last executing test programs: 10.164595274s ago: executing program 3 (id=242): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'blkio'}]}, 0xd) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x2a}, 0x20) capget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x8044) sendto$inet6(r7, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}}) socket$unix(0x1, 0x2, 0x0) 7.8220538s ago: executing program 0 (id=248): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002f00)={{0x12, 0x1, 0x300, 0x7e, 0xe1, 0x7d, 0x8, 0x7ca, 0xa868, 0x1618, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x5, 0x0, 0x3, [{{0x9, 0x4, 0x5f, 0x7, 0x0, 0x5c, 0xb8, 0x6f, 0x9}}]}}]}}, 0x0) process_vm_writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)=""/191, 0xbf}], 0x1, 0x0) 7.565533919s ago: executing program 3 (id=249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x3ada82, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = memfd_create(&(0x7f00000008c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x2c0c, 0x400, 0x7, 0x2000284}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) syz_io_uring_setup(0x5914, &(0x7f0000001540)={0x0, 0xe02e, 0x40, 0x1, 0x215}, &(0x7f0000000300), &(0x7f00000015c0)) r5 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000200,max_read=0x0000000000000000,default_permissions,allow_other,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',subj_type=,fscontext=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="d6a038643e", @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000540)="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") r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) connect$unix(r1, &(0x7f0000001600)=@file={0x0, './file0/file1\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1, {0x0, r6}}) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 6.104523402s ago: executing program 2 (id=261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ptrace$cont(0x20, 0x0, 0x6a9f, 0x3) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@mmap={0x6, 0x1, 0x4, 0x0, 0xc9, {0x77359400}, {0x5, 0x0, 0x7, 0x8, 0xf, 0x2, "20135ef5"}, 0xc, 0x1, {}, 0x7}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r6) socket$kcm(0x10, 0x2, 0x4) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f00000000c0), 0x4) 4.415258104s ago: executing program 0 (id=267): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x2b26, &(0x7f0000000040)={0x0, 0xacff, 0x40, 0x0, 0x22}, &(0x7f0000ffd000), 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.898983988s ago: executing program 0 (id=269): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x0, 0x9, 0x5, 0xffffffffffffffff, 0x7043}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 3.791950412s ago: executing program 3 (id=270): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000024}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032cbd7000fcdbdf251f007fffffffffffffff921dc40000000700210061610000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40080) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x2000, 0x5, 0x178}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) r10 = syz_open_dev$swradio(&(0x7f00000023c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r10, 0xc0585609, &(0x7f0000002440)={0x6, 0x3, 0x4, 0x20, 0x4, {}, {0x2, 0x8, 0x7, 0xc, 0x5, 0xcf, "8b5610d1"}, 0x9}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x50, 0x6000, @fd=r7, 0xfffffffffffff800, &(0x7f00000019c0)=[{&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f0000000740)=""/72, 0x48}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/215, 0xd7}, {&(0x7f0000001940)=""/68, 0x44}], 0x6, 0x2, 0x1}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000d1000000d100000005000000070000000000000b010000000c0000000000000c0400000008000000080000060400000000000000080000000f0000000300000009000000ca0000000b000000030000000800000001000000000000000010000005000000060000000200000009000000020000000800000f0100000003000000050000000000000005000000090000000000000003000000dcf500008000000001000000ffffffffff03000002000000fcffffff04000000040000000e0000000f00000002000000faffffff080000000400080003000000830b000069000000001e5f0000"], &(0x7f0000000300)=""/132, 0xf1, 0x84, 0x1, 0x3, 0x10000, @value=r3}, 0x28) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd=r2, 0xe, {0x0, r11}, 0x5, 0x2, 0x0, {0x0, r12, r0}}) ppoll(&(0x7f00000002c0)=[{r0, 0x3000}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) r13 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0xfffb, 0xfff, 0xfffffffb, 0x59, 0x2, 0x0}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000600)={'\x00', 0x401, 0x0, 0x1, 0x5, 0x8, r15}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r14, 0xc0605345, &(0x7f0000000040)) r16 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r16, 0x894b, &(0x7f0000000200)) ioctl$VIDIOC_S_INPUT(r13, 0xc0045627, &(0x7f0000000040)=0x4) 3.755639972s ago: executing program 1 (id=271): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x100, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x28, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r9, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) close(r2) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r6, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xf}}, './file0\x00'}) 3.430461434s ago: executing program 4 (id=274): mq_open(0x0, 0x40, 0x1, &(0x7f0000000380)={0x5, 0x3, 0x101}) 3.071644391s ago: executing program 2 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 3.000574939s ago: executing program 4 (id=276): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x230082) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x6, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb4d5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'dvmrp0\x00'}]}, 0x4c}}, 0x4000004) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 2.722990259s ago: executing program 2 (id=277): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) epoll_create(0xaf2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xb5{\xa0k\x95s\xa8l\xd4\b|m\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}', 0x42, 0x101, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xc3, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/54, 0x36, 0x0) close(r2) 2.717172638s ago: executing program 3 (id=278): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002880)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004540), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf250c00000008000300", @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x40804) 2.176151261s ago: executing program 3 (id=279): syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240), &(0x7f0000000100)) (async) socket(0x2, 0x80805, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) clock_gettime(0x73d120d1a3af8f7f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000cf7800c6", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767320000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000004000880"], 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = fcntl$getown(r1, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r5, 0x2, 0x2002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x0, 0x0, 0x0, 0x1, 0xd6, &(0x7f0000000500)=""/214, 0x81e00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x7}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x9, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@cgroup, 0x24, 0x0, 0x2, 0x0, 0x55, 0x0, &(0x7f0000000980), 0x0, 0x0}, 0x40) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7ffe, 0x41090}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.019310546s ago: executing program 3 (id=280): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0xe0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xf, 0x8, 0x2}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x7ff, 0xff, 0x0, 0x7fffffff}, {0x2, 0x4, 0xb3, 0x5}, {0x2, 0x2, 0x1, 0x3045}, {0x3, 0x6, 0xa, 0x2}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000004b00)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xa121, @private2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000290000003600000016000000000000002400000000000000290000003200000000000000000000000000000000000001"], 0x40}}], 0x1, 0x1000c804) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000400)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) setpgid(r9, r10) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000100)=0x80000) 1.685478694s ago: executing program 0 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x37c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x355, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xd}, @broadcast, @device_a, @random="126217c0c79d", {0xb, 0x8}}, 0x1, @default, 0x100, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x3, 0x6, 0xc000, 0xc}}, @val={0x6, 0x2, 0x8}, @val={0x5, 0x42, {0x9, 0x55, 0xa, "ba9833c37d830c4063310e8f8086de93d5bce0b01cee4561209879ca90907fe00a29f5a89d2cd341c86d66373b12e5a452dc7ff9e6e33dfa60327545234a82"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x44, 0x3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x2, 0x82}}, @val={0x76, 0x6, {0x8, 0x86, 0xc, 0x5}}, [{0xdd, 0x7e, "02e1057436a22334ec72b207dcadb51639c5e7afa1eafa86122f8b24f4bbd3060f06134a452a311c7644dd25ae520b119cbc0f001a2b1a4e6644d99d6b9234c3c93777dd63179cd22b7739264df371565299bacc9d4de581e76d09aa6de728b85d239569fd5d0f3170f3bd76ed6a272958a8a72e3b0cdd9fd6067584d36d"}, {0xdd, 0xb, "e9a71dfcb48bca7d709ecb"}, {0xdd, 0xcd, "923ddae2cfd4e4462129c4e00289b9900f413fa652e13af55e17419bbfdb63b8cf0e8cfb78f226faaa07c13811647e79ea27f5e41f7b8e275bb5092a8ca3a49eb707e4264847ee7be458370b1d3b3c029ac212b2badb9fc1d1393dcb72dd6e77612906b6941daa224204454961063f7be0e6bc0f3c3db62c5beddd93ee4fd3baca65a783a90b5faca0ef17a4e195d1e7390c8aa59233510b1676bb253abb514c9709d4d79abe9f877561a4323ac9df958068ff7605f04265d3e18c2c9bd37ef54b8491d42632f230175ae724e6"}, {0xdd, 0xba, "43e8c445e9ad35fb69235b8fa6d689eec9bec14dc779eac681257c85741b11b7bf7ce7826299c035b19a9baeadb80c8a2d4a0430098d7ac3486b88e59c8980a0ee1df7721693516752628cf6ee920a3f6ea316fb8602fe293abf38da14896bf437b018b6f1218f52cdebd02e9e49a0905f8f7ad1631861726455163ba0d2c6ee20d506e4d29f7bf5e6ff60952da174da1f52200c9c04d94c03ab291c348030e14fb4ca09ea825f648c84b989080e9943750ea48e7680e20b021b"}, {0xdd, 0x99, "31f62ef7d4b49cb2549ade7fca8a87a9bb6abbc4317151d46888e6c670b2d88bf114f0d61f36c62b9d1262e273ec97355b9d7a9faf9c58679e8bb20930f557bd4d12f4f72d8a050ac956261d8a0dee019370862f09d073e6d4a7bc0d99af7f8462aa90fdd0d20b93f2ab073dc603a233c62623537b8be79c8db30e9bf574381a40edd05464c2e29321294deebfa5ae338ffbd6f288d8c31063"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x10, 0xec]}]}, 0x37c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.443784828s ago: executing program 0 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000600)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d40)=""/233, 0xe9}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/83, 0x53}, {&(0x7f0000002880)=""/82, 0x52}, {&(0x7f0000002980)=""/100, 0x64}, {&(0x7f0000002b00)=""/110, 0x6e}, {&(0x7f0000000780)=""/6, 0x6}, {&(0x7f0000002b80)=""/200, 0xc8}, {&(0x7f0000000680)=""/249, 0xf9}, {&(0x7f0000002e40)=""/132, 0x84}], 0xb, &(0x7f0000002a80)=""/27, 0x1b}}], 0x1, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002a00)=ANY=[@ANYBLOB="01000000000400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000004000040020300df7a442856bfec870bf38dad12ad8a0a61d8c855d76dbf766af8cbedd9c38dea3b495890865e55da53e0"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x4200002d, 0x800, 0x2, 0x100020e}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) r11 = syz_usb_connect_ath9k(0x3, 0xffffff29, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r11, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffe, 0x4e23, 0x3, 0xa, 0x80}, {0x1, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x8, 0xfffffffffffffffe, 0x0, 0x9}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x218000, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000002900)=ANY=[@ANYBLOB="f144112e03929062c30d7e9faf3607fcffffffffffffc6029154c48dd901752154f8c186dcc2d05e76b6367261d158ea5dfc17cb12", @ANYRES16=r10, @ANYBLOB="10002bbd7000fedbdf250700000008002c0008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40040) writev(r9, &(0x7f00000000c0)=[{0x0}], 0x1) fcntl$setlease(r9, 0x400, 0x1) 1.280997812s ago: executing program 1 (id=283): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x4e4}], 0x1}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x0, 0x20}, 0xc) 1.016141562s ago: executing program 1 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x0) 921.464562ms ago: executing program 4 (id=285): syz_usb_connect$cdc_ncm(0x7, 0xd0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x27, &(0x7f00000001c0)=@string={0x27, 0x3, "9bc252cd1f40fe6fd8bc8df883d05cb96412f4bdd0b51484327b1dcc50181626a5096eb391"}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) read(r0, &(0x7f0000000140)=""/166, 0xa6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000005cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) 782.872767ms ago: executing program 1 (id=286): mq_open(0x0, 0x40, 0x1, &(0x7f0000000380)={0x5, 0x3, 0x101}) 683.713151ms ago: executing program 2 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 574.632353ms ago: executing program 1 (id=288): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fchdir(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000140)=0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) 572.441537ms ago: executing program 2 (id=289): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x10000000, 0x0, 0x3, 0x0, 0x0) 468.415404ms ago: executing program 1 (id=290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r4, 0x0, 0x500) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") close(r6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r9 = dup2(r8, r8) read$FUSE(r9, &(0x7f00000063c0)={0x2020}, 0x2020) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 468.038893ms ago: executing program 2 (id=291): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="21010000db168920402000d92ca9010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000700)=[{0x5, 0xac39d643e9965aa2, 0x0, 0x0}, {0x1a00, 0x8000, 0x0, 0x0}], 0x2}) 276.22305ms ago: executing program 4 (id=292): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rmdir(&(0x7f0000000640)='./file0\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}}, 0x3, 0x0, 0x0) 148.180504ms ago: executing program 4 (id=293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000020000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000004000000040000000000000000000000010002020000000084010500fe880000000000000000000000000101000004d23c00000000000000ac1414aa0000000000000000000000000000000000020100ff7f0000070000005395214300000000000000000000000000000000000004d533000000020000007f00000100000000000000000000000000000000000122000500000001040000020000007f000001000000000000000000000000000004d23200000002000000fe8800", @ANYRESHEX], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 0s ago: executing program 4 (id=294): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082dbd7000fbdbdf250000", @ANYRES32=0x0, @ANYBLOB="0300fffffc16ffe00000080049bb74d514c1a7838434f141d5a03d8fbcc8064679d17d4310b6ee6d60026856e0c5408f4e99169ce4e1ca4cc9b8979aeea49dfbd40100000000000000e27fb1b3ae9975e74fd1dd3e3f4b5df166306ccf6e86100ad130f85ddb044e32862828a49133894e7c8daccd8803a2", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) request_key(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) timer_create(0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_getaddr={0x28, 0x16, 0x400, 0x70bd29, 0x25dfdbfb, {0x2, 0x8, 0x1, 0xff, r7}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x8}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 81.001208][ T5809] cgroup: Unknown subsys name 'net' [ 81.077509][ T5809] cgroup: Unknown subsys name 'cpuset' [ 81.086451][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.662847][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.501291][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.509851][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.518093][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.526849][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.535144][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.588617][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.600323][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.610266][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.618038][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.626115][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.634927][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.645092][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.651168][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.653618][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.660788][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.672414][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.674635][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.684655][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.691222][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.697096][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.709915][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.710083][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.725398][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.738615][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.753387][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.506724][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.569046][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 87.667340][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 87.711746][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.776159][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.897254][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.905044][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.913153][ T5841] bridge_slave_0: entered allmulticast mode [ 87.920748][ T5841] bridge_slave_0: entered promiscuous mode [ 87.973913][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.981159][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.988338][ T5841] bridge_slave_1: entered allmulticast mode [ 87.996389][ T5841] bridge_slave_1: entered promiscuous mode [ 88.028503][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.035833][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.043382][ T5848] bridge_slave_0: entered allmulticast mode [ 88.050871][ T5848] bridge_slave_0: entered promiscuous mode [ 88.110505][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.117726][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.125147][ T5848] bridge_slave_1: entered allmulticast mode [ 88.132444][ T5848] bridge_slave_1: entered promiscuous mode [ 88.149800][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.156918][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.164465][ T5846] bridge_slave_0: entered allmulticast mode [ 88.171885][ T5846] bridge_slave_0: entered promiscuous mode [ 88.188194][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.197570][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.205494][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.212857][ T5844] bridge_slave_0: entered allmulticast mode [ 88.220236][ T5844] bridge_slave_0: entered promiscuous mode [ 88.238586][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.246286][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.253687][ T5846] bridge_slave_1: entered allmulticast mode [ 88.261393][ T5846] bridge_slave_1: entered promiscuous mode [ 88.280554][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.290149][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.297284][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.304564][ T5844] bridge_slave_1: entered allmulticast mode [ 88.312121][ T5844] bridge_slave_1: entered promiscuous mode [ 88.321492][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.375669][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.406554][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.413923][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.421451][ T5845] bridge_slave_0: entered allmulticast mode [ 88.428685][ T5845] bridge_slave_0: entered promiscuous mode [ 88.460754][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.473055][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.484711][ T5841] team0: Port device team_slave_0 added [ 88.493017][ T5841] team0: Port device team_slave_1 added [ 88.502650][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.510104][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.517340][ T5845] bridge_slave_1: entered allmulticast mode [ 88.525060][ T5845] bridge_slave_1: entered promiscuous mode [ 88.545901][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.557216][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.571114][ T5829] Bluetooth: hci0: command tx timeout [ 88.603664][ T5848] team0: Port device team_slave_0 added [ 88.660298][ T5848] team0: Port device team_slave_1 added [ 88.668289][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.680940][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.703394][ T5846] team0: Port device team_slave_0 added [ 88.710500][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.717459][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.743452][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.790347][ T5844] team0: Port device team_slave_0 added [ 88.796794][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.804397][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.830629][ T5143] Bluetooth: hci4: command tx timeout [ 88.831348][ T5829] Bluetooth: hci1: command tx timeout [ 88.841662][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.849362][ T5846] team0: Port device team_slave_1 added [ 88.853326][ T5143] Bluetooth: hci2: command tx timeout [ 88.864304][ T5835] Bluetooth: hci3: command tx timeout [ 88.871768][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.878740][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.904948][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.936865][ T5844] team0: Port device team_slave_1 added [ 88.943177][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.950266][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.976394][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.002639][ T5845] team0: Port device team_slave_0 added [ 89.011851][ T5845] team0: Port device team_slave_1 added [ 89.092949][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.100535][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.127068][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.139439][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.146513][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.172608][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.194806][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.202289][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.228362][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.241391][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.248365][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.274442][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.293934][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.301005][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.327153][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.338822][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.346125][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.373139][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.391185][ T5841] hsr_slave_0: entered promiscuous mode [ 89.397797][ T5841] hsr_slave_1: entered promiscuous mode [ 89.433562][ T5848] hsr_slave_0: entered promiscuous mode [ 89.440363][ T5848] hsr_slave_1: entered promiscuous mode [ 89.446646][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 89.452978][ T5848] Cannot create hsr debugfs directory [ 89.570687][ T5845] hsr_slave_0: entered promiscuous mode [ 89.577360][ T5845] hsr_slave_1: entered promiscuous mode [ 89.584462][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 89.590689][ T5845] Cannot create hsr debugfs directory [ 89.625559][ T5846] hsr_slave_0: entered promiscuous mode [ 89.631946][ T5846] hsr_slave_1: entered promiscuous mode [ 89.638238][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 89.644244][ T5846] Cannot create hsr debugfs directory [ 89.691339][ T5844] hsr_slave_0: entered promiscuous mode [ 89.698310][ T5844] hsr_slave_1: entered promiscuous mode [ 89.704939][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 89.711460][ T5844] Cannot create hsr debugfs directory [ 90.251088][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.278816][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.290860][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.309761][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.365295][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.393932][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.419728][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.432808][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.493067][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.504964][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.515511][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.532049][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.636914][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.650022][ T5829] Bluetooth: hci0: command tx timeout [ 90.663206][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.673497][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.697699][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.750751][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.795779][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.807644][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.819745][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.843538][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.867263][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.891027][ T5835] Bluetooth: hci3: command tx timeout [ 90.896477][ T5835] Bluetooth: hci2: command tx timeout [ 90.902274][ T5143] Bluetooth: hci4: command tx timeout [ 90.907927][ T5829] Bluetooth: hci1: command tx timeout [ 90.932067][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.939288][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.948844][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.956108][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.037951][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.099228][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.117711][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.148703][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.159312][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.166520][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.193008][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.200206][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.225757][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.251832][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.258994][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.287614][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.305278][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.312487][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.323237][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.337546][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.376664][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.383943][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.427918][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.458177][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.465553][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.504141][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.511308][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.524023][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.531234][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.612562][ T5848] veth0_vlan: entered promiscuous mode [ 91.665315][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.676823][ T5848] veth1_vlan: entered promiscuous mode [ 91.700062][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.749012][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.792449][ T5848] veth0_macvtap: entered promiscuous mode [ 91.815588][ T5848] veth1_macvtap: entered promiscuous mode [ 91.828617][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.861064][ T5846] veth0_vlan: entered promiscuous mode [ 91.873298][ T5841] veth0_vlan: entered promiscuous mode [ 91.894973][ T5846] veth1_vlan: entered promiscuous mode [ 91.935200][ T9] cfg80211: failed to load regulatory.db [ 91.951090][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.963167][ T5841] veth1_vlan: entered promiscuous mode [ 91.991803][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.017621][ T5845] veth0_vlan: entered promiscuous mode [ 92.034727][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.045624][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.069452][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.085034][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.096301][ T5844] veth0_vlan: entered promiscuous mode [ 92.104278][ T5846] veth0_macvtap: entered promiscuous mode [ 92.118652][ T5845] veth1_vlan: entered promiscuous mode [ 92.143224][ T5846] veth1_macvtap: entered promiscuous mode [ 92.174125][ T5841] veth0_macvtap: entered promiscuous mode [ 92.193693][ T5841] veth1_macvtap: entered promiscuous mode [ 92.211977][ T5844] veth1_vlan: entered promiscuous mode [ 92.258168][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.281527][ T5845] veth0_macvtap: entered promiscuous mode [ 92.303938][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.315835][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.327339][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.345882][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.364177][ T5845] veth1_macvtap: entered promiscuous mode [ 92.392735][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.402714][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.425834][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.441238][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.450449][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.475828][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.485083][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.509844][ T5844] veth0_macvtap: entered promiscuous mode [ 92.517617][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.527514][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.544597][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.569140][ T5844] veth1_macvtap: entered promiscuous mode [ 92.587793][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.596749][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.623586][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.653455][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.710758][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.718621][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.734671][ T5829] Bluetooth: hci0: command tx timeout [ 92.762579][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.817476][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.835029][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.850538][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.886039][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.906155][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.917186][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.942171][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.969985][ T5829] Bluetooth: hci1: command tx timeout [ 92.975444][ T5829] Bluetooth: hci2: command tx timeout [ 92.981944][ T5835] Bluetooth: hci4: command tx timeout [ 92.987385][ T5835] Bluetooth: hci3: command tx timeout [ 93.005072][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.022029][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.031159][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.053643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.063418][ T161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.076797][ T161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.111629][ T161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.133897][ T161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.288167][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.323766][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.404335][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.427518][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.475414][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.490301][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.531234][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.558528][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.571105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.660249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.725737][ T5936] input: syz1 as /devices/virtual/input/input5 [ 93.840225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.850344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.860206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.920536][ T5936] binder: 5927:5936 ioctl 806c4120 200000000300 returned -22 [ 93.929982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.170092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.206336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.469109][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6'. [ 94.802394][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6'. [ 94.822141][ T5835] Bluetooth: hci0: command tx timeout [ 95.071867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.082167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.094244][ T5835] Bluetooth: hci3: command tx timeout [ 95.100153][ T5835] Bluetooth: hci2: command tx timeout [ 95.105678][ T5835] Bluetooth: hci1: command tx timeout [ 95.111564][ T5835] Bluetooth: hci4: command tx timeout [ 95.289402][ T5956] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.080335][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.271868][ T5903] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 96.290786][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.336703][ T5903] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 96.369162][ T5903] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 96.377516][ T5903] usb 4-1: Manufacturer: syz [ 96.395938][ T5903] usb 4-1: config 0 descriptor?? [ 96.608914][ T5903] rc_core: IR keymap rc-hauppauge not found [ 96.620436][ T5903] Registered IR keymap rc-empty [ 96.647872][ T5903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 96.699539][ T5903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 96.724358][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 96.975000][ T5972] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 97.050523][ T5975] loop7: detected capacity change from 0 to 7 [ 97.406218][ T5975] Dev loop7: unable to read RDB block 7 [ 97.412628][ T5975] loop7: unable to read partition table [ 97.419309][ T5975] loop7: partition table beyond EOD, truncated [ 97.426525][ T5975] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 97.915769][ T5981] FAULT_INJECTION: forcing a failure. [ 97.915769][ T5981] name failslab, interval 1, probability 0, space 0, times 1 [ 97.999742][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 97.999770][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.999789][ T5981] Call Trace: [ 97.999797][ T5981] [ 97.999806][ T5981] dump_stack_lvl+0xe8/0x150 [ 97.999850][ T5981] should_fail_ex+0x412/0x560 [ 97.999886][ T5981] should_failslab+0xa8/0x100 [ 97.999910][ T5981] __kmalloc_noprof+0xe8/0x760 [ 97.999943][ T5981] ? tomoyo_encode+0x28b/0x550 [ 97.999968][ T5981] tomoyo_encode+0x28b/0x550 [ 97.999993][ T5981] tomoyo_realpath_from_path+0x58d/0x5d0 [ 98.000024][ T5981] ? tomoyo_path_number_perm+0x219/0x630 [ 98.000052][ T5981] tomoyo_path_number_perm+0x246/0x630 [ 98.000082][ T5981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.000111][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 98.000148][ T5981] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 98.000193][ T5981] ? __fget_files+0x2a/0x420 [ 98.000223][ T5981] ? __fget_files+0x2a/0x420 [ 98.000248][ T5981] ? __fget_files+0x3a0/0x420 [ 98.000272][ T5981] ? __fget_files+0x2a/0x420 [ 98.000303][ T5981] security_file_ioctl+0xc3/0x2a0 [ 98.000331][ T5981] __se_sys_ioctl+0x47/0x170 [ 98.000354][ T5981] do_syscall_64+0x14d/0xf80 [ 98.000374][ T5981] ? trace_irq_disable+0x3b/0x150 [ 98.000413][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.000434][ T5981] ? clear_bhb_loop+0x40/0x90 [ 98.000459][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.000479][ T5981] RIP: 0033:0x7f5fd0f9bf79 [ 98.000502][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.000518][ T5981] RSP: 002b:00007f5fd1f25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.000540][ T5981] RAX: ffffffffffffffda RBX: 00007f5fd1215fa0 RCX: 00007f5fd0f9bf79 [ 98.000555][ T5981] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 98.000567][ T5981] RBP: 00007f5fd1f25090 R08: 0000000000000000 R09: 0000000000000000 [ 98.000580][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.000591][ T5981] R13: 00007f5fd1216038 R14: 00007f5fd1215fa0 R15: 00007f5fd133fa48 [ 98.000623][ T5981] [ 98.000644][ T5981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.379680][ T5192] Dev loop7: unable to read RDB block 7 [ 98.385421][ T5192] loop7: unable to read partition table [ 98.436907][ T5192] loop7: partition table beyond EOD, truncated [ 98.560748][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.718942][ T5960] fuse: Bad value for 'fd' [ 98.816701][ T5850] usb 4-1: USB disconnect, device number 2 [ 100.136336][ T6007] Zero length message leads to an empty skb [ 101.478630][ T6027] netlink: 52 bytes leftover after parsing attributes in process `syz.4.25'. [ 101.599663][ T6029] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 101.900136][ T6034] 8021q: VLANs not supported on wg1 [ 102.620779][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.859139][ T5850] usb 5-1: too many configurations: 57, using maximum allowed: 8 [ 103.049361][ T5850] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.059675][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.068326][ T5850] usb 5-1: Product: syz [ 103.073693][ T5850] usb 5-1: Manufacturer: syz [ 103.087567][ T5850] usb 5-1: SerialNumber: syz [ 103.160984][ T5850] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.192221][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.350604][ T6050] vlan2: entered promiscuous mode [ 103.364762][ T6050] bridge0: entered promiscuous mode [ 103.549735][ T5850] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.857920][ T5850] usb 3-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 103.871028][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.962035][ T5850] usb 3-1: config 0 descriptor?? [ 104.032794][ T5850] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 104.279680][ T5850] gspca_zc3xx: reg_w_i err -71 [ 104.287089][ T5850] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 104.382773][ T5850] usb 3-1: USB disconnect, device number 2 [ 104.499985][ T9] usb 5-1: Service connection timeout for: 256 [ 104.506800][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 104.572260][ T9] ath9k_htc: Failed to initialize the device [ 104.592118][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 105.236451][ C1] sd 0:0:1:0: [sda] tag#5489 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 105.247143][ C1] sd 0:0:1:0: [sda] tag#5489 CDB: Read(6) 08 00 66 ce 20 db [ 105.744818][ T6075] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.058098][ T5903] usb 5-1: USB disconnect, device number 2 [ 107.030454][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.238321][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 107.487405][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.510320][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.523160][ T10] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 107.534317][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.552430][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.562153][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.574623][ T10] usb 5-1: Manufacturer: syz [ 107.583010][ T10] usb 5-1: config 0 descriptor?? [ 109.418494][ T10] usb 5-1: USB disconnect, device number 3 [ 109.650839][ T6121] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 110.215797][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 110.637350][ T6137] input: syz1 as /devices/virtual/input/input8 [ 110.808056][ T6137] binder: 6132:6137 ioctl 806c4120 200000000300 returned -22 [ 111.654537][ T6142] use of bytesused == 0 is deprecated and will be removed in the future, [ 111.663250][ T6142] use the actual size instead. [ 113.014436][ T6152] capability: warning: `syz.4.58' uses 32-bit capabilities (legacy support in use) [ 114.342940][ T6168] netlink: 'syz.1.63': attribute type 24 has an invalid length. [ 114.386248][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 114.419977][ T6168] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 114.479711][ T815] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.639733][ T815] usb 4-1: Using ep0 maxpacket: 16 [ 114.663655][ T815] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 114.697498][ T815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.719887][ T815] usb 4-1: Product: syz [ 114.758318][ T815] usb 4-1: Manufacturer: syz [ 114.769913][ T6175] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 114.777616][ T815] usb 4-1: SerialNumber: syz [ 114.793681][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 114.809722][ T815] usb 4-1: config 0 descriptor?? [ 114.836371][ T815] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 114.964043][ T6178] macsec1: entered promiscuous mode [ 114.969349][ T6178] macsec1: entered allmulticast mode [ 115.127719][ T815] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 115.137088][ T815] visor 4-1:0.0: probe with driver visor failed with error -71 [ 115.221169][ T815] usb 4-1: USB disconnect, device number 3 [ 115.369870][ T5903] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.549784][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 115.557344][ T5903] usb 3-1: descriptor type invalid, skip [ 115.570481][ T5903] usb 3-1: config 0 has no interfaces? [ 115.580141][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 115.596235][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.624893][ T5903] usb 3-1: Product: syz [ 115.629130][ T5903] usb 3-1: Manufacturer: syz [ 115.656352][ T5903] usb 3-1: SerialNumber: syz [ 115.681905][ T5903] usb 3-1: config 0 descriptor?? [ 115.915835][ T5903] usb 3-1: USB disconnect, device number 3 [ 116.051816][ T29] audit: type=1326 audit(1771190746.450:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 116.215460][ T29] audit: type=1326 audit(1771190746.480:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 116.322999][ T29] audit: type=1326 audit(1771190746.480:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 116.369331][ T29] audit: type=1326 audit(1771190746.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 116.506050][ T29] audit: type=1326 audit(1771190746.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 116.530049][ T29] audit: type=1326 audit(1771190746.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 116.564207][ T29] audit: type=1326 audit(1771190746.490:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 116.674498][ T29] audit: type=1326 audit(1771190746.490:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 117.133040][ T29] audit: type=1326 audit(1771190746.490:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 117.162643][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 117.238822][ T29] audit: type=1326 audit(1771190746.490:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 117.730076][ T6203] could not allocate digest TFM handle sha384-generic [ 118.089377][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.80'. [ 118.101700][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.78'. [ 118.186847][ T6227] loop7: detected capacity change from 0 to 16384 [ 118.593572][ T6231] loop7: detected capacity change from 16384 to 16383 [ 118.689053][ T6221] syz.3.78 (6221): drop_caches: 2 [ 119.010233][ T6244] syzkaller0: entered promiscuous mode [ 119.036379][ T6244] syzkaller0: entered allmulticast mode [ 119.721675][ T6267] netlink: 56 bytes leftover after parsing attributes in process `syz.3.92'. [ 120.034445][ T6270] process 'syz.4.93' launched './file0' with NULL argv: empty string added [ 120.839683][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.965374][ T6287] netlink: 'syz.4.98': attribute type 25 has an invalid length. [ 120.983664][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 121.023462][ T6287] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 121.092516][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.120134][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.151181][ T5903] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.199693][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.242416][ T5903] usb 2-1: config 0 descriptor?? [ 121.293229][ T5903] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 121.622879][ T5919] usb 2-1: USB disconnect, device number 2 [ 121.680346][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.830974][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 121.844869][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.900583][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.933531][ T5903] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.952059][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.005026][ T5903] usb 5-1: config 0 descriptor?? [ 122.040811][ T5903] hub 5-1:0.0: USB hub found [ 122.244850][ T5903] hub 5-1:0.0: 1 port detected [ 122.408579][ T6299] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 122.434650][ T6299] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 122.504068][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 122.546201][ T6299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.768467][ T6305] bond_slave_0: entered promiscuous mode [ 122.774464][ T6305] bond_slave_1: entered promiscuous mode [ 122.780378][ T6305] syz_tun: entered promiscuous mode [ 122.804658][ T6305] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.814158][ T6305] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 122.824623][ T6305] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 122.839726][ T6305] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 122.851001][ T815] hub 5-1:0.0: activate --> -90 [ 122.904977][ T6308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.259685][ T815] usb 5-1-port1: config error [ 123.266048][ T5919] usb 5-1: USB disconnect, device number 4 [ 123.644122][ T6317] FAULT_INJECTION: forcing a failure. [ 123.644122][ T6317] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.697920][ T6317] CPU: 1 UID: 0 PID: 6317 Comm: syz.3.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.697955][ T6317] Tainted: [L]=SOFTLOCKUP [ 123.697962][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.697975][ T6317] Call Trace: [ 123.697983][ T6317] [ 123.697992][ T6317] dump_stack_lvl+0xe8/0x150 [ 123.698040][ T6317] should_fail_ex+0x412/0x560 [ 123.698076][ T6317] _copy_from_user+0x2d/0xb0 [ 123.698108][ T6317] ___sys_sendmsg+0x1c6/0x360 [ 123.698136][ T6317] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.698193][ T6317] ? __fget_files+0x2a/0x420 [ 123.698219][ T6317] ? __fget_files+0x3a0/0x420 [ 123.698256][ T6317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 123.698281][ T6317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.698312][ T6317] ? __pfx_ksys_write+0x10/0x10 [ 123.698355][ T6317] do_syscall_64+0x14d/0xf80 [ 123.698377][ T6317] ? trace_irq_disable+0x3b/0x150 [ 123.698405][ T6317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.698426][ T6317] ? clear_bhb_loop+0x40/0x90 [ 123.698451][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.698472][ T6317] RIP: 0033:0x7f951bb9bf79 [ 123.698497][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.698518][ T6317] RSP: 002b:00007f951cad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.698545][ T6317] RAX: ffffffffffffffda RBX: 00007f951be15fa0 RCX: 00007f951bb9bf79 [ 123.698560][ T6317] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000003 [ 123.698572][ T6317] RBP: 00007f951cad5090 R08: 0000000000000000 R09: 0000000000000000 [ 123.698584][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.698596][ T6317] R13: 00007f951be16038 R14: 00007f951be15fa0 R15: 00007f951bf3fa48 [ 123.698628][ T6317] [ 123.736905][ T6316] netlink: 'syz.0.109': attribute type 25 has an invalid length. [ 123.970248][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 123.998670][ T6316] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 124.988425][ T6348] input: syz1 as /devices/virtual/input/input9 [ 126.640101][ T6364] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 126.761544][ T6364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.802291][ T6371] netlink: 'syz.0.125': attribute type 25 has an invalid length. [ 126.815191][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 126.890131][ T6367] bond1: (slave bridge1): making interface the new active one [ 126.934743][ T6367] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 126.962568][ T6371] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 127.426353][ T6383] netlink: 180 bytes leftover after parsing attributes in process `syz.0.129'. [ 127.492217][ T6383] netlink: 'syz.0.129': attribute type 2 has an invalid length. [ 127.500108][ T6383] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 127.523496][ T6378] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 127.945482][ T6391] syzkaller0: entered promiscuous mode [ 127.961226][ T6391] syzkaller0: entered allmulticast mode [ 128.846331][ T6404] QAT: failed to copy from user cfg_data. [ 129.820284][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.137'. [ 129.881008][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 130.329213][ T6412] netlink: 'syz.1.139': attribute type 25 has an invalid length. [ 130.355614][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 131.257696][ T6412] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 131.578290][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 131.653467][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 131.762019][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 131.762037][ T29] audit: type=1326 audit(1771190762.110:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 131.978093][ T29] audit: type=1326 audit(1771190762.110:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.041105][ T29] audit: type=1326 audit(1771190762.110:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.143730][ T29] audit: type=1326 audit(1771190762.110:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.259199][ T29] audit: type=1326 audit(1771190762.110:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.388327][ T29] audit: type=1326 audit(1771190762.110:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.484310][ T29] audit: type=1326 audit(1771190762.110:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.558153][ T6447] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 132.577308][ T29] audit: type=1326 audit(1771190762.120:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.735298][ T29] audit: type=1326 audit(1771190762.120:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.848174][ T29] audit: type=1326 audit(1771190762.120:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 132.901303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.913864][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.399072][ T815] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.572071][ T815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.579920][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.592673][ T815] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.611392][ T815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.791621][ T815] usb 3-1: config 0 descriptor?? [ 133.796774][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 133.829816][ T815] pwc: Askey VC010 type 2 USB webcam detected. [ 133.847474][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.906017][ T9] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 133.928236][ T9] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 133.982400][ T9] usb 4-1: config 13 has no interface number 0 [ 134.003086][ T9] usb 4-1: config 13 interface 50 altsetting 167 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 134.026310][ T9] usb 4-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.074228][ T9] usb 4-1: config 13 interface 50 has no altsetting 0 [ 134.106357][ T9] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 134.115858][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.127684][ T9] usb 4-1: Product: syz [ 134.133124][ T9] usb 4-1: Manufacturer: syz [ 134.138323][ T9] usb 4-1: SerialNumber: syz [ 134.454996][ T815] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.462467][ T815] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.539828][ T815] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.561206][ T815] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.583659][ T815] pwc: recv_control_msg error -32 req 04 val 1400 [ 134.603485][ T815] pwc: recv_control_msg error -32 req 02 val 2000 [ 134.615507][ T815] pwc: recv_control_msg error -32 req 02 val 2100 [ 134.628093][ T815] pwc: recv_control_msg error -32 req 04 val 1500 [ 134.637687][ T815] pwc: recv_control_msg error -32 req 02 val 2500 [ 134.645708][ T815] pwc: recv_control_msg error -32 req 02 val 2400 [ 134.657728][ T815] pwc: recv_control_msg error -32 req 02 val 2600 [ 134.667000][ T815] pwc: recv_control_msg error -32 req 02 val 2900 [ 134.676059][ T815] pwc: recv_control_msg error -32 req 02 val 2800 [ 134.887328][ T815] pwc: recv_control_msg error -71 req 04 val 1200 [ 134.911774][ T815] pwc: Registered as video103. [ 134.957479][ T815] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 135.040815][ T815] usb 3-1: USB disconnect, device number 4 [ 135.742100][ T6471] netlink: 'syz.2.153': attribute type 25 has an invalid length. [ 135.749996][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 135.758960][ T6471] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.927518][ T6473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 136.027140][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 136.659728][ T5850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.834634][ T5850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 136.989688][ T5850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 137.070967][ T5850] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 137.083647][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.095895][ T5850] usb 2-1: Product: syz [ 137.133117][ T5850] usb 2-1: Manufacturer: syz [ 137.141191][ T5850] usb 2-1: SerialNumber: syz [ 137.146084][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.154637][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 137.162527][ T5850] usb 2-1: config 0 descriptor?? [ 137.174418][ T6483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.209920][ T6483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.252363][ T5850] option 2-1:0.0: GSM modem (1-port) converter detected [ 137.310718][ T9] usb 4-1: USB disconnect, device number 4 [ 137.328317][ T5850] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 137.473204][ T5916] usb 2-1: USB disconnect, device number 3 [ 137.561807][ T6494] udevd[6494]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.687364][ T5916] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 137.740785][ T5916] option 2-1:0.0: device disconnected [ 138.366271][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 138.366292][ T29] audit: type=1326 audit(1771190768.720:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 138.465805][ T29] audit: type=1326 audit(1771190768.720:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 138.535467][ T29] audit: type=1326 audit(1771190768.720:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 138.612936][ T29] audit: type=1326 audit(1771190768.720:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 138.723364][ T29] audit: type=1326 audit(1771190768.720:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 138.813861][ T29] audit: type=1326 audit(1771190768.720:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 138.914517][ T29] audit: type=1326 audit(1771190768.720:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 138.989702][ T29] audit: type=1326 audit(1771190768.720:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 139.189697][ T5916] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.190197][ T29] audit: type=1326 audit(1771190768.720:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 139.282191][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 139.301708][ T29] audit: type=1326 audit(1771190768.730:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd0f9bf79 code=0x7ffc0000 [ 139.481944][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 139.519714][ T5916] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 139.538527][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.592484][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.168'. [ 139.592661][ T5916] pvrusb2: Hardware description: Terratec Grabster AV400 [ 139.639832][ T5916] pvrusb2: ********** [ 139.640395][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 139.643999][ T5916] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 139.704259][ T5916] pvrusb2: Important functionality might not be entirely working. [ 139.723989][ T5916] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 139.753160][ T5916] pvrusb2: ********** [ 139.789650][ T5916] usb 3-1: USB disconnect, device number 5 [ 139.798990][ T2345] pvrusb2: Invalid write control endpoint [ 139.945971][ T2345] pvrusb2: Invalid write control endpoint [ 139.973958][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 140.006823][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 140.026597][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 140.059628][ T2345] pvrusb2: Device being rendered inoperable [ 140.078650][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 140.103418][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 140.141102][ T2345] pvrusb2: Attached sub-driver cx25840 [ 140.158368][ T6522] openvswitch: netlink: Message has 4 unknown bytes. [ 140.186825][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 140.210821][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 141.051194][ T6541] input: syz1 as /devices/virtual/input/input11 [ 141.098040][ T6541] binder: 6534:6541 ioctl 806c4120 200000000300 returned -22 [ 141.216654][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 141.405416][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.179'. [ 141.583236][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 143.580871][ T6581] bond1: Removing last ns target with arp_interval on [ 145.711451][ T6617] input: syz1 as /devices/virtual/input/input13 [ 145.736109][ T6617] binder: 6612:6617 ioctl 806c4120 200000000300 returned -22 [ 146.558549][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 146.573087][ T6625] netlink: 'syz.2.205': attribute type 24 has an invalid length. [ 146.598954][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 146.703239][ T6625] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 146.967464][ T6634] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 147.629904][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 147.824562][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 147.866977][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.898317][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 147.916834][ T9] usb 1-1: can't read configurations, error -71 [ 148.023682][ T6645] delete_channel: no stack [ 148.364248][ T6662] macsec1: entered promiscuous mode [ 148.382802][ T6662] macsec1: entered allmulticast mode [ 148.410130][ T5903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.480120][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.583665][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 148.604456][ T5903] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 148.624366][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.639829][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.657738][ T5903] usb 5-1: Product: syz [ 148.660413][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.669528][ T5903] usb 5-1: Manufacturer: syz [ 148.676356][ T5903] usb 5-1: SerialNumber: syz [ 148.699652][ T5917] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 148.719085][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.728718][ T5903] usb 5-1: config 0 descriptor?? [ 148.754432][ T5917] usb 4-1: config 0 descriptor?? [ 148.812646][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 148.826484][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 148.856231][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.873909][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.898302][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.912037][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.922943][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.191033][ T5919] usb 2-1: usb_control_msg returned -32 [ 149.203041][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 149.234883][ T5917] hid (null): invalid report_count 304738125 [ 149.261739][ T5917] itetech 0003:258A:6A88.0001: invalid report_count 304738125 [ 149.289844][ T5917] itetech 0003:258A:6A88.0001: item 0 4 1 9 parsing failed [ 149.310893][ T5917] itetech 0003:258A:6A88.0001: probe with driver itetech failed with error -22 [ 149.389693][ T5916] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.425261][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.437234][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.459907][ T5903] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 149.465384][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 149.511263][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 149.539092][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'. [ 149.557443][ T5917] usb 4-1: USB disconnect, device number 5 [ 149.584380][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 149.622017][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 149.666390][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.677502][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.715461][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.728526][ T5916] usb 1-1: config 182 has an invalid interface number: 132 but max is 0 [ 149.749967][ T5916] usb 1-1: config 182 has no interface number 0 [ 149.756311][ T5916] usb 1-1: config 182 interface 132 has no altsetting 0 [ 149.797804][ T5916] usb 1-1: string descriptor 0 read error: -22 [ 149.812912][ T5916] usb 1-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 149.830641][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.304674][ T6689] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 150.328455][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.355652][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.392037][ T5917] usb 5-1: USB disconnect, device number 5 [ 150.579747][ T5916] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.869791][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 150.885960][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.900751][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.946431][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.961712][ T5916] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 150.996621][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.052689][ T5916] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 151.068111][ T5916] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 151.082068][ T5916] usb 4-1: Manufacturer: syz [ 151.141285][ T5916] usb 4-1: config 0 descriptor?? [ 151.335764][ T815] usb 2-1: USB disconnect, device number 4 [ 151.539758][ T5916] rc_core: IR keymap rc-hauppauge not found [ 151.561568][ T5916] Registered IR keymap rc-empty [ 151.578656][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.610196][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.657005][ T5916] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 151.702862][ T5916] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 151.749814][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.810802][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.859716][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.922777][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.955551][ T815] usb 1-1: USB disconnect, device number 4 [ 152.000047][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.066589][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.096029][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.109696][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.125194][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.165954][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.222132][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.250267][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.317430][ T5916] mceusb 4-1:0.0: Registered ⹱ with mce emulator interface version 1 [ 152.330338][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.356979][ T5916] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 152.549629][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 152.603575][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.623262][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 152.650035][ T9] usb 2-1: can't read configurations, error -71 [ 152.673005][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.886657][ T5917] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 152.896991][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.906638][ T5917] usb 5-1: Product: syz [ 152.911594][ T5917] usb 5-1: Manufacturer: syz [ 152.916236][ T5917] usb 5-1: SerialNumber: syz [ 153.153328][ T5917] gspca_main: pac207-2.14.0 probing 093a:2476 [ 153.168535][ T5917] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 153.178634][ T5917] uvcvideo 5-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 153.193435][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 153.205401][ T5917] uvcvideo 5-1:13.0: No valid video chain found. [ 153.261824][ T5917] usb 5-1: USB disconnect, device number 6 [ 153.317829][ T815] usb 4-1: USB disconnect, device number 6 [ 153.339232][ T6728] bridge0: entered promiscuous mode [ 153.359218][ T6728] macsec1: entered promiscuous mode [ 153.379266][ T6728] macsec1: entered allmulticast mode [ 153.386566][ T6728] bridge0: entered allmulticast mode [ 153.445635][ T6728] bridge0: port 3(macsec1) entered blocking state [ 153.489762][ T6728] bridge0: port 3(macsec1) entered disabled state [ 153.542801][ T6728] bridge0: left allmulticast mode [ 153.563837][ T6728] bridge0: left promiscuous mode [ 153.726369][ T6743] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 154.488707][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 154.488819][ T29] audit: type=1326 audit(1771190784.880:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 154.699403][ T29] audit: type=1326 audit(1771190784.880:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 154.769763][ T29] audit: type=1326 audit(1771190784.880:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 154.817092][ T29] audit: type=1326 audit(1771190784.880:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 154.934804][ T29] audit: type=1326 audit(1771190784.880:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 155.080257][ T29] audit: type=1326 audit(1771190784.880:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 155.188341][ T29] audit: type=1326 audit(1771190784.880:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 155.281729][ T29] audit: type=1326 audit(1771190784.880:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 155.366927][ T29] audit: type=1326 audit(1771190784.880:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 155.451655][ T29] audit: type=1326 audit(1771190785.090:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f241499bf79 code=0x7ffc0000 [ 156.308914][ T5917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.479678][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 156.524579][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.558556][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 156.596429][ T6778] netlink: 80 bytes leftover after parsing attributes in process `syz.2.253'. [ 156.629653][ T5917] usb 1-1: can't read configurations, error -71 [ 156.633833][ T6778] netlink: 68 bytes leftover after parsing attributes in process `syz.2.253'. [ 157.161701][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 157.247194][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 157.454824][ T6809] fuse: Bad value for 'fd' [ 159.054003][ T6825] netlink: 'syz.1.265': attribute type 10 has an invalid length. [ 159.166859][ T6825] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 159.416650][ T6826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.458196][ T6827] bond_slave_0: entered promiscuous mode [ 159.464010][ T6827] bond_slave_1: entered promiscuous mode [ 159.469785][ T6827] syz_tun: entered promiscuous mode [ 159.480642][ T6827] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.529029][ T6827] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 159.583562][ T6827] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 160.012891][ T6841] blktrace: Concurrent blktraces are not allowed on sg0 [ 160.386256][ T6854] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 160.465091][ T6854] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 160.477284][ T6854] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.228378][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 162.149733][ T5916] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.312285][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.342950][ T5916] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 162.372894][ T5916] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 162.399772][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.440656][ T5916] usb 4-1: Product: syz [ 162.444889][ T5916] usb 4-1: Manufacturer: syz [ 162.449513][ T5916] usb 4-1: SerialNumber: syz [ 162.783427][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.829381][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 162.839732][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 162.849975][ T5916] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 163.030956][ T5917] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 163.039145][ T5917] usb 1-1: can't read configurations, error -22 [ 163.180862][ T5917] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.373357][ T5917] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 163.389802][ T5917] usb 1-1: can't read configurations, error -22 [ 163.410001][ T5917] usb usb1-port1: attempt power cycle [ 163.486039][ T815] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.560154][ T5916] usb 4-1: device descriptor read/64, error -71 [ 163.659672][ T815] usb 3-1: Using ep0 maxpacket: 32 [ 163.684878][ T815] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 163.712416][ T815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.729828][ T815] usb 3-1: Product: syz [ 163.734040][ T815] usb 3-1: Manufacturer: syz [ 163.740740][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.758040][ T815] usb 3-1: SerialNumber: syz [ 163.769666][ T5917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.786824][ T815] usb 3-1: config 0 descriptor?? [ 163.804046][ T815] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 163.804144][ T5917] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 163.813197][ T5916] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 163.816857][ T815] dw2102: su3000_power_ctrl: 1, initialized 0 [ 163.836562][ T5917] usb 1-1: can't read configurations, error -22 [ 163.853105][ T815] dvb-usb: bulk message failed: -22 (2/0) [ 163.869015][ T815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.899350][ T815] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 163.916640][ T815] usb 3-1: media controller created [ 163.926006][ T815] dvb-usb: bulk message failed: -22 (6/0) [ 163.935805][ T5896] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.947396][ T815] dw2102: i2c transfer failed. [ 163.957483][ T5896] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.973084][ T815] dvb-usb: bulk message failed: -22 (6/0) [ 163.985315][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.993824][ T815] dw2102: i2c transfer failed. [ 163.998931][ T815] dvb-usb: bulk message failed: -22 (6/0) [ 164.005096][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.010306][ T5918] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.021822][ T815] dw2102: i2c transfer failed. [ 164.023839][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.029858][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 164.049021][ T5917] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.061327][ T815] dvb-usb: bulk message failed: -22 (6/0) [ 164.081645][ T815] dw2102: i2c transfer failed. [ 164.094810][ T6899] dvb-usb: bulk message failed: -22 (3/0) [ 164.129821][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.139921][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 164.153860][ T6899] dw2102: i2c transfer failed. [ 164.167991][ T5916] usb 4-1: device firmware changed [ 164.178554][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 164.201617][ T5896] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.221237][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 164.231423][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 164.245458][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 164.270318][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.281177][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.294722][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.304446][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.330503][ T6899] dw2102: i2c transfer failed. [ 164.333354][ T5916] usb 4-1: USB disconnect, device number 7 [ 164.342875][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.347415][ T6899] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 164.362794][ T6899] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 164.371232][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.2.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.381998][ T6899] Tainted: [L]=SOFTLOCKUP [ 164.386417][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.396493][ T6899] RIP: 0010:su3000_i2c_transfer+0x2e3/0xfd0 [ 164.402414][ T6899] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ca ac 3a fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 7c 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 164.422038][ T6899] RSP: 0018:ffffc9001033fbb0 EFLAGS: 00010202 [ 164.428117][ T6899] RAX: 0000000000000002 RBX: 0000000000000010 RCX: a944dfbd051f9600 [ 164.436110][ T6899] RDX: ffffc9000f0d7000 RSI: 0000000000004671 RDI: 0000000000004672 [ 164.444105][ T6899] RBP: 0000000000000001 R08: ffffc9001033f927 R09: 1ffff92002067f24 [ 164.452102][ T6899] R10: dffffc0000000000 R11: fffff52002067f25 R12: 0000000000000002 [ 164.460104][ T6899] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff888056484b18 [ 164.468089][ T6899] FS: 00007fe1d55956c0(0000) GS:ffff88812546f000(0000) knlGS:0000000000000000 [ 164.477023][ T6899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.483622][ T6899] CR2: 000000110c318f84 CR3: 0000000067e5a000 CR4: 00000000003526f0 [ 164.491616][ T6899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.499617][ T6899] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 164.507623][ T6899] Call Trace: [ 164.510943][ T6899] [ 164.513886][ T6899] __i2c_transfer+0x79a/0x2020 [ 164.518717][ T6899] ? i2c_transfer+0xc8/0x2d0 [ 164.523326][ T6899] i2c_transfer+0x1cc/0x2d0 [ 164.527844][ T6899] i2cdev_ioctl_rdwr+0x460/0x740 [ 164.532817][ T6899] i2cdev_ioctl+0x6a5/0x880 [ 164.537422][ T6899] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 164.542597][ T6899] ? __fget_files+0x3a0/0x420 [ 164.547295][ T6899] ? __fget_files+0x2a/0x420 [ 164.551953][ T6899] ? bpf_lsm_file_ioctl+0x9/0x20 [ 164.556945][ T6899] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 164.562026][ T6899] __se_sys_ioctl+0xfc/0x170 [ 164.566626][ T6899] do_syscall_64+0x14d/0xf80 [ 164.571227][ T6899] ? trace_irq_disable+0x3b/0x150 [ 164.576266][ T6899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.582339][ T6899] ? clear_bhb_loop+0x40/0x90 [ 164.587030][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.592931][ T6899] RIP: 0033:0x7fe1d479bf79 [ 164.597394][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.617006][ T6899] RSP: 002b:00007fe1d5595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.625453][ T6899] RAX: ffffffffffffffda RBX: 00007fe1d4a15fa0 RCX: 00007fe1d479bf79 [ 164.633434][ T6899] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 164.641414][ T6899] RBP: 00007fe1d48327e0 R08: 0000000000000000 R09: 0000000000000000 [ 164.649395][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.657381][ T6899] R13: 00007fe1d4a16038 R14: 00007fe1d4a15fa0 R15: 00007fe1d4b3fa48 [ 164.665395][ T6899] [ 164.668425][ T6899] Modules linked in: [ 164.673384][ T6899] ---[ end trace 0000000000000000 ]--- [ 164.693198][ T5918] usb 5-1: usb_control_msg returned -32 [ 164.698844][ T5918] usbtmc 5-1:16.0: can't read capabilities [ 164.709147][ T5896] usb 2-1: Product: syz [ 164.714012][ T5896] usb 2-1: Manufacturer: syz [ 164.723921][ T5917] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 164.738507][ T5917] usb 1-1: can't read configurations, error -22 [ 164.750418][ T5917] usb usb1-port1: unable to enumerate USB device [ 164.839868][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 164.848130][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 164.869666][ T5896] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 164.876771][ T5896] cdc_wdm 2-1:1.0: Unknown control protocol [ 164.938944][ T6899] RIP: 0010:su3000_i2c_transfer+0x2e3/0xfd0 [ 164.955057][ T6899] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ca ac 3a fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 7c 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 164.989160][ T6899] RSP: 0018:ffffc9001033fbb0 EFLAGS: 00010202 [ 165.004168][ T6899] RAX: 0000000000000002 RBX: 0000000000000010 RCX: a944dfbd051f9600 [ 165.020620][ T6899] RDX: ffffc9000f0d7000 RSI: 0000000000004671 RDI: 0000000000004672 [ 165.037747][ T6899] RBP: 0000000000000001 R08: ffffc9001033f927 R09: 1ffff92002067f24 [ 165.053890][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.294'. [ 165.064200][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 165.077049][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.087290][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.103186][ T6899] R10: dffffc0000000000 R11: fffff52002067f25 R12: 0000000000000002 [ 165.121118][ T6899] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff888056484b18 [ 165.136710][ T6899] FS: 00007fe1d55956c0(0000) GS:ffff88812546f000(0000) knlGS:0000000000000000 [ 165.153695][ T6899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.167626][ T6899] CR2: 0000200000305030 CR3: 0000000067e5a000 CR4: 00000000003526f0 [ 165.186672][ T6899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.204794][ T6899] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 165.224572][ T6899] Kernel panic - not syncing: Fatal exception [ 165.231297][ T6899] Kernel Offset: disabled [ 165.235640][ T6899] Rebooting in 86400 seconds..