last executing test programs: 5.181956698s ago: executing program 0 (id=156): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000be2000/0x2000)=nil, 0x2000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x1135010, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x1, 0x1}, {0xe, 0x5}, {0x8, 0xd}}, [{0x4}, {0x4}]}, 0x2c}}, 0x44800) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0xf8, 0x2c, 0x100, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x2}, {0x0, 0xfff3}, {0xf, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc8, 0x2, [@TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x20, 0x2}, {0x0, 0x7f, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0x4, 0x4}, {0xc, 0x1, 0x1}}}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR='G', @TCF_META_TYPE_VAR="99", @TCF_META_TYPE_VAR="7542db", @TCF_META_TYPE_VAR="1e949a0a9d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='j']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x332e, 0x9, 0x2}, {0x8, 0x4, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x400, 0x1, 0x4}, {0x5, 0x3, 0x6, 0x1, 0xe, 0x0, 0x2}}}, @TCF_EM_IPT={0x34, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xf9d, 0x3, 0x4}, {0x4, 0x9, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.299310058s ago: executing program 3 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) flock(r1, 0x2) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000200)=""/87, 0x57, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x40000}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) 4.187850217s ago: executing program 3 (id=163): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) getpid() ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0xd47, 0xfffffffffffffff8, 0x7, 0x4, 0x2000000fff8, 0x4000000000000000, 0x5, 0x4000000000a, 0xffffffffffff2c16, 0x3, 0x200200040002, 0x4, 0x7, 0x5, 0x9, 0x100000008], 0x200000, 0x40000}) sendfile(r0, r1, &(0x7f00000000c0)=0x6ba, 0x8000082) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_open_dev$dri(&(0x7f00000002c0), 0x3, 0x210201) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) gettid() r3 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240)=r2, 0x12) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc02c5625, &(0x7f0000002940)={0x0, 0x6, "9a0f0134c966e134d14000aaaa7da80f8e4fa888dece6ffdb507a30100000028", 0xffffdfffff7fa4c5, 0x9, 0xf36, 0x46, 0x10001, 0x5, 0x0, 0x8000008, [0x5, 0x0, 0x0, 0x2d6]}) r4 = syz_io_uring_setup(0x42b7, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000080)=0x0) unshare(0x2a000600) r7 = io_uring_setup(0x1b7b, &(0x7f0000000300)={0x0, 0xc89f, 0x100, 0x7, 0x20402f3}) io_uring_enter(r7, 0x102219, 0x4204, 0x7c, 0x0, 0x0) syz_ublk_setup_io_uring(0x1987, &(0x7f0000000540)={0x0, 0x8fb2, 0x20000, 0x100001, 0x256}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, r6, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1, {0x0, r8}}) io_uring_enter(r4, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x197) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB="664401", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000001dc0)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) 3.672914525s ago: executing program 2 (id=165): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close(r1) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000240)={"dcccc1e0d90dd33e78d009ea45a5bfa5d5750202decc22062f8091ef960f", 0x1, 0xfffffffb, 0x0, [0xcad8, 0x8d5, 0x5, 0xba733a9, 0x40, 0x29, 0x80000000, 0xfd, 0x5, 0x1, 0x8, 0x1, 0x4, 0x1, 0x2, 0xb3cb, 0x7, 0x8]}) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x7fffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c0009050202000202000009058202"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) socket$netlink(0x10, 0x3, 0xb) 3.582627433s ago: executing program 1 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) flock(r1, 0x2) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000200)=""/87, 0x57, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x80000}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) 3.309025024s ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000ff9500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.982255413s ago: executing program 1 (id=168): unshare(0x400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0xffffffff]}}) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (fail_nth: 1) 2.848624435s ago: executing program 3 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x5}, {0x36, 0xb, 0x3, 0x5, 0x9, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x6}, {0x7}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200450c0}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2.390671742s ago: executing program 1 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1ff, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000002100006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.81631642s ago: executing program 4 (id=174): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x0, 0xfd, 0xff}]}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="ac141410e00004010000000010000000000000000000000007"], 0x30}, 0x6000000000000000) 1.743844415s ago: executing program 3 (id=175): unshare(0x8040480) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000540)={{0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x40000, &(0x7f0000000180)={@align=0x2, {0xec6, 0x4, 0x40, 0x4}}, 0x3, &(0x7f00000001c0), &(0x7f0000000400)=0x7}, {[0x0, 0x1, 0x7fff, 0xd]}, 0x30, 0xf4, &(0x7f0000000440)=""/244}) (async) unshare(0x36ca3eb8054a631f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x3}}, @datasec={0x8, 0x7, 0x0, 0xf, 0x3, [{0x5, 0x5, 0x6}, {0x5, 0xa, 0x1}, {0x2, 0x7, 0x4}, {0x4, 0x5, 0x10000}, {0x3, 0x1, 0x7}, {0x4, 0x9c, 0x5b9b}, {0x4, 0x3, 0xed9f}], 'usg'}]}}, &(0x7f0000000200)=""/37, 0x96, 0x25, 0x0, 0x3, 0x10000, @value=r0}, 0x28) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x561440) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x97}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.675808269s ago: executing program 0 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x5, 0x400, 0x8}) 1.674997655s ago: executing program 4 (id=177): r0 = socket$igmp6(0xa, 0x3, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000001140)=0x0, &(0x7f0000001180)=0x0, &(0x7f00000011c0)) read$FUSE(0xffffffffffffffff, &(0x7f000001b380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001b300)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000600)="d1dea0f87c6eee08d8168114551bc7b2cc8ba2ddd00c7a413ce74fb45e215fe43810035586af472322b0bb5f4b9fd96d8ef9705f4243aadeda5abed3393f47ef106ff4271b539761cb0c6db7e97c6fc9aaea28b805fe46bc1a2fdb77b6baf87256df528eafd7967c84447422d44b01c40525645a7a0a47174300b5db95e123ed8daa51c6fe7af7e473b68fc6fcbe8b6172fb4aad9d6a2591e62ac33bae79a016b875ed03e3a6e9c8cb81a4fd65e6", 0xae}, {&(0x7f0000000880)="f144240fb779dd14e0d666b5997fc169288372e1b93849ab0d37daf042c53f5e0e555a0078d401906100e2b8f420069cb6081694d974662e02349ab4918c4308447b8818851db9bdccce1271ae42629c3d81abc5a124fb32799cf5f08a40f69a77d698b4df95adea4a64aa7019e8d8a25da27d129b217928b7dea92fac71d6302e968328f869d6a53cb56333dba1a42f2d5e363c4fdba3cd6e0f98a5e83d8d0ce07165adbc74c394e9efc74578eb8f7c0ad597d4d59c7daa87e633f4950ab368510fa0c83f4b76db1fd87b6b73b752b5f7e4b9f05af8a5eb6933289d3f6167ddab", 0xe1}, {0x0}, {&(0x7f0000000c00)="72d7d2d257ae582a537e723295afcac1084b6d7ed52a56e28db4754081f7c48f8db761d0c0bfc683cf8524c063e4", 0x2e}, {&(0x7f0000000c40)="0a7ec1c35f820f6b6c4ea316d045b153a02c7bff07800971d1fb275c3a1ab066f05c9bf4d4875e52c0536668454a0b94a358aa78accf42a571e538b97f847548c9fa24059e565642f6c499c729c3c2634f19591eb9cb", 0x56}], 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="1c080000000000000020000000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32], 0x88, 0x8000}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f00)="68ab66c023d8384c2559ae556ec73be9825ce0b2ba8dd22cbbad2a22c51c48c10a0111d5f51a1b06dd61752bbce7e429979a47b966cccc409f74d5d667943464a941522227d21219f8f9eae232bb04f87b1cb869c818283488e900cab7fb72442cc97aea579a73bafc1f6bc2874b1f01a545906c0fa97e1ffe792e9e8cab", 0x7e}], 0x1, &(0x7f000001b240)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r3}}}], 0x70, 0x4884}}], 0x2, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setfsuid(0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r8}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@getspdinfo={0x14, 0x25, 0x300, 0x70bd2b, 0x25dfdbfe, 0xffff, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4008080) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000000000080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008d0) 1.543666437s ago: executing program 3 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x8001, 0x30, 0xa, 0x9}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x1000}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e002102000000000000000007000000080044800400f38084556ed2"], 0x1c}}, 0x4000080) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r0, 0x100000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000178c61100000500000a44080000090a010400000000000000000a0000040900010073797a310000000008000540000000240900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a00000609d6780073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000020a0102000000000016000000000002140000001100010000000000000000000100000a0000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) landlock_restrict_self(0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000077b116000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b70300000700000085000000060000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) r8 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r9 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000001c0)={0xe0000004}) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) 1.543146756s ago: executing program 0 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000ffbf00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.440380302s ago: executing program 1 (id=180): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x4, 0x1, 0x4000}, 0x7d, 0x0, 0x4, 0x0, 0x4, 0xf, 0x10, 0x12, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}}}}]}, 0x78}}, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x50, 0x9, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x4, 0x7, {0xa, 0x25, 0x25, 0x9, 0x5, 0x4a2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x5, 0x4, {0xa, 0x25, 0x25, 0x8, 0x9, 0xf}}}}}}}}]}}, 0x0) 1.433618959s ago: executing program 4 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x9, 0xbde, 0xb, 0x10000}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x5, 0xe51, 0x2, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0x7b00, 0x1, 0x40000000009, 0x5, 0x6a], 0x50000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.414497274s ago: executing program 0 (id=182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=r0, @ANYBLOB="00000000420000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB="84ca2a7d73e6aaf4d6fe13ce0201c34645d21861ad"], 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r7, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)=""/41, 0x2}, 0x20) 588.260334ms ago: executing program 3 (id=183): unshare(0x62020300) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) unshare(0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000500)={0x1, @win={{0x6, 0x7fffffff, 0x4, 0x100}, 0x4, 0x1, 0x0, 0x5, 0x0, 0x1}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x20d00) read(r6, &(0x7f00000002c0)=""/200, 0x39) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r5, 0x29, 0x2, 0x8, 0x8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x300}, 0x700, 0x20, 0xb05, 0x8}}) unshare(0x8020100) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000e35000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x4, 0xe, 0xf1, 0x3, 0xfd, 0xd7, 0xd4, 0x0, 0xd7, 0xf7, 0x47}, {0x0, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0xf, 0x3, 0x45}, {0x8080000, 0xdddd0000, 0xb, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x96, 0xc4, 0x5}, {0xeeee3000, 0x4, 0x4, 0xf8, 0x3, 0x68, 0x9, 0xd, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0x9, 0x2c, 0x4b}, {0x9000, 0xd000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0xfc}, {0xa000, 0xc000, 0xf, 0x82, 0x3, 0xfb, 0x0, 0x5, 0x1, 0x7, 0x43, 0xf9}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0xff, 0xa, 0x1, 0x54, 0x1, 0xff, 0x7}, {0x692daea2027b6777, 0x5}, {0x80a0000, 0x8}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x6, 0xe000, 0xe6e70c00, [0x3, 0x401, 0x8, 0xc5]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0x7a, 0x3, '\x00', 0xb031}) ioctl$KVM_SIGNAL_MSI(r8, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 518.569436ms ago: executing program 0 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x7c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x200feff}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x647d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0x30, 0x1, {0x7e, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 473.270241ms ago: executing program 4 (id=185): prctl$PR_SET_MM(0x23, 0xa, &(0x7f000011c000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = socket(0x29, 0x5, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)}, 0x60000c1) r4 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) close(0x4) preadv(r0, &(0x7f0000001400)=[{0x0}], 0x1, 0xc002a0, 0x0) 452.567247ms ago: executing program 0 (id=186): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000480)={0x2, 0x0, [{0x7, 0x7b, 0x0, 0x4, 0xa5fa, 0x7, 0xffffff43}, {0x80000008, 0xffffffff, 0x1, 0xde74b75, 0x4, 0xc, 0x4}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000840)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="8e2c7245ed5bec316d02b642021a45d87347e34d66d8b84291b6e968c4f9df683fd610e79225f3880e881d2df36b8ab0cbd7d27a7ca84ff364408d2caa7cc48dd345817b9530bea23267f910b3a0fdc5529472f56d50da77af3820c16df1e57b3568fd90649b54ad2c5ae334030974109677f6d04556c6e8b6fce030c6cd24c78d6d041e7aacc4bc92b718f4997b50b9603d2d65", 0x94, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r6}) fcntl$setlease(r5, 0x400, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f8410203010902120001020000000904"], 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000480)={0x2, 0x0, [{0x7, 0x7b, 0x0, 0x4, 0xa5fa, 0x7, 0xffffff43}, {0x80000008, 0xffffffff, 0x1, 0xde74b75, 0x4, 0xc, 0x4}]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000840)={"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"}) (async) syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) (async) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="8e2c7245ed5bec316d02b642021a45d87347e34d66d8b84291b6e968c4f9df683fd610e79225f3880e881d2df36b8ab0cbd7d27a7ca84ff364408d2caa7cc48dd345817b9530bea23267f910b3a0fdc5529472f56d50da77af3820c16df1e57b3568fd90649b54ad2c5ae334030974109677f6d04556c6e8b6fce030c6cd24c78d6d041e7aacc4bc92b718f4997b50b9603d2d65", 0x94}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r6}) (async) fcntl$setlease(r5, 0x400, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f8410203010902120001020000000904"], 0x0) (async) 450.923145ms ago: executing program 2 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x5}, {0x36, 0xb, 0x3, 0x5, 0x9, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x6}, {0x7}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200450c0}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 308.701823ms ago: executing program 4 (id=188): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}]}}}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) close_range(r0, r1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x800}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x7, 0xe1c, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x42, 0x1, 0x5, [{@multicast1, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'virt_wifi0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r12 = socket(0x15, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102384, &(0x7f0000000000)=0x18ff0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r13 = syz_open_dev$evdev(&(0x7f0000000580), 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000101, &(0x7f0000006780)={0x77359400}) ioctl$EVIOCGMTSLOTS(r13, 0x8040450a, &(0x7f0000006840)=""/214) r14 = socket(0x26, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001200010025bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014007c0067656e65766530000000000000000008"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 307.039076ms ago: executing program 2 (id=189): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300ffe1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) (async) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000f0ff370407bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c020000000000300012800b000100697036677265000020000280050008009600000014000700ff020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000f0ff370407bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c020000000000300012800b000100697036677265000020000280050008009600000014000700ff020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) statx(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0x2000, 0x200, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'ip6_vti0\x00', 0x0, 0x2f, 0xc, 0xf7, 0x5, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x700, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'ip6_vti0\x00', 0x0, 0x2f, 0xc, 0xf7, 0x5, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x700, 0x2}}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="980300001a00000425bd7000fedbdf2564010102000000000000000000000000ff0200000000000000000000000000014e241f934e2300090a00200039000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ac1414bb000000000000000000000000000004d533000000e000000100000000000000000000000081ffffffffffffffe11fb83300000000e677000000000000000000090000000000000000010000000700000000000000050000000000000005000000000000000080000000000000020000000000000008000000000000000700000000000000787d000008000000d50000002cbd7000033500000a00040700000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="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"/672], 0x398}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) (async) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 297.591229ms ago: executing program 4 (id=190): socket(0x11, 0x6, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0202001300ab00000028bd700001350000020013002700000027bd7000073500"/48], 0x30}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000020900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010300000000000000000100000a20000000000ad68fc2122e01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900810073797a30000000000900030073797a320000000028000000060a010300000000000000000100000008000b40000000000900010073797a30"], 0x9c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x1d8, 0x2e8, 0x2e8, 0x1d8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff000000, 0x7fffff7f], 'vcan0\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x4, "d8167b8584110c0000e6645f9841b10bedffffff0f00"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0xfffffffffffffffc, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2db8ebcd920a2b5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b250a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd7672") ptrace$getregset(0x4205, r8, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000740)={0x0}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r8, &(0x7f0000000040), 0x4003) 245.972232ms ago: executing program 2 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1ff, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000ffa100006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 112.299236ms ago: executing program 1 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x3800) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0x3000, 0x80a0000, 0x9, 0xe, 0x5, 0x4, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x50000, 0x1e, 0x5, 0x16, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0xb, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xd, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0xb, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x52, 0x6, 0x7d, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x4, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0x2, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0x4, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x152690, 0x7, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x6, 0x1000]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x32, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x26, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0x9, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x6, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x80, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x4, 0xa9, 0x1c, '\x00', 0xa}]}}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x26, @string={0x26, 0x3, "c647ec282cf980b7de4c6c8dd960147b3a387c0139d5c360a34917aa80d4d11f704b83bf"}}}, &(0x7f0000000480)={0x44, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x81, 0x1, "86"}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x3, "231bd0"}, &(0x7f0000000400)={0x20, 0x84, 0x2, 'f$'}, &(0x7f0000000440)={0x20, 0x85, 0x3, "ee6bba"}}) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 35.683832ms ago: executing program 2 (id=193): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0x1, 0x80, "e1fffff8000400000800105b4a3ef6e800001300", 0x34343459}) 0s ago: executing program 2 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000008, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200282}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) pwrite64(r5, 0x0, 0x39, 0x26c) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fadvise64(r6, 0x40, 0x8, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd1ba1095880c105e, 0xfff2}, {0x2, 0xa}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 196.085379][ T5638] cgroup: Unknown subsys name 'net' [ 196.189811][ T5638] cgroup: Unknown subsys name 'cpuset' [ 196.196904][ T5638] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 197.267654][ T5638] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 199.017285][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.020988][ T5653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.024742][ T5652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.032917][ T5653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.042459][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.045777][ T5653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.053216][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.068804][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.070092][ T5653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.083434][ T5653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.095002][ T5652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.102598][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.112114][ T5652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.121161][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.128253][ T5652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.131658][ T5659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.136399][ T5652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.143556][ T5659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.150166][ T5652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.157683][ T5659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.165970][ T5652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.171477][ T5659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.183363][ T5660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.192442][ T5652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.199663][ T5660] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.644326][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.651678][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.658985][ T5662] bridge_slave_0: entered allmulticast mode [ 199.665441][ T5662] bridge_slave_0: entered promiscuous mode [ 199.686234][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.693370][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.700675][ T5662] bridge_slave_1: entered allmulticast mode [ 199.707123][ T5662] bridge_slave_1: entered promiscuous mode [ 199.768440][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.775584][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.782789][ T5658] bridge_slave_0: entered allmulticast mode [ 199.789297][ T5658] bridge_slave_0: entered promiscuous mode [ 199.798999][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.806083][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.813662][ T5663] bridge_slave_0: entered allmulticast mode [ 199.820294][ T5663] bridge_slave_0: entered promiscuous mode [ 199.828420][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.843431][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.850560][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.857729][ T5658] bridge_slave_1: entered allmulticast mode [ 199.864488][ T5658] bridge_slave_1: entered promiscuous mode [ 199.873825][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.880993][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.888248][ T5663] bridge_slave_1: entered allmulticast mode [ 199.894862][ T5663] bridge_slave_1: entered promiscuous mode [ 199.902534][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.956629][ T5662] team0: Port device team_slave_0 added [ 199.962454][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.969756][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.976951][ T5661] bridge_slave_0: entered allmulticast mode [ 199.983708][ T5661] bridge_slave_0: entered promiscuous mode [ 199.991610][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.007213][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.017478][ T5662] team0: Port device team_slave_1 added [ 200.023249][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.032197][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.039387][ T5661] bridge_slave_1: entered allmulticast mode [ 200.045832][ T5661] bridge_slave_1: entered promiscuous mode [ 200.053497][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.062767][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.069931][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.077061][ T5664] bridge_slave_0: entered allmulticast mode [ 200.083662][ T5664] bridge_slave_0: entered promiscuous mode [ 200.091711][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.114498][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.121784][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.129285][ T5664] bridge_slave_1: entered allmulticast mode [ 200.135701][ T5664] bridge_slave_1: entered promiscuous mode [ 200.170547][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.177557][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.203586][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.215953][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.226487][ T5658] team0: Port device team_slave_0 added [ 200.237901][ T5663] team0: Port device team_slave_0 added [ 200.244060][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.251115][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.277397][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.289469][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.299726][ T5658] team0: Port device team_slave_1 added [ 200.306766][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.317636][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.328001][ T5663] team0: Port device team_slave_1 added [ 200.361659][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.368685][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.394570][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.420195][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.427342][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.453512][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.465542][ T5661] team0: Port device team_slave_0 added [ 200.471643][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.479008][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.504998][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.522371][ T5664] team0: Port device team_slave_0 added [ 200.536099][ T5661] team0: Port device team_slave_1 added [ 200.542410][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.549394][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.575352][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.594234][ T5664] team0: Port device team_slave_1 added [ 200.615688][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.622779][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.648834][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.662869][ T5662] hsr_slave_0: entered promiscuous mode [ 200.669046][ T5662] hsr_slave_1: entered promiscuous mode [ 200.686281][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.693288][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.719276][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.731123][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.738134][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.764046][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.788286][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.795254][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.821246][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.843975][ T5663] hsr_slave_0: entered promiscuous mode [ 200.850200][ T5663] hsr_slave_1: entered promiscuous mode [ 200.856014][ T5663] debugfs: 'hsr0' already exists in 'hsr' [ 200.861781][ T5663] Cannot create hsr debugfs directory [ 200.883832][ T5658] hsr_slave_0: entered promiscuous mode [ 200.889876][ T5658] hsr_slave_1: entered promiscuous mode [ 200.895682][ T5658] debugfs: 'hsr0' already exists in 'hsr' [ 200.901438][ T5658] Cannot create hsr debugfs directory [ 200.936446][ T5661] hsr_slave_0: entered promiscuous mode [ 200.942485][ T5661] hsr_slave_1: entered promiscuous mode [ 200.948811][ T5661] debugfs: 'hsr0' already exists in 'hsr' [ 200.954727][ T5661] Cannot create hsr debugfs directory [ 200.989639][ T5664] hsr_slave_0: entered promiscuous mode [ 200.995587][ T5664] hsr_slave_1: entered promiscuous mode [ 201.001639][ T5664] debugfs: 'hsr0' already exists in 'hsr' [ 201.007375][ T5664] Cannot create hsr debugfs directory [ 201.088075][ T5660] Bluetooth: hci0: command tx timeout [ 201.168139][ T5660] Bluetooth: hci1: command tx timeout [ 201.225978][ T5662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.234256][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.242558][ T5662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.249336][ T50] Bluetooth: hci2: command tx timeout [ 201.249618][ T5660] Bluetooth: hci3: command tx timeout [ 201.258625][ T50] Bluetooth: hci4: command tx timeout [ 201.262868][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.273204][ T5662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.281461][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.291880][ T5662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.300680][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.332619][ T5664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.341057][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.349391][ T5664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.357561][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.365674][ T5664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.374038][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.382012][ T5664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.390268][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.430279][ T5658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.438822][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.446435][ T5658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.454972][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.462815][ T5658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.471611][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.479463][ T5658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 201.487633][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.541310][ T5661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.550231][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.557931][ T5661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.567467][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.576055][ T5661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.584152][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.591802][ T5661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.600194][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.625593][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.654321][ T5663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.662819][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.671455][ T5663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.681151][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.695340][ T5663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.703787][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.711909][ T5663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.720817][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.741856][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.765253][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.772342][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.780932][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.788004][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.820722][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.861941][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.870796][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.894297][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.901423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.919602][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.926691][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.954699][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.967509][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.976572][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.989917][ T5663] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.005465][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.012662][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.034147][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.041252][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.050193][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.057262][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.067458][ T5661] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.079025][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.086075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.102112][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.109205][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.122439][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.134855][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.141997][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.215221][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.248950][ T5662] veth0_vlan: entered promiscuous mode [ 202.259744][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.271635][ T5662] veth1_vlan: entered promiscuous mode [ 202.299550][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.317915][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.334443][ T5664] veth0_vlan: entered promiscuous mode [ 202.357435][ T5664] veth1_vlan: entered promiscuous mode [ 202.382366][ T5662] veth0_macvtap: entered promiscuous mode [ 202.391143][ T5662] veth1_macvtap: entered promiscuous mode [ 202.404303][ T5658] veth0_vlan: entered promiscuous mode [ 202.417270][ T5661] veth0_vlan: entered promiscuous mode [ 202.427527][ T5661] veth1_vlan: entered promiscuous mode [ 202.436716][ T5658] veth1_vlan: entered promiscuous mode [ 202.455276][ T5663] veth0_vlan: entered promiscuous mode [ 202.463181][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.481562][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.492191][ T5664] veth0_macvtap: entered promiscuous mode [ 202.501550][ T5664] veth1_macvtap: entered promiscuous mode [ 202.510422][ T515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.521086][ T5663] veth1_vlan: entered promiscuous mode [ 202.533426][ T515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.542415][ T515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.557271][ T515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.583632][ T5658] veth0_macvtap: entered promiscuous mode [ 202.592408][ T5658] veth1_macvtap: entered promiscuous mode [ 202.599809][ T5661] veth0_macvtap: entered promiscuous mode [ 202.607379][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.623705][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.635784][ T5661] veth1_macvtap: entered promiscuous mode [ 202.659200][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.667941][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.687841][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.697031][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.717935][ T5663] veth0_macvtap: entered promiscuous mode [ 202.726669][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.734856][ T515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.737981][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.744505][ T515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.761752][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.785487][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.793062][ T5663] veth1_macvtap: entered promiscuous mode [ 202.821641][ T87] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.830703][ T87] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.841465][ T515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.850553][ T515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.857899][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.857986][ T87] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.874439][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.881982][ T87] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.895103][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.907703][ T87] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.932318][ T87] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.941776][ T87] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.952061][ T87] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.956325][ T5662] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 202.980630][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.996640][ T515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.007703][ T515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.026680][ T87] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.066244][ T87] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.081313][ T5738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 203.100138][ T87] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.126864][ T87] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.137794][ T515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.146624][ T515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.165518][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.175363][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.183061][ T50] Bluetooth: hci0: command tx timeout [ 203.208765][ T515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.216971][ T515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.240460][ T515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.250360][ T50] Bluetooth: hci1: command tx timeout [ 203.260292][ T515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.303108][ T515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.314901][ T515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.328306][ T50] Bluetooth: hci3: command tx timeout [ 203.328411][ T5660] Bluetooth: hci4: command tx timeout [ 203.333766][ T50] Bluetooth: hci2: command tx timeout [ 203.370855][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.380122][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.398738][ T5707] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 203.484080][ T5750] syzkaller0: entered promiscuous mode [ 203.489988][ T5750] syzkaller0: entered allmulticast mode [ 203.528365][ T5729] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 203.568403][ T5748] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 203.593920][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 203.612285][ T5707] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 203.657762][ T5707] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 203.679233][ T5762] FAULT_INJECTION: forcing a failure. [ 203.679233][ T5762] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 203.694242][ T5762] CPU: 1 UID: 0 PID: 5762 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 203.694265][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.694280][ T5762] Call Trace: [ 203.694290][ T5762] [ 203.694296][ T5762] dump_stack_lvl+0xe8/0x150 [ 203.694330][ T5762] should_fail_ex+0x40c/0x560 [ 203.694348][ T5762] _copy_from_user+0x2d/0xb0 [ 203.694377][ T5762] lo_ioctl+0x763/0x1fc0 [ 203.694398][ T5762] ? kernel_text_address+0xa5/0xe0 [ 203.694415][ T5762] ? __kernel_text_address+0xd/0x30 [ 203.694430][ T5762] ? __pfx_lo_ioctl+0x10/0x10 [ 203.694446][ T5762] ? arch_stack_walk+0xfb/0x150 [ 203.694465][ T5762] ? ima_match_policy+0x106/0x21c0 [ 203.694483][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.694498][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.694514][ T5762] ? lock_release+0x4b/0x3c0 [ 203.694536][ T5762] ? ima_match_policy+0x2125/0x21c0 [ 203.694556][ T5762] ? path_openat+0x2e44/0x3830 [ 203.694575][ T5762] ? process_measurement+0x443/0x1c10 [ 203.694591][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.694606][ T5762] ? lock_acquire+0x5f/0x350 [ 203.694626][ T5762] ? ima_match_policy+0x106/0x21c0 [ 203.694643][ T5762] ? unwind_next_frame+0x8f/0x2550 [ 203.694660][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.694676][ T5762] ? unwind_next_frame+0x8f/0x2550 [ 203.694692][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.694720][ T5762] ? unwind_next_frame+0x8f/0x2550 [ 203.694734][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.694751][ T5762] ? is_bpf_text_address+0x26/0x2b0 [ 203.694770][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.694784][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.694798][ T5762] ? lock_release+0x4b/0x3c0 [ 203.694815][ T5762] ? lock_release+0x4b/0x3c0 [ 203.694835][ T5762] ? is_bpf_text_address+0x292/0x2b0 [ 203.694853][ T5762] ? is_bpf_text_address+0x26/0x2b0 [ 203.694871][ T5762] ? kernel_text_address+0xa5/0xe0 [ 203.694887][ T5762] ? __kernel_text_address+0xd/0x30 [ 203.694902][ T5762] ? unwind_get_return_address+0x4d/0x90 [ 203.694918][ T5762] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 203.694937][ T5762] ? arch_stack_walk+0xfb/0x150 [ 203.694958][ T5762] ? stack_trace_save+0xa9/0x100 [ 203.694975][ T5762] ? __pfx_stack_trace_save+0x10/0x10 [ 203.694993][ T5762] ? kasan_save_track+0x4f/0x80 [ 203.695012][ T5762] ? stack_depot_save_flags+0x33/0x800 [ 203.695028][ T5762] ? format_decode+0xdc/0xe20 [ 203.695045][ T5762] ? kasan_save_track+0x4f/0x80 [ 203.695061][ T5762] ? kasan_save_track+0x3e/0x80 [ 203.695078][ T5762] ? kasan_save_free_info+0x40/0x50 [ 203.695093][ T5762] ? __kasan_slab_free+0x5c/0x80 [ 203.695110][ T5762] ? kfree+0x1c5/0x640 [ 203.695126][ T5762] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 203.695145][ T5762] ? security_file_ioctl+0xc3/0x2a0 [ 203.695164][ T5762] ? __se_sys_ioctl+0x47/0x170 [ 203.695183][ T5762] ? do_syscall_64+0x174/0x580 [ 203.695200][ T5762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.695217][ T5762] ? __asan_memset+0x22/0x50 [ 203.695233][ T5762] ? blk_get_meta_cap+0x19d/0x780 [ 203.695253][ T5762] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 203.695274][ T5762] ? blkdev_common_ioctl+0x14b7/0x3250 [ 203.695297][ T5762] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 203.695317][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.695331][ T5762] ? trace_irq_enable+0x3b/0x140 [ 203.695351][ T5762] ? rcu_is_watching+0x15/0xb0 [ 203.695373][ T5762] ? lock_release+0x4b/0x3c0 [ 203.695392][ T5762] ? kfree+0x1c5/0x640 [ 203.695406][ T5762] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 203.695426][ T5762] ? tomoyo_path_number_perm+0x219/0x5f0 [ 203.695447][ T5762] ? do_vfs_ioctl+0x116f/0x1540 [ 203.695479][ T5762] ? __pfx_lo_ioctl+0x10/0x10 [ 203.695497][ T5762] blkdev_ioctl+0x5e3/0x740 [ 203.695519][ T5762] ? __pfx_blkdev_ioctl+0x10/0x10 [ 203.695539][ T5762] ? bpf_lsm_file_ioctl+0x9/0x20 [ 203.695559][ T5762] ? __pfx_blkdev_ioctl+0x10/0x10 [ 203.695578][ T5762] __se_sys_ioctl+0xfc/0x170 [ 203.695597][ T5762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.695612][ T5762] do_syscall_64+0x174/0x580 [ 203.695629][ T5762] ? trace_irq_disable+0x3b/0x140 [ 203.695647][ T5762] ? clear_bhb_loop+0x40/0x90 [ 203.695662][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.695677][ T5762] RIP: 0033:0x7f13d859ce59 [ 203.695698][ T5762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.695710][ T5762] RSP: 002b:00007f13d93e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.695735][ T5762] RAX: ffffffffffffffda RBX: 00007f13d8815fa0 RCX: 00007f13d859ce59 [ 203.695747][ T5762] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 203.695757][ T5762] RBP: 00007f13d93e7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.695766][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.695775][ T5762] R13: 00007f13d8816038 R14: 00007f13d8815fa0 R15: 00007f13d893fa48 [ 203.695792][ T5762] [ 203.696874][ T5729] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 203.703148][ T5707] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.715329][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.756939][ T5707] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 203.766653][ T5729] usb 3-1: config 0 descriptor?? [ 203.798575][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.272758][ T5766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11'. [ 204.285756][ T5767] Failed to get privilege flags for destination (handle=0x2:0x0) [ 204.292364][ T5707] usb 1-1: Product: syz [ 204.302587][ T5744] xt_cgroup: invalid path, errno=-2 [ 204.331964][ T5707] usb 1-1: Manufacturer: syz [ 204.344457][ T5707] usb 1-1: SerialNumber: syz [ 204.352249][ T5707] usb 1-1: config 0 descriptor?? [ 204.362119][ T5707] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 204.372341][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.389378][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.548534][ T808] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 204.572616][ T5707] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 204.584426][ T5729] usb 3-1: Cannot read MAC address [ 204.589776][ T5729] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 204.606809][ T5707] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 204.639074][ T5707] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 204.643967][ T5729] usb 3-1: USB disconnect, device number 2 [ 204.679684][ T5748] Zero length message leads to an empty skb [ 204.698276][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 204.713205][ T808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 204.729948][ T808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 204.749619][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.757929][ T808] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 204.767659][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.813333][ T808] usb 4-1: Product: syz [ 204.831164][ T808] usb 4-1: Manufacturer: syz [ 204.851034][ T808] usb 4-1: SerialNumber: syz [ 204.857086][ T808] usb 4-1: config 0 descriptor?? [ 204.878800][ T808] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 204.934346][ T5741] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 205.084112][ T808] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 205.090017][ T5729] usb 1-1: USB disconnect, device number 2 [ 205.096397][ T808] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 205.107721][ T808] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 205.248451][ T50] Bluetooth: hci0: command tx timeout [ 205.328848][ T50] Bluetooth: hci1: command tx timeout [ 205.388289][ T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.408461][ T50] Bluetooth: hci2: command tx timeout [ 205.413903][ T50] Bluetooth: hci4: command tx timeout [ 205.419357][ T5660] Bluetooth: hci3: command tx timeout [ 205.488160][ T5769] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 205.538387][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 205.545686][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.554981][ T808] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 205.567056][ T808] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 205.596109][ T808] usb 2-1: config 4 has no interface number 0 [ 205.618108][ T808] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 205.650329][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.674242][ T808] usb 2-1: Product: syz [ 205.683126][ T5769] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 205.693936][ T808] usb 2-1: Manufacturer: syz [ 205.700365][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.709760][ T808] usb 2-1: SerialNumber: syz [ 205.715208][ T5793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20'. [ 205.715648][ T5769] usb 3-1: Product: syz [ 205.737261][ T5769] usb 3-1: Manufacturer: syz [ 205.742307][ T5769] usb 3-1: SerialNumber: syz [ 205.945937][ T808] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 205.967958][ T808] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 205.989925][ T808] uvcvideo 2-1:4.147: No streaming interface found for terminal 32774. [ 206.018084][ T808] usb 2-1: USB disconnect, device number 2 [ 206.131183][ T5802] FAULT_INJECTION: forcing a failure. [ 206.131183][ T5802] name failslab, interval 1, probability 0, space 0, times 1 [ 206.156969][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 206.169442][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: syz.4.23 Not tainted syzkaller #0 PREEMPT(full) [ 206.169466][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.169475][ T5802] Call Trace: [ 206.169481][ T5802] [ 206.169488][ T5802] dump_stack_lvl+0xe8/0x150 [ 206.169511][ T5802] should_fail_ex+0x40c/0x560 [ 206.169533][ T5802] should_failslab+0xa8/0x100 [ 206.169555][ T5802] __kmalloc_noprof+0xe8/0x750 [ 206.169573][ T5802] ? __x64_sys_openat+0x138/0x170 [ 206.169590][ T5802] ? __alloc_workqueue+0x103/0x1f70 [ 206.169608][ T5802] __alloc_workqueue+0x103/0x1f70 [ 206.169622][ T5802] ? __mutex_lock+0x30d/0x1550 [ 206.169642][ T5802] ? bd_prepare_to_claim+0x413/0x4a0 [ 206.169664][ T5802] alloc_workqueue_noprof+0xe3/0x210 [ 206.169686][ T5802] ? __pfx___mutex_lock+0x10/0x10 [ 206.169705][ T5802] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 206.169722][ T5802] ? __asan_memcpy+0x40/0x70 [ 206.169739][ T5802] ? loop_set_status_from_info+0x17b/0x240 [ 206.169762][ T5802] loop_configure+0x63d/0xdc0 [ 206.169786][ T5802] ? __pfx_loop_configure+0x10/0x10 [ 206.169812][ T5802] ? lock_release+0x4b/0x3c0 [ 206.169833][ T5802] ? __might_fault+0xaf/0x130 [ 206.169851][ T5802] ? __might_fault+0xcb/0x130 [ 206.169870][ T5802] lo_ioctl+0xa9a/0x1fc0 [ 206.169890][ T5802] ? kernel_text_address+0xa5/0xe0 [ 206.169907][ T5802] ? __kernel_text_address+0xd/0x30 [ 206.169922][ T5802] ? __pfx_lo_ioctl+0x10/0x10 [ 206.169940][ T5802] ? arch_stack_walk+0xfb/0x150 [ 206.169959][ T5802] ? ima_match_policy+0x106/0x21c0 [ 206.169978][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.169995][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170010][ T5802] ? lock_release+0x4b/0x3c0 [ 206.170033][ T5802] ? ima_match_policy+0x2125/0x21c0 [ 206.170054][ T5802] ? path_openat+0x2e44/0x3830 [ 206.170074][ T5802] ? process_measurement+0x443/0x1c10 [ 206.170091][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170106][ T5802] ? lock_acquire+0x5f/0x350 [ 206.170126][ T5802] ? ima_match_policy+0x106/0x21c0 [ 206.170144][ T5802] ? unwind_next_frame+0x8f/0x2550 [ 206.170161][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170178][ T5802] ? unwind_next_frame+0x8f/0x2550 [ 206.170194][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170212][ T5802] ? unwind_next_frame+0x8f/0x2550 [ 206.170228][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170245][ T5802] ? is_bpf_text_address+0x26/0x2b0 [ 206.170266][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170282][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170297][ T5802] ? lock_release+0x4b/0x3c0 [ 206.170316][ T5802] ? lock_release+0x4b/0x3c0 [ 206.170338][ T5802] ? is_bpf_text_address+0x292/0x2b0 [ 206.170358][ T5802] ? is_bpf_text_address+0x26/0x2b0 [ 206.170380][ T5802] ? kernel_text_address+0xa5/0xe0 [ 206.170396][ T5802] ? __kernel_text_address+0xd/0x30 [ 206.170411][ T5802] ? unwind_get_return_address+0x4d/0x90 [ 206.170428][ T5802] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.170447][ T5802] ? arch_stack_walk+0xfb/0x150 [ 206.170468][ T5802] ? stack_trace_save+0xa9/0x100 [ 206.170486][ T5802] ? __pfx_stack_trace_save+0x10/0x10 [ 206.170504][ T5802] ? kasan_save_track+0x4f/0x80 [ 206.170523][ T5802] ? stack_depot_save_flags+0x33/0x800 [ 206.170540][ T5802] ? format_decode+0xdc/0xe20 [ 206.170556][ T5802] ? kasan_save_track+0x4f/0x80 [ 206.170574][ T5802] ? kasan_save_track+0x3e/0x80 [ 206.170591][ T5802] ? kasan_save_free_info+0x40/0x50 [ 206.170606][ T5802] ? __kasan_slab_free+0x5c/0x80 [ 206.170624][ T5802] ? kfree+0x1c5/0x640 [ 206.170639][ T5802] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 206.170659][ T5802] ? security_file_ioctl+0xc3/0x2a0 [ 206.170682][ T5802] ? __se_sys_ioctl+0x47/0x170 [ 206.170701][ T5802] ? do_syscall_64+0x174/0x580 [ 206.170720][ T5802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.170737][ T5802] ? __asan_memset+0x22/0x50 [ 206.170754][ T5802] ? blk_get_meta_cap+0x19d/0x780 [ 206.170775][ T5802] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 206.170797][ T5802] ? blkdev_common_ioctl+0x14b7/0x3250 [ 206.170821][ T5802] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 206.170841][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170856][ T5802] ? trace_irq_enable+0x3b/0x140 [ 206.170876][ T5802] ? rcu_is_watching+0x15/0xb0 [ 206.170891][ T5802] ? lock_release+0x4b/0x3c0 [ 206.170910][ T5802] ? kfree+0x1c5/0x640 [ 206.170926][ T5802] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 206.170946][ T5802] ? tomoyo_path_number_perm+0x219/0x5f0 [ 206.170967][ T5802] ? do_vfs_ioctl+0x116f/0x1540 [ 206.171001][ T5802] ? __pfx_lo_ioctl+0x10/0x10 [ 206.171020][ T5802] blkdev_ioctl+0x5e3/0x740 [ 206.171042][ T5802] ? __pfx_blkdev_ioctl+0x10/0x10 [ 206.171063][ T5802] ? bpf_lsm_file_ioctl+0x9/0x20 [ 206.171084][ T5802] ? __pfx_blkdev_ioctl+0x10/0x10 [ 206.171104][ T5802] __se_sys_ioctl+0xfc/0x170 [ 206.171124][ T5802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.171140][ T5802] do_syscall_64+0x174/0x580 [ 206.171158][ T5802] ? trace_irq_disable+0x3b/0x140 [ 206.171176][ T5802] ? clear_bhb_loop+0x40/0x90 [ 206.171193][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.171209][ T5802] RIP: 0033:0x7f889d79ce59 [ 206.171224][ T5802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.171237][ T5802] RSP: 002b:00007f889e5b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.171254][ T5802] RAX: ffffffffffffffda RBX: 00007f889da15fa0 RCX: 00007f889d79ce59 [ 206.171266][ T5802] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 206.171276][ T5802] RBP: 00007f889e5b1090 R08: 0000000000000000 R09: 0000000000000000 [ 206.171286][ T5802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.171295][ T5802] R13: 00007f889da16038 R14: 00007f889da15fa0 R15: 00007f889db3fa48 [ 206.171312][ T5802] [ 206.728171][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 206.781751][ T5742] usb 4-1: USB disconnect, device number 2 [ 207.145965][ T5812] syzkaller0: entered promiscuous mode [ 207.159307][ T5812] syzkaller0: entered allmulticast mode [ 207.328717][ T5660] Bluetooth: hci0: command tx timeout [ 207.340712][ T5822] Invalid logical block size (32) [ 207.409122][ T5660] Bluetooth: hci1: command tx timeout [ 207.488710][ T5660] Bluetooth: hci3: command tx timeout [ 207.494325][ T50] Bluetooth: hci4: command tx timeout [ 207.499788][ T5729] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.507361][ T5652] Bluetooth: hci2: command tx timeout [ 207.530993][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.544112][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.658086][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 207.664652][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 207.677713][ T5729] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 207.687068][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.699535][ T5729] usb 4-1: config 0 descriptor?? [ 207.768193][ T5700] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 207.798380][ T5742] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 207.930947][ T5700] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.954239][ T5742] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 207.989892][ T5742] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 207.999230][ T5700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.011044][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 208.019839][ T5742] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.030512][ T5700] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.039632][ T5742] usb 1-1: config 220 has no interface number 2 [ 208.039678][ T5742] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 208.047129][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.061980][ T5742] usb 1-1: config 220 interface 0 has no altsetting 0 [ 208.066274][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.074351][ T5742] usb 1-1: config 220 interface 76 has no altsetting 0 [ 208.083033][ T5700] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.087759][ T5742] usb 1-1: config 220 interface 1 has no altsetting 0 [ 208.109906][ T5834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.132217][ T5729] input: HID 0458:5014 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5014.0001/input/input5 [ 208.149993][ T5742] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 208.160563][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.177284][ T5700] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.195015][ T5742] usb 1-1: Product: syz [ 208.205099][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.224784][ T5700] usb 2-1: Product: syz [ 208.234458][ T5729] kye 0003:0458:5014.0001: input,hiddev0,hidraw0: USB HID v7f.fc Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 208.237123][ T5700] usb 2-1: Manufacturer: syz [ 208.253258][ T5742] usb 1-1: Manufacturer: syz [ 208.264349][ T5742] usb 1-1: SerialNumber: syz [ 208.317308][ T5700] cdc_wdm 2-1:1.0: skipping garbage [ 208.326985][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 208.339270][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 208.360192][ T5700] cdc_wdm 2-1:1.0: skipping garbage [ 208.379368][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 208.393862][ T5700] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 208.437870][ T5769] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 208.523776][ T5742] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 208.556210][ T5769] usb 3-1: USB disconnect, device number 3 [ 208.570239][ T5729] usb 4-1: USB disconnect, device number 3 [ 208.595661][ T5742] uvcvideo 1-1:220.0: No valid video chain found. [ 208.647613][ T5742] usb 1-1: selecting invalid altsetting 0 [ 208.698800][ T5742] usb 1-1: selecting invalid altsetting 0 [ 208.724031][ T5742] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 208.760416][ T5742] usb 1-1: USB disconnect, device number 3 [ 208.800604][ T5854] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 208.846919][ T5851] netlink: 'syz.4.36': attribute type 16 has an invalid length. [ 209.038093][ T5769] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 209.232241][ T5769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 209.245010][ T5769] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.259881][ T5865] Invalid logical block size (34) [ 209.265361][ T5769] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 209.275181][ T5769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.286144][ T5769] usb 3-1: config 0 descriptor?? [ 209.475175][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.500804][ T5853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.513580][ T5853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.557767][ T5853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.582526][ T5853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.818733][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.832585][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.844317][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.848106][ T1087] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 209.863611][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.874023][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.881438][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.891431][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.898752][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.906119][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.913498][ T5769] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 209.925148][ T5769] kovaplus 0003:1E7D:2D50.0002: unexpected long global item [ 209.940626][ T5769] kovaplus 0003:1E7D:2D50.0002: parse failed [ 209.946943][ T5769] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -22 [ 210.010075][ T1087] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.035431][ T1087] usb 4-1: config index 0 descriptor too short (expected 2182, got 134) [ 210.041068][ T5769] usb 3-1: USB disconnect, device number 4 [ 210.060451][ T1087] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 210.101798][ T1087] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.132921][ T1087] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 210.145967][ T1087] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 210.160048][ T1087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.173150][ T1087] usb 4-1: Product: syz [ 210.177454][ T1087] usb 4-1: Manufacturer: syz [ 210.182310][ T1087] usb 4-1: SerialNumber: syz [ 210.193228][ T1087] usb 4-1: config 0 descriptor?? [ 210.207074][ T5882] dvmrp0: entered allmulticast mode [ 210.348887][ T5769] usb 2-1: USB disconnect, device number 3 [ 210.411686][ T1087] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 210.466704][ T1087] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 210.540329][ T1087] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 210.581377][ T1087] usb 4-1: USB disconnect, device number 4 [ 210.615349][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.723197][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.848157][ T5769] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 211.098100][ T5769] usb 2-1: device descriptor read/64, error -71 [ 211.259517][ T5917] netlink: 72 bytes leftover after parsing attributes in process `syz.3.56'. [ 211.316714][ T30] audit: type=1326 audit(1781687508.312:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 211.345594][ T5924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.375754][ T5769] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 211.384994][ T5923] fuse: Unknown parameter 'groupdid' [ 211.406550][ T30] audit: type=1326 audit(1781687508.312:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 211.508127][ T30] audit: type=1326 audit(1781687508.352:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 211.518332][ T5769] usb 2-1: device descriptor read/64, error -71 [ 211.632807][ T30] audit: type=1326 audit(1781687508.352:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 211.708983][ T5769] usb usb2-port1: attempt power cycle [ 211.738123][ T30] audit: type=1326 audit(1781687508.352:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 211.829092][ T30] audit: type=1326 audit(1781687508.382:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 211.892698][ T30] audit: type=1326 audit(1781687508.382:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 211.960546][ T30] audit: type=1326 audit(1781687508.382:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 212.062209][ T30] audit: type=1326 audit(1781687508.382:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 212.086741][ T5769] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 212.137707][ T30] audit: type=1326 audit(1781687508.462:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.59" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 212.169728][ T5769] usb 2-1: device descriptor read/8, error -71 [ 212.286496][ T5951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.361114][ T5957] mmap: syz.0.68 (5957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 212.408120][ T5769] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 212.441956][ T5769] usb 2-1: device descriptor read/8, error -71 [ 212.559265][ T5769] usb usb2-port1: unable to enumerate USB device [ 212.572594][ T5969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.75'. [ 212.606824][ T5969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.75'. [ 212.928218][ T5769] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 213.089282][ T5769] usb 3-1: Using ep0 maxpacket: 16 [ 213.095867][ T5769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.128525][ T5769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.144424][ T5769] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.171985][ T5769] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 213.192842][ T5769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.218938][ T5769] usb 3-1: config 0 descriptor?? [ 213.228143][ T808] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 213.388111][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 213.409437][ T808] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 213.419765][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.450893][ T808] usb 1-1: config 0 descriptor?? [ 213.652283][ T5769] microsoft 0003:045E:07DA.0003: report_id 869812189 is invalid [ 213.664703][ T808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 213.675181][ T5769] microsoft 0003:045E:07DA.0003: item 0 4 1 8 parsing failed [ 213.687846][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.699688][ T5769] microsoft 0003:045E:07DA.0003: parse failed [ 213.707443][ T5769] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 213.722127][ T808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 213.735338][ T808] usb 1-1: media controller created [ 213.750768][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.824590][ T5994] fuse: Bad value for 'fd' [ 213.851942][ T5977] kvm: user requested TSC rate below hardware speed [ 213.869193][ T5994] binder: 5991:5994 ioctl 4018620d 0 returned -22 [ 213.948345][ T1087] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.959685][ T5769] usb 3-1: USB disconnect, device number 5 [ 214.098387][ T1087] usb 2-1: Using ep0 maxpacket: 16 [ 214.109928][ T1087] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 214.126576][ T1087] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 214.147121][ T1087] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 214.165439][ T1087] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 214.188736][ T1087] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.209527][ T1087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.222649][ T1087] usb 2-1: Product: syz [ 214.226880][ T1087] usb 2-1: Manufacturer: syz [ 214.233009][ T1087] usb 2-1: SerialNumber: syz [ 214.246302][ T808] az6027: usb out operation failed. (-71) [ 214.262076][ T808] stb0899_attach: Driver disabled by Kconfig [ 214.263326][ T1087] usb 2-1: 0:2 : does not exist [ 214.282266][ T808] az6027: no front-end attached [ 214.282266][ T808] [ 214.313187][ T808] az6027: usb out operation failed. (-71) [ 214.340584][ T808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 214.357188][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 214.388278][ T808] dvb-usb: schedule remote query interval to 400 msecs. [ 214.406073][ T808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 214.429721][ T808] usb 1-1: USB disconnect, device number 4 [ 214.438297][ T29] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 214.455404][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 214.494999][ T1087] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 214.553715][ T1087] usb 2-1: USB disconnect, device number 8 [ 215.374724][ T6020] Invalid logical block size (228) [ 215.478079][ T5700] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.504395][ T6024] IPv6: A: Disabled Multicast RS [ 215.638539][ T5700] usb 2-1: Using ep0 maxpacket: 8 [ 215.645384][ T5700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.656405][ T5700] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 215.669726][ T5700] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 215.679095][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.687303][ T5700] usb 2-1: Product: syz [ 215.692367][ T5700] usb 2-1: Manufacturer: syz [ 215.696992][ T5700] usb 2-1: SerialNumber: syz [ 215.818176][ T1087] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 215.974925][ T1087] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.984932][ T1087] usb 5-1: not running at top speed; connect to a high speed hub [ 215.994255][ T1087] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 216.003338][ T1087] usb 5-1: config 4 has an invalid descriptor of length 249, skipping remainder of the config [ 216.014865][ T1087] usb 5-1: config 4 has no interface number 0 [ 216.022173][ T1087] usb 5-1: config 4 interface 147 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 216.036436][ T1087] usb 5-1: config 4 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 216.064459][ T1087] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 216.078450][ T1087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.087460][ T1087] usb 5-1: Product: syz [ 216.093662][ T1087] usb 5-1: Manufacturer: syz [ 216.099262][ T1087] usb 5-1: SerialNumber: syz [ 216.201492][ T5700] usb 2-1: USB disconnect, device number 9 [ 216.258280][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.354702][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 216.354765][ T30] audit: type=1326 audit(1781687513.352:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.358851][ T6031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.366495][ T30] audit: type=1326 audit(1781687513.352:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.418660][ T30] audit: type=1326 audit(1781687513.352:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.443470][ T30] audit: type=1326 audit(1781687513.352:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.471396][ T30] audit: type=1326 audit(1781687513.352:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.476933][ T1087] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 216.503381][ T30] audit: type=1326 audit(1781687513.352:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.530432][ T30] audit: type=1326 audit(1781687513.352:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.547686][ T1087] uvcvideo 5-1:4.147: No valid video chain found. [ 216.557445][ T30] audit: type=1326 audit(1781687513.352:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.589236][ T30] audit: type=1326 audit(1781687513.352:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 216.599588][ T1087] usb 5-1: USB disconnect, device number 2 [ 216.618463][ T30] audit: type=1326 audit(1781687513.352:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f058f99ce59 code=0x7ffc0000 [ 217.038754][ T5760] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 217.063199][ T808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 217.198554][ T5760] usb 3-1: Using ep0 maxpacket: 32 [ 217.216436][ T5760] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.226847][ T5760] usb 3-1: config 1 has an invalid interface number: 7 but max is 2 [ 217.240637][ T6047] Invalid logical block size (510) [ 217.256889][ T5760] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 217.271369][ T5760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.282623][ T5760] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.294226][ T5760] usb 3-1: config 1 has no interface number 1 [ 217.307660][ T5760] usb 3-1: too many endpoints for config 1 interface 7 altsetting 10: 37, using maximum allowed: 30 [ 217.354698][ T5760] usb 3-1: config 1 interface 7 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 217.388966][ T5700] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 217.396497][ T808] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 217.416576][ T5760] usb 3-1: config 1 interface 7 has no altsetting 0 [ 217.432732][ T5760] usb 3-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 5.40 [ 217.445293][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.538240][ T5700] usb 5-1: device descriptor read/64, error -71 [ 217.668862][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.679716][ T6057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.699592][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.745043][ T5760] usb 3-1: string descriptor 0 read error: -71 [ 217.764681][ T5760] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 217.778172][ T5700] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 217.879904][ T5760] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 217.938723][ T5700] usb 5-1: device descriptor read/64, error -71 [ 217.955078][ T5760] usb 3-1: USB disconnect, device number 6 [ 218.068888][ T5700] usb usb5-port1: attempt power cycle [ 218.308194][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.418160][ T5700] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 218.439112][ T5700] usb 5-1: device descriptor read/8, error -71 [ 218.499332][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.513617][ T29] usb 2-1: string descriptor 0 read error: -22 [ 218.518362][ T808] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 218.521261][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.538682][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.570986][ T29] cdc_ether 2-1:1.0: invalid descriptor buffer length [ 218.578040][ T29] cdc_ether 2-1:1.0: missing cdc header ether descriptor [ 218.628086][ T5769] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 218.678112][ T5700] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 218.699374][ T808] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 218.710649][ T5700] usb 5-1: device descriptor read/8, error -71 [ 218.717526][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.731629][ T808] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 218.744501][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.761421][ T808] usb 1-1: Product: syz [ 218.769271][ T808] usb 1-1: Manufacturer: syz [ 218.773904][ T808] usb 1-1: SerialNumber: syz [ 218.788402][ T5769] usb 3-1: Using ep0 maxpacket: 8 [ 218.797117][ T808] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 218.810314][ T5769] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.820634][ T5769] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 218.832293][ T5769] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 218.843193][ T5700] usb usb5-port1: unable to enumerate USB device [ 218.849670][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.858783][ T5769] usb 3-1: Product: syz [ 218.862989][ T5769] usb 3-1: Manufacturer: syz [ 218.867585][ T5769] usb 3-1: SerialNumber: syz [ 218.877982][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.888667][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.920479][ T5729] usb 2-1: USB disconnect, device number 10 [ 219.008955][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 219.017041][ T4977] bcm5974 1-1:1.0: could not read from device [ 219.024516][ T808] bcm5974 1-1:1.0: could not read from device [ 219.031918][ T4977] bcm5974 1-1:1.0: could not read from device [ 219.039609][ T808] input: failed to attach handler mousedev to device input7, error: -5 [ 219.053676][ T4977] bcm5974 1-1:1.0: could not read from device [ 219.057437][ T808] usb 1-1: USB disconnect, device number 6 [ 219.069849][ T4977] bcm5974 1-1:1.0: could not read from device [ 219.184128][ T29] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 219.193842][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.202386][ T29] usb 4-1: Product: syz [ 219.206849][ T29] usb 4-1: Manufacturer: syz [ 219.211802][ T29] usb 4-1: SerialNumber: syz [ 219.324360][ T5769] usb 3-1: USB disconnect, device number 7 [ 219.364757][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.479822][ T29] usb 4-1: USB disconnect, device number 6 [ 219.519136][ T6079] fuse: Unknown parameter 'grou' [ 219.519233][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.742135][ T6084] Invalid logical block size (768) [ 219.857998][ T6087] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 220.221187][ T6105] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 221.278040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 221.421442][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 221.421471][ T30] audit: type=1326 audit(1781687518.422:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f99c9f9ce59 code=0x7ffc0000 [ 221.478433][ T6132] sg_write: data in/out 694624/136 bytes for SCSI command 0x0-- guessing data in; [ 221.478433][ T6132] program syz.3.124 not setting count and/or reply_len properly [ 221.822866][ T5726] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 222.010731][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 222.058040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.073155][ T5726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.116208][ T5726] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 222.151856][ T5726] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 222.166056][ T5729] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 222.178042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 222.178640][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.205838][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.231091][ T5726] usb 3-1: Product: syz [ 222.257251][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.278771][ T5726] usb 3-1: Manufacturer: syz [ 222.295916][ T5726] usb 3-1: SerialNumber: syz [ 222.356725][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.368799][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 222.376729][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.393332][ T5729] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 222.427968][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.458427][ T1087] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 222.475728][ T5729] usb 4-1: config 0 descriptor?? [ 222.498815][ T5729] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 222.621517][ T1087] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.676533][ T1087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.709105][ T5729] usb 4-1: Detected FT232B [ 222.730605][ T1087] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 222.747743][ T1087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.786531][ T1087] usb 5-1: SerialNumber: syz [ 222.862491][ T1087] usb 5-1: 0:2 : does not exist [ 222.875636][ T5726] usb 3-1: USB disconnect, device number 8 [ 222.912179][ T5729] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 222.936672][ T5729] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 222.979862][ T5729] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 223.081783][ T5729] usb 4-1: USB disconnect, device number 7 [ 223.135384][ T5729] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 223.156234][ T1087] usb 5-1: USB disconnect, device number 7 [ 223.184066][ T5729] ftdi_sio 4-1:0.0: device disconnected [ 223.197610][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.764008][ T6186] syz.2.135 uses obsolete (PF_INET,SOCK_PACKET) [ 224.058130][ T808] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.218111][ T808] usb 3-1: device descriptor read/64, error -71 [ 224.468199][ T808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 224.508186][ T1087] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 224.615190][ T808] usb 3-1: device descriptor read/64, error -71 [ 224.689092][ T1087] usb 2-1: Using ep0 maxpacket: 8 [ 224.703971][ T1087] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.722592][ T1087] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.738756][ T808] usb usb3-port1: attempt power cycle [ 224.740449][ T1087] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 224.757986][ T1087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.770803][ T1087] usb 2-1: Product: syz [ 224.776136][ T1087] usb 2-1: Manufacturer: syz [ 224.801004][ T1087] usb 2-1: SerialNumber: syz [ 225.088161][ T808] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.131075][ T808] usb 3-1: device descriptor read/8, error -71 [ 225.320264][ T1087] usb 2-1: USB disconnect, device number 11 [ 225.380475][ T6249] syzkaller0: entered promiscuous mode [ 225.401257][ T808] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.411375][ T6249] syzkaller0: entered allmulticast mode [ 225.438646][ T808] usb 3-1: device descriptor read/8, error -71 [ 225.572199][ T808] usb usb3-port1: unable to enumerate USB device [ 226.094166][ T6290] netlink: 76 bytes leftover after parsing attributes in process `syz.0.153'. [ 226.129574][ T6290] syzkaller0: entered promiscuous mode [ 226.148583][ T6290] syzkaller0: entered allmulticast mode [ 226.204956][ T6296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.359799][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.364586][ T6302] netlink: 'syz.1.151': attribute type 10 has an invalid length. [ 226.395667][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.442299][ T6310] netlink: 'syz.1.151': attribute type 10 has an invalid length. [ 226.484104][ T6302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.496013][ T6302] team0: Port device netdevsim1 added [ 226.505071][ T6302] netlink: 100 bytes leftover after parsing attributes in process `syz.1.151'. [ 226.561693][ T6310] team0: Port device netdevsim1 removed [ 226.601859][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.636323][ T6310] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 226.817109][ T6322] syzkaller0: entered promiscuous mode [ 226.831634][ T6322] syzkaller0: entered allmulticast mode [ 227.249619][ T6328] syzkaller0: entered promiscuous mode [ 227.257154][ T6328] syzkaller0: entered allmulticast mode [ 227.527957][ T6334] fuse: Unknown parameter 'fD0x0000000000000003' [ 228.200447][ T6347] syz.2.165: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 228.259814][ T6347] CPU: 0 UID: 0 PID: 6347 Comm: syz.2.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.259843][ T6347] Tainted: [L]=SOFTLOCKUP [ 228.259849][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.259859][ T6347] Call Trace: [ 228.259872][ T6347] [ 228.259879][ T6347] dump_stack_lvl+0xe8/0x150 [ 228.259903][ T6347] warn_alloc+0x249/0x340 [ 228.259928][ T6347] ? __pfx_warn_alloc+0x10/0x10 [ 228.259954][ T6347] ? __mutex_trylock_common+0x15f/0x270 [ 228.259974][ T6347] __vmalloc_node_range_noprof+0x12c/0x1730 [ 228.259996][ T6347] ? rcu_is_watching+0x15/0xb0 [ 228.260013][ T6347] ? trace_contention_end+0x3d/0x140 [ 228.260031][ T6347] ? __mutex_lock+0x30d/0x1550 [ 228.260051][ T6347] ? rcu_is_watching+0x15/0xb0 [ 228.260067][ T6347] ? lock_release+0x4b/0x3c0 [ 228.260088][ T6347] ? kfree+0x1c5/0x640 [ 228.260105][ T6347] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 228.260128][ T6347] ? tomoyo_path_number_perm+0x219/0x5f0 [ 228.260148][ T6347] ? dvb_dvr_do_ioctl+0x76/0x220 [ 228.260168][ T6347] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.260188][ T6347] ? do_vfs_ioctl+0x116f/0x1540 [ 228.260212][ T6347] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 228.260231][ T6347] vmalloc_noprof+0xb2/0xe0 [ 228.260250][ T6347] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 228.260270][ T6347] dvb_dvr_do_ioctl+0x12b/0x220 [ 228.260291][ T6347] dvb_usercopy+0x199/0x2e0 [ 228.260307][ T6347] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 228.260326][ T6347] ? __pfx_dvb_usercopy+0x10/0x10 [ 228.260346][ T6347] ? __fget_files+0x3a2/0x420 [ 228.260363][ T6347] ? __fget_files+0x2a/0x420 [ 228.260377][ T6347] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 228.260392][ T6347] dvb_dvr_ioctl+0x29/0x40 [ 228.260411][ T6347] __se_sys_ioctl+0xfc/0x170 [ 228.260432][ T6347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.260449][ T6347] do_syscall_64+0x174/0x580 [ 228.260468][ T6347] ? trace_irq_disable+0x3b/0x140 [ 228.260489][ T6347] ? clear_bhb_loop+0x40/0x90 [ 228.260507][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.260522][ T6347] RIP: 0033:0x7f058f99ce59 [ 228.260537][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.260551][ T6347] RSP: 002b:00007f059093c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.260569][ T6347] RAX: ffffffffffffffda RBX: 00007f058fc15fa0 RCX: 00007f058f99ce59 [ 228.260581][ T6347] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 228.260592][ T6347] RBP: 00007f058fa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 228.260603][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.260613][ T6347] R13: 00007f058fc16038 R14: 00007f058fc15fa0 R15: 00007f058fd3fa48 [ 228.260632][ T6347] [ 228.260653][ T6347] Mem-Info: [ 228.636595][ T6347] active_anon:9241 inactive_anon:0 isolated_anon:0 [ 228.636595][ T6347] active_file:12999 inactive_file:39984 isolated_file:0 [ 228.636595][ T6347] unevictable:768 dirty:341 writeback:0 [ 228.636595][ T6347] slab_reclaimable:10324 slab_unreclaimable:94103 [ 228.636595][ T6347] mapped:32731 shmem:3427 pagetables:1356 [ 228.636595][ T6347] sec_pagetables:3 bounce:0 [ 228.636595][ T6347] kernel_misc_reclaimable:0 [ 228.636595][ T6347] free:1306916 free_pcp:16298 free_cma:0 [ 228.736176][ T6354] FAULT_INJECTION: forcing a failure. [ 228.736176][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.760646][ T6347] Node 0 active_anon:38964kB inactive_anon:0kB active_file:51996kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133024kB dirty:1364kB writeback:0kB shmem:14072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12280kB pagetables:5368kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 228.779224][ T6356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.811882][ T30] audit: type=1326 audit(1781687525.772:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 228.845419][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.1.168 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.845445][ T6354] Tainted: [L]=SOFTLOCKUP [ 228.845450][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.845458][ T6354] Call Trace: [ 228.845464][ T6354] [ 228.845470][ T6354] dump_stack_lvl+0xe8/0x150 [ 228.845492][ T6354] should_fail_ex+0x40c/0x560 [ 228.845511][ T6354] _copy_from_user+0x2d/0xb0 [ 228.845532][ T6354] do_sys_poll+0x258/0x1110 [ 228.845551][ T6354] ? lock_release+0x4b/0x3c0 [ 228.845575][ T6354] ? __pfx_do_sys_poll+0x10/0x10 [ 228.845590][ T6354] ? aa_file_perm+0x18b/0x15f0 [ 228.845606][ T6354] ? rcu_is_watching+0x15/0xb0 [ 228.845623][ T6354] ? rcu_is_watching+0x15/0xb0 [ 228.845668][ T6354] ? lock_release+0x4b/0x3c0 [ 228.845687][ T6354] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 228.845707][ T6354] ? preempt_count_add+0x91/0x190 [ 228.845736][ T6354] ? __pfx_timespec64_add_safe+0x10/0x10 [ 228.845755][ T6354] __x64_sys_poll+0x190/0x360 [ 228.845771][ T6354] ? __pfx___x64_sys_poll+0x10/0x10 [ 228.845786][ T6354] ? rcu_is_watching+0x15/0xb0 [ 228.845799][ T6354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.845813][ T6354] do_syscall_64+0x174/0x580 [ 228.845831][ T6354] ? trace_irq_disable+0x3b/0x140 [ 228.845851][ T6354] ? clear_bhb_loop+0x40/0x90 [ 228.845867][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.845882][ T6354] RIP: 0033:0x7efe4c59ce59 [ 228.845896][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.845909][ T6354] RSP: 002b:00007efe4d3c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 228.845926][ T6354] RAX: ffffffffffffffda RBX: 00007efe4c815fa0 RCX: 00007efe4c59ce59 [ 228.845938][ T6354] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 228.845949][ T6354] RBP: 00007efe4d3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 228.845958][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.845967][ T6354] R13: 00007efe4c816038 R14: 00007efe4c815fa0 R15: 00007efe4c93fa48 [ 228.845984][ T6354] [ 229.059717][ T5726] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 229.106795][ T6347] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 229.159533][ T6347] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.258614][ T30] audit: type=1326 audit(1781687525.772:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 229.279892][ T6347] lowmem_reserve[]: [ 229.282967][ T30] audit: type=1326 audit(1781687525.772:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 229.290399][ T5726] usb 3-1: Using ep0 maxpacket: 32 [ 229.312487][ T30] audit: type=1326 audit(1781687525.772:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 229.319999][ T6347] 0 [ 229.340745][ T30] audit: type=1326 audit(1781687525.772:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 229.374903][ T6347] 2492 2493 2493 2493 [ 229.388350][ T6347] Node 0 DMA32 free:1278404kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48548kB inactive_anon:0kB active_file:52196kB inactive_file:159736kB unevictable:1536kB writepending:1568kB zspages:0kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:63392kB local_pcp:34712kB free_cma:0kB [ 229.425511][ T5726] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 229.436109][ T5726] usb 3-1: config 0 has no interface number 0 [ 229.442796][ T5726] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.456791][ T6361] syzkaller0: entered promiscuous mode [ 229.464144][ T5726] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.476466][ T6361] syzkaller0: entered allmulticast mode [ 229.485456][ T5726] usb 3-1: config 0 interface 12 has no altsetting 0 [ 229.494130][ T6367] Invalid logical block size (2304) [ 229.502307][ T30] audit: type=1326 audit(1781687525.772:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 229.509935][ T5726] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 229.536530][ T6362] syzkaller0: entered promiscuous mode [ 229.553382][ T6362] syzkaller0: entered allmulticast mode [ 229.578279][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.587552][ T5726] usb 3-1: Product: syz [ 229.590911][ T6362] tipc: Started in network mode [ 229.601814][ T5726] usb 3-1: Manufacturer: syz [ 229.606488][ T5726] usb 3-1: SerialNumber: syz [ 229.617008][ T5726] usb 3-1: config 0 descriptor?? [ 229.622110][ T6347] lowmem_reserve[]: 0 0 0 0 0 [ 229.622156][ T6347] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 229.622206][ T6347] lowmem_reserve[]: 0 0 0 0 0 [ 229.622240][ T6347] Node 1 Normal free:3941080kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.622290][ T6347] lowmem_reserve[]: 0 0 0 0 0 [ 229.622336][ T6347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 229.708067][ T30] audit: type=1326 audit(1781687525.772:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 229.748198][ T6362] tipc: Node identity 62051ca1b3ac, cluster identity 4711 [ 229.756694][ T6362] tipc: Enabled bearer , priority 0 [ 229.769841][ T5726] f81534 3-1:0.12: unsupported endpoint max packet size [ 229.789568][ T6347] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.799576][ T6360] tipc: Resetting bearer [ 229.801788][ T6347] Node 0 DMA32: 878*4kB (UM) 156*8kB (UE) 18*16kB (U) 4*32kB (ME) 2*64kB (E) 121*128kB (UME) 99*256kB (UM) 16*512kB (UM) 13*1024kB (UM) 8*2048kB (UM) 290*4096kB (UM) = 1271864kB [ 229.828676][ T30] audit: type=1326 audit(1781687525.772:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 229.868942][ T6360] tipc: Disabling bearer [ 229.888519][ T6347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 229.903692][ T6347] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 8*16kB (UM) 11*32kB (UM) 9*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941080kB [ 229.950751][ T30] audit: type=1326 audit(1781687525.772:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 229.951627][ T6347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.008305][ T30] audit: type=1326 audit(1781687525.772:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f889d79ce59 code=0x7ffc0000 [ 230.032778][ T6347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.070084][ T6347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.073739][ T6374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.087614][ T6347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.148537][ T6347] 62668 total pagecache pages [ 230.177528][ T6347] 0 pages in swap cache [ 230.193824][ T6347] Free swap = 124996kB [ 230.212975][ T6347] Total swap = 124996kB [ 230.235568][ T6347] 2097051 pages RAM [ 230.274056][ T6347] 0 pages HighMem/MovableOnly [ 230.278977][ T6347] 427061 pages reserved [ 230.283293][ T6347] 0 pages cma reserved [ 230.448738][ T5769] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 230.568652][ T5726] usb 3-1: USB disconnect, device number 13 [ 230.622011][ T5769] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 230.636543][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.650772][ T5769] usb 2-1: Product: syz [ 230.657815][ T5769] usb 2-1: Manufacturer: syz [ 230.665772][ T5769] usb 2-1: SerialNumber: syz [ 230.879209][ T5769] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 230.887454][ T5769] usb 2-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 230.910021][ T5769] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 230.922774][ T5769] usb 2-1: USB disconnect, device number 12 [ 230.937860][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.093571][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 231.190275][ T6408] syzkaller0: entered promiscuous mode [ 231.195780][ T6408] syzkaller0: entered allmulticast mode [ 231.200641][ T6406] kvm: vcpu 0: requested 8 ns lapic timer period limited to 200000 ns [ 231.209749][ T6406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 231.227473][ T808] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 231.265116][ T6411] ip6gre1: entered promiscuous mode [ 231.326114][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 231.371567][ T6418] syzkaller0: entered promiscuous mode [ 231.377183][ T6418] syzkaller0: entered allmulticast mode [ 231.386768][ T6418] tipc: Started in network mode [ 231.392326][ T6418] tipc: Node identity 5a5bb1e7327, cluster identity 4711 [ 231.402428][ T808] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 231.412891][ T6418] tipc: Enabled bearer , priority 0 [ 231.422692][ T808] usb 4-1: config 0 has no interface number 0 [ 231.434967][ T6417] tipc: Resetting bearer [ 231.443028][ T808] usb 4-1: too many endpoints for config 0 interface 88 altsetting 60: 113, using maximum allowed: 30 [ 231.456184][ T808] usb 4-1: config 0 interface 88 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 231.469943][ T808] usb 4-1: config 0 interface 88 has no altsetting 0 [ 231.477424][ T6417] tipc: Disabling bearer [ 231.483317][ T5726] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 231.489012][ T808] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 231.503634][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.511904][ T808] usb 4-1: Product: syz [ 231.516770][ T808] usb 4-1: Manufacturer: syz [ 231.521843][ T808] usb 4-1: SerialNumber: syz [ 231.537270][ T808] usb 4-1: config 0 descriptor?? [ 231.591339][ T6421] kvm: apic: phys broadcast and lowest prio [ 231.597416][ T6421] kvm: Disabled LAPIC found during irq injection [ 231.640944][ T5726] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 231.650470][ T5726] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 231.660209][ T5726] usb 1-1: Product: syz [ 231.662933][ T6426] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.664401][ T5726] usb 1-1: Manufacturer: syz [ 231.664417][ T5726] usb 1-1: SerialNumber: syz [ 231.687844][ T5726] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 231.701311][ T5726] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.712040][ T5726] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 231.720228][ T5726] usb 1-1: media controller created [ 231.734243][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.749160][ T6400] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 231.761071][ T6400] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 231.769488][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.3.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.780330][ T6400] Tainted: [L]=SOFTLOCKUP [ 231.784658][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.794727][ T6400] RIP: 0010:__mutex_lock+0x149/0x1550 [ 231.800111][ T6400] Code: c0 00 65 44 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d e5 b7 9d 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 6c 9d 8a f6 4d 39 64 24 58 0f 85 48 11 00 00 [ 231.819813][ T6400] RSP: 0018:ffffc90005a4f460 EFLAGS: 00010206 [ 231.825882][ T6400] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a446503 [ 231.833861][ T6400] RDX: 0000000000000000 RSI: 000000000000026f RDI: 00000000000000c0 [ 231.841853][ T6400] RBP: ffffc90005a4f5f8 R08: ffffc90005a4f567 R09: 0000000000000000 [ 231.849837][ T6400] R10: ffffc90005a4f540 R11: fffff52000b49ead R12: 0000000000000068 [ 231.857899][ T6400] R13: 0000000000000000 R14: 1ffff92000b49ea0 R15: 0000000000000000 [ 231.865878][ T6400] FS: 00007f13d93e76c0(0000) GS:ffff88812538f000(0000) knlGS:0000000000000000 [ 231.874815][ T6400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.881391][ T6400] CR2: 000000110c367622 CR3: 000000007ec5e000 CR4: 00000000003526f0 [ 231.889447][ T6400] Call Trace: [ 231.892715][ T6400] [ 231.895658][ T6400] ? __mutex_lock+0x30d/0x1550 [ 231.900424][ T6400] ? dvb_usbv2_generic_write+0x26/0x60 [ 231.905880][ T6400] ? __mutex_trylock_common+0x15f/0x270 [ 231.911414][ T6400] ? __pfx___mutex_lock+0x10/0x10 [ 231.916434][ T6400] ? __pfx___mutex_lock+0x10/0x10 [ 231.921449][ T6400] ? unwind_next_frame+0x8f/0x2550 [ 231.926743][ T6400] ? trace_contention_end+0x3d/0x140 [ 231.932016][ T6400] ? __mutex_lock+0x30d/0x1550 [ 231.936769][ T6400] dvb_usbv2_generic_write+0x26/0x60 [ 231.942041][ T6400] mxl111sf_ctrl_msg+0x160/0x2f0 [ 231.946973][ T6400] mxl111sf_write_reg+0xa9/0x1b0 [ 231.951907][ T6400] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 231.957441][ T6400] ? mutex_init_lockdep+0x9a/0x110 [ 231.962985][ T6400] ? lock_release+0x4b/0x3c0 [ 231.967571][ T6400] mxl111sf_i2c_xfer+0x463/0x5060 [ 231.972592][ T6400] ? rcu_is_watching+0x15/0xb0 [ 231.977352][ T6400] ? is_bpf_text_address+0x26/0x2b0 [ 231.982549][ T6400] ? rcu_is_watching+0x15/0xb0 [ 231.987313][ T6400] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 231.992869][ T6400] ? is_bpf_text_address+0x292/0x2b0 [ 231.998162][ T6400] ? is_bpf_text_address+0x26/0x2b0 [ 232.003450][ T6400] ? kernel_text_address+0xa5/0xe0 [ 232.008556][ T6400] ? __kernel_text_address+0xd/0x30 [ 232.013755][ T6400] ? unwind_get_return_address+0x4d/0x90 [ 232.019384][ T6400] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 232.025535][ T6400] ? arch_stack_walk+0xfb/0x150 [ 232.030465][ T6400] ? stack_trace_save+0xa9/0x100 [ 232.035409][ T6400] ? __pfx_stack_trace_save+0x10/0x10 [ 232.040772][ T6400] ? stack_depot_save_flags+0x33/0x800 [ 232.046310][ T6400] ? stack_trace_snprint+0xe1/0xf0 [ 232.051500][ T6400] ? kasan_save_track+0x4f/0x80 [ 232.056344][ T6400] ? kasan_save_track+0x3e/0x80 [ 232.061188][ T6400] ? __kasan_kmalloc+0x93/0xb0 [ 232.065942][ T6400] ? __kmalloc_noprof+0x358/0x750 [ 232.070960][ T6400] ? i2cdev_ioctl_rdwr+0xce/0x740 [ 232.075981][ T6400] ? i2cdev_ioctl+0x6a5/0x880 [ 232.080646][ T6400] ? __se_sys_ioctl+0xfc/0x170 [ 232.085401][ T6400] ? do_syscall_64+0x174/0x580 [ 232.090176][ T6400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.096408][ T6400] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.101422][ T6400] __i2c_transfer+0x7be/0x1fe0 [ 232.106179][ T6400] ? trace_irq_enable+0x3b/0x140 [ 232.111107][ T6400] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 232.116905][ T6400] ? rt_mutex_lock_nested+0x156/0x1c0 [ 232.122272][ T6400] ? i2c_transfer+0xc8/0x2d0 [ 232.126856][ T6400] i2c_transfer+0x1cc/0x2d0 [ 232.131352][ T6400] i2cdev_ioctl_rdwr+0x460/0x740 [ 232.136283][ T6400] i2cdev_ioctl+0x6a5/0x880 [ 232.140792][ T6400] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 232.145806][ T6400] ? __fget_files+0x3a2/0x420 [ 232.150470][ T6400] ? __fget_files+0x2a/0x420 [ 232.155046][ T6400] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.159973][ T6400] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 232.164986][ T6400] __se_sys_ioctl+0xfc/0x170 [ 232.169568][ T6400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.175625][ T6400] do_syscall_64+0x174/0x580 [ 232.180205][ T6400] ? trace_irq_disable+0x3b/0x140 [ 232.185220][ T6400] ? clear_bhb_loop+0x40/0x90 [ 232.189883][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.195755][ T6400] RIP: 0033:0x7f13d859ce59 [ 232.200158][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.219750][ T6400] RSP: 002b:00007f13d93e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.228191][ T6400] RAX: ffffffffffffffda RBX: 00007f13d8815fa0 RCX: 00007f13d859ce59 [ 232.236144][ T6400] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000004 [ 232.244100][ T6400] RBP: 00007f13d8632d6f R08: 0000000000000000 R09: 0000000000000000 [ 232.252057][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.260011][ T6400] R13: 00007f13d8816038 R14: 00007f13d8815fa0 R15: 00007f13d893fa48 [ 232.267981][ T6400] [ 232.270985][ T6400] Modules linked in: [ 232.277058][ T6400] ---[ end trace 0000000000000000 ]--- [ 232.289716][ T6429] xt_hashlimit: size too large, truncated to 1048576 [ 232.308946][ T6400] RIP: 0010:__mutex_lock+0x149/0x1550 [ 232.316744][ T5726] usb 1-1: selecting invalid altsetting 1 [ 232.324652][ T5726] set interface failed [ 232.329293][ T6400] Code: c0 00 65 44 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d e5 b7 9d 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 6c 9d 8a f6 4d 39 64 24 58 0f 85 48 11 00 00 [ 232.358198][ T5729] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 232.418793][ T6400] RSP: 0018:ffffc90005a4f460 EFLAGS: 00010206 [ 232.429673][ T6400] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a446503 [ 232.438001][ T6400] RDX: 0000000000000000 RSI: 000000000000026f RDI: 00000000000000c0 [ 232.493224][ T6400] RBP: ffffc90005a4f5f8 R08: ffffc90005a4f567 R09: 0000000000000000 [ 232.512920][ T6400] R10: ffffc90005a4f540 R11: fffff52000b49ead R12: 0000000000000068 [ 232.519961][ T5729] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 232.543008][ T5729] usb 2-1: config 0 has no interface number 0 [ 232.563701][ T5729] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 232.580223][ T6400] R13: 0000000000000000 R14: 1ffff92000b49ea0 R15: 0000000000000000 [ 232.582847][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.620401][ T5729] usb 2-1: Product: syz [ 232.631800][ T5729] usb 2-1: Manufacturer: syz [ 232.642800][ T5729] usb 2-1: SerialNumber: syz [ 232.652418][ T6400] FS: 00007f13d93e76c0(0000) GS:ffff88812528f000(0000) knlGS:0000000000000000 [ 232.671224][ T5729] usb 2-1: config 0 descriptor?? [ 232.699527][ T6400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.721547][ T6400] CR2: 000020000007a000 CR3: 000000007ec5e000 CR4: 00000000003526f0 [ 232.731053][ T6400] Kernel panic - not syncing: Fatal exception [ 232.737409][ T6400] Kernel Offset: disabled [ 232.741730][ T6400] Rebooting in 86400 seconds..