1589.340254][T17880] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.21/input/input55 [ 1589.389582][T16649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1589.687434][ T5326] usb 8-1: USB disconnect, device number 15 [ 1589.687466][ C0] keyspan_remote 8-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1589.779488][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1590.265254][T16696] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7306'. [ 1590.265282][T16696] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7306'. [ 1590.721890][T17880] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 1590.905435][T17880] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 1590.905468][T17880] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 1590.905490][T17880] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1590.905528][T17880] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1590.905570][T17880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 65535, setting to 8 [ 1590.905600][T17880] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1590.994896][T17880] usb 8-1: string descriptor 0 read error: -22 [ 1590.995066][T17880] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1590.995094][T17880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.031670][T17880] usb 8-1: config 0 descriptor?? [ 1591.033524][T16702] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1591.061634][T17880] hub 8-1:0.0: bad descriptor, ignoring hub [ 1591.061676][T17880] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1591.158538][T17880] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input56 [ 1591.398916][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7314'. [ 1591.708778][T17880] usb 8-1: USB disconnect, device number 16 [ 1591.708866][ C0] usb_acecad 8-1:0.0: can't resubmit intr, dummy_hcd.7-1/input0, status -19 [ 1592.034046][ T5326] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1592.202654][ T5326] usb 1-1: Using ep0 maxpacket: 16 [ 1592.204967][ T5326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1592.209260][ T5326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.209281][ T5326] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1592.209321][ T5326] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 1592.209343][ T5326] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1592.287461][ T5326] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1592.287495][ T5326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.287518][ T5326] usb 1-1: Product: syz [ 1592.287534][ T5326] usb 1-1: Manufacturer: syz [ 1592.287550][ T5326] usb 1-1: SerialNumber: syz [ 1592.677042][ T5326] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1592.677092][ T5326] cdc_ncm 1-1:1.0: bind() failure [ 1592.707383][ T5326] usb 1-1: USB disconnect, device number 23 [ 1592.792236][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7326'. [ 1593.107430][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7330'. [ 1593.453856][T16840] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7335'. [ 1593.453881][T16840] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7335'. [ 1593.598744][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7337'. [ 1593.680565][ T5697] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1593.831347][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 1593.836158][ T5697] usb 1-1: config 0 has an invalid interface number: 118 but max is 0 [ 1593.836190][ T5697] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.836215][ T5697] usb 1-1: config 0 has no interface number 0 [ 1593.872980][ T5697] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1593.873015][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.873042][ T5697] usb 1-1: Product: syz [ 1593.873060][ T5697] usb 1-1: Manufacturer: syz [ 1593.873078][ T5697] usb 1-1: SerialNumber: syz [ 1593.929931][ T5697] usb 1-1: config 0 descriptor?? [ 1593.943854][ T5697] smsc75xx 1-1:0.118 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1593.944183][ T5697] smsc75xx 1-1:0.118: probe with driver smsc75xx failed with error -22 [ 1594.145703][T17880] usb 1-1: USB disconnect, device number 24 [ 1595.254293][T16910] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1595.909148][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7358'. [ 1595.940586][ T5697] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1596.070621][ T5697] usb 10-1: device descriptor read/64, error -71 [ 1596.196621][T16956] tipc: Enabling of bearer rejected, failed to enable media [ 1596.310592][ T5697] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1596.440510][ T5697] usb 10-1: device descriptor read/64, error -71 [ 1596.474662][T16968] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7366'. [ 1596.474679][T16968] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7366'. [ 1596.552883][ T5697] usb usb10-port1: attempt power cycle [ 1596.910801][ T5697] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1596.932059][ T5697] usb 10-1: device descriptor read/8, error -71 [ 1597.044150][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7372'. [ 1597.173269][ T5697] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1597.191780][ T5697] usb 10-1: device descriptor read/8, error -71 [ 1597.307553][ T5697] usb usb10-port1: unable to enumerate USB device [ 1598.809134][T17036] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7383'. [ 1599.491452][T17064] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7390'. [ 1599.491476][T17064] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7390'. [ 1600.731353][T17111] netlink: 'syz.9.7405': attribute type 10 has an invalid length. [ 1600.731761][T17111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.742774][T17111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.824142][T17111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.824355][T17111] bridge0: port 2(bridge_slave_1) entered listening state [ 1600.824604][T17111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.824736][T17111] bridge0: port 1(bridge_slave_0) entered listening state [ 1600.860204][T17111] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1601.410691][T17127] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7410'. [ 1601.410715][T17127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7410'. [ 1601.760769][ T821] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1601.890794][ T821] usb 1-1: device descriptor read/64, error -71 [ 1602.130619][ T821] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 1602.260524][ T821] usb 1-1: device descriptor read/64, error -71 [ 1602.371140][ T821] usb usb1-port1: attempt power cycle [ 1602.710595][ T821] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 1602.745565][ T821] usb 1-1: device descriptor read/8, error -71 [ 1602.991047][ T821] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 1603.085415][ T821] usb 1-1: device descriptor read/8, error -71 [ 1603.110605][ T5326] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1603.192708][ T821] usb usb1-port1: unable to enumerate USB device [ 1603.261421][ T5326] usb 9-1: Using ep0 maxpacket: 16 [ 1603.274514][ T5326] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1603.274544][ T5326] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1603.278075][ T5326] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1603.278106][ T5326] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1603.278130][ T5326] usb 9-1: SerialNumber: syz [ 1603.368830][ T5326] usb 9-1: 0:2 : does not exist [ 1603.507847][T17211] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7433'. [ 1603.507873][T17211] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7433'. [ 1604.080614][ T5326] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 1604.105510][ T5326] usb 9-1: 5:0: failed to get current value for ch 2 (-22) [ 1604.144537][ T5326] usb 9-1: 5:0: failed to get current value for ch 3 (-22) [ 1604.188899][ T5326] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1604.220937][ T5326] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1604.220969][ T5326] usb 9-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1604.220990][ T5326] usb 9-1: [5] FU [Feature 5 Playback Volume] ch = 3, val = 0/1/1 [ 1604.302046][ T5326] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1604.302084][ T5326] usb 9-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1604.302108][ T5326] usb 9-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 1604.332818][ T5326] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1604.348510][ T5326] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1604.369216][ T5326] usb 9-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1604.386998][ T5326] usb 9-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1604.397952][ T5326] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1604.414499][ T5326] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1604.429558][ T5326] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 1604.453803][ T5326] usb 9-1: 5:0: failed to get current value for ch 2 (-22) [ 1604.479504][ T5326] usb 9-1: 5:0: failed to get current value for ch 3 (-22) [ 1604.525120][ T5326] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1604.571234][ T5326] usb 9-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1604.643484][ T5326] usb 9-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1604.752109][ T5326] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1604.770830][ T5326] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1604.900005][ T5326] usb 9-1: USB disconnect, device number 10 [ 1605.006429][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.483058][T17280] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1605.790515][ T821] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1605.920916][ T821] usb 8-1: device descriptor read/64, error -71 [ 1606.200991][ T821] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1606.249268][T17318] FAULT_INJECTION: forcing a failure. [ 1606.249268][T17318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.249300][T17318] CPU: 0 UID: 0 PID: 17318 Comm: syz.0.7458 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.249322][T17318] Tainted: [L]=SOFTLOCKUP [ 1606.249349][T17318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1606.249364][T17318] Call Trace: [ 1606.249374][T17318] [ 1606.249384][T17318] dump_stack_lvl+0xe8/0x150 [ 1606.249418][T17318] should_fail_ex+0x467/0x600 [ 1606.249447][T17318] _copy_from_user+0x2d/0xb0 [ 1606.249478][T17318] ___sys_sendmsg+0x1c6/0x360 [ 1606.249505][T17318] ? __lock_acquire+0x6df/0x2e40 [ 1606.249533][T17318] ? __pfx____sys_sendmsg+0x10/0x10 [ 1606.249588][T17318] ? __fget_files+0x2a/0x420 [ 1606.249605][T17318] ? __fget_files+0x3a8/0x420 [ 1606.249629][T17318] __x64_sys_sendmsg+0x1b7/0x290 [ 1606.249651][T17318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1606.249686][T17318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.249704][T17318] do_syscall_64+0x174/0x580 [ 1606.249724][T17318] ? trace_irq_disable+0x3b/0x140 [ 1606.249741][T17318] ? clear_bhb_loop+0x40/0x90 [ 1606.249761][T17318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.249777][T17318] RIP: 0033:0x7f4c146cde59 [ 1606.249792][T17318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.249807][T17318] RSP: 002b:00007f4c12926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1606.249825][T17318] RAX: ffffffffffffffda RBX: 00007f4c14955fa0 RCX: 00007f4c146cde59 [ 1606.249838][T17318] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 1606.249848][T17318] RBP: 00007f4c12926090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.249859][T17318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.249868][T17318] R13: 00007f4c14956038 R14: 00007f4c14955fa0 R15: 00007fff335435d8 [ 1606.249892][T17318] [ 1606.347501][ T821] usb 8-1: device descriptor read/64, error -71 [ 1606.463274][ T821] usb usb8-port1: attempt power cycle [ 1606.520628][T17880] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1606.689632][T17880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.689671][T17880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.689713][T17880] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1606.689740][T17880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.741259][T17880] usb 10-1: config 0 descriptor?? [ 1606.811705][ T821] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1606.849270][ T821] usb 8-1: device descriptor read/8, error -71 [ 1607.090436][ T821] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1607.129579][ T821] usb 8-1: device descriptor read/8, error -71 [ 1607.165301][T17880] usb 10-1: language id specifier not provided by device, defaulting to English [ 1607.241280][ T821] usb usb8-port1: unable to enumerate USB device [ 1607.456884][T17880] uclogic 0003:256C:006D.0068: failed retrieving Huion firmware version: -71 [ 1607.456954][T17880] uclogic 0003:256C:006D.0068: failed probing parameters: -71 [ 1607.457118][T17880] uclogic 0003:256C:006D.0068: probe with driver uclogic failed with error -71 [ 1607.498427][T17880] usb 10-1: USB disconnect, device number 15 [ 1607.617346][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.081305][T17363] netlink: 216 bytes leftover after parsing attributes in process `syz.9.7467'. [ 1608.081331][T17363] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7467'. [ 1608.585567][T17390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.586269][T17390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.616867][T17396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.617569][T17396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.820790][ T821] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1609.013175][ T821] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1609.013207][ T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.013263][ T821] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1609.013294][ T821] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1609.013312][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.017819][ T821] usb 1-1: config 0 descriptor?? [ 1609.086364][ T821] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1609.103661][ T821] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1609.274978][T31420] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1609.367638][ T821] usb 1-1: USB disconnect, device number 29 [ 1609.453411][T31420] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1609.453463][T31420] usb 8-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1609.453498][T31420] usb 8-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1609.454697][T31420] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1609.454729][T31420] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1609.454745][T31420] usb 8-1: SerialNumber: syz [ 1609.804360][T31420] rndis_host 8-1:253.0: RNDIS init failed, -71 [ 1609.804714][T31420] rndis_host 8-1:253.0: probe with driver rndis_host failed with error -71 [ 1609.872712][T31420] usb 8-1: USB disconnect, device number 21 [ 1610.381896][T17452] do_umount: task=syz.7.7480[17452] propagate_mount_busy()!=0 [ 1610.890792][T31420] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1610.943823][T17485] FAULT_INJECTION: forcing a failure. [ 1610.943823][T17485] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.943858][T17485] CPU: 0 UID: 0 PID: 17485 Comm: syz.0.7490 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1610.943886][T17485] Tainted: [L]=SOFTLOCKUP [ 1610.943892][T17485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1610.943903][T17485] Call Trace: [ 1610.943910][T17485] [ 1610.943918][T17485] dump_stack_lvl+0xe8/0x150 [ 1610.943951][T17485] should_fail_ex+0x467/0x600 [ 1610.943981][T17485] should_failslab+0xa8/0x100 [ 1610.944005][T17485] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1610.944037][T17485] ? __alloc_skb+0x1d7/0x7a0 [ 1610.944059][T17485] ? __alloc_skb+0x1d7/0x7a0 [ 1610.944087][T17485] __alloc_skb+0x1d7/0x7a0 [ 1610.944111][T17485] netlink_sendmsg+0x5d4/0xb40 [ 1610.944142][T17485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1610.944166][T17485] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1610.944194][T17485] ? __kernel_text_address+0xd/0x30 [ 1610.944223][T17485] ? unwind_get_return_address+0x4d/0x90 [ 1610.944244][T17485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1610.944265][T17485] sock_sendmsg_nosec+0x13a/0x180 [ 1610.944302][T17485] ____sys_sendmsg+0x565/0x870 [ 1610.944330][T17485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1610.944358][T17485] ? import_iovec+0x73/0xa0 [ 1610.944384][T17485] ___sys_sendmsg+0x2a5/0x360 [ 1610.944404][T17485] ? __lock_acquire+0x6df/0x2e40 [ 1610.944426][T17485] ? __pfx____sys_sendmsg+0x10/0x10 [ 1610.944473][T17485] ? __fget_files+0x2a/0x420 [ 1610.944491][T17485] ? __fget_files+0x3a8/0x420 [ 1610.944517][T17485] __x64_sys_sendmsg+0x1b7/0x290 [ 1610.944541][T17485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1610.944582][T17485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.944601][T17485] do_syscall_64+0x174/0x580 [ 1610.944625][T17485] ? trace_irq_disable+0x3b/0x140 [ 1610.944642][T17485] ? clear_bhb_loop+0x40/0x90 [ 1610.944665][T17485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.944683][T17485] RIP: 0033:0x7f4c146cde59 [ 1610.944699][T17485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.944715][T17485] RSP: 002b:00007f4c12926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1610.944734][T17485] RAX: ffffffffffffffda RBX: 00007f4c14955fa0 RCX: 00007f4c146cde59 [ 1610.944748][T17485] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 1610.944765][T17485] RBP: 00007f4c12926090 R08: 0000000000000000 R09: 0000000000000000 [ 1610.944777][T17485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1610.944788][T17485] R13: 00007f4c14956038 R14: 00007f4c14955fa0 R15: 00007fff335435d8 [ 1610.944815][T17485] [ 1611.085846][T31420] usb 8-1: device descriptor read/64, error -71 [ 1611.210745][T17880] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1611.367270][T31420] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1611.382980][T17880] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1611.383010][T17880] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1611.383032][T17880] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.383053][T17880] usb 9-1: config 220 has no interface number 2 [ 1611.383127][T17880] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1611.383159][T17880] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1611.383185][T17880] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1611.383207][T17880] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1611.389875][T17880] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1611.389906][T17880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.389928][T17880] usb 9-1: Product: syz [ 1611.389945][T17880] usb 9-1: Manufacturer: syz [ 1611.389962][T17880] usb 9-1: SerialNumber: syz [ 1611.490695][T31420] usb 8-1: device descriptor read/64, error -71 [ 1611.601242][T31420] usb usb8-port1: attempt power cycle [ 1611.754093][T17880] usb 9-1: selecting invalid altsetting 0 [ 1611.787794][T17880] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1611.787830][T17880] uvcvideo 9-1:220.0: No valid video chain found. [ 1611.924034][T17880] usb 9-1: selecting invalid altsetting 0 [ 1611.924074][T17880] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1611.961984][T17880] usb 9-1: USB disconnect, device number 11 [ 1611.962977][T31420] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1612.138525][T31420] usb 8-1: device descriptor read/8, error -71 [ 1612.612831][T17532] netlink: 216 bytes leftover after parsing attributes in process `syz.9.7500'. [ 1612.612857][T17532] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7500'. [ 1612.763302][T17538] binder: 17536:17538 ioctl 8028640c 200000007280 returned -22 [ 1612.765864][T17538] binder_alloc: 17536: binder_alloc_buf size 1024 failed, no address space [ 1612.765885][T17538] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 1612.766232][T17538] binder: 17536:17538 ioctl c00c620f 2000000026c0 returned -22 [ 1613.440563][T17880] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1613.590690][T17880] usb 10-1: Using ep0 maxpacket: 8 [ 1613.592640][T17880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1613.592661][T17880] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1613.595731][T17880] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1613.595752][T17880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.595767][T17880] usb 10-1: Product: syz [ 1613.595779][T17880] usb 10-1: Manufacturer: syz [ 1613.595790][T17880] usb 10-1: SerialNumber: syz [ 1613.659061][T17880] usb 10-1: config 0 descriptor?? [ 1613.919073][T17880] usb 10-1: USB disconnect, device number 16 [ 1615.066055][T17638] netlink: 216 bytes leftover after parsing attributes in process `syz.8.7527'. [ 1615.066080][T17638] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7527'. [ 1615.255449][T17646] »»»»»»: renamed from bond0 (while UP) [ 1615.303101][T17649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7531'. [ 1615.610842][T17880] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1615.780781][T17880] usb 9-1: Using ep0 maxpacket: 8 [ 1615.819062][T17880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.819089][T17880] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1615.819121][T17880] usb 9-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1615.819139][T17880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.873616][T17880] usb 9-1: config 0 descriptor?? [ 1615.932036][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1615.936831][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1616.098198][T17880] usbhid 9-1:0.0: can't add hid device: -71 [ 1616.098337][T17880] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1616.136106][T17880] usb 9-1: USB disconnect, device number 12 [ 1616.272281][ T5326] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1616.422663][ T5326] usb 10-1: Using ep0 maxpacket: 32 [ 1616.424750][ T5326] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1616.424772][ T5326] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.450576][ T5326] usb 10-1: config 0 descriptor?? [ 1616.683119][ T5326] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1616.724303][ T5326] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1616.725749][ T5326] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1616.725807][ T5326] usb 10-1: media controller created [ 1616.747200][T17694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7541'. [ 1616.812604][ T5326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1617.333225][ T5326] az6027: usb out operation failed. (-71) [ 1617.333246][ T5326] stb0899_attach: Driver disabled by Kconfig [ 1617.333258][ T5326] az6027: no front-end attached [ 1617.333258][ T5326] [ 1617.405386][ T5326] az6027: usb out operation failed. (-71) [ 1617.405409][ T5326] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1617.426134][ T5326] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input57 [ 1617.478669][T17728] FAULT_INJECTION: forcing a failure. [ 1617.478669][T17728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.478711][T17728] CPU: 0 UID: 0 PID: 17728 Comm: syz.8.7549 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1617.478743][T17728] Tainted: [L]=SOFTLOCKUP [ 1617.478751][T17728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.478765][T17728] Call Trace: [ 1617.478774][T17728] [ 1617.478784][T17728] dump_stack_lvl+0xe8/0x150 [ 1617.478819][T17728] should_fail_ex+0x467/0x600 [ 1617.478849][T17728] _copy_from_iter+0x1d3/0x1660 [ 1617.478883][T17728] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1617.478918][T17728] ? __pfx__copy_from_iter+0x10/0x10 [ 1617.478943][T17728] ? __alloc_skb+0x276/0x7a0 [ 1617.478965][T17728] ? __alloc_skb+0x276/0x7a0 [ 1617.478993][T17728] ? netlink_sendmsg+0x650/0xb40 [ 1617.479020][T17728] ? skb_put+0x112/0x210 [ 1617.479047][T17728] netlink_sendmsg+0x6c0/0xb40 [ 1617.479085][T17728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.479116][T17728] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1617.479150][T17728] ? __kernel_text_address+0xd/0x30 [ 1617.479184][T17728] ? unwind_get_return_address+0x4d/0x90 [ 1617.479210][T17728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.479237][T17728] sock_sendmsg_nosec+0x13a/0x180 [ 1617.479277][T17728] ____sys_sendmsg+0x565/0x870 [ 1617.479312][T17728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1617.479355][T17728] ? import_iovec+0x73/0xa0 [ 1617.479389][T17728] ___sys_sendmsg+0x2a5/0x360 [ 1617.479415][T17728] ? __lock_acquire+0x6df/0x2e40 [ 1617.479442][T17728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.479504][T17728] ? __fget_files+0x2a/0x420 [ 1617.479526][T17728] ? __fget_files+0x3a8/0x420 [ 1617.479559][T17728] __x64_sys_sendmsg+0x1b7/0x290 [ 1617.479591][T17728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1617.479637][T17728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.479662][T17728] do_syscall_64+0x174/0x580 [ 1617.479691][T17728] ? trace_irq_disable+0x3b/0x140 [ 1617.479713][T17728] ? clear_bhb_loop+0x40/0x90 [ 1617.479742][T17728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.479766][T17728] RIP: 0033:0x7ff7d54bde59 [ 1617.479787][T17728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.479809][T17728] RSP: 002b:00007ff7d3716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1617.479832][T17728] RAX: ffffffffffffffda RBX: 00007ff7d5745fa0 RCX: 00007ff7d54bde59 [ 1617.479849][T17728] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 1617.479864][T17728] RBP: 00007ff7d3716090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.479878][T17728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.479892][T17728] R13: 00007ff7d5746038 R14: 00007ff7d5745fa0 R15: 00007fff69129168 [ 1617.479927][T17728] [ 1617.734183][ T5326] dvb-usb: schedule remote query interval to 400 msecs. [ 1617.734248][ T5326] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1617.826782][ T5326] usb 10-1: USB disconnect, device number 17 [ 1617.946341][T17738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7551'. [ 1618.040212][T12223] bridge_slave_1: left allmulticast mode [ 1618.040253][T12223] bridge_slave_1: left promiscuous mode [ 1618.056863][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.113920][ T5326] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1618.223724][T12223] bridge_slave_0: left allmulticast mode [ 1618.223761][T12223] bridge_slave_0: left promiscuous mode [ 1618.224203][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.639600][T17769] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7558'. [ 1618.639626][T17769] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7558'. [ 1619.421478][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7563'. [ 1619.601404][T12223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1619.681840][T12223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1619.728886][T12223] bond0 (unregistering): Released all slaves [ 1619.833214][T17742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1620.465981][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7572'. [ 1620.890142][ T5326] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1621.040499][ T5326] usb 9-1: Using ep0 maxpacket: 32 [ 1621.046426][ T5326] usb 9-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 16 [ 1621.046462][ T5326] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1621.101718][ T5326] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1621.101752][ T5326] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.101774][ T5326] usb 9-1: Product: syz [ 1621.101788][ T5326] usb 9-1: Manufacturer: syz [ 1621.101805][ T5326] usb 9-1: SerialNumber: syz [ 1621.144927][T17818] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1621.269321][T17831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7574'. [ 1621.438447][ T5326] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 1621.466428][ T5326] usb 9-1: USB disconnect, device number 13 [ 1622.261183][T17865] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7581'. [ 1622.389393][T17873] FAULT_INJECTION: forcing a failure. [ 1622.389393][T17873] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.389438][T17873] CPU: 1 UID: 0 PID: 17873 Comm: syz.9.7583 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1622.389473][T17873] Tainted: [L]=SOFTLOCKUP [ 1622.389484][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1622.389500][T17873] Call Trace: [ 1622.389536][T17873] [ 1622.389548][T17873] dump_stack_lvl+0xe8/0x150 [ 1622.389589][T17873] should_fail_ex+0x467/0x600 [ 1622.389623][T17873] should_failslab+0xa8/0x100 [ 1622.389649][T17873] ? skb_clone+0x212/0x3a0 [ 1622.389681][T17873] kmem_cache_alloc_noprof+0x9e/0x680 [ 1622.389720][T17873] ? skb_clone+0x212/0x3a0 [ 1622.389759][T17873] skb_clone+0x212/0x3a0 [ 1622.389794][T17873] __netlink_deliver_tap+0x410/0x880 [ 1622.389840][T17873] ? netlink_deliver_tap+0x2e/0x1b0 [ 1622.389875][T17873] netlink_deliver_tap+0x19c/0x1b0 [ 1622.389908][T17873] netlink_unicast+0x7b8/0x990 [ 1622.389951][T17873] netlink_sendmsg+0x813/0xb40 [ 1622.389995][T17873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.390030][T17873] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1622.390069][T17873] ? __kernel_text_address+0xd/0x30 [ 1622.390107][T17873] ? unwind_get_return_address+0x4d/0x90 [ 1622.390135][T17873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.390167][T17873] sock_sendmsg_nosec+0x13a/0x180 [ 1622.390209][T17873] ____sys_sendmsg+0x565/0x870 [ 1622.390251][T17873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1622.390294][T17873] ? import_iovec+0x73/0xa0 [ 1622.390332][T17873] ___sys_sendmsg+0x2a5/0x360 [ 1622.390361][T17873] ? __lock_acquire+0x6df/0x2e40 [ 1622.390390][T17873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1622.390461][T17873] ? __fget_files+0x2a/0x420 [ 1622.390488][T17873] ? __fget_files+0x3a8/0x420 [ 1622.390536][T17873] __x64_sys_sendmsg+0x1b7/0x290 [ 1622.390571][T17873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1622.390624][T17873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.390651][T17873] do_syscall_64+0x174/0x580 [ 1622.390684][T17873] ? trace_irq_disable+0x3b/0x140 [ 1622.390711][T17873] ? clear_bhb_loop+0x40/0x90 [ 1622.390743][T17873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.390770][T17873] RIP: 0033:0x7f209ac0de59 [ 1622.390795][T17873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.390817][T17873] RSP: 002b:00007f2098e66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.390844][T17873] RAX: ffffffffffffffda RBX: 00007f209ae95fa0 RCX: 00007f209ac0de59 [ 1622.390864][T17873] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 1622.390881][T17873] RBP: 00007f2098e66090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.390897][T17873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.390913][T17873] R13: 00007f209ae96038 R14: 00007f209ae95fa0 R15: 00007ffd96a59568 [ 1622.390950][T17873] [ 1622.392242][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7582'. [ 1622.812050][T17875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7584'. [ 1623.082420][T17888] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7587'. [ 1623.082441][T17888] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7587'. [ 1623.170530][ T5326] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1623.330233][ T5326] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 1623.330264][ T5326] usb 10-1: config 0 has no interface number 0 [ 1623.330298][ T5326] usb 10-1: too many endpoints for config 0 interface 214 altsetting 25: 245, using maximum allowed: 30 [ 1623.361240][ T5326] usb 10-1: config 0 interface 214 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 245 [ 1623.361280][ T5326] usb 10-1: config 0 interface 214 has no altsetting 0 [ 1623.429594][ T5326] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1623.429626][ T5326] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.429648][ T5326] usb 10-1: Product: syz [ 1623.429663][ T5326] usb 10-1: Manufacturer: syz [ 1623.429679][ T5326] usb 10-1: SerialNumber: syz [ 1623.482066][ T5326] usb 10-1: config 0 descriptor?? [ 1623.729398][ T5326] cx82310_eth 10-1:0.214: probe with driver cx82310_eth failed with error -22 [ 1623.758441][ T5326] cxacru 10-1:0.214: usbatm_usb_probe: bind failed: -19! [ 1623.775745][ T5326] usb 10-1: USB disconnect, device number 18 [ 1624.518253][T17938] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7598'. [ 1624.894964][T17947] tmpfs: Bad value for 'mpol' [ 1625.479270][T12223] hsr_slave_0: left promiscuous mode [ 1625.536358][T12223] hsr_slave_1: left promiscuous mode [ 1625.537492][T12223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1625.537521][T12223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1625.594451][T17968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7605'. [ 1625.689843][T12223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1625.689873][T12223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.837172][T12223] veth1_vlan: left promiscuous mode [ 1625.837423][T12223] veth0_vlan: left promiscuous mode [ 1625.940947][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7609'. [ 1626.520610][ T5326] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1626.673642][ T5326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1626.687482][ T5326] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1626.687509][ T5326] usb 1-1: config 4 has an invalid descriptor of length 34, skipping remainder of the config [ 1626.687531][ T5326] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1626.728584][ T5326] usb 1-1: string descriptor 0 read error: -22 [ 1626.728727][ T5326] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.40 [ 1626.728754][ T5326] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1626.911297][T12223] team0 (unregistering): Port device team_slave_1 removed [ 1626.956929][T12223] team0 (unregistering): Port device team_slave_0 removed [ 1627.099811][T18006] tmpfs: Bad value for 'mpol' [ 1627.315439][T17985] FAULT_INJECTION: forcing a failure. [ 1627.315439][T17985] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.315479][T17985] CPU: 1 UID: 0 PID: 17985 Comm: syz.8.7611 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1627.315511][T17985] Tainted: [L]=SOFTLOCKUP [ 1627.315519][T17985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1627.315533][T17985] Call Trace: [ 1627.315543][T17985] [ 1627.315553][T17985] dump_stack_lvl+0xe8/0x150 [ 1627.315591][T17985] should_fail_ex+0x467/0x600 [ 1627.315613][T17985] should_failslab+0xa8/0x100 [ 1627.315630][T17985] __kmalloc_noprof+0xfb/0x790 [ 1627.315657][T17985] ? fib_create_info+0x16fe/0x3170 [ 1627.315675][T17985] ? fib_create_info+0x16fe/0x3170 [ 1627.315698][T17985] fib_create_info+0x16fe/0x3170 [ 1627.315720][T17985] ? rt_mutex_slowlock+0x422/0x780 [ 1627.315738][T17985] ? rt_mutex_slowlock+0x1f2/0x780 [ 1627.315763][T17985] fib_table_insert+0xcb/0x1b10 [ 1627.315795][T17985] ? fib_new_table+0x14b/0x3f0 [ 1627.315824][T17985] inet_rtm_newroute+0x14f/0x250 [ 1627.315843][T17985] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1627.315875][T17985] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1627.315891][T17985] rtnetlink_rcv_msg+0x802/0xc00 [ 1627.315911][T17985] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1627.315927][T17985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1627.315943][T17985] ? ref_tracker_free+0x668/0x820 [ 1627.315960][T17985] ? __netlink_deliver_tap+0x600/0x880 [ 1627.315979][T17985] ? netlink_deliver_tap+0x19c/0x1b0 [ 1627.315998][T17985] ? netlink_unicast+0x7b8/0x990 [ 1627.316014][T17985] ? netlink_sendmsg+0x813/0xb40 [ 1627.316033][T17985] ? sock_sendmsg_nosec+0x13a/0x180 [ 1627.316055][T17985] ? ____sys_sendmsg+0x565/0x870 [ 1627.316072][T17985] ? ___sys_sendmsg+0x2a5/0x360 [ 1627.316090][T17985] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1627.316108][T17985] ? do_syscall_64+0x174/0x580 [ 1627.316128][T17985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.316157][T17985] netlink_rcv_skb+0x226/0x4a0 [ 1627.316178][T17985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1627.316196][T17985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1627.316224][T17985] ? netlink_deliver_tap+0x2e/0x1b0 [ 1627.316243][T17985] ? netlink_deliver_tap+0x2e/0x1b0 [ 1627.316267][T17985] netlink_unicast+0x7f5/0x990 [ 1627.316292][T17985] netlink_sendmsg+0x813/0xb40 [ 1627.316319][T17985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1627.316341][T17985] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1627.316373][T17985] ? __kernel_text_address+0xd/0x30 [ 1627.316396][T17985] ? unwind_get_return_address+0x4d/0x90 [ 1627.316414][T17985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1627.316433][T17985] sock_sendmsg_nosec+0x13a/0x180 [ 1627.316459][T17985] ____sys_sendmsg+0x565/0x870 [ 1627.316484][T17985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1627.316510][T17985] ? import_iovec+0x73/0xa0 [ 1627.316534][T17985] ___sys_sendmsg+0x2a5/0x360 [ 1627.316552][T17985] ? __lock_acquire+0x6df/0x2e40 [ 1627.316571][T17985] ? __pfx____sys_sendmsg+0x10/0x10 [ 1627.316615][T17985] ? __fget_files+0x2a/0x420 [ 1627.316631][T17985] ? __fget_files+0x3a8/0x420 [ 1627.316657][T17985] __x64_sys_sendmsg+0x1b7/0x290 [ 1627.316678][T17985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1627.316710][T17985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.316728][T17985] do_syscall_64+0x174/0x580 [ 1627.316748][T17985] ? trace_irq_disable+0x3b/0x140 [ 1627.316764][T17985] ? clear_bhb_loop+0x40/0x90 [ 1627.316784][T17985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.316800][T17985] RIP: 0033:0x7ff7d54bde59 [ 1627.316816][T17985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.316831][T17985] RSP: 002b:00007ff7d3716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1627.316849][T17985] RAX: ffffffffffffffda RBX: 00007ff7d5745fa0 RCX: 00007ff7d54bde59 [ 1627.316862][T17985] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 1627.316872][T17985] RBP: 00007ff7d3716090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.316883][T17985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.316892][T17985] R13: 00007ff7d5746038 R14: 00007ff7d5745fa0 R15: 00007fff69129168 [ 1627.316917][T17985] [ 1627.944641][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7617'. [ 1627.976268][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7618'. [ 1628.194039][T18026] netlink: 216 bytes leftover after parsing attributes in process `syz.8.7619'. [ 1628.194065][T18026] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7619'. [ 1628.985230][T18053] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7627'. [ 1629.532493][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7629'. [ 1629.958620][T12223] IPVS: stop unused estimator thread 0... [ 1630.281887][T15243] usb 1-1: USB disconnect, device number 30 [ 1630.745038][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7637'. [ 1631.299647][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.299675][ C1] bridge0: topology change detected, propagating [ 1631.302003][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.302025][ C1] bridge0: topology change detected, propagating [ 1631.725095][T18127] netlink: 216 bytes leftover after parsing attributes in process `syz.8.7645'. [ 1631.725120][T18127] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7645'. [ 1631.978732][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7648'. [ 1632.457744][T18146] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7651'. [ 1632.970534][ T4909] Bluetooth: hci1: command 0x0406 tx timeout [ 1632.970709][T18102] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1633.748214][T18102] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1633.763902][T18102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1633.764115][T18102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1634.070069][T18101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1634.085132][T18101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1634.248732][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7657'. [ 1634.380280][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7660'. [ 1634.559270][T18191] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1634.559300][T18191] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1634.625491][T18191] vhci_hcd vhci_hcd.0: Device attached [ 1634.685236][T18193] vhci_hcd: connection closed [ 1634.755724][T26296] vhci_hcd vhci_hcd.7: stop threads [ 1634.755752][T26296] vhci_hcd vhci_hcd.7: release socket [ 1634.803962][ T5326] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1634.844275][T26296] vhci_hcd vhci_hcd.7: disconnect device [ 1634.858043][T18200] netlink: 216 bytes leftover after parsing attributes in process `syz.8.7665'. [ 1634.858067][T18200] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7665'. [ 1635.050603][ T4909] Bluetooth: hci5: command 0x0406 tx timeout [ 1635.770684][ T4909] Bluetooth: hci3: command 0x0c1a tx timeout [ 1635.770729][ T4909] Bluetooth: hci2: command 0x0c1a tx timeout [ 1635.799078][T18228] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7673'. [ 1635.848076][ T821] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1635.929498][T18230] netlink: 'syz.7.7674': attribute type 8 has an invalid length. [ 1635.970650][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7674'. [ 1636.072643][ T821] usb 9-1: Using ep0 maxpacket: 16 [ 1636.078846][ T821] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.079049][ T821] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.079137][ T821] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1636.079214][ T821] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1636.090672][ T4909] Bluetooth: hci4: command 0x0c1a tx timeout [ 1636.090775][ T4909] Bluetooth: hci0: command 0x0c1a tx timeout [ 1636.100726][ T821] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1636.100841][ T821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1636.100911][ T821] usb 9-1: SerialNumber: syz [ 1636.256259][ T821] hub 9-1:1.0: bad descriptor, ignoring hub [ 1636.256287][ T821] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1636.257660][ T821] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1636.828496][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7668'. [ 1637.187327][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7682'. [ 1637.381427][T15243] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 1637.548949][T15243] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1637.552197][T15243] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 1637.552274][T15243] usb 10-1: config 1 has no interface number 0 [ 1637.552396][T15243] usb 10-1: config 1 interface 7 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1637.552481][T15243] usb 10-1: config 1 interface 7 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.552547][T15243] usb 10-1: config 1 interface 7 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1637.552652][T15243] usb 10-1: config 1 interface 7 has no altsetting 0 [ 1637.616420][T15243] usb 10-1: string descriptor 0 read error: -22 [ 1637.616541][T15243] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.40 [ 1637.616561][T15243] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.659047][T15243] usbhid 10-1:1.7: can't add hid device: -22 [ 1637.659177][T15243] usbhid 10-1:1.7: probe with driver usbhid failed with error -22 [ 1637.710557][ T821] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1637.855510][T17880] usb 10-1: USB disconnect, device number 19 [ 1637.877296][ T821] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1637.877327][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.877349][ T821] usb 1-1: Product: syz [ 1637.877369][ T821] usb 1-1: Manufacturer: syz [ 1637.877380][ T821] usb 1-1: SerialNumber: syz [ 1637.926269][ T821] usb 1-1: config 0 descriptor?? [ 1637.965360][ T821] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1638.291389][T17880] usb 9-1: USB disconnect, device number 14 [ 1638.638514][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7691'. [ 1638.773833][T18320] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7692'. [ 1638.773860][T18320] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7692'. [ 1639.151370][ T5326] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1639.166986][ T821] gspca_stk1135: reg_w 0x5 err -110 [ 1639.169762][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.169775][ T821] gspca_stk1135: Sensor write failed [ 1639.169802][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.169817][ T821] gspca_stk1135: Sensor write failed [ 1639.169843][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.169851][ T821] gspca_stk1135: Sensor read failed [ 1639.169877][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.169884][ T821] gspca_stk1135: Sensor read failed [ 1639.169890][ T821] gspca_stk1135: Detected sensor type unknown (0x0) [ 1639.169920][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.169992][ T821] gspca_stk1135: Sensor read failed [ 1639.170022][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.170030][ T821] gspca_stk1135: Sensor read failed [ 1639.170057][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.170064][ T821] gspca_stk1135: Sensor write failed [ 1639.170091][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 1639.170098][ T821] gspca_stk1135: Sensor write failed [ 1639.170175][ T821] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 1639.334704][ T5326] usb 10-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.334739][ T5326] usb 10-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.334765][ T5326] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1639.383465][ T5326] usb 10-1: string descriptor 0 read error: -22 [ 1639.383613][ T5326] usb 10-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 1639.383641][ T5326] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.570547][ T821] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1639.723791][ T821] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1639.725604][ T821] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.725632][ T821] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1639.765085][ T821] usb 8-1: string descriptor 0 read error: -22 [ 1639.765235][ T821] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1639.765264][ T821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.778115][T17880] usb 1-1: USB disconnect, device number 31 [ 1639.858801][ T821] usb 8-1: selecting invalid altsetting 1 [ 1639.859626][ T821] usb 8-1: unit 3 not found! [ 1639.892037][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892072][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892101][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892129][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892159][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892188][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892216][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892244][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892272][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1639.892301][ T5326] hid_mf 0003:0079:1801.0069: unknown main item tag 0x0 [ 1640.025879][ T5326] hid_mf 0003:0079:1801.0069: hidraw0: USB HID vf.ff Device [HID 0079:1801] on usb-dummy_hcd.9-1/input0 [ 1640.025917][ T5326] hid_mf 0003:0079:1801.0069: Invalid report, this should never happen! [ 1640.025935][ T5326] hid_mf 0003:0079:1801.0069: Force feedback init failed. [ 1640.129672][ T5326] usb 10-1: USB disconnect, device number 20 [ 1640.339818][T18379] fido_id[18379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1641.449728][T18394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7702'. [ 1641.848195][ T821] usb 8-1: cannot request logical cluster ID: 0 (err: -71) [ 1641.848227][ T821] usb 8-1: invalid MIXER UNIT descriptor 6 [ 1641.912942][T18407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1642.098890][ T821] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1642.132166][ T821] usb 8-1: USB disconnect, device number 26 [ 1642.846837][T18446] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7712'. [ 1642.987685][T18456] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7716'. [ 1642.987712][T18456] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7716'. [ 1644.007746][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7727'. [ 1644.220558][T17880] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1644.370970][T17880] usb 10-1: Using ep0 maxpacket: 16 [ 1644.373432][T17880] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.401753][T17880] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1644.401787][T17880] usb 10-1: New USB device strings: Mfr=12, Product=0, SerialNumber=0 [ 1644.401812][T17880] usb 10-1: Manufacturer: syz [ 1644.446696][T17880] usb 10-1: config 0 descriptor?? [ 1645.627643][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7737'. [ 1645.885351][T18567] Bluetooth: MGMT ver 1.23 [ 1646.184104][T18575] fuse: Unknown parameter '0x0000000000000005' [ 1646.960868][ T822] usb 10-1: USB disconnect, device number 21 [ 1649.758765][T18602] netlink: 'syz.0.7747': attribute type 2 has an invalid length. [ 1649.758788][T18602] netlink: 'syz.0.7747': attribute type 1 has an invalid length. [ 1651.691834][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7755'. [ 1651.691863][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7755'. [ 1651.691880][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7755'. [ 1652.242713][ T822] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1652.758678][ T38] kauditd_printk_skb: 24 callbacks suppressed [ 1652.758701][ T38] audit: type=1326 audit(1783861185.359:217): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1652.797315][ T38] audit: type=1326 audit(1783861185.359:218): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1652.829538][ T822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.829569][ T822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1652.853680][ T822] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1652.853714][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1652.853739][ T822] usb 1-1: SerialNumber: syz [ 1652.885407][ T38] audit: type=1326 audit(1783861185.469:219): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1652.917301][ T38] audit: type=1326 audit(1783861185.489:220): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1652.945430][ T38] audit: type=1326 audit(1783861185.549:221): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1652.945489][ T38] audit: type=1326 audit(1783861185.549:222): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1652.945538][ T38] audit: type=1326 audit(1783861185.549:223): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1652.959750][ T38] audit: type=1326 audit(1783861185.559:224): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1652.959817][ T38] audit: type=1326 audit(1783861185.559:225): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18637 comm="syz.9.7758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f209ac0de59 code=0x7ffc0000 [ 1653.305605][ T822] usb 1-1: 0:2 : does not exist [ 1653.386132][ T822] usb 1-1: USB disconnect, device number 32 [ 1653.449710][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1655.097147][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7764'. [ 1655.130980][T17880] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 1655.285991][T17880] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1655.286022][T17880] usb 9-1: config 179 has no interface number 0 [ 1655.286089][T17880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1655.286121][T17880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1655.286152][T17880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1655.286182][T17880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1655.286212][T17880] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1655.286258][T17880] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1655.286284][T17880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.411369][T18668] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1655.411511][T18668] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1655.797028][T18697] binder: 18693:18697 ioctl c0306201 2000000004c0 returned -14 [ 1655.967737][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1655.967814][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1655.968024][T17880] usb 9-1: USB disconnect, device number 15 [ 1656.681164][T31420] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 1656.722085][ T822] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1656.914503][T18734] openvswitch: netlink: IP tunnel dst address not specified [ 1657.423082][ T822] usb 9-1: Using ep0 maxpacket: 8 [ 1657.495878][ T822] usb 9-1: config index 0 descriptor too short (expected 64922, got 218) [ 1657.495915][ T822] usb 9-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 1657.524107][ T822] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1657.526949][ T822] usb 9-1: string descriptor 0 read error: -22 [ 1657.528036][ T822] usb 9-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40 [ 1657.528068][ T822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.738895][ T822] usb 9-1: 0:1 : does not exist [ 1657.739204][ T822] usb 9-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 1657.757187][T31420] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1657.757216][T31420] usb 1-1: config 0 has no interface number 0 [ 1657.757264][T31420] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1657.757295][T31420] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.757323][T31420] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1657.757358][T31420] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1657.757385][T31420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.864871][T31420] usb 1-1: config 0 descriptor?? [ 1658.268090][T18750] PKCS7: Unknown OID: [4] 0.0 [ 1658.268131][T18750] PKCS7: Only support pkcs7_signedData type [ 1659.145209][T31420] uclogic 0003:2179:0053.006A: pen parameters not found [ 1659.145238][T31420] uclogic 0003:2179:0053.006A: interface is invalid, ignoring [ 1659.172197][ T822] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1659.179173][ T822] usb 9-1: can't set first interface for hiFace device. [ 1659.179575][ T822] snd-usb-hiface 9-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1659.214202][T31420] usb 1-1: USB disconnect, device number 33 [ 1659.251049][ T822] usb 9-1: USB disconnect, device number 16 [ 1659.540568][ T9897] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1660.271806][ T9897] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1660.271841][ T9897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.271866][ T9897] usb 10-1: Product: syz [ 1660.271883][ T9897] usb 10-1: Manufacturer: syz [ 1660.271900][ T9897] usb 10-1: SerialNumber: syz [ 1660.280253][ T9897] usb 10-1: config 0 descriptor?? [ 1660.557225][ T9897] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1663.273658][ T9897] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1663.386730][ T9897] usb 10-1: USB disconnect, device number 22 [ 1663.680558][ T821] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1663.835187][ T821] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.838848][ T821] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1663.838877][ T821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.838900][ T821] usb 9-1: Product: syz [ 1663.838916][ T821] usb 9-1: Manufacturer: syz [ 1663.838933][ T821] usb 9-1: SerialNumber: syz [ 1664.120979][T18815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.125997][T18815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.162451][ T821] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1664.183863][ T821] usb 9-1: USB disconnect, device number 17 [ 1664.860829][ T5326] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1665.020599][ T5326] usb 9-1: Using ep0 maxpacket: 8 [ 1665.035885][ T5326] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 1665.035917][ T5326] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.037694][ T5326] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1665.037723][ T5326] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1665.037752][ T5326] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1665.037957][ T5326] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1665.038009][ T5326] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1665.038037][ T5326] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.291775][ T4909] Bluetooth: hci4: command 0x0405 tx timeout [ 1665.445491][ T5326] usb 9-1: GET_CAPABILITIES returned 0 [ 1665.445720][ T5326] usbtmc 9-1:16.0: can't read capabilities [ 1665.610574][ T5326] usb 9-1: USB disconnect, device number 18 [ 1667.713988][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7798'. [ 1668.325194][ T5326] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1668.491496][ T5326] usb 8-1: Using ep0 maxpacket: 8 [ 1668.499816][ T5326] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1668.522445][ T5326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1668.522479][ T5326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1668.522496][ T5326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1668.522518][ T5326] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1668.522537][ T5326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1668.522553][ T5326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1668.526898][ T5326] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1668.526933][ T5326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.526949][ T5326] usb 8-1: Product: syz [ 1668.526960][ T5326] usb 8-1: Manufacturer: syz [ 1668.526971][ T5326] usb 8-1: SerialNumber: syz [ 1668.631924][ T5326] usb 8-1: config 0 descriptor?? [ 1668.637038][T18882] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1668.665414][ T5326] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1669.013648][ T5326] usb 8-1: USB disconnect, device number 27 [ 1669.723617][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.927844][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1670.212365][T18946] overlayfs: overlapping lowerdir path [ 1670.746824][T18950] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1670.746860][T18950] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1670.746944][T18950] vhci_hcd vhci_hcd.0: Device attached [ 1670.748331][T18950] ALSA: mixer_oss: invalid OSS volume '' [ 1670.752035][T18954] vhci_hcd: connection closed [ 1670.793275][T26307] vhci_hcd vhci_hcd.9: stop threads [ 1670.793303][T26307] vhci_hcd vhci_hcd.9: release socket [ 1670.793344][T26307] vhci_hcd vhci_hcd.9: disconnect device [ 1671.175840][T18972] netlink: 112 bytes leftover after parsing attributes in process `syz.7.7817'. [ 1671.626336][ T39] INFO: task syz.6.6957:14208 blocked for more than 143 seconds. [ 1671.626450][ T39] Tainted: G L syzkaller #0 [ 1671.626490][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1671.626534][ T39] task:syz.6.6957 state:D stack:27168 pid:14208 tgid:14204 ppid:9990 task_flags:0x400140 flags:0x00080002 [ 1671.626873][ T39] Call Trace: [ 1671.626915][ T39] [ 1671.626979][ T39] __schedule+0x1709/0x5530 [ 1671.627163][ T39] ? rcu_is_watching+0x15/0xb0 [ 1671.627311][ T39] ? __pfx___schedule+0x10/0x10 [ 1671.627502][ T39] rt_mutex_schedule+0x76/0xf0 [ 1671.627551][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1671.627730][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1671.627849][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1671.627917][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1671.628001][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1671.628222][ T39] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1671.647644][ T39] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1671.647713][ T39] mutex_lock_nested+0x168/0x1d0 [ 1671.647825][ T39] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1671.647941][ T39] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 1671.648056][ T39] ? rcu_is_watching+0x15/0xb0 [ 1671.648112][ T39] ? trace_kmalloc+0x2a/0xf0 [ 1671.648230][ T39] ? __nla_parse+0x40/0x60 [ 1671.648313][ T39] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1671.648380][ T39] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1671.648501][ T39] genl_family_rcv_msg_doit+0x233/0x340 [ 1671.648621][ T39] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1671.648771][ T39] ? bpf_lsm_capable+0x9/0x20 [ 1671.648831][ T39] ? security_capable+0x74/0x280 [ 1671.648941][ T39] genl_rcv_msg+0x614/0x7a0 [ 1671.649060][ T39] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1671.649120][ T39] ? ref_tracker_free+0x668/0x820 [ 1671.649173][ T39] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 1671.649257][ T39] ? ____sys_sendmsg+0x565/0x870 [ 1671.649310][ T39] ? ___sys_sendmsg+0x2a5/0x360 [ 1671.649363][ T39] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1671.649416][ T39] ? do_syscall_64+0x174/0x580 [ 1671.649471][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.649582][ T39] netlink_rcv_skb+0x226/0x4a0 [ 1671.649663][ T39] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1671.649752][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1671.649984][ T39] genl_rcv+0x28/0x40 [ 1671.650045][ T39] netlink_unicast+0x7f5/0x990 [ 1671.650183][ T39] netlink_sendmsg+0x813/0xb40 [ 1671.650437][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1671.650531][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1671.650618][ T39] ? do_syscall_64+0x174/0x580 [ 1671.650673][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.650752][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1671.650815][ T39] sock_sendmsg_nosec+0x13a[ 1671.650815][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1671.650904][ T39] ____sys_sendmsg+0x565/0x870 [ 1671.651040][ T39] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1671.651178][ T39] ? import_iovec+0x73/0xa0 [ 1671.651263][ T39] ___sys_sendmsg+0x2a5/0x360 [ 1671.651316][ T39] ? __lock_acquire+0x6df/0x2e40 [ 1671.651405][ T39] ? __pfx____sys_sendmsg+0x10/0x10 [ 1671.651489][ T39] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1671.651817][ T39] ? __fget_files+0x2a/0x420 [ 1671.651867][ T39] ? __fget_files+0x3a8/0x420 [ 1671.652000][ T39] __x64_sys_sendmsg+0x1b7/0x290 [ 1671.652091][ T39] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1671.652228][ T39] ? __pfx_kcov_ioctl+0x10/0x10 [ 1671.652355][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.652408][ T39] do_syscall_64+0x174/0x580 [ 1671.652462][ T39] ? trace_irq_disable+0x3b/0x140 [ 1671.652512][ T39] ? clear_bhb_loop+0x40/0x90 [ 1671.652639][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.652691][ T39] RIP: 0033:0x7fc5e994de59 [ 1671.652738][ T39] RSP: 002b:00007fc5e7b85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1671.652819][ T39] RAX: ffffffffffffffda RBX: 00007fc5e9bd6090 RCX: 00007fc5e994de59 [ 1671.652863][ T39] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 1671.652904][ T39] RBP: 00007fc5e99e3e6f R08: 0000000000000000 R09: 0000000000000000 [ 1671.652945][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.652986][ T39] R13: 00007fc5e9bd6128 R14: 00007fc5e9bd6090 R15: 00007fff17142e78 [ 1671.653156][ T39] [ 1672.255046][ T39] [ 1672.255046][ T39] Showing all locks held in the system: [ 1672.255099][ T39] locks held by pr/legacy/17: 4, last CPU#1: [ 1672.265632][ T39] #0: ffffffff8e3b5a00 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 1672.265946][ T39] #1: ffffffff8e29d2f8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 1672.266125][ T39] #2: ffffffff9a0904d8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x17c/0x1b40 [ 1672.266309][ T39] #3: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.266451][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 1672.266502][ T39] #0: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1672.266738][ T39] locks held by kworker/u8:14/1436: 7, last CPU#0: [ 1672.266770][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.266918][ T39] #1: ffffc90007237c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.267059][ T39] #2: ffff8880722508d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1672.295860][ T39] #3: ffffffff8e2592e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1672.296019][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1672.296170][ T39] #5: ffff888072250228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 1672.296352][ T39] #6: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.296545][ T39] locks held by udevd/4960: 3, last CPU#0: [ 1672.296597][ T39] #0: ffffffff8eb357b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1672.296681][ T39] #1: ffff8880b8640488 ((&pcs->lock)){+.+.}-{3:3}, at: __kmalloc_noprof+0x1db/0x790 [ 1672.296827][ T39] #2: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 1672.296993][ T39] locks held by getty/5356: 2, on CPU#0: [ 1672.297050][ T39] #0: ffff888029b9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1672.319313][ T39] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1672.319476][ T39] locks held by kworker/1:8/5779: 3, last CPU#1: [ 1672.319529][ T39] #0: ffff88813fe66538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.319675][ T39] #1: ffffc9000655fc60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.319804][ T39] #2: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.319966][ T39] locks held by kworker/0:7/15674: 11, last CPU#0: [ 1672.320010][ T39] #0: ffff88802b980138 ((wq_completion)wg-crypt-wg0#18){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.320170][ T39] #1: ffffc9000495fc60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.320505][ T39] #2: ffffffff8e2592e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1672.335341][ T39] #3: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1672.335666][ T39] #4: ffff88805c9acce0 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 1672.335810][ T39] #5: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 1672.335950][ T39] #6: ffffffff8e2592e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1672.336089][ T39] #7: ffffffff8e3c38a0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x217/0xec0 [ 1672.336222][ T39] #8: ffffe8ffffc547a8 ((&({ do { const void *__vpp_verify = (typeof((dst_cache->cache) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((dst_cache->cache))) *)(( unsigned long)((dst_cache->cache)))))((unsigned long)((__typeof_unqual__(*((dst_cache->cache))) *)(( unsigned long)((dst_cache->cache)))) + (((__per_cpu_offset[(i)]))))); })->bh_lock)){+...}-{3:3}, at: dst_cache_get_ip4+0xb1/0x2c0 [ 1672.336432][ T39] #9: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.336517][ T39] #10: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: ipv4_dst_check+0x68/0x330 [ 1672.336737][ T39] locks held by kworker/u8:23/26300: 6, last CPU#0: [ 1672.336788][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.336973][ T39] #1: ffffc9000551fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.361291][ T39] #2: ffff88803b936310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1672.361482][ T39] #3: ffff88803b340d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1672.361637][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.361821][ T39] #5: ffff8880b8636cd0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1672.361939][ T39] locks held by kworker/u8:26/26305: 6, on CPU#0: [ 1672.361984][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.362127][ T39] #1: ffffc90005577c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.363078][ T39] #2: ffff8880387c4310 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1672.363292][ T39] #3: ffff888042ab2920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1672.424539][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.424691][ T39] #5: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.424821][ T39] locks held by kworker/u8:28/26307: 4, last CPU#0: [ 1672.424872][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.425049][ T39] #1: ffffc900054cfc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.425198][ T39] #2: ffff888072da08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1672.425486][ T39] #3: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1672.425636][ T39] locks held by kworker/u8:29/26308: 7, last CPU#0: [ 1672.425680][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.425779][ T39] #1: ffffc90005597c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.445373][ T39] #2: ffff8880731e08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1672.445528][ T39] #3: ffff8880b863b8e0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1672.445681][ T39] #4: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1672.445828][ T39] #5: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.445976][ T39] #6: ffffffff8e4219d8 (kcov_remote_lock.lock.wait_lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 1672.446124][ T39] locks held by kworker/u8:35/32447: 6, on CPU#0: [ 1672.446141][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.446304][ T39] #1: ffffc90006d97c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.446469][ T39] #2: ffff88801f2ec310 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1672.446637][ T39] #3: ffff88805dcb6120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1672.476905][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.477274][ T39] #5: ffff8880b8636cd0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1672.477491][ T39] locks held by kworker/u8:37/4763: 6, last CPU#0: [ 1672.477542][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.477634][ T39] #1: ffffc9000480fc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.477740][ T39] #2: ffff888072da08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1672.478037][ T39] #3: ffffffff8e2592e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1672.478284][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1672.491538][ T39] #5: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.491709][ T39] locks held by kworker/u8:42/12211: 6, on CPU#0: [ 1672.491763][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.491875][ T39] #1: ffffc90004a3fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.492024][ T39] #2: ffff888027fea310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1672.492197][ T39] #3: ffff888034d60d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1672.492365][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.492711][ T39] #5: ffff8880b8636cd0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1672.492873][ T39] locks held by kworker/u8:49/12219: 4, last CPU#0: [ 1672.492949][ T39] #0: ffff88802ac33938 ((wq_completion)wg-kex-wg0#29){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.500756][ T39] #1: ffffc900046e7c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1672.501149][ T39] #2: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1672.501297][ T39] #3: ffff8880b863d810 (&list->lock#5){+.+.}-{3:3}, at: process_backlog+0x882/0xc50 [ 1672.501470][ T39] locks held by syz.5.6886/12947: 2, on CPU#1: [ 1672.501503][ T39] #0: ffffffff8f833020 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1672.501697][ T39] #1: ffffffff8e6eda98 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x136/0x16e0 [ 1672.501878][ T39] locks held by syz.6.6957/14208: 2, on CPU#0: [ 1672.501921][ T39] #0: ffffffff8f833020 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1672.502378][ T39] #1: ffffffff8e6eda98 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1672.518510][ T39] locks held by syz.9.7809/18949: 1, last CPU#0: [ 1672.518573][ T39] #0: ffff88803f5f11b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1672.519332][ T39] locks held by syz.8.7818/18975: 4, last CPU#1: [ 1672.519383][ T39] #0: ffff888045005530 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1672.519544][ T39] #1: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1672.519703][ T39] #2: ffff88801ae9b058 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1672.519874][ T39] #3: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.520153][ T39] locks held by syz-executor/18980: 6, last CPU#0: [ 1672.520196][ T39] #0: ffff888040779808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1672.532166][ T39] #1: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1672.532341][ T39] #2: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1db/0x1d10 [ 1672.532523][ T39] #3: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1672.532666][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1672.532807][ T39] #5: ffff888060991198 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 1672.532952][ T39] [ 1672.532973][ T39] ============================================= [ 1672.532973][ T39] [ 1672.533058][ T39] NMI backtrace for cpu 0 [ 1672.533127][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1672.533225][ T39] Tainted: [L]=SOFTLOCKUP [ 1672.533247][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1672.533280][ T39] Call Trace: [ 1672.533289][ T39] [ 1672.533299][ T39] dump_stack_lvl+0xe8/0x150 [ 1672.533371][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1672.533439][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1672.533535][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1672.533612][ T39] sys_info+0x135/0x170 [ 1672.533658][ T39] watchdog+0xfd7/0x1030 [ 1672.533743][ T39] ? watchdog+0x1c7/0x1030 [ 1672.533816][ T39] kthread+0x388/0x470 [ 1672.533893][ T39] ? __pfx_watchdog+0x10/0x10 [ 1672.533945][ T39] ? __pfx_kthread+0x10/0x10 [ 1672.534029][ T39] ret_from_fork+0x514/0xb70 [ 1672.534127][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1672.534205][ T39] ? __switch_to+0xc89/0x1420 [ 1672.534283][ T39] ? __pfx_kthread+0x10/0x10 [ 1672.534365][ T39] ret_from_fork_asm+0x1a/0x30 [ 1672.534510][ T39] [ 1672.534609][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1672.534667][ C1] NMI backtrace for cpu 1 [ 1672.534690][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1672.534716][ C1] Tainted: [L]=SOFTLOCKUP [ 1672.534723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1672.534735][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1672.534767][ C1] Code: e8 fe 67 66 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef b2 d2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1672.534783][ C1] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 1672.534799][ C1] RAX: 1ffffffff3412000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1672.534813][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1672.534826][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1672.534838][ C1] R10: dffffc0000000000 R11: ffffffff855f6270 R12: dffffc0000000000 [ 1672.534853][ C1] R13: 0000000000000000 R14: ffffffff9a090500 R15: 0000000000000000 [ 1672.534866][ C1] FS: 0000000000000000(0000) GS:ffff888125afa000(0000) knlGS:0000000000000000 [ 1672.534882][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1672.534896][ C1] CR2: 00007ff7d5747dac CR3: 000000003579a000 CR4: 00000000003526f0 [ 1672.534913][ C1] Call Trace: [ 1672.534920][ C1] [ 1672.534929][ C1] wait_for_lsr+0x190/0x300 [ 1672.534960][ C1] serial8250_console_write+0x113a/0x1b40 [ 1672.534995][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1672.535029][ C1] ? console_flush_one_record+0x49d/0xb90 [ 1672.535062][ C1] console_flush_one_record+0x667/0xb90 [ 1672.535093][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1672.535124][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1672.535154][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1672.535182][ C1] legacy_kthread_func+0x1b6/0x250 [ 1672.535213][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1672.535242][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1672.535269][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1672.535292][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1672.535317][ C1] kthread+0x388/0x470 [ 1672.535341][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1672.535369][ C1] ? __pfx_kthread+0x10/0x10 [ 1672.535395][ C1] ret_from_fork+0x514/0xb70 [ 1672.535421][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1672.535447][ C1] ? __switch_to+0xc89/0x1420 [ 1672.535470][ C1] ? __pfx_kthread+0x10/0x10 [ 1672.535495][ C1] ret_from_fork_asm+0x1a/0x30 [ 1672.535530][ C1] [ 1672.563316][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1672.563389][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1672.563467][ T39] Tainted: [L]=SOFTLOCKUP [ 1672.563496][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1672.563530][ T39] Call Trace: [ 1672.563554][ T39] [ 1672.563583][ T39] vpanic+0x5d9/0xad0 [ 1672.563662][ T39] ? __pfx_vpanic+0x10/0x10 [ 1672.563734][ T39] ? __pfx___schedule+0x10/0x10 [ 1672.563832][ T39] panic+0xc5/0xd0 [ 1672.563895][ T39] ? __pfx_panic+0x10/0x10 [ 1672.563957][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1672.564052][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1672.564077][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1672.564161][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1672.564230][ T39] watchdog+0x1030/0x1030 [ 1672.564310][ T39] ? watchdog+0x1c7/0x1030 [ 1672.564384][ T39] kthread+0x388/0x470 [ 1672.564469][ T39] ? __pfx_watchdog+0x10/0x10 [ 1672.564520][ T39] ? __pfx_kthread+0x10/0x10 [ 1672.564605][ T39] ret_from_fork+0x514/0xb70 [ 1672.564694][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1672.564782][ T39] ? __switch_to+0xc89/0x1420 [ 1672.564857][ T39] ? __pfx_kthread+0x10/0x10 [ 1672.564947][ T39] ret_from_fork_asm+0x1a/0x30 [ 1672.565068][ T39] [ 1672.565684][ T39] Kernel Offset: disabled