last executing test programs: 1m2.354787473s ago: executing program 4 (id=311): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x4, 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$vcsn(&(0x7f0000000000), 0x10000, 0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x24048844) 1m1.455635101s ago: executing program 4 (id=317): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6, 0x851, 0x40000, {0x77359400}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1}, 0x14, 0x2, 0x0, 0x0, "9d77eef1cddac933196d32eeb941fece62578d543bf0314b545dd9f21558eb40ffe74d485f32575cd21ec0f36c505a9739fdff98d2c7d5c208496f9aba237632"}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x4000) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4100}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) (async) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r4, &(0x7f0000000100), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6, 0x851, 0x40000, {0x77359400}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1}, 0x14, 0x2, 0x0, 0x0, "9d77eef1cddac933196d32eeb941fece62578d543bf0314b545dd9f21558eb40ffe74d485f32575cd21ec0f36c505a9739fdff98d2c7d5c208496f9aba237632"}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4100}, 0x0) (async) 58.813025775s ago: executing program 4 (id=318): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 51.155579948s ago: executing program 4 (id=331): syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x8c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@arm64={0x3, 0xc, 0xf, '\x00', 0x10001}) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000002c0)={0x150002, 0x0, [0x3, 0xfffffffffffffffa, 0x5, 0x200, 0x6, 0x1, 0x9, 0xe8f]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0), 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xc, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x5, 0x0, 0xffffffff, 0xf, 0x0, 0x6, 0x200, 0x7}}}}]}, 0x58}}, 0x4000) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001000)={0x2000200e}) r14 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000040)) 43.898598963s ago: executing program 4 (id=335): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000000c0)={0x9, @raw_data="a234aa82831f0539cfd2220495dd8595c20d1311a4b480c49cc341a398c83ea48d2206076059d15c7baefdaf2b62dc670f92ee4bacfb57242799896d96424f3c9520d1bb0c384c7d7827121b6578f582bce655b3b92bcc0c7d5ba5e5be60513af5989e4fd6866b33b2468290433c954beed9e312279a52d49af5ff9c66e6f26185d05ff88ff98ad5d59432d20020dfb2e84755373958a63c0db27ac1682a376ffa565c78fa3f17bbdebb1fcc76517c7e0dc1dff9fcfa364a60ca772826f0935c774358207d24c218"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, 0x0, 0x0, 0x4) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) syz_clone(0x200000, &(0x7f0000000380)="738b05910e1fda14ad1b0b73e4d8a3b45164135fba25e86a78c01dc3504e23d48bd6abef17f9ede8d5206b546d440f40358d30c41b1bc1059be2737afbf9dad0e205075bffc2c76e6c2927af1f0eb5860dbef86dc62f18e8b3f6205e1e1b56d1aa32d50bfe7bd34c22840ffca5a280a1b9d838156d71ec041f88c75993c1", 0x7e, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="4fbd08553b1775cfa6c255cbb386060359339a1ae317e72ee5e2b8b1ed2e17b27dbc18a5a0b5264630c554d65330b40d38c69e4727ee431e1ad2c5b85bb586fa86f002b525efa64e14bf8fa0effada4771e7515b97d1e36cac1561330be7eb07ff4da2b857e2187b674bfbe45987fe0a583e969c7abc012275d0b0eafbab20452cda") io_setup(0x7, &(0x7f0000000580)=0x0) r5 = open_tree(r1, &(0x7f00000005c0)='./file0\x00', 0x81101) shutdown(r2, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x10, r5, 0x119d4000) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000640)="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") ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {0x7fffffff}}, './file0\x00'}) io_submit(r4, 0x6, &(0x7f0000000c80)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x1c54, r0, &(0x7f0000000740)="fcaae1b82082d946b8858307ec5791c8d13b6384a7a14c22b6c4955c77bc0750aa01f71f14003433909ad828e27e976e306a8ee669ee423ef7a7780981497f4cdbbff677e9162b6f9599e3b21062dda092b6457d2f19fff921613b1c8f67c4ee1f6a70ea4ad7f84123f3d34a6562ba9d68e1b72d1fff53fdd1cad0bbc3b9976e8901fd6b55fe980af03122149770cf340fb60e0e48e18ac0e65a2dea0015d915ad973e45a43d2481dc2eb4a5cddd02a2ab8d002661d3fcae169d338260c5d35002f1d503b4250c0f68bcec638c1e554c9617f8c43f528a654510f2b79bd2048289f055471e964e5aeb18bc7fbcfdb8e6641c5fd4a59944d4d9", 0xf9, 0x4, 0x0, 0x2, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000000880)="a9869dfb93a5574fda9158cca2fd1234a972dd2cfc39a7abfa2cb102904f2d76", 0x20, 0xacb, 0x0, 0x1, r5}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0xbb, r5, &(0x7f0000000900)="998e67cb7a64029a5895c82df27005081a", 0x11, 0x4, 0x0, 0x3, r5}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x7, 0x4, r6, &(0x7f00000009c0)="c708af8332d3194c4cd102ecd41991103728837f0933190c809e5dddf75e8a560980beeb94c579cefd666504e657d5fe52a9fb0ec6879c510d7869a88c725c65fd", 0x41, 0x5}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000ac0)="1e9a6d1023d4cc4cca3df2cc5fc6c1a8d1011dd6f5809115d9b0f631ae8f9bff0afedac33a13609c22da93ef84ce5ec69b7339d6949d1c154927185ab958fc7ccd154a5bccf7cd226f4d19bcff817d9a35525dd609142381bddc13157ed8d5f47a243c69fa2c785057e2", 0x6a, 0x101, 0x0, 0x2, r1}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x4, 0x4, r2, &(0x7f0000000b80)="f9987f9206c4a3af68deec0d3ff8fbcb7527c3eb5bf9ed08c394e01cb9ee90ee2b912775de43b9729b70903842172d6f392edde6aae1420e33423dd0daceebb198a5b92dc2f29f5d2c69ac8e8ef8b16cde67b003f488f460a004c363190cfc4715928ede31ea864b89781376e663bc3c77596cb187d85eb8d7c22bdb206dc8fb44a685bd67c5622c", 0x88, 0x9, 0x0, 0x1, r1}]) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) io_pgetevents(r4, 0x0, 0x3, &(0x7f0000000d80)=[{}, {}, {}], &(0x7f0000000e00)={0x77359400}, &(0x7f0000000e80)={&(0x7f0000000e40)={[0x3]}, 0x8}) syz_emit_ethernet(0x46, &(0x7f0000000ec0)={@empty, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, @broadcast, @ipv4={'\x00', '\xff\xff', @remote}}}}}, &(0x7f0000000f40)={0x0, 0x2, [0x966, 0xbf4, 0xbdd, 0xba4]}) syz_io_uring_setup(0x2bb, &(0x7f0000000f80)={0x0, 0x54b4, 0x2000, 0x2, 0xdd, 0x0, r1}, &(0x7f0000001000), &(0x7f0000001040)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x12, r6, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x10, 0x24, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa750}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9c0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, 0x0, 0x9, 0x1000, &(0x7f0000001200)=""/4096, 0x40f00, 0x14, '\x00', 0x0, @sk_msg=0x7, r5, 0x8, &(0x7f0000002200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000002240)={0x0, 0x6, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r6, 0xa, &(0x7f0000002280)=[r6, r5], &(0x7f00000022c0)=[{0x5, 0x1, 0x6, 0x7}, {0x3, 0x1, 0xd, 0xa}, {0x5, 0x5, 0x10, 0xa}, {0x3, 0x3, 0x0, 0x9}, {0x0, 0x1, 0x1, 0x5}, {0x5, 0x5, 0x10, 0x3}, {0x3, 0x3, 0xc, 0x8}, {0x2, 0x4, 0x1, 0xc}, {0x3, 0x3, 0x0, 0x1}, {0x2, 0x1, 0x6}], 0x10, 0x7fffffff, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000002540), 0x4) 41.675978718s ago: executing program 4 (id=339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x8010, r2, 0x70a2b000) epoll_create(0x101) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10001, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x0, 0x8, 0x5, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x8f57, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f236eb9010900000f32826d0800440f20c0350f000000440f22c0b9800000c00f3235000800000f300fc7accd706c00000f017725f6eaf30fa7c02e0f08", 0x3e}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000100000000000000000000000c00000000000000"], 0x50) syz_io_uring_complete(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 41.081535077s ago: executing program 0 (id=340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x8010, r2, 0x70a2b000) epoll_create(0x101) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10001, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x0, 0x8, 0x5, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x8f57, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f236eb9010900000f32826d0800440f20c0350f000000440f22c0b9800000c00f3235000800000f300fc7accd706c00000f017725f6eaf30fa7c02e0f08", 0x3e}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000100000000000000000000000c00000000000000"], 0x50) syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0x10, &(0x7f0000000480)=ANY=[@ANYRESHEX=r8, @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000001000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x26, &(0x7f00000001c0)=""/38, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xa, 0xffffffff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 34.324055754s ago: executing program 2 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="ff5f730f01c566b8c3008ec80f2f4639b8070000000f23c00f21f835020001000f23f80fc7adf00600000f322e0f01d1660f3882a1f17f00000f20d8", 0x3c}], 0x1, 0x6d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f00000000c0)) 30.403654677s ago: executing program 2 (id=349): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000000c0)={0x9, @raw_data="a234aa82831f0539cfd2220495dd8595c20d1311a4b480c49cc341a398c83ea48d2206076059d15c7baefdaf2b62dc670f92ee4bacfb57242799896d96424f3c9520d1bb0c384c7d7827121b6578f582bce655b3b92bcc0c7d5ba5e5be60513af5989e4fd6866b33b2468290433c954beed9e312279a52d49af5ff9c66e6f26185d05ff88ff98ad5d59432d20020dfb2e84755373958a63c0db27ac1682a376ffa565c78fa3f17bbdebb1fcc76517c7e0dc1dff9fcfa364a60ca772826f0935c774358207d24c218"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, 0x0, 0x0, 0x4) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) syz_clone(0x200000, &(0x7f0000000380)="738b05910e1fda14ad1b0b73e4d8a3b45164135fba25e86a78c01dc3504e23d48bd6abef17f9ede8d5206b546d440f40358d30c41b1bc1059be2737afbf9dad0e205075bffc2c76e6c2927af1f0eb5860dbef86dc62f18e8b3f6205e1e1b56d1aa32d50bfe7bd34c22840ffca5a280a1b9d838156d71ec041f88c75993c1", 0x7e, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="4fbd08553b1775cfa6c255cbb386060359339a1ae317e72ee5e2b8b1ed2e17b27dbc18a5a0b5264630c554d65330b40d38c69e4727ee431e1ad2c5b85bb586fa86f002b525efa64e14bf8fa0effada4771e7515b97d1e36cac1561330be7eb07ff4da2b857e2187b674bfbe45987fe0a583e969c7abc012275d0b0eafbab20452cda") io_setup(0x7, &(0x7f0000000580)=0x0) r5 = open_tree(r1, &(0x7f00000005c0)='./file0\x00', 0x81101) shutdown(r2, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x10, r5, 0x119d4000) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000640)="c8a90dd2d14a336a221fc2e7262ac24f0c9d907f8560ed8fdb836687763a4fe97a739d9a88739624eeb501dff756023e8e581d886d35c7ea10f12f1e7c81a26bc07664c17ec88fb567a03928ee68a477c3fc4882e105b3d0b359ce4466b739e35cb88a72dbea6cc69f2f1a596f58326661d41e80739288988c7d9dc1970e180ce742661518e511ff9fb2b7b358197742d2b16a7b01d20e45fc49e02de820f48501cf6b961b7c15c3c0ea866519b80c00f1c36fcc34f8f3744b737510bdc8c087a467903f8f098ae36ba85c0ad4e6d81790234208f36719cccc04ffa9462b5da1a56ce49568379ba88d976f1baadfd50e6a92e3141e68da95604b5b71a829fe83") ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {0x7fffffff}}, './file0\x00'}) io_submit(r4, 0x6, &(0x7f0000000c80)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x1c54, r0, &(0x7f0000000740)="fcaae1b82082d946b8858307ec5791c8d13b6384a7a14c22b6c4955c77bc0750aa01f71f14003433909ad828e27e976e306a8ee669ee423ef7a7780981497f4cdbbff677e9162b6f9599e3b21062dda092b6457d2f19fff921613b1c8f67c4ee1f6a70ea4ad7f84123f3d34a6562ba9d68e1b72d1fff53fdd1cad0bbc3b9976e8901fd6b55fe980af03122149770cf340fb60e0e48e18ac0e65a2dea0015d915ad973e45a43d2481dc2eb4a5cddd02a2ab8d002661d3fcae169d338260c5d35002f1d503b4250c0f68bcec638c1e554c9617f8c43f528a654510f2b79bd2048289f055471e964e5aeb18bc7fbcfdb8e6641c5fd4a59944d4d9", 0xf9, 0x4, 0x0, 0x2, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000000880)="a9869dfb93a5574fda9158cca2fd1234a972dd2cfc39a7abfa2cb102904f2d76", 0x20, 0xacb, 0x0, 0x1, r5}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0xbb, r5, &(0x7f0000000900)="998e67cb7a64029a5895c82df27005081a", 0x11, 0x4, 0x0, 0x3, r5}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x7, 0x4, r6, &(0x7f00000009c0)="c708af8332d3194c4cd102ecd41991103728837f0933190c809e5dddf75e8a560980beeb94c579cefd666504e657d5fe52a9fb0ec6879c510d7869a88c725c65fd", 0x41, 0x5}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000ac0)="1e9a6d1023d4cc4cca3df2cc5fc6c1a8d1011dd6f5809115d9b0f631ae8f9bff0afedac33a13609c22da93ef84ce5ec69b7339d6949d1c154927185ab958fc7ccd154a5bccf7cd226f4d19bcff817d9a35525dd609142381bddc13157ed8d5f47a243c69fa2c785057e2", 0x6a, 0x101, 0x0, 0x2, r1}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x4, 0x4, r2, &(0x7f0000000b80)="f9987f9206c4a3af68deec0d3ff8fbcb7527c3eb5bf9ed08c394e01cb9ee90ee2b912775de43b9729b70903842172d6f392edde6aae1420e33423dd0daceebb198a5b92dc2f29f5d2c69ac8e8ef8b16cde67b003f488f460a004c363190cfc4715928ede31ea864b89781376e663bc3c77596cb187d85eb8d7c22bdb206dc8fb44a685bd67c5622c", 0x88, 0x9, 0x0, 0x1, r1}]) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) io_pgetevents(r4, 0x0, 0x3, &(0x7f0000000d80)=[{}, {}, {}], &(0x7f0000000e00)={0x77359400}, &(0x7f0000000e80)={&(0x7f0000000e40)={[0x3]}, 0x8}) syz_emit_ethernet(0x46, &(0x7f0000000ec0)={@empty, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, @broadcast, @ipv4={'\x00', '\xff\xff', @remote}}}}}, &(0x7f0000000f40)={0x0, 0x2, [0x966, 0xbf4, 0xbdd, 0xba4]}) syz_io_uring_setup(0x2bb, &(0x7f0000000f80)={0x0, 0x54b4, 0x2000, 0x2, 0xdd, 0x0, r1}, &(0x7f0000001000), &(0x7f0000001040)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x12, r6, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x10, 0x24, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa750}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9c0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, 0x0, 0x9, 0x1000, &(0x7f0000001200)=""/4096, 0x40f00, 0x14, '\x00', 0x0, @sk_msg=0x7, r5, 0x8, &(0x7f0000002200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000002240)={0x0, 0x6, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r6, 0xa, &(0x7f0000002280)=[r6, r5], &(0x7f00000022c0)=[{0x5, 0x1, 0x6, 0x7}, {0x3, 0x1, 0xd, 0xa}, {0x5, 0x5, 0x10, 0xa}, {0x3, 0x3, 0x0, 0x9}, {0x0, 0x1, 0x1, 0x5}, {0x5, 0x5, 0x10, 0x3}, {0x3, 0x3, 0xc, 0x8}, {0x2, 0x4, 0x1, 0xc}, {0x3, 0x3, 0x0, 0x1}, {0x2, 0x1, 0x6}], 0x10, 0x7fffffff, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000002540), 0x4) 29.863037353s ago: executing program 3 (id=351): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa842, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000540)=""/167, 0xa7}], 0x1) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x2e, 0x0, &(0x7f0000000180)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x8, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/124, 0x7c}, {&(0x7f0000000840)=""/83, 0x53}, {&(0x7f00000008c0)=""/164, 0xa4}, {&(0x7f0000001a00)=""/222, 0xde}], 0x4, &(0x7f0000001b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001b80), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001c00)=""/132, 0x84}, {&(0x7f0000001cc0)=""/253, 0xfd}, {&(0x7f0000001dc0)=""/203, 0xcb}, {&(0x7f0000001ec0)=""/201, 0xc9}, {&(0x7f0000000980)=""/41, 0x29}, {&(0x7f0000001fc0)=""/121, 0x79}], 0x6, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002180)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002200)=""/177, 0xb1}], 0x1, &(0x7f0000002300)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002400)=""/39, 0x27}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/232, 0xe8}], 0x3, &(0x7f00000025c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002740)=""/60, 0x3c}, {&(0x7f0000002780)=""/83, 0x53}, {&(0x7f0000002800)=""/139, 0x8b}], 0x3, &(0x7f0000002900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002980)=""/196, 0xc4}, {&(0x7f0000002a80)=""/225, 0xe1}, {&(0x7f0000002b80)=""/101, 0x65}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/212, 0xd4}, {&(0x7f0000003d00)=""/13, 0xd}], 0x6, &(0x7f0000003dc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003e40), 0x6e, &(0x7f0000004280)=[{&(0x7f0000003ec0)=""/46, 0x2e}, {&(0x7f0000003f00)=""/57, 0x39}, {&(0x7f0000003f40)=""/18, 0x12}, {&(0x7f0000003f80)=""/28, 0x1c}, {&(0x7f0000003fc0)=""/226, 0xe2}, {&(0x7f00000040c0)=""/1, 0x1}, {&(0x7f0000004100)=""/153, 0x99}, {&(0x7f00000041c0)=""/92, 0x5c}, {&(0x7f0000004240)=""/54, 0x36}], 0x9}}, {{&(0x7f0000004340), 0x6e, &(0x7f00000047c0)=[{&(0x7f00000043c0)=""/118, 0x76}, {&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004500)=""/145, 0x91}, {&(0x7f00000045c0)=""/205, 0xcd}, {&(0x7f00000046c0)=""/219, 0xdb}], 0x5, &(0x7f0000004840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004880), 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004900)=""/137, 0x89}, {&(0x7f00000049c0)=""/117, 0x75}, {&(0x7f0000004a40)=""/20, 0x14}, {&(0x7f0000004a80)=""/36, 0x24}, {&(0x7f0000004ac0)=""/119, 0x77}], 0x5, &(0x7f0000004bc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0xa, 0x100, &(0x7f0000004e80)) 29.446797645s ago: executing program 0 (id=352): socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000030000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0) 27.911770496s ago: executing program 3 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x50, 0x1, 0x0, "a90035e7f30f00de7fdf4832c305f7008000000900f17582ca00010000008300", 0x7b143208}) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r4, 0x0, 0x18, 0x0, &(0x7f0000000500)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f00000000c0)=""/127, 0x7f) getdents(r6, 0xfffffffffffffffd, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 27.523793821s ago: executing program 0 (id=354): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000ffffffc30000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 27.081078065s ago: executing program 2 (id=355): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x201, @tick=0x8f, 0x0, {0xea, 0xfc}, 0x1, 0x2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0xff) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0xf6f, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b4000000020000006600000000000000730137000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0359083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e2740a7ab7069790da79b7ab45184caffff00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181d2f18d772fb5c58a936620ba1f5fbb48703ab211f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8eff7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c84b0d9d033edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a40948498fa9561213bc20845526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef969187763c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2d9b51d99c89e327b4bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6ed49a5ca8987b0f2a8b14054e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed7de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d02652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b926c36a33eb3bdc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a762e5705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f9a42e34eea5169b796320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe257c0c4a26c60bfa77f89bae2bd4c498a10d4e17dddb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a437f8924ee7a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c80781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b9788a63c8f7009f9149fd9c740eddd300000000000000000000e620e3657ac82a5bd27dfa4f2add31a402346571e87b2644edb73d4affdcbbe2b8e2539b44554c10dc0ac8ba67ab9901c8e9564b4c26a87cf59b11978a86d4938ca4db01a9d8426aed32eb0d0d1dd894bbf3197f3b5744b5a4f813fd7330"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x47) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000580)=""/221, 0xdd}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r3}, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) (async, rerun: 64) bind$can_raw(r4, &(0x7f00000000c0), 0x10) (rerun: 64) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) (async) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async, rerun: 32) ppoll(&(0x7f0000000280)=[{r8}, {r7, 0x40c}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 25.375601281s ago: executing program 32 (id=339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x8010, r2, 0x70a2b000) epoll_create(0x101) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10001, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x0, 0x8, 0x5, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x8f57, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f236eb9010900000f32826d0800440f20c0350f000000440f22c0b9800000c00f3235000800000f300fc7accd706c00000f017725f6eaf30fa7c02e0f08", 0x3e}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000100000000000000000000000c00000000000000"], 0x50) syz_io_uring_complete(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 23.351926625s ago: executing program 0 (id=358): sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="090000002201000228bd7004ffdbdf2516000000080042004d7a65826a4767400987960731400803dcd76de510cd20786477f853ecee7bdff5f66c19b73c6ade23898b11db80c975518f1d70fe30c60c09dec1a075ded8b7840f097addab820e0d215b23daadcc34d46f1d36e98cd112428bc8b6bcded5492657ba9c3aaca669bcf4ec46b34c2a6e8faf82d22e00"/151, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRES64=r1, @ANYRES8=r4], 0x48) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') pipe(&(0x7f0000000440)) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x3, 0x1}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c140000000000000000000014", @ANYRES8=0x0, @ANYRESDEC], 0x30}}, 0x80) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4040010}, 0x28800) 23.170400917s ago: executing program 2 (id=359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x400000ffc000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4000) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r2, &(0x7f0000004940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_FPEXC(0xc, 0x80000) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) clock_adjtime(0x3, &(0x7f00000003c0)={0xe, 0x6, 0xfffffffffffffff8, 0xe7, 0x5, 0x5, 0x100000000, 0x10, 0x7fff, 0x0, 0x9, 0x4, 0x1000, 0x1ff, 0xfb, 0x7, 0x35c2, 0x5, 0x2, 0x6, 0xff, 0x4928, 0xba41, 0x8000, 0x8, 0x9700}) syz_fuse_handle_req(r2, &(0x7f00000070c0)="a37b33352102270e8080da9acea18541f7a5c5c0ccac6b823171247e6e3675eaeae3fc94bd43baf4a099da2138a0fe4c613d6f13f998b175ae52341675e866014f466758a4fbd32928f56991cfdb381074d418d9690e966a9e10945f0a16abc6e27418ba809e9e22294a5f0c2ddb090d6849df842893a2f38c00c4c3689ec3875d021a3e221aa99d35e4660aa1796c2d4ea85bb91752c0c21dd01debd31e5d1eb7ddc9c64388008fa08a9871b9d158d0adbff0f57a19252b75100a980d86e9633cd793c8e2e33c00035a5ad72ef11437dc82e6e04d1a48d1f771d58f2f7dd978e9a4f3d462f03c0ca11026a9a15d1bd5c732b90d56a18ed5e16e4fc18739bd31eb7695369af1178a495890fc9e796d43f2f461e6d45634fb8e191c06c7c875fbad054f0ab21fecd7d3883a5d568426335c8902a1ef2e5856cf8888b91050dd50dd9e419b9a77dd6a135dbe314d769929a2ab34679406dc4314763867f7ad19945c550cce8d9243b1f602a47a7ca863895e5ddaff09fb773b1862a3757b2895054754c2a23a4b7975391972a9ad4f25245265bd77b634b9d834a88e9a16cc1a5b1dae4a46de62b939fe89403110778f126786aadd81950077de037b83550b1b897ebe50a3f660eb368cd771abb9fe1cf6fdd51e987757e3e7a6d9d1eebdacb8ecc00de9413f19b2a4063ad78b8eff9b5c420a06e21364d8c9fab06ee878e1344c767fe6e8d21dfe2f4dece09e2fbf405bc1008b2d0adf86fc70421952207b2265bacf5179efe10ba4c42e1f4d8f7c5b19352b866afd280c66b50d87c08a7e316270189f01397b70fe7b50e7426a5a760bafae1cd0c28469ccce09dd37afffce3ca4d5e05569bc145dc4ee1107097cee103a2215d87af81474231a8113b1f2924e6d5bf29742c3ef17d4f284db167a74f742b768bc3becc027c76d30e7921350746ababd6172895de2cd9e3a5e764edc8e2f3588b45574cc574993e84a47bb3d71867f412a7b20b82ac23e10a85f5f1984d25e42793798547837509bd94a7c8579f9181341b221f418cc0de373672ada07951cc7009300dbd0742426aba9eb1d533a0cd14a6b13f37854922228b9d0b1e20b67746102f84973405884ee2519227d3254c96e1146e08956cb1a474434b2ffe7a0b09e9437b303159abe4eca69f444be28ffe95a3935ad77dcb7291da653f9942926f6a3c750526dca116e7c278c628244e4b6c2da0eb2255e067bb11c42c03105bcb4ab9eb7a276e1f5d8cf7e779c158a2cc7f867d0e7fc5d77d797d725efd76ffde2c69b1abfa05dac952cf3ca5295845202341956d484859f7d5e2b3df31f9e2152674ecd71590605310c8fe238e33c0415469826c35aed0d65f3aa459ccf607e4b25f25cd08d65b48bd0f56461d995007dc5b00d8d91a9fa48286fa1d8dfb68fc9756cf928c05ba7f93f8285f7b6df63a5634c39da5ab555362339fd85dae4e952e06b8ad17bcf157733d55a30a05c0b6ac2ed2fd54ab1033dec41101f5251ed40c6f42e876328bad8f4fd21730cd1e2efb847dcb93ded254c4e66c6374ec40b124d32032f5ee5c52f0a51f2ca797b12f814a1f79e3e4d69412dbc834d620e72ee9648d67ff53eb126f7d382fd8f827fab96b7427cd0962e84542a98acc79cf429f004ce86f5841d0256c83a96087671365e3799951087a017f0a3ff7900b25515869ee524de62bd4e7c2c68e1c900f38b0f7bac92606a0d0eadfa9f1d5af8157f0d5a0d49dedb00bf5785f8b2f8c2f8c10f150a30c31141ca0545eda71841523c6986d7d5fbc1918d5c79e40b929c180153d34fc7c7faba1d471c10b52d3e93b8192fa4826d43ff9df160ab83041b0f647398964c108b7875d74d592d8ee2d5420316656626e58b4dba72bb09376592a062ba0cfa94469b2102ce05b68fd3d275f0941851dd6399cf386cb900441f0f762540ab58c1800e7e00bb34fe32eddc14f05d1537f6c23c8f5b5039b6a22b7d843476d22d4a1086f65aaad2699d402113e349ba58168fe5f9ed496f56d5c7864f6225b24562acad3aa8aac2cfc02e6d14fdaf89066022f61c3f7c0581bee46817ef95500a83e4dd6e6bbfec9ae785b59f29c61e23735543dc8d2596b5a787c00de7dd4209a656b398967d74d022f5a4be5c2ad5aa8e6fa76ebed097822c6b438655c05a5b5b9a3fefb8996c03aab4ef804f2145a9cecd2cc6ad2a54f4f13153da513ff3ff707ba8f34836fd7be482663557cf6923b2c417486a3bae32c28f5f9af211a4f60f202eb4bc5b4a9ac0c72f080c5ce3cd563b40dba488c6bb96f27935c2296e72063399bc0835f194e52d72efe2b0122728d6f841545bebd45b3d589e011f3360e9f90029d06b708b078f6c437862fd355604e87bf37c1ddf3a802fda5bbf03f8453cdb335fb381be1be1d9d3816654102b27dcb78c9b743b4ad22681b6f44dc854c96324d8c2ca678f31d3fe60c5144649340ad541edbc7c1d66314b566b43eeb9a1d9970726d25e529bb0b011b563378ec4580961d1137d47942b02f6f6c0e5322e879711bd4a98348180ca243ae538bd18e9bc1c217b36049e3ffefcfcb3a514dbdbdac14c47afec06b161355e89d1db713a007841e9f53ddc44764b61002c35f48f1c8d57e3c67415cbc920c9e69fb8a0ad8b2da067dd37d9c883dc5c24aac8105987f7b43df3fa2aab926566abdbb506d08b1db4b9f6aff592e68878fd22b2a04ccf8fad887ab7307f5bb5678659467547bb9b8c75a8f19a2fcffd855d917cf126ea4af832adb30df51f6e7311e15bdf0b14a019b4c5dd2a58ff142dbe159039a6dc73c099a72927e717dfcb2c438b9058bf7411786d930db5077533f35f56d02a647f14575abc3f7a149411c4597e9e9bc7e1767da725d8ea13d5c3fbc6e33cfe00b323a0d3abb4a928b180fd2007284ac614163e087c9d996f5f7545691c9b86557b09bb62bbb93d68c51a1f27fb57b869ff5702ee36ad13983f77682f278e09d17ded110beae19ba0a0200c8f9cdc624ded25da0f31b79b21897b25413af89066259aa41291275918a42105f277f5d606b24ca82f254d04fcd258651c565ef918c21a2f9e78162aeab6f19cb0e7c9e8b60b3de04b0916cb726d595e957a74290417e626366f20a33c2be052b3cdbcccca7210b4c9a02c42b749dce61714f59b144a92ad9af3501a3ab02654e6ec897bfa385f95f4e481c6e937122b163d8cb9292ae59c80fd00502e6a726949633e4b1ee09df492daec19d6d498090a9659d2fb7b63349988ffac6c792ad427eec0f48b9b285feba6d2365f1dff4852ea6b4d2289df7ece3a509cfa3574bc8f9e2670c8433885d8c9ec0494d40808d9c9d4efbf90d1b6558ae75e254ea3aff6f37f976aa2916b58a015e4919760063ebd2373730a37bd0f91b281c05b6fb3e35924b4ac88a0d0a8b0d125551458c719cd53cf9753fafc9535d6af395a5b29408d915e7259ab0f6c7abd8c754bb71ed1a476e6760eee035460d4dfec3c53f91636280056a57fc45e0f37a47f994f8b1bc42644c37fb004aef34bbfa71ef5b89b1ee581b8c803885d8f8637a2b3ae49078738580aa8c0d94c2564dd7b50bd6b718b854755b6a08d8d1a2ccf4eb3c704e53b8a299617134aa79fd00c8749e57965e9a16d73142f2812c3e1ffc09938406561949c674c35cf88128de9152b4a43d4e2432ac234014c12dbf057112d28d3125fc98bf0dd9a934217440199a698628778649cd1360d79db2d74fa34e94a6a9333f2804b8e4264160c493e951294810e6708ea888a48403aac2b21e136a1d8d07fe07930b543028b62ee39eb6f3480c27186bdcfef55e93343496eefb0c38b50cf9762dc606ab7fa4d155d2d965746baad06c3d39ce8fe350cfbf569676195330ec78f25f04a915685684f49a19f4102109a2cf60f28df29fcf74892ff84110ffa18fd43d3f8a10173b970ed934f5e30d170ef6348890be263f0d64ad5ae53e6e6b4895f3cdcd6fdaebd69fa2f067bd2a207559ca6cbdcebd4e18855642ffd8d5b85b6b805c2ca1c63de1cafe7ee1f2ceedd8fd5c6e22ab40ad8772027576080609c6d55a7d08149122c1fc28497723751abe76c8dd12c6e2f311ad531b0a2f8e04a5f17346ba602dadae0745ebd715853277e1b73ed2d0be842a95c955be66c7ab52a736709177a8a48255655f23076f6f0a8bd683b1ccc7866830ef3780d499760464da1a5aa731aa16fbd925fba7fd06702046dcbc3571031a7f58e9d9604de217acd0b59f790e78ebc51d91a45ef57c37417c5c1f34127aabe64a269b90f56e03280f10bbd1500ab30a3ee29c59fa0598a57eee3641cbe002fbca5b12102a7b8e7fd514bde6bb742dd139ecec58a0ee60b2fde003be535523d024aba223ff8e6cbd44cab79cf379389a64b1ccb1c72dc3e7fbb8d1f59a39a80cf5d30f5a66546e838959f2e4f19e854c7de93c8ec06a8f223f5355e9c76e17ad28a887dadc17a41fe80d878cb3e3bb863bbaa168c9a4ebd74475d7e6ae3d99a7aad9e23d3edf08ecb5143764099d258d4a6d82fc9afa5775f75b41bf36be25a537f2905903f82e08657fb7e341079ff29a656ff85ae34317c5b1a81d8e814d55807fcf2ed7250b29046d2e1d0a14ec7ba8910abfe0cc9aa04164b94a4bb0970f3f3b1eac5cfd1f32a5ac84d552f60962e98222b2a9513af22d5da3f005f6f9ae166797a94360235eac2a6ddb2321c2ec514eb6ccf086a8c83e65081ea67acac44753302d4519d0cfc796f56c04e849cdea18cbd32da25dddbfc2cd575c67f26882b5c2bc534701f11775d8e93131488141fbb61c61755aa30c1a1829140f0332a76317aafa08f072f00cb330c5adfdca9d9055b1fb51616e8ca5dc34dadc6911d93b93871115107c2371279e248ff898268cccb12b07cc555ad7bf7811910f37f2b07598f661dfa1f2ff6fe2d1f8aa4deebf260573b27ef6e578469ad652a4f31da494fe0d00e4c66e8011d5bb2c889331679544514f16c257e74ddca134aaa5d15707c26b3373c110e2ec61fede15fc6e52428e1b5788f5c667794c5bbb26e8aa7a66cc38bdb6150c7804d59a2ce2c2d4120f94afb3807a2b685fdede4da11bc63abf04bf0823897dddee0697924fe855fba225a97c5b5d1bd6cb17d6b0ce93e475a9b14130ca5cee7ba41d521f72214b2f0fbcc1fbec70ef4dc7a4c9442d02ec641bd087ffe52fc7c9f0c39d41d03d1f93cbb8896abbee62f3bb1685f97e22664fb45530681eb6393442cfae1366ddc395fd5aa4d4fd0c250566b1c7cc8cfe6b25e73315998b45af5dbca10696ed8d113f4f35f385840f0558e93740e9a5d2e6768a022d17d266f47d050a8e91e8e0bdbf0d5e92f8d8294c3666c00344d4336d23a4c4235a3bcbd69f4b4769d6b1f513544392ccb2b96b1c6292131014835dfefebb4686496fee657e4aca53fbbdc15e0a72b1af7bd58bc6b4959356e7726342a330e6b9badc94e7498569f3cac949acc0ea9fc149a874fe271829c72e917f1374a80f22c8bf0109a0ac1e1de013a826173853127c22f7ba826bba044bcd8898e2c8432ce54a98ab4d18eac68c208e51a3210c6730b81384cfd8a74e681627805fb100c26a2a8385686fbffedfc7583b2222e1f79e45de79069b9f37a07bf99386525091b6d614820deea7e3105dcefa214258a8603c876fb776d0b019c984e028da494ef3f8841bc889bed54ea443634c2885639e865f0cd0a1dfd6f7a3b22c51461e73b3650b9a63c48b400bdcfac039e4cfdbefbf869386075ce8790eb4a588fd49f49c54ac5a8c45641bba62620d15042f08f5305566bc19111d08fedb65e2f87fb28442340be88a40cfef7ab3dad7e79225c07d347c2526269e9e709a90a49345d3351ac967da890707ed2affd155f2b356bbbe756872ecf7d944d8be128cd36100c8913f7fcf67f5d6f71ea19aa8877806bd6f65f10b2bf72867a7f6b900a7e0049aba25e162d670399e407c1332855a8d2db7465a40704660cd63bbcde4e36412c1fb244a1d23edbeb9d1c7189343144c8e27c55249a2b7fc00134a230601ca488d9ff441508b14129046e918abe163a40ae26b77c6df0fb843610a93279168fd7244cf934f905fe33dd5675819bbeaf370bf9a1101159c57dcfa4820a76cfa5957355ee450371df3c5f61fe3f4cef0df889b69f543b3965dc19d48d897272146db5c34c26bb6a7b305e9bc9a63419b789abd8e6a72a89d95a422d7e77f9c0afc619c43c3b77c8ffd408383fee4475ff88c90372bf9fda91b8b3b19ee9cac890cc6aa13f3a33d40f3970626b8854e72ecd65467e40552ceed496a5144db8f4122d34246bf76651fb1f1a154c7a3906939bd1fb85cf99cad9ecb0d63e0bb31b8133c2eb0e6f66e8e36746589c30637f5e045b9a5b6b5c728398c326aa9e0e670098726d3127b2479442c8e64ed5402790af0a114c42a07d97c38b7c738c9bcb3ddde8e67c3e786dddf7f9bac3cb61998f73340cdc62eeed7f05f2768fdaa6a5d91d98531a80fb8f8acb5abe47972f0155a85ee95166b20f727bd4ae648ce3e0de4d80ca7227ef298d4f204f094f12c8acfdd2a6905743b8daf56b8160dd081c54eeda647e23efdf89972aee301cc4f67faabe82fd9db1455090c05391cfc3e4bec5d38fab3716e19638dfd483ee2bba57e4d1c00d01cc45a49e2727c19b104f1072f1a50407e4622be580d35393c7db5119017be6bd5acf3be228c42096af9739e44867782e600a48ab9baeec9e37e9863d1b19733c3fe47c30f328816966748ce717529752ebb9e2f582ddd132158ed2d68fd17de3e725cd0fc13477585341703b51682879a9a3167cca4cb09ce2449d18514d8b8343de79b332b6981101a3c6ae2679aeaea1cad81d216400c40cea6ebc99ee77b5ab7a508cfffcefa7b4d48a2ea8a3ff5917f43876ea653822a21e208d733847e017eaadc460c9828365a1a0d149ccda8a5c42ecb74ce102fc9cb75360e87b758f7cb55c593bacf8a7eb698cf300adc7000f9082aff2be93ddbed0dc487c72e3e7707bbdaf0d6c5df66140270ca71de6c86b4776033af0cef6b5c8d9bb4bd74d2f90bdbc6d13fe4b4d5477a16add3eb75e865aa4441b68b3640bae1f03e7bb261808f2c3fb5d3997b666c7b5f0df5a53a7114f1eed925eb1d5519542f12e9692ed7ed98e789b962a892727bc06fafbc9e335e245e8240eaeb15ee7dd4136d738c243838fc752095763b7647760045fbdf26c2646c00ccee6fc905fa7224981e40a2124629c43cc020e2c0c83e02aca162afc40bc19734dd22fce44839440f4e69fd7aeb7c3f35ef2d4eddffc0874ef77bf4df5e1a77e2495e31cf514d4dd252ec978dc47df2edcbba9a175d4ecb402fb701f0781b618824328a94112ebdd51137910810c565d564a76be9d1e5d13ee9ad311fdcbdefe16bc6fbe0e3dfab238742a80463de1849bcdd6120ab7b420c9fb3c0e1955e65b431b0f43d32260ecdbdb69a4d6ea6498ac377648c974f29393f23cf99e2aa2cfe128c371beab86b0ec5b20edb5ee451554fac22562083396329d774fa9be0f4bee29f2657840bd82e1b824b371c56dac44a45d4898cb25a9af0598cc8b2f2b753fa88e4c3da1927a789cfcd6e95639e88d384d701d47bf74e0d4cfc4031ae57915ff179dfee312b2a7aefd50ca4f7e4deaa526703f80d5fd696e9043ed2b8110a3fad5188bf84d55ff73ba9ec6a8145e17369686e2a43b4e8bd4d09351f969432ea0c7940f326eda2cb8a7eb709480b3072af8fd3370ba8edcab2a6e48f8f6bc9679ed95de2a91955acfb2bdbec12ca8809922115edf86c68dc3d16c6dfd89c386976a8e666a9f2f965978f26a73919354eb0779d0c6220db4dceaf92686dc222b8af5472512f065767b63b8b64d370e2dd78a0398cb53a497b4c76863b82836e34aaf8bfe1e530be4622d350c16d20d973b7d6907e21efb393f3f7e57b6e0d660a8af0c689bb3e0d0c70d8a90878d650cf60f56012e80edcd1fad4bf5d7e9989a628ae3b20e755507ce52a9537bb57ba49f263f5905dd0e7c8be3e095b3738cfb9b040d4d81b7ac352bb213d2b47e8b6807b13990ecfcad12f2e0e1e486b5e34513c7f52d04edbd3296f5f5f5ed3d36463dccd417f05c38f156b4e8a78a07ce8536f83c80c8b1af747c83d9250cec54af6a67cc91e69f810d191da79f6640503d63b6172533bcacf5563caeb44c2b657e3039e063531ea22b07797f73218b14d77d94488bbba374202eec6c067ce3336da24893658225dfff4a8c6083954c4dcb9d969941937e8c19c2350da5453dc304ba5db942b33e1d062070478af3721528a77f518b67cff9d7a2e31669bb4e8d0dd6f179805b2e47d30cc1abb532576e8ed067cd0188df6c49ee0c63393bec3d925d88ecebe6a5a8f37f1dfc6762c7a3a596049e7f1787bec7a03e55a50360b83158e49cd9732a66b1cef83e43fd2abd33f753efdb236675490fc9c9381e6f421c9384e43ded79ce91025af90fda6752355ddacbb72aa204e7efa77f3825d7f274aca737bc56c61a1d05bf7004a71c904e8483f3c4df3c9ff5c7b7e350b4c55786d3ea99bb61814881c6e98da71e8f5a0646c44912d12e4a5ad3f2ea14f4d4933ecf7ac8b9464a80204b9c3465fc397aac5a3827bef7187fafb2074b22af3dcde7edaef478c75a0b50ea2ea20b2e08c35b6e48c424e2e3d5767e13dbbb1b87c6012f204f18ae7483d5c29c0a9c46de7917031e168c71c0a5c336c578f9ec41844618d40098542c772110566f1c6271d08842e8870a3ff1890a21b42a1339705edf23ff0b819e13c1fe061f950b86dac060e1654c388c53fa2ebf5988c5d06237b3424d551e5b103494f75bbea021b70aa5a67636f2b243819ce4abae74c4560bf15c9c33d095381e8fcbcf3d32abb2d38e78b9f5b97303fb46d01892258232849700be13dfc18c4f91d5a99c6a05970a6b4dc9179ea91eb4de76bbdf7be554d597d21adb396f0a1fa10fbc99741cc25aca370bfb916bf5bffda325c2405151e8e51426c90e5d782599cc59a7b263ff7a319d04d42835744f628c98e3ee379486f4954eab1742840edcf0fe87fd472f5e439678ac0bbc2295b2c12ea28680794c1c60978498b151c0ef5097480d453a0c22ddb2159316e04539561efbb55926758ae6fb2a3a495cf8aa7b693f1d854f99065e748b735097ea63e21d89515913e797515be6a767d42707ef6a0ebb1d3ff0071a0f4eddfdc85922a15a95f98d5f4a672d93621c975a3601bae013103c68fca1f6fb1c4b5853ffbece2075419263e32c72159268e3dab4ca3f0e5b904f40667bebf099374636d55f5a9ee1bbda48b39def3106041878afb63970cabae3388a33719ed206db73f10e498ff4bf4c0e3606726fc851578613c4bc1429695de29f6d6807eba84afc6ded50b0aa5b77ba864e1b36c035a97df5154b1a40017d919acdb8de617d458ddfe2ceda137bd1da6e2ebd5e32f2553c43e14ef6939ec0fb26a65487557cb1300072f79cbaf74a1221fad0d12added22303067f8292abd1d81e3d2aa200d1d1ed377bd57245ba44b51c927ae8d39e7d46dac00ecbacf30d32aebb568e757680c975dcc6864fafca28609db1ba8a30a74e96a791176f76a5de88c50b49ea20e206557b6e4f44d819b471fa1017cba5e195206de632bfb1b52c4c491bf4d1fbcde097324c7d42cf386f3a8c8410ef5477acbcdba183f0272e5ed5a142523b94899159361e7e48e10ee29e7d0a56e673ef903bcde86c19f71209daec067283c5453cce3dd4f39ac9ce17aa02c7ce6ac359a8d4396ed1aaff38225d41733d469535d5c6cd12b96265653296de79418d088652fef9e684f2f3e2ba4a63ab9ef9de81539e6061037e4efa9e03bcd1e95b2f5d6cacccc9f4e1df7c543befea4fa60513d84bdc84ae761be441116327ec263912cfbc47545546b8b038fe741d3ba495c7d862edba2733b497cef8b823a0198a928fce7f51575a93409c463bbf0aebe8450ad408974c6cf1de0e8ce887beee7fe06cae1c0f502799c1aa1a5942c74cd52497c342367b5850e03e9161f7766b4f3e3e5f9de3282f16be48e0eb8171f0cbda19d6c274f12cd62bc4c1bed7642bb147e9bcf7474f820f60d9020e2edf0c6bb3eb8d1dd53c85303544c0fc353cf0b16091d0bf238df89ed025d6591c5b32de30bf9e8e277a8f5f7a61f15051e38ece2021395dd9be6795ee0879a0bba9af3447973797e92279b3e74321615020a4624fbd9f6fa307a94c68f164942b9c7e0af63c41a7c76fac6d77e135ff5bfdaa3dd4753d0d8094c65f25811c9f593fc07f0710eca9e88c02645f9314d4674c50f869f5ed5246e41333670234412d8b6b2c9a99bf483af0cc0bc56039535e6cd9be1b5801538b39f83ec9fc4bb78a8880c06d27d8838e551a7c5eee3c85421665ca2bff57c21dd37e55939ee9f7e06cfcfc18a41b261422d7f94f1ee692960ba2a81a70c167d9e477d2b4a489dd08b1851dc79d651b468c179bc3e2c32215fa74ee00d449735094ee3a6c819decf11728cea207d41d3c665d210e1ab26a79fbbfba8aed8b401227a1adae500333a29d88086f796757dc12af76888c857407a21d9ed483651003f3298bbdb23f27e3e3e5f99f0dfb64534dd1676403042c62966fc7a3da65a089726ed48fd522b92ca292d0139b424fb6e2fa2b81cc5f95d0d64846d2060ad32edb8fe52eaa06b063512ae25c08664e65c5331dd17abf062a78bab8993766893d1cc04850015013a2f461fd96572496020145dc8fdb6f7393b0b1a380296f3cd8d50dcaa54d5259b0e6bc2da29edd01f9419806149c471d97f9f78f8be7236c7d6ec62885854a95ad81f3f7a2fe7968b446e655e1318d118bf731758a75a9747b6e15e945de3c05f962df9975d4268feea8e5de68fdf385636c66670cf195b7455b8d0b69eef633dc7ac799c451b000413efdcd62701eeaa7de5ecfe21c60aea75e22104f9a8ab443141dc18a61914a5c89336ec08ebe7454e4a5568b7fcd1ef25bdca18d3a6c10879564907742588d2b08d1e946712584acab70b3015cf91bfe1e88e8340b6d1b3f801a9fee09ade3f5989f6738401b56e117c36a9feb7809561f01ac1f360edaa29873a0e4daef2df8e97a483995f0ac114d324672c354a52ad8507b6d9c7ab8a3643fc8b46cc357c8eb396d6dba21b99611ef16139fe123f60c84ff1848dd74a8f32682293b2f5e5d496a8b88bee8990287400f4fa4420492bc85a0422ce9179a0cb7aead52f937c985da74c772538e2c5f3cfb88dda634635d0e797d52f5e3f250587f1b1817a9ea2d44cc2a40819c4f8f12d20a95c999e4b911a261fc4d179c3cec165d4737b72acef9e5f302cc90aec7f21e95c3d4f1df4ab39ff06e6baf9b8da3475e6f9cf9754f7ceabc3fa4e61c374fef8df2826aa4cca6703959b4d82224a3e02c68b4c53e9d850164c98f74bd4d2eff235329a1e72f144d1977780f3ad70162788b5fcb57277665bf136261710260277b4a8b68a067bdfa1d5c5f1d5ea42d45e1b5031b9824f3e23", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x4, {0x0, 0x4}}, 0x0}) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) socket(0x1a, 0x4, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x6, 0xffbffffb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="b5"], 0x6c}}, 0x0) 21.8303262s ago: executing program 0 (id=361): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000400700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 21.410051294s ago: executing program 3 (id=362): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000000845130830000000000001090299c2b6fe00000009040010"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, &(0x7f0000000540)={{}, 0x0, [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfd22, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 18.180083416s ago: executing program 1 (id=364): socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000ffffff80000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0) 17.898642685s ago: executing program 0 (id=365): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002300), 0x600) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) execve(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) prctl$PR_SET_NAME(0xf, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0xaaaaaaaaaaaab14, 0x2c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30130000007c000000060a010400000000000000000100000008000b400000000054000480400001800e000100696d6d6564696174650000002c0002800800014002000000040002801c0002801800028008000180ffffff"], 0xf0}}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r11) 17.106707065s ago: executing program 1 (id=366): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_io_uring_setup(0x98b, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140), &(0x7f0000000000)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB='\b\x009\x00', @ANYRES32=r3], 0x90}}, 0x0) 16.579080806s ago: executing program 3 (id=367): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0xf, 0x18, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x1}, {0x80, 0x0, 0x10000}, {}, 0x0, 0x10, 0xffff, 0x0, 0x1, 0x0, 0x7, 0x0, 0x9, 0x6, 0x2000000, 0x0, 0x22, 0x0, 0x2, 0x9}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001180)={0x0, @in6={{0xa, 0x4e22, 0xf, @mcast2, 0xacab}}, [0x400, 0x7, 0x8, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0xf68, 0x2, 0xe, 0x9, 0x1, 0x365, 0x3, 0xfffffffffffffffa]}, &(0x7f0000000040)=0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004044) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r6, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440100001000010003000000fddbdf25ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4804) sendfile(r9, r9, 0x0, 0xffffffff) 15.118207766s ago: executing program 2 (id=368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054) prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) 10.678267829s ago: executing program 1 (id=369): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e024000000110000000000000000dbc790ad000000fc0000000000000014000000000000000000000034000000040000"], 0x68}, 0x4000000) 7.355675321s ago: executing program 3 (id=370): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x8, 0x4, 0x9, 0x8}, 0x1f, [0x8, 0x5, 0x4, 0xe, 0x7, 0xfffffff8, 0x0, 0x3ff, 0x40, 0xfffffff9, 0xd37, 0x8001, 0x1000, 0x6, 0x3, 0x948c, 0x32, 0xf, 0x0, 0x2, 0x6, 0x1, 0x1, 0x8000, 0xffffff01, 0x2, 0x4, 0x5, 0x0, 0xec0f, 0x8, 0x0, 0x3, 0x624, 0x5, 0x2, 0x7, 0x0, 0x0, 0x2400000, 0x3, 0x5, 0x7ff, 0x3, 0x200, 0x10001, 0x3, 0xe, 0xf6, 0x6, 0x4, 0x1, 0x400, 0x2, 0xd15, 0x3, 0x10001, 0x6, 0x2, 0x7000000, 0x3, 0x4, 0x20000, 0x16b40], [0xffffff9e, 0x9, 0x4, 0x3, 0x8, 0x40, 0x8, 0xa09, 0x84, 0x1, 0x7, 0x6, 0x1, 0x3, 0x5, 0xfffff000, 0x1, 0x0, 0x2, 0x8, 0x400, 0x8, 0x9, 0x3, 0x7, 0x200, 0x3, 0x8, 0x4, 0x2, 0x10, 0x1, 0x3, 0xffff6862, 0x101, 0x0, 0x7, 0x1, 0xffff, 0x9, 0xf, 0x0, 0x8, 0x101, 0x6fd6, 0x9, 0xff, 0xd9da, 0x7, 0x1ff, 0x1ff, 0x9, 0x4, 0x8, 0xd, 0x2, 0x180, 0x5, 0x2, 0x6, 0x1, 0x3ff, 0x4, 0x7ff], [0x5, 0x5, 0x5, 0x7, 0xd7ac, 0x9, 0x3, 0x8000, 0x9, 0x4, 0x8, 0x1000, 0x4, 0x8, 0xfffffffe, 0xfffffa70, 0x5, 0x4, 0x83c, 0x1, 0x4, 0x5812, 0x5, 0x0, 0x8, 0x8, 0x1, 0x10001, 0x6, 0x6, 0x4, 0x8, 0x6, 0xfffffffe, 0x3, 0x8, 0x3, 0x8000000, 0x8, 0x2, 0x2, 0x9, 0xfffffffb, 0x6, 0x8000, 0x312a5a2d, 0x81, 0x7, 0x6, 0x2, 0x9, 0xffffff81, 0x7, 0xa6, 0x9, 0x5, 0x1, 0x5, 0x300, 0x4, 0x5, 0xff, 0x2, 0x7], [0x49, 0x9, 0xf32, 0x3, 0x4, 0xdcf8, 0x5, 0x8, 0x7, 0x3ff, 0x0, 0x5, 0x8, 0x0, 0x0, 0x7fff, 0x4b, 0x5, 0x8000, 0x6, 0x6, 0x101, 0x10, 0x4df, 0x81, 0xf54, 0xfffff749, 0xb3d, 0x0, 0x73b7, 0x4, 0x9ce, 0x7, 0xa, 0x2, 0x119, 0x5, 0x1, 0xfffeffff, 0x5, 0x3, 0xb68, 0x10a, 0x8000, 0x80000001, 0x3, 0x8, 0x1, 0x1, 0xfffffffe, 0x817, 0x82c, 0x6, 0x10000, 0x7, 0x7, 0x8, 0x7, 0x200, 0x5, 0x2, 0xfffffffd, 0x18920679, 0x5]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff010000000000000000000000000001140004007f0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000001040006"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000003a00000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740010000002c00068014000500fe800000000000000000000000000031140004"], 0xc0}}, 0x0) 6.790658496s ago: executing program 1 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800090300000000000000000a000000ffe0000b0000010008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x1000c880) 6.425422922s ago: executing program 3 (id=372): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x8010, r2, 0x70a2b000) epoll_create(0x101) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10001, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x0, 0x8, 0x5, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x8f57, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f236eb9010900000f32826d0800440f20c0350f000000440f22c0b9800000c00f3235000800000f300fc7accd706c00000f017725f6eaf30fa7c02e0f08", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0x10, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000001000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x26, &(0x7f00000001c0)=""/38, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xa, 0xffffffff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 5.386466326s ago: executing program 2 (id=373): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x1c, 0x10, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x8}, 0xfffffff1}, @in={0x2, 0x0, @remote}}}, 0x118) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d36874436", 0x23}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000000)=0x205, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x1b, &(0x7f0000000040)=""/18, &(0x7f00000002c0)=0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 5.352548953s ago: executing program 1 (id=374): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa842, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000540)=""/167, 0xa7}], 0x1) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x2e, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x8, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/124, 0x7c}, {&(0x7f0000000840)=""/83, 0x53}, {&(0x7f00000008c0)=""/164, 0xa4}, {&(0x7f0000001a00)=""/222, 0xde}], 0x4, &(0x7f0000001b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001b80), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001c00)=""/132, 0x84}, {&(0x7f0000001cc0)=""/253, 0xfd}, {&(0x7f0000001dc0)=""/203, 0xcb}, {&(0x7f0000001ec0)=""/201, 0xc9}, {&(0x7f0000000980)=""/41, 0x29}, {&(0x7f0000001fc0)=""/121, 0x79}], 0x6, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002180)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002200)=""/177, 0xb1}], 0x1, &(0x7f0000002300)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002400)=""/39, 0x27}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/232, 0xe8}], 0x3, &(0x7f00000025c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002740)=""/60, 0x3c}, {&(0x7f0000002780)=""/83, 0x53}, {&(0x7f0000002800)=""/139, 0x8b}], 0x3, &(0x7f0000002900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002980)=""/196, 0xc4}, {&(0x7f0000002a80)=""/225, 0xe1}, {&(0x7f0000002b80)=""/101, 0x65}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/212, 0xd4}, {&(0x7f0000003d00)=""/13, 0xd}], 0x6, &(0x7f0000003dc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003e40), 0x6e, &(0x7f0000004280)=[{&(0x7f0000003ec0)=""/46, 0x2e}, {&(0x7f0000003f00)=""/57, 0x39}, {&(0x7f0000003f40)=""/18, 0x12}, {&(0x7f0000003f80)=""/28, 0x1c}, {&(0x7f0000003fc0)=""/226, 0xe2}, {&(0x7f00000040c0)=""/1, 0x1}, {&(0x7f0000004100)=""/153, 0x99}, {&(0x7f00000041c0)=""/92, 0x5c}, {&(0x7f0000004240)=""/54, 0x36}], 0x9}}, {{&(0x7f0000004340), 0x6e, &(0x7f00000047c0)=[{&(0x7f00000043c0)=""/118, 0x76}, {&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004500)=""/145, 0x91}, {&(0x7f00000045c0)=""/205, 0xcd}, {&(0x7f00000046c0)=""/219, 0xdb}], 0x5, &(0x7f0000004840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004880), 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004900)=""/137, 0x89}, {&(0x7f00000049c0)=""/117, 0x75}, {&(0x7f0000004a40)=""/20, 0x14}, {&(0x7f0000004a80)=""/36, 0x24}, {&(0x7f0000004ac0)=""/119, 0x77}], 0x5, &(0x7f0000004bc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0xa, 0x100, &(0x7f0000004e80)) 1.121422864s ago: executing program 33 (id=365): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002300), 0x600) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) execve(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) prctl$PR_SET_NAME(0xf, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0xaaaaaaaaaaaab14, 0x2c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30130000007c000000060a010400000000000000000100000008000b400000000054000480400001800e000100696d6d6564696174650000002c0002800800014002000000040002801c0002801800028008000180ffffff"], 0xf0}}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r11) 0s ago: executing program 1 (id=376): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000206050000000000000000498d612e4c69aea13c10f600000000000c000300686173683a697000050004000000000005000500020000000500010006000000"], 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000306050000000000000000000500e90305000100070000000900020873797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'macvtap0\x00', 0x5}, 0x18) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r6 = timerfd_create(0x0, 0x0) r7 = eventfd2(0x4, 0x1) flock(r7, 0x5) flock(r6, 0x1) r8 = eventfd2(0x0, 0x0) flock(r8, 0x1) listen(r2, 0x6) r9 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f0000000000)=[{r1, 0xa500}, {r9, 0x500}, {r1, 0x2510}], 0x3, 0x853) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, @host}, 0x10) socket$igmp(0x2, 0x3, 0x2) r10 = dup(r9) write$6lowpan_enable(r10, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000003c000701fcffffff00000000047c"], 0x18}}, 0xc000) kernel console output (not intermixed with test programs): 5861] bridge_slave_0: entered allmulticast mode [ 79.104917][ T5861] bridge_slave_0: entered promiscuous mode [ 79.140294][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.147659][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.155945][ T5861] bridge_slave_1: entered allmulticast mode [ 79.162979][ T5861] bridge_slave_1: entered promiscuous mode [ 79.247495][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.282863][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.291720][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.318553][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.343354][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.380504][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.387720][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.395430][ T5862] bridge_slave_0: entered allmulticast mode [ 79.402481][ T5862] bridge_slave_0: entered promiscuous mode [ 79.410487][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.417481][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.443487][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.489497][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.496822][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.504145][ T5862] bridge_slave_1: entered allmulticast mode [ 79.511522][ T5862] bridge_slave_1: entered promiscuous mode [ 79.559202][ T5861] team0: Port device team_slave_0 added [ 79.612944][ T5861] team0: Port device team_slave_1 added [ 79.636082][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.648276][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.670885][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.678571][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.685886][ T5858] bridge_slave_0: entered allmulticast mode [ 79.693199][ T5858] bridge_slave_0: entered promiscuous mode [ 79.701250][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.708743][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.716568][ T5858] bridge_slave_1: entered allmulticast mode [ 79.723612][ T5858] bridge_slave_1: entered promiscuous mode [ 79.742541][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.749747][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.757546][ T5859] bridge_slave_0: entered allmulticast mode [ 79.764764][ T5859] bridge_slave_0: entered promiscuous mode [ 79.819865][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.827338][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.834696][ T5859] bridge_slave_1: entered allmulticast mode [ 79.841704][ T5859] bridge_slave_1: entered promiscuous mode [ 79.875652][ T5862] team0: Port device team_slave_0 added [ 79.894388][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.901343][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.927561][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.940438][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.947872][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.974953][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.975321][ T5847] Bluetooth: hci2: command tx timeout [ 80.007738][ T5860] hsr_slave_0: entered promiscuous mode [ 80.014168][ T5860] hsr_slave_1: entered promiscuous mode [ 80.023381][ T5862] team0: Port device team_slave_1 added [ 80.033608][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.036495][ T5847] Bluetooth: hci0: command tx timeout [ 80.043197][ T5153] Bluetooth: hci1: command tx timeout [ 80.060931][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.073478][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.097506][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.115053][ T5153] Bluetooth: hci3: command tx timeout [ 80.115062][ T5847] Bluetooth: hci4: command tx timeout [ 80.230207][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.237396][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.263388][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.276210][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.283172][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.309309][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.326946][ T5861] hsr_slave_0: entered promiscuous mode [ 80.333232][ T5861] hsr_slave_1: entered promiscuous mode [ 80.339831][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.347629][ T5861] Cannot create hsr debugfs directory [ 80.357869][ T5858] team0: Port device team_slave_0 added [ 80.378204][ T5859] team0: Port device team_slave_0 added [ 80.401039][ T5858] team0: Port device team_slave_1 added [ 80.408804][ T5859] team0: Port device team_slave_1 added [ 80.531779][ T5862] hsr_slave_0: entered promiscuous mode [ 80.538145][ T5862] hsr_slave_1: entered promiscuous mode [ 80.544166][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.552527][ T5862] Cannot create hsr debugfs directory [ 80.570590][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.578022][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.604898][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.638773][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.646069][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.672207][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.684725][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.691682][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.717865][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.739237][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.746548][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.772631][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.979225][ T5858] hsr_slave_0: entered promiscuous mode [ 80.986182][ T5858] hsr_slave_1: entered promiscuous mode [ 80.992181][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.000031][ T5858] Cannot create hsr debugfs directory [ 81.079166][ T5859] hsr_slave_0: entered promiscuous mode [ 81.086310][ T5859] hsr_slave_1: entered promiscuous mode [ 81.092326][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.099971][ T5859] Cannot create hsr debugfs directory [ 81.237742][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.286118][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.328879][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.361496][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.441740][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.461105][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.480224][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.493631][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.552714][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.570874][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.582043][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.592713][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.698029][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.713248][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.726183][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.765762][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.788535][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.869397][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.882603][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.897121][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.911184][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.922039][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.959163][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.970181][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.977502][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.990339][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.997658][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.039054][ T5153] Bluetooth: hci2: command tx timeout [ 82.073937][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.105858][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.114800][ T5153] Bluetooth: hci0: command tx timeout [ 82.114871][ T5847] Bluetooth: hci1: command tx timeout [ 82.129644][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.136763][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.180116][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.187365][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.198577][ T5847] Bluetooth: hci3: command tx timeout [ 82.198627][ T5153] Bluetooth: hci4: command tx timeout [ 82.271396][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.293313][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.322274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.329414][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.348203][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.383716][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.390858][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.458932][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.477192][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.492194][ T5861] veth0_vlan: entered promiscuous mode [ 82.502806][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.510022][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.532444][ T5861] veth1_vlan: entered promiscuous mode [ 82.541875][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.549159][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.566693][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.593250][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.618401][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.625612][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.649420][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.662457][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.673983][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.681152][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.765030][ T5861] veth0_macvtap: entered promiscuous mode [ 82.789420][ T5861] veth1_macvtap: entered promiscuous mode [ 82.859882][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.881326][ T5860] veth0_vlan: entered promiscuous mode [ 82.894087][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.913373][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.930433][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.940267][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.950048][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.958819][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.978595][ T5860] veth1_vlan: entered promiscuous mode [ 82.987343][ T5862] veth0_vlan: entered promiscuous mode [ 83.019076][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.038065][ T5862] veth1_vlan: entered promiscuous mode [ 83.105458][ T5860] veth0_macvtap: entered promiscuous mode [ 83.166777][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.179920][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.188647][ T5860] veth1_macvtap: entered promiscuous mode [ 83.203691][ T5858] veth0_vlan: entered promiscuous mode [ 83.243720][ T5858] veth1_vlan: entered promiscuous mode [ 83.257068][ T5859] veth0_vlan: entered promiscuous mode [ 83.266776][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.274935][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.282126][ T5862] veth0_macvtap: entered promiscuous mode [ 83.293632][ T5862] veth1_macvtap: entered promiscuous mode [ 83.310996][ T5859] veth1_vlan: entered promiscuous mode [ 83.330052][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.341212][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.356060][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.399726][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.411516][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.423566][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.439184][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.450963][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.464445][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.469578][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.480792][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.503004][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.521002][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.531663][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.544701][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.558958][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.580277][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.589919][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.614616][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.623349][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.641513][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.682317][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.695484][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.706987][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.717661][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.751067][ T5859] veth0_macvtap: entered promiscuous mode [ 83.780699][ T5859] veth1_macvtap: entered promiscuous mode [ 83.791643][ T5858] veth0_macvtap: entered promiscuous mode [ 83.861394][ T5858] veth1_macvtap: entered promiscuous mode [ 83.908882][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.931473][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.944591][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.956344][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.966657][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.977263][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.994431][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.024667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.045771][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.073306][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.083935][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.097318][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.107511][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.124209][ T5153] Bluetooth: hci2: command tx timeout [ 84.130862][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.146583][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.160174][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.173216][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.199270][ T5153] Bluetooth: hci0: command tx timeout [ 84.205020][ T5847] Bluetooth: hci1: command tx timeout [ 84.212007][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.230289][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.244309][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.260886][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.271084][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.285259][ T5153] Bluetooth: hci4: command tx timeout [ 84.290852][ T5153] Bluetooth: hci3: command tx timeout [ 84.298784][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.311226][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.342859][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.352280][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.369678][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.382470][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.393119][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.407747][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.417971][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.428785][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.439706][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.450222][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.462321][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.496582][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.514741][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.533193][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.554481][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.589827][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.605657][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.614641][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.623376][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.661521][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.669933][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.728448][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.753416][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.809657][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.819874][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.004589][ T5912] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.042719][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.125360][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.299822][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.331218][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.409903][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.440137][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.755622][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.777351][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.065141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.073569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.082459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.091268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.267845][ T5847] Bluetooth: hci2: command tx timeout [ 86.282737][ T5847] Bluetooth: hci0: command tx timeout [ 86.288649][ T5153] Bluetooth: hci1: command tx timeout [ 86.304820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 86.355101][ T5847] Bluetooth: hci4: command tx timeout [ 86.363387][ T5153] Bluetooth: hci3: command tx timeout [ 86.374765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.906671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.915752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.010455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.175719][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.442565][ T24] usb 1-1: config 0 has no interfaces? [ 87.761618][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 87.974351][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.101255][ T24] usb 1-1: Product: syz [ 88.140588][ T24] usb 1-1: Manufacturer: syz [ 88.151301][ T24] usb 1-1: SerialNumber: syz [ 88.299833][ T24] usb 1-1: config 0 descriptor?? [ 88.560074][ T5934] process 'syz.0.7' launched './file1' with NULL argv: empty string added [ 91.099639][ T5897] usb 1-1: USB disconnect, device number 2 [ 91.888484][ T9] cfg80211: failed to load regulatory.db [ 93.287391][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.427814][ T5977] sctp: [Deprecated]: syz.3.16 (pid 5977) Use of int in max_burst socket option. [ 93.427814][ T5977] Use struct sctp_assoc_value instead [ 93.850041][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.972029][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.046457][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 94.058630][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.094359][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.138902][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.150047][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 94.163577][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.182663][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.204547][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.223214][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.253278][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.274789][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.292224][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.328543][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.357880][ T5897] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 94.373330][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.392035][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.404548][ T5897] usb 4-1: Product: syz [ 94.409023][ T5897] usb 4-1: Manufacturer: syz [ 94.414342][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.423218][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.439448][ T5897] usb 4-1: SerialNumber: syz [ 94.467133][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.478460][ T5897] usb 4-1: config 0 descriptor?? [ 94.508941][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.518088][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.540887][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.550217][ T5897] usb 4-1: bad CDC descriptors [ 94.560692][ T5897] cdc_acm 4-1:0.0: Zero length descriptor references [ 94.571090][ T5897] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 94.579263][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.591440][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.638829][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.678999][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.688376][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.725789][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.756284][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.808053][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.819939][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.829916][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.844368][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.884066][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.903808][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 94.919305][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 95.021524][ T9] usb 5-1: Product: syz [ 95.166708][ T47] usb 4-1: USB disconnect, device number 2 [ 95.185417][ T9] usb 5-1: Manufacturer: syz [ 95.365467][ T9] usb 5-1: SerialNumber: syz [ 95.392697][ T9] usb 5-1: config 0 descriptor?? [ 95.435739][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 95.488577][ T6000] Zero length message leads to an empty skb [ 95.891954][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 95.904082][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 95.912831][ T9] usb 5-1: USB disconnect, device number 2 [ 95.955921][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 96.344477][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.544583][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 96.564867][ T6011] input: syz0 as /devices/virtual/input/input5 [ 96.657945][ T47] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 96.701074][ T47] usb 4-1: config 0 has no interface number 0 [ 96.778301][ T47] usb 4-1: config 0 interface 230 has no altsetting 0 [ 96.820977][ T47] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 96.854345][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.855165][ T47] usb 4-1: Product: syz [ 96.855178][ T47] usb 4-1: Manufacturer: syz [ 96.855187][ T47] usb 4-1: SerialNumber: syz [ 96.861794][ T47] usb 4-1: config 0 descriptor?? [ 96.863955][ T47] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 96.933399][ T47] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 97.303403][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25'. [ 97.595951][ T6025] bridge_slave_0: left allmulticast mode [ 97.612264][ T6023] capability: warning: `syz.4.27' uses 32-bit capabilities (legacy support in use) [ 97.663526][ T6029] netlink: 'syz.2.28': attribute type 10 has an invalid length. [ 97.709442][ T6025] bridge_slave_0: left promiscuous mode [ 97.712982][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'. [ 97.748527][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.819253][ T6025] bridge_slave_1: left allmulticast mode [ 97.855434][ T6025] bridge_slave_1: left promiscuous mode [ 97.927095][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.960230][ T6025] bond0: (slave bond_slave_0): Releasing backup interface [ 97.997584][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.008476][ T6025] bond0: (slave bond_slave_1): Releasing backup interface [ 98.020368][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.120751][ T6038] FAULT_INJECTION: forcing a failure. [ 98.120751][ T6038] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.123631][ T6025] team0: Port device team_slave_0 removed [ 98.134213][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.1.30 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 98.134243][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.134264][ T6038] Call Trace: [ 98.134273][ T6038] [ 98.134283][ T6038] dump_stack_lvl+0x241/0x360 [ 98.134330][ T6038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.134361][ T6038] ? __pfx__printk+0x10/0x10 [ 98.134414][ T6038] should_fail_ex+0x424/0x570 [ 98.134452][ T6038] _copy_from_user+0x2d/0xb0 [ 98.134482][ T6038] kstrtouint_from_user+0xce/0x1a0 [ 98.134518][ T6038] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 98.134544][ T6038] ? __lock_acquire+0xad5/0xd80 [ 98.134582][ T6038] proc_fail_nth_write+0xac/0x2d0 [ 98.134613][ T6038] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 98.134635][ T6038] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.134659][ T6038] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.134679][ T6038] vfs_write+0x2bc/0xd10 [ 98.134710][ T6038] ? fdget_pos+0x247/0x310 [ 98.134732][ T6038] ? __pfx_vfs_write+0x10/0x10 [ 98.134761][ T6038] ? __fget_files+0x2a/0x420 [ 98.134780][ T6038] ? __fget_files+0x39d/0x420 [ 98.134796][ T6038] ? __fget_files+0x2a/0x420 [ 98.134823][ T6038] ksys_write+0x19d/0x2d0 [ 98.134850][ T6038] ? __pfx_ksys_write+0x10/0x10 [ 98.134882][ T6038] ? do_syscall_64+0xb6/0x210 [ 98.134906][ T6038] do_syscall_64+0xf3/0x210 [ 98.134926][ T6038] ? clear_bhb_loop+0x45/0xa0 [ 98.134948][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.134967][ T6038] RIP: 0033:0x7f1219f8cc1f [ 98.134988][ T6038] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 98.135003][ T6038] RSP: 002b:00007f121ae94030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 98.135023][ T6038] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1219f8cc1f [ 98.135036][ T6038] RDX: 0000000000000001 RSI: 00007f121ae940a0 RDI: 0000000000000003 [ 98.135047][ T6038] RBP: 00007f121ae94090 R08: 0000000000000000 R09: 0000000000000000 [ 98.135059][ T6038] R10: 0000000000000022 R11: 0000000000000293 R12: 0000000000000001 [ 98.135069][ T6038] R13: 0000000000000001 R14: 00007f121a1b5fa0 R15: 00007f121a2dfa28 [ 98.135098][ T6038] [ 98.426040][ T6025] team0: Port device team_slave_1 removed [ 98.438560][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.446918][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.463110][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.481528][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.508274][ T6025] syz.2.28 (6025) used greatest stack depth: 19128 bytes left [ 98.529105][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.563767][ T6029] team0: Port device bond0 added [ 98.577705][ T5897] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.724590][ T5897] usb 2-1: device descriptor read/64, error -71 [ 98.735127][ T6051] FAULT_INJECTION: forcing a failure. [ 98.735127][ T6051] name failslab, interval 1, probability 0, space 0, times 1 [ 98.747937][ T6051] CPU: 0 UID: 0 PID: 6051 Comm: syz.2.36 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 98.747959][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.747970][ T6051] Call Trace: [ 98.747977][ T6051] [ 98.747984][ T6051] dump_stack_lvl+0x241/0x360 [ 98.748016][ T6051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.748041][ T6051] ? __pfx__printk+0x10/0x10 [ 98.748065][ T6051] ? is_bpf_text_address+0x26/0x2a0 [ 98.748096][ T6051] ? is_bpf_text_address+0x288/0x2a0 [ 98.748124][ T6051] should_fail_ex+0x424/0x570 [ 98.748155][ T6051] should_failslab+0xac/0x100 [ 98.748175][ T6051] kmem_cache_alloc_noprof+0x78/0x390 [ 98.748193][ T6051] ? dst_alloc+0x12b/0x190 [ 98.748215][ T6051] dst_alloc+0x12b/0x190 [ 98.748236][ T6051] ip_route_input_rcu+0x22b3/0x3930 [ 98.748275][ T6051] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 98.748304][ T6051] ? lockdep_hardirqs_on+0x9d/0x150 [ 98.748361][ T6051] ? ip_route_input_noref+0xaf/0x250 [ 98.748385][ T6051] ip_route_input_noref+0x169/0x250 [ 98.748413][ T6051] ? __pfx_ip_route_input_noref+0x10/0x10 [ 98.748445][ T6051] ? ipt_do_table+0x314/0x1870 [ 98.748470][ T6051] ip_rcv_finish_core+0x5b4/0x1b60 [ 98.748502][ T6051] ip_rcv_finish+0x14a/0x560 [ 98.748520][ T6051] ? NF_HOOK+0x38c/0x450 [ 98.748541][ T6051] NF_HOOK+0x3a0/0x450 [ 98.748562][ T6051] ? __pfx_ip_rcv_finish+0x10/0x10 [ 98.748580][ T6051] ? NF_HOOK+0x9e/0x450 [ 98.748599][ T6051] ? __pfx_NF_HOOK+0x10/0x10 [ 98.748615][ T6051] ? ip_rcv_core+0x80c/0xd20 [ 98.748636][ T6051] ? __pfx_ip_rcv_finish+0x10/0x10 [ 98.748663][ T6051] ? __pfx_ip_rcv+0x10/0x10 [ 98.748683][ T6051] __netif_receive_skb+0x2c9/0x670 [ 98.748710][ T6051] ? __pfx___netif_receive_skb+0x10/0x10 [ 98.748744][ T6051] ? netif_receive_skb+0x133/0x890 [ 98.748763][ T6051] ? netif_receive_skb+0x133/0x890 [ 98.748782][ T6051] netif_receive_skb+0x1ea/0x890 [ 98.748802][ T6051] ? tun_rx_batched+0x14b/0x8d0 [ 98.748826][ T6051] ? __pfx_netif_receive_skb+0x10/0x10 [ 98.748857][ T6051] ? tun_rx_batched+0x14b/0x8d0 [ 98.748881][ T6051] tun_rx_batched+0x1a4/0x8d0 [ 98.748909][ T6051] ? __lock_acquire+0xad5/0xd80 [ 98.748936][ T6051] ? __pfx_tun_rx_batched+0x10/0x10 [ 98.748975][ T6051] ? tun_get_user+0x2a99/0x47c0 [ 98.748998][ T6051] ? tun_get_user+0x2a99/0x47c0 [ 98.749023][ T6051] tun_get_user+0x2fec/0x47c0 [ 98.749051][ T6051] ? tun_get_user+0x852/0x47c0 [ 98.749092][ T6051] ? aa_file_perm+0x139/0xf60 [ 98.749117][ T6051] ? aa_file_perm+0x3f1/0xf60 [ 98.749140][ T6051] ? __pfx_tun_get_user+0x10/0x10 [ 98.749182][ T6051] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 98.749217][ T6051] ? tun_get+0x1e/0x2f0 [ 98.749242][ T6051] ? tun_get+0x1e/0x2f0 [ 98.749264][ T6051] ? tun_get+0x27d/0x2f0 [ 98.749290][ T6051] tun_chr_write_iter+0x10d/0x1f0 [ 98.749319][ T6051] vfs_write+0x70f/0xd10 [ 98.749374][ T6051] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 98.749403][ T6051] ? __pfx_vfs_write+0x10/0x10 [ 98.749450][ T6051] ? __fget_files+0x2a/0x420 [ 98.749472][ T6051] ? __fget_files+0x2a/0x420 [ 98.749501][ T6051] ksys_write+0x19d/0x2d0 [ 98.749531][ T6051] ? __pfx_ksys_write+0x10/0x10 [ 98.749566][ T6051] ? do_syscall_64+0xb6/0x210 [ 98.749596][ T6051] do_syscall_64+0xf3/0x210 [ 98.749618][ T6051] ? clear_bhb_loop+0x45/0xa0 [ 98.749641][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.749661][ T6051] RIP: 0033:0x7f50e918cc1f [ 98.749678][ T6051] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 98.749694][ T6051] RSP: 002b:00007f50ea02e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 98.749727][ T6051] RAX: ffffffffffffffda RBX: 00007f50e93b5fa0 RCX: 00007f50e918cc1f [ 98.749740][ T6051] RDX: 0000000000000022 RSI: 0000200000001b40 RDI: 00000000000000c8 [ 98.749752][ T6051] RBP: 00007f50ea02e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.749763][ T6051] R10: 0000000000000022 R11: 0000000000000293 R12: 0000000000000001 [ 98.749774][ T6051] R13: 0000000000000001 R14: 00007f50e93b5fa0 R15: 00007f50e94dfa28 [ 98.749803][ T6051] [ 99.153419][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.364324][ T5897] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 99.486241][ T47] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 99.504536][ T5897] usb 2-1: device descriptor read/64, error -71 [ 99.509649][ T47] usb 4-1: USB disconnect, device number 3 [ 99.577668][ T6061] netlink: 228 bytes leftover after parsing attributes in process `syz.4.39'. [ 99.614889][ T5897] usb usb2-port1: attempt power cycle [ 99.976195][ T5897] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 99.998495][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.43'. [ 100.007326][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.018090][ T5897] usb 2-1: device descriptor read/8, error -71 [ 100.024721][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.43'. [ 100.042797][ T6072] bond0: entered promiscuous mode [ 100.049347][ T6072] bond_slave_0: entered promiscuous mode [ 100.084626][ T6072] bond_slave_1: entered promiscuous mode [ 100.097189][ T6072] syz_tun: entered promiscuous mode [ 100.134027][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.45'. [ 100.147861][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.45'. [ 100.202781][ T47] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 100.210771][ T6077] team0: entered promiscuous mode [ 100.222284][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.248068][ T47] usb 1-1: Product: syz [ 100.258525][ T47] usb 1-1: Manufacturer: syz [ 100.267118][ T47] usb 1-1: SerialNumber: syz [ 100.268124][ T6077] bond0: entered promiscuous mode [ 100.277313][ T5897] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 100.286852][ T47] usb 1-1: config 0 descriptor?? [ 100.295486][ T6077] ip6gretap0: entered promiscuous mode [ 100.297167][ T47] ch341 1-1:0.0: ch341-uart converter detected [ 100.302399][ T6077] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 100.318962][ T6077] Cannot create hsr debugfs directory [ 100.324845][ T5897] usb 2-1: device descriptor read/8, error -71 [ 100.331653][ T6077] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 100.441418][ T5897] usb usb2-port1: unable to enumerate USB device [ 100.600987][ T6095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 100.644347][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.854414][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 100.868819][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 100.878888][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 100.891081][ T9] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 100.902622][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.013078][ T9] usb 4-1: Product: syz [ 101.017431][ T9] usb 4-1: Manufacturer: syz [ 101.022045][ T9] usb 4-1: SerialNumber: syz [ 101.042707][ T9] usb 4-1: config 0 descriptor?? [ 101.056451][ T6088] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 101.063835][ T6088] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 101.102704][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.117756][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.266570][ T5897] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.958767][ T5897] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 102.100751][ T5897] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.109943][ T47] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 102.184915][ T6112] bridge_slave_0: left allmulticast mode [ 102.264356][ T5897] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.264422][ T6112] bridge_slave_0: left promiscuous mode [ 102.329838][ T5905] usb 1-1: USB disconnect, device number 3 [ 102.344749][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.350776][ T5905] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 102.386248][ T5905] ch341 1-1:0.0: device disconnected [ 102.438740][ T6112] bridge_slave_1: left allmulticast mode [ 102.454416][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.463509][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.487347][ T6112] bridge_slave_1: left promiscuous mode [ 102.497905][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.531465][ T6112] bond0: (slave bond_slave_0): Releasing backup interface [ 102.541040][ T5897] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.612833][ T6112] bond0: (slave bond_slave_1): Releasing backup interface [ 102.668187][ T6112] team0: Port device team_slave_0 removed [ 102.713541][ T6112] team0: Port device team_slave_1 removed [ 102.733081][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.748555][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.759002][ T5897] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 102.777075][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.793215][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.804456][ T6098] ptrace attach of "./syz-executor exec"[5858] was attempted by " \x07  \x09$ \x1b \x09 *>t \x09 8  \x07 /dev/net [ 102.807296][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.938601][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.954825][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.986406][ T30] audit: type=1326 audit(1745238208.676:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.013520][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.030587][ T30] audit: type=1326 audit(1745238208.676:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.057430][ T30] audit: type=1326 audit(1745238208.676:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.102964][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.124647][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.152916][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 103.160682][ T30] audit: type=1326 audit(1745238208.676:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.208682][ T9] usb 4-1: USB disconnect, device number 4 [ 103.260867][ T30] audit: type=1326 audit(1745238208.676:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.324973][ T30] audit: type=1326 audit(1745238208.676:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.368543][ T6128] netlink: 104 bytes leftover after parsing attributes in process `syz.1.60'. [ 103.381395][ T30] audit: type=1326 audit(1745238208.676:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.414775][ T30] audit: type=1326 audit(1745238208.676:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.508134][ T30] audit: type=1326 audit(1745238208.676:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.538446][ T30] audit: type=1326 audit(1745238208.676:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f971358e169 code=0x7ffc0000 [ 103.582386][ T6132] dccp_close: ABORT with 4126 bytes unread [ 103.792923][ T6138] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 104.128505][ T6140] netlink: 228 bytes leftover after parsing attributes in process `syz.0.64'. [ 104.201099][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 104.230004][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 104.302206][ T6142] bond0: entered promiscuous mode [ 104.336510][ T6142] bond_slave_0: entered promiscuous mode [ 104.342455][ T6142] bond_slave_1: entered promiscuous mode [ 104.350509][ T6142] syz_tun: entered promiscuous mode [ 104.356648][ T6142] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 104.364470][ T6142] Cannot create hsr debugfs directory [ 104.494439][ T5905] usb 5-1: USB disconnect, device number 3 [ 104.547301][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.68'. [ 104.980118][ T6170] veth1_macvtap: left promiscuous mode [ 104.985953][ T6170] macsec0: entered promiscuous mode [ 105.028580][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 105.067568][ T6171] bond0: left promiscuous mode [ 105.093138][ T6171] team0: Port device bond0 removed [ 105.111322][ T6175] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 105.121438][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.77'. [ 105.143315][ T6166] veth1_macvtap: entered promiscuous mode [ 105.161370][ T6166] macsec0: left promiscuous mode [ 105.209490][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.231084][ T6175] bond0: entered promiscuous mode [ 105.237627][ T6175] team0: Port device bond0 added [ 105.418602][ T6178] netlink: 'syz.3.80': attribute type 10 has an invalid length. [ 105.484165][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.527937][ T6178] batadv0: entered promiscuous mode [ 105.548090][ T6178] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 105.774099][ T6197] FAULT_INJECTION: forcing a failure. [ 105.774099][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 105.786809][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.4.87 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 105.786832][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.786842][ T6197] Call Trace: [ 105.786849][ T6197] [ 105.786856][ T6197] dump_stack_lvl+0x241/0x360 [ 105.786890][ T6197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.786915][ T6197] ? __pfx__printk+0x10/0x10 [ 105.786942][ T6197] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 105.786969][ T6197] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.786999][ T6197] should_fail_ex+0x424/0x570 [ 105.787031][ T6197] should_failslab+0xac/0x100 [ 105.787051][ T6197] kmem_cache_alloc_noprof+0x78/0x390 [ 105.787077][ T6197] ? skb_ext_add+0x141/0x8e0 [ 105.787101][ T6197] ? dst_alloc+0x14f/0x190 [ 105.787121][ T6197] skb_ext_add+0x141/0x8e0 [ 105.787146][ T6197] ? tun_chr_write_iter+0x10d/0x1f0 [ 105.787169][ T6197] ? vfs_write+0x70f/0xd10 [ 105.787190][ T6197] ? ksys_write+0x19d/0x2d0 [ 105.787212][ T6197] ? do_syscall_64+0xf3/0x210 [ 105.787230][ T6197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.787253][ T6197] secpath_set+0x58/0x1f0 [ 105.787278][ T6197] xfrm_input+0x7a0/0x7460 [ 105.787323][ T6197] ? __pfx_xfrm_input+0x10/0x10 [ 105.787345][ T6197] ? ip_tunnel_lookup+0xcb7/0xea0 [ 105.787377][ T6197] vti_input+0x248/0x340 [ 105.787402][ T6197] ? __pfx_vti_input+0x10/0x10 [ 105.787432][ T6197] xfrm4_esp_rcv+0xa5/0x220 [ 105.787451][ T6197] ? __pfx_xfrm4_esp_rcv+0x10/0x10 [ 105.787470][ T6197] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 105.787491][ T6197] ip_protocol_deliver_rcu+0x2e9/0x450 [ 105.787515][ T6197] ? ip_local_deliver_finish+0x230/0x600 [ 105.787535][ T6197] ip_local_deliver_finish+0x343/0x600 [ 105.787563][ T6197] NF_HOOK+0x3a0/0x450 [ 105.787584][ T6197] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 105.787604][ T6197] ? NF_HOOK+0x9e/0x450 [ 105.787622][ T6197] ? __pfx_NF_HOOK+0x10/0x10 [ 105.787644][ T6197] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 105.787670][ T6197] ? ip_rcv_finish+0x409/0x560 [ 105.787693][ T6197] NF_HOOK+0x3a0/0x450 [ 105.787714][ T6197] ? __pfx_ip_rcv_finish+0x10/0x10 [ 105.787733][ T6197] ? NF_HOOK+0x9e/0x450 [ 105.787752][ T6197] ? __pfx_NF_HOOK+0x10/0x10 [ 105.787769][ T6197] ? ip_rcv_core+0x80c/0xd20 [ 105.787790][ T6197] ? __pfx_ip_rcv_finish+0x10/0x10 [ 105.787836][ T6197] ? __pfx_ip_rcv+0x10/0x10 [ 105.787857][ T6197] __netif_receive_skb+0x2c9/0x670 [ 105.787886][ T6197] ? __pfx___netif_receive_skb+0x10/0x10 [ 105.787923][ T6197] ? netif_receive_skb+0x133/0x890 [ 105.787944][ T6197] ? netif_receive_skb+0x133/0x890 [ 105.787966][ T6197] netif_receive_skb+0x1ea/0x890 [ 105.787987][ T6197] ? tun_rx_batched+0x14b/0x8d0 [ 105.788013][ T6197] ? __pfx_netif_receive_skb+0x10/0x10 [ 105.788045][ T6197] ? tun_rx_batched+0x14b/0x8d0 [ 105.788078][ T6197] tun_rx_batched+0x1a4/0x8d0 [ 105.788109][ T6197] ? __lock_acquire+0xad5/0xd80 [ 105.788139][ T6197] ? __pfx_tun_rx_batched+0x10/0x10 [ 105.788180][ T6197] ? tun_get_user+0x2a99/0x47c0 [ 105.788206][ T6197] ? tun_get_user+0x2a99/0x47c0 [ 105.788238][ T6197] tun_get_user+0x2fec/0x47c0 [ 105.788268][ T6197] ? tun_get_user+0x852/0x47c0 [ 105.788311][ T6197] ? aa_file_perm+0x139/0xf60 [ 105.788337][ T6197] ? aa_file_perm+0x3f1/0xf60 [ 105.788362][ T6197] ? __pfx_tun_get_user+0x10/0x10 [ 105.788409][ T6197] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 105.788445][ T6197] ? tun_get+0x1e/0x2f0 [ 105.788472][ T6197] ? tun_get+0x1e/0x2f0 [ 105.788496][ T6197] ? tun_get+0x27d/0x2f0 [ 105.788524][ T6197] tun_chr_write_iter+0x10d/0x1f0 [ 105.788554][ T6197] vfs_write+0x70f/0xd10 [ 105.788586][ T6197] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 105.788615][ T6197] ? __pfx_vfs_write+0x10/0x10 [ 105.788644][ T6197] ? __fget_files+0x2a/0x420 [ 105.788666][ T6197] ? __fget_files+0x2a/0x420 [ 105.788693][ T6197] ksys_write+0x19d/0x2d0 [ 105.788726][ T6197] ? __pfx_ksys_write+0x10/0x10 [ 105.788758][ T6197] ? do_syscall_64+0xb6/0x210 [ 105.788781][ T6197] do_syscall_64+0xf3/0x210 [ 105.788800][ T6197] ? clear_bhb_loop+0x45/0xa0 [ 105.788822][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.788840][ T6197] RIP: 0033:0x7fbabb38cc1f [ 105.788857][ T6197] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 105.788872][ T6197] RSP: 002b:00007fbab91f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 105.788891][ T6197] RAX: ffffffffffffffda RBX: 00007fbabb5b5fa0 RCX: 00007fbabb38cc1f [ 105.788905][ T6197] RDX: 0000000000000022 RSI: 0000200000001b40 RDI: 00000000000000c8 [ 105.788916][ T6197] RBP: 00007fbab91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.788927][ T6197] R10: 0000000000000022 R11: 0000000000000293 R12: 0000000000000001 [ 105.788938][ T6197] R13: 0000000000000001 R14: 00007fbabb5b5fa0 R15: 00007fbabb6dfa28 [ 105.788967][ T6197] [ 105.816170][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 105.844589][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.414554][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.475988][ T5905] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 106.486376][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.488457][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.498145][ T5905] usb 3-1: config 0 descriptor?? [ 106.509807][ T5905] cp210x 3-1:0.0: cp210x converter detected [ 106.574879][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 106.598707][ T10] usb 2-1: config 0 has no interfaces? [ 106.601829][ T6212] netlink: 228 bytes leftover after parsing attributes in process `syz.3.93'. [ 106.617982][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 106.629666][ T10] usb 2-1: New USB device strings: Mfr=1, Product=7, SerialNumber=0 [ 106.640797][ T10] usb 2-1: Product: syz [ 106.654821][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 106.659991][ T10] usb 2-1: Manufacturer: syz [ 106.696634][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 106.703891][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 106.705367][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.706466][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.94'. [ 106.729765][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.738794][ T9] usb 1-1: Product: syz [ 106.743171][ T9] usb 1-1: Manufacturer: syz [ 106.748776][ T9] usb 1-1: SerialNumber: syz [ 106.773059][ T9] usb 1-1: config 0 descriptor?? [ 106.871950][ T6216] geneve2: entered promiscuous mode [ 106.992439][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.006197][ T6201] kvm: kvm [6200]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2090100 [ 107.083582][ T6220] team0: entered promiscuous mode [ 107.088731][ T6220] team_slave_0: entered promiscuous mode [ 107.096937][ T6220] team_slave_1: entered promiscuous mode [ 107.100893][ T47] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 107.105143][ T6220] ip6gretap0: entered promiscuous mode [ 107.201780][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.210744][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.901993][ T6234] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 107.908655][ T6234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.927908][ T6234] vhci_hcd vhci_hcd.0: Device attached [ 107.935022][ T6236] vhci_hcd: connection closed [ 107.937050][ T1141] vhci_hcd: stop threads [ 107.957828][ T1141] vhci_hcd: release socket [ 107.969006][ T1141] vhci_hcd: disconnect device [ 108.040506][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 108.779850][ T5905] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 108.821730][ T5905] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 108.862036][ T5905] usb 3-1: cp210x converter now attached to ttyUSB0 [ 108.898172][ T5905] usb 3-1: USB disconnect, device number 2 [ 108.938242][ T6250] __nla_validate_parse: 5 callbacks suppressed [ 108.938255][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'. [ 108.972221][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.228681][ T5905] cp210x 3-1:0.0: device disconnected [ 109.313332][ T5898] usb 1-1: USB disconnect, device number 4 [ 109.504808][ T5945] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 109.675193][ T6261] bond0: left promiscuous mode [ 109.696075][ T5945] usb 2-1: not running at top speed; connect to a high speed hub [ 109.717915][ T5153] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 109.727312][ T5153] Bluetooth: hci1: Injecting HCI hardware error event [ 109.728007][ T5945] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.735499][ T5153] Bluetooth: hci1: hardware error 0x00 [ 109.831285][ T6261] team0: Port device bond0 removed [ 109.850525][ T5945] usb 2-1: config 1 interface 0 has no altsetting 0 [ 109.892236][ T5945] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.40 [ 109.904045][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.941294][ T5945] usb 2-1: Product: syz [ 109.958916][ T5945] usb 2-1: Manufacturer: и [ 109.963477][ T5945] usb 2-1: SerialNumber: syz [ 110.016759][ T6271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.112' sets config #0 [ 110.080619][ T6271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.112' sets config #1 [ 110.227861][ T6278] FAULT_INJECTION: forcing a failure. [ 110.227861][ T6278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.262830][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.0.117 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 110.262859][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.262871][ T6278] Call Trace: [ 110.262879][ T6278] [ 110.262888][ T6278] dump_stack_lvl+0x241/0x360 [ 110.262927][ T6278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.262956][ T6278] ? __pfx__printk+0x10/0x10 [ 110.262996][ T6278] should_fail_ex+0x424/0x570 [ 110.263032][ T6278] _copy_to_user+0x31/0xb0 [ 110.263062][ T6278] simple_read_from_buffer+0xc4/0x170 [ 110.263096][ T6278] proc_fail_nth_read+0x1ef/0x260 [ 110.263120][ T6278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.263143][ T6278] ? rw_verify_area+0x246/0x630 [ 110.263169][ T6278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.263191][ T6278] vfs_read+0x21f/0xb90 [ 110.263223][ T6278] ? __pfx___mutex_lock+0x10/0x10 [ 110.263246][ T6278] ? __pfx_vfs_read+0x10/0x10 [ 110.263276][ T6278] ? __fget_files+0x2a/0x420 [ 110.263298][ T6278] ? __fget_files+0x39d/0x420 [ 110.263315][ T6278] ? __fget_files+0x2a/0x420 [ 110.263344][ T6278] ksys_read+0x19d/0x2d0 [ 110.263374][ T6278] ? __pfx_ksys_read+0x10/0x10 [ 110.263407][ T6278] ? do_syscall_64+0xb6/0x210 [ 110.263432][ T6278] do_syscall_64+0xf3/0x210 [ 110.263453][ T6278] ? clear_bhb_loop+0x45/0xa0 [ 110.263478][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.263497][ T6278] RIP: 0033:0x7f9f1238cb7c [ 110.263515][ T6278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.263531][ T6278] RSP: 002b:00007f9f1320f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.263553][ T6278] RAX: ffffffffffffffda RBX: 00007f9f125b5fa0 RCX: 00007f9f1238cb7c [ 110.263567][ T6278] RDX: 000000000000000f RSI: 00007f9f1320f0a0 RDI: 0000000000000003 [ 110.263579][ T6278] RBP: 00007f9f1320f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.263591][ T6278] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 110.263603][ T6278] R13: 0000000000000001 R14: 00007f9f125b5fa0 R15: 00007f9f126dfa28 [ 110.263632][ T6278] [ 110.429639][ T5945] usbhid 2-1:1.0: can't add hid device: -71 [ 110.544946][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.599262][ T5945] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 110.654755][ T5945] usb 2-1: USB disconnect, device number 7 [ 110.704429][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 110.714057][ T47] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.739024][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.748660][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 110.757841][ T6293] netlink: 228 bytes leftover after parsing attributes in process `syz.3.120'. [ 110.771341][ T47] usb 5-1: Product: syz [ 110.783540][ T47] usb 5-1: Manufacturer: syz [ 110.792626][ T47] usb 5-1: SerialNumber: syz [ 110.826905][ T47] usb 5-1: config 0 descriptor?? [ 111.007303][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 111.033153][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 111.144516][ T47] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 111.874554][ T5153] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 112.061440][ T47] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 112.264485][ T6359] netlink: 44 bytes leftover after parsing attributes in process `syz.1.128'. [ 112.395971][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 112.444568][ T6361] FAULT_INJECTION: forcing a failure. [ 112.444568][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 112.539107][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.2.129 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 112.539133][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.539144][ T6361] Call Trace: [ 112.539151][ T6361] [ 112.539158][ T6361] dump_stack_lvl+0x241/0x360 [ 112.539192][ T6361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.539218][ T6361] ? __pfx__printk+0x10/0x10 [ 112.539263][ T6361] ? __pfx___might_resched+0x10/0x10 [ 112.539286][ T6361] should_fail_ex+0x424/0x570 [ 112.539320][ T6361] should_failslab+0xac/0x100 [ 112.539341][ T6361] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 112.539362][ T6361] ? __alloc_skb+0x1c2/0x480 [ 112.539392][ T6361] __alloc_skb+0x1c2/0x480 [ 112.539424][ T6361] ? __pfx___alloc_skb+0x10/0x10 [ 112.539450][ T6361] ? __pfx_inet_rtm_delroute+0x10/0x10 [ 112.539473][ T6361] ? netlink_ack_tlv_len+0x6e/0x200 [ 112.539498][ T6361] netlink_ack+0x147/0xa70 [ 112.539518][ T6361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.539549][ T6361] ? ref_tracker_free+0x63e/0x7e0 [ 112.539574][ T6361] netlink_rcv_skb+0x296/0x480 [ 112.539598][ T6361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.539631][ T6361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.539683][ T6361] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.539708][ T6361] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.539732][ T6361] netlink_unicast+0x7f8/0x9a0 [ 112.539759][ T6361] ? __pfx_netlink_unicast+0x10/0x10 [ 112.539780][ T6361] ? skb_put+0x114/0x1f0 [ 112.539809][ T6361] netlink_sendmsg+0x8c3/0xcd0 [ 112.539842][ T6361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.539869][ T6361] ? aa_sock_msg_perm+0x91/0x160 [ 112.539897][ T6361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.539918][ T6361] __sock_sendmsg+0x221/0x270 [ 112.539942][ T6361] ____sys_sendmsg+0x523/0x860 [ 112.539977][ T6361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.540002][ T6361] ? __fget_files+0x2a/0x420 [ 112.540022][ T6361] ? __fget_files+0x2a/0x420 [ 112.540047][ T6361] __sys_sendmsg+0x271/0x360 [ 112.540078][ T6361] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.540151][ T6361] ? do_syscall_64+0xb6/0x210 [ 112.540175][ T6361] do_syscall_64+0xf3/0x210 [ 112.540197][ T6361] ? clear_bhb_loop+0x45/0xa0 [ 112.540218][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.540234][ T6361] RIP: 0033:0x7f50e918e169 [ 112.540250][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.540264][ T6361] RSP: 002b:00007f50ea02e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.540284][ T6361] RAX: ffffffffffffffda RBX: 00007f50e93b5fa0 RCX: 00007f50e918e169 [ 112.540296][ T6361] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 112.540307][ T6361] RBP: 00007f50ea02e090 R08: 0000000000000000 R09: 0000000000000000 [ 112.540318][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.540328][ T6361] R13: 0000000000000000 R14: 00007f50e93b5fa0 R15: 00007f50e94dfa28 [ 112.540354][ T6361] [ 112.961732][ T6381] mmap: syz.3.134 (6381) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.244604][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 113.297055][ T5898] usb 5-1: USB disconnect, device number 4 [ 113.347789][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.440782][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 113.513753][ T6393] netlink: 228 bytes leftover after parsing attributes in process `syz.4.140'. [ 113.586625][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 113.614848][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 113.638212][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 113.654043][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.679977][ T10] usb 1-1: config 0 has no interfaces? [ 113.697989][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.707179][ T9] usb 2-1: Product: syz [ 113.717288][ T9] usb 2-1: Manufacturer: syz [ 113.732223][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.744384][ T9] usb 2-1: SerialNumber: syz [ 113.766676][ T10] usb 1-1: Product: syz [ 113.770861][ T10] usb 1-1: Manufacturer: syz [ 113.811921][ T9] usb 2-1: config 0 descriptor?? [ 113.827457][ T10] usb 1-1: SerialNumber: syz [ 113.853720][ T6380] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.871486][ T10] usb 1-1: config 0 descriptor?? [ 113.884590][ T6380] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.904346][ T47] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 113.913219][ T9] usb 2-1: ucan: probing device on interface #0 [ 114.069427][ T47] usb 4-1: descriptor type invalid, skip [ 114.087852][ T47] usb 4-1: No LPM exit latency info found, disabling LPM. [ 114.108018][ T9] usb 2-1: ucan: device protocol version -603512829 is not supported [ 114.128201][ T1931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.158825][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 114.308860][ T47] usb 4-1: string descriptor 0 read error: -22 [ 114.315393][ T47] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 114.328600][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.345528][ T47] usb 4-1: config 0 descriptor?? [ 114.358260][ T1931] usb 5-1: Using ep0 maxpacket: 8 [ 114.381309][ T1931] usb 5-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 114.402179][ T6403] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 114.457083][ T1931] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.490967][ T1931] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 114.510335][ T1931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.547846][ T1931] usb 5-1: Product: syz [ 114.552101][ T1931] usb 5-1: Manufacturer: syz [ 114.558345][ T1931] usb 5-1: SerialNumber: syz [ 114.641485][ T1931] usb 5-1: config 0 descriptor?? [ 114.647211][ T47] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 114.724117][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.747062][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.798013][ T47] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 114.856914][ T47] dib0700: firmware download failed at 7 with -22 [ 114.870467][ T47] usb 4-1: USB disconnect, device number 5 [ 115.424976][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 115.596770][ T5893] usb 5-1: USB disconnect, device number 5 [ 115.944839][ T10] usb 2-1: USB disconnect, device number 8 [ 115.946773][ T5893] usb 1-1: USB disconnect, device number 5 [ 116.408831][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.584507][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 116.593482][ T6437] ptrace attach of "./syz-executor exec"[6438] was attempted by "./syz-executor exec"[6437] [ 116.643923][ T5893] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.771217][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 116.784420][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.792542][ T10] usb 2-1: Product: syz [ 116.798257][ T10] usb 2-1: Manufacturer: syz [ 116.802896][ T10] usb 2-1: SerialNumber: syz [ 116.824917][ T10] usb 2-1: config 0 descriptor?? [ 116.834428][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 116.841750][ T5893] usb 4-1: config 0 has an invalid interface number: 231 but max is 1 [ 116.870364][ T5893] usb 4-1: config 0 has no interface number 1 [ 116.900762][ T5893] usb 4-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 116.943401][ T5893] usb 4-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 116.974419][ T5893] usb 4-1: config 0 interface 231 has no altsetting 0 [ 116.993087][ T6445] batman_adv: batadv0: Adding interface: ip6gretap1 [ 117.004529][ T6445] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.118945][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.140473][ T6445] batman_adv: batadv0: Interface activated: ip6gretap1 [ 117.181499][ T5893] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 117.209000][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.230859][ T5893] usb 4-1: Product: syz [ 117.261252][ T5893] usb 4-1: Manufacturer: syz [ 117.269406][ T5893] usb 4-1: SerialNumber: syz [ 117.300030][ T5893] usb 4-1: config 0 descriptor?? [ 117.581517][ T5893] usb 4-1: Could not set interface, error -71 [ 117.685625][ T5893] usb 4-1: USB disconnect, device number 6 [ 117.801032][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 118.131527][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 118.243265][ T6464] netlink: 228 bytes leftover after parsing attributes in process `syz.3.161'. [ 118.679643][ T6471] netlink: 'syz.3.163': attribute type 29 has an invalid length. [ 119.159859][ T10] usb 2-1: USB disconnect, device number 9 [ 119.662879][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 119.703113][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 119.878311][ T6480] batadv0: entered promiscuous mode [ 119.898560][ T6480] team0: entered promiscuous mode [ 119.917908][ T6480] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 119.953942][ T6480] Cannot create hsr debugfs directory [ 119.996735][ T6480] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 120.032697][ T6480] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 120.560984][ T6495] netlink: 'syz.3.163': attribute type 29 has an invalid length. [ 120.570673][ T6495] netlink: 'syz.3.163': attribute type 29 has an invalid length. [ 120.753479][ T6482] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 120.819505][ T6482] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 121.536394][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 121.592167][ T6505] FAULT_INJECTION: forcing a failure. [ 121.592167][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 121.664452][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.4.172 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 121.664481][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.664496][ T6505] Call Trace: [ 121.664504][ T6505] [ 121.664511][ T6505] dump_stack_lvl+0x241/0x360 [ 121.664552][ T6505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.664579][ T6505] ? __pfx__printk+0x10/0x10 [ 121.664610][ T6505] ? ref_tracker_alloc+0x316/0x4c0 [ 121.664632][ T6505] should_fail_ex+0x424/0x570 [ 121.664665][ T6505] should_failslab+0xac/0x100 [ 121.664686][ T6505] kmem_cache_alloc_noprof+0x78/0x390 [ 121.664714][ T6505] ? skb_clone+0x20c/0x390 [ 121.664736][ T6505] skb_clone+0x20c/0x390 [ 121.664758][ T6505] __netlink_deliver_tap+0x3c4/0x7f0 [ 121.664793][ T6505] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.664814][ T6505] netlink_deliver_tap+0x19d/0x1b0 [ 121.664839][ T6505] netlink_sendskb+0x68/0x140 [ 121.664860][ T6505] netlink_unicast+0x39f/0x9a0 [ 121.664878][ T6505] ? __asan_memcpy+0x40/0x70 [ 121.664910][ T6505] ? __pfx_netlink_unicast+0x10/0x10 [ 121.664940][ T6505] netlink_rcv_skb+0x296/0x480 [ 121.664964][ T6505] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.664990][ T6505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.665031][ T6505] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.665056][ T6505] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.665081][ T6505] netlink_unicast+0x7f8/0x9a0 [ 121.665110][ T6505] ? __pfx_netlink_unicast+0x10/0x10 [ 121.665132][ T6505] ? skb_put+0x114/0x1f0 [ 121.665163][ T6505] netlink_sendmsg+0x8c3/0xcd0 [ 121.665200][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.665248][ T6505] ? aa_sock_msg_perm+0x91/0x160 [ 121.665281][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.665304][ T6505] __sock_sendmsg+0x221/0x270 [ 121.665332][ T6505] ____sys_sendmsg+0x523/0x860 [ 121.665374][ T6505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.665403][ T6505] ? __fget_files+0x2a/0x420 [ 121.665426][ T6505] ? __fget_files+0x2a/0x420 [ 121.665459][ T6505] __sys_sendmsg+0x271/0x360 [ 121.665496][ T6505] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.665584][ T6505] ? do_syscall_64+0xb6/0x210 [ 121.665611][ T6505] do_syscall_64+0xf3/0x210 [ 121.665633][ T6505] ? clear_bhb_loop+0x45/0xa0 [ 121.665656][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.665676][ T6505] RIP: 0033:0x7fbabb38e169 [ 121.665706][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.665722][ T6505] RSP: 002b:00007fbab91f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.665749][ T6505] RAX: ffffffffffffffda RBX: 00007fbabb5b5fa0 RCX: 00007fbabb38e169 [ 121.665763][ T6505] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 121.665775][ T6505] RBP: 00007fbab91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.665787][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.665797][ T6505] R13: 0000000000000000 R14: 00007fbabb5b5fa0 R15: 00007fbabb6dfa28 [ 121.665828][ T6505] [ 122.026808][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 122.036285][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 122.053009][ T6514] bond0: entered promiscuous mode [ 122.059626][ T6514] syz_tun: entered promiscuous mode [ 122.065626][ T6514] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 122.073224][ T6514] Cannot create hsr debugfs directory [ 122.078779][ T6514] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 122.171321][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 122.368401][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.665454][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 122.682555][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.810848][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.825089][ T10] usb 4-1: Product: syz [ 122.828714][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 122.829422][ T10] usb 4-1: Manufacturer: syz [ 122.875583][ T10] usb 4-1: SerialNumber: syz [ 122.882479][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 122.894006][ T10] usb 4-1: config 0 descriptor?? [ 122.951829][ T6541] batadv0: entered promiscuous mode [ 122.954391][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.958895][ T6541] team0: entered promiscuous mode [ 122.970843][ T6541] team_slave_0: entered promiscuous mode [ 122.977334][ T6541] team_slave_1: entered promiscuous mode [ 122.984369][ T6541] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 122.991950][ T6541] Cannot create hsr debugfs directory [ 122.998380][ T6541] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 123.197050][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 123.211531][ T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 123.238194][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.278031][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.309099][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.498631][ T5945] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.541462][ T6552] netlink: 'syz.1.188': attribute type 5 has an invalid length. [ 123.553763][ T6552] netlink: 'syz.1.188': attribute type 5 has an invalid length. [ 123.563409][ T6553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 123.643372][ T6540] kAFS: unable to lookup cell '.,' [ 123.707646][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 123.722675][ T5945] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 123.798216][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.822207][ T5945] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.878747][ T5945] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 123.900307][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.939161][ T5945] usb 3-1: Product: syz [ 123.961394][ T5945] usb 3-1: Manufacturer: syz [ 123.986054][ T5945] usb 3-1: SerialNumber: syz [ 124.006421][ T5945] usb 3-1: config 0 descriptor?? [ 124.014533][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.030931][ T5945] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 124.058569][ T5945] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 124.192795][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 124.221892][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.247157][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 124.267950][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.281599][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.300742][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.320104][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.393898][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.422960][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.444216][ T9] usb 1-1: Product: syz [ 124.451868][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 124.460989][ T9] usb 1-1: Manufacturer: syz [ 124.463799][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.465728][ T9] usb 1-1: SerialNumber: syz [ 124.498173][ T6567] FAULT_INJECTION: forcing a failure. [ 124.498173][ T6567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.504662][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.534776][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.563571][ T5893] usb 3-1: USB disconnect, device number 3 [ 124.577119][ T5893] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 124.620465][ T5893] ti_usb_3410_5052 3-1:0.0: device disconnected [ 124.627451][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.1.192 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 124.627476][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.627487][ T6567] Call Trace: [ 124.627494][ T6567] [ 124.627501][ T6567] dump_stack_lvl+0x241/0x360 [ 124.627546][ T6567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.627573][ T6567] ? __pfx__printk+0x10/0x10 [ 124.627609][ T6567] should_fail_ex+0x424/0x570 [ 124.627642][ T6567] _copy_to_user+0x31/0xb0 [ 124.627669][ T6567] simple_read_from_buffer+0xc4/0x170 [ 124.627701][ T6567] proc_fail_nth_read+0x1ef/0x260 [ 124.627723][ T6567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.627744][ T6567] ? rw_verify_area+0x246/0x630 [ 124.627768][ T6567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.627788][ T6567] vfs_read+0x21f/0xb90 [ 124.627818][ T6567] ? __pfx___mutex_lock+0x10/0x10 [ 124.627838][ T6567] ? __pfx_vfs_read+0x10/0x10 [ 124.627865][ T6567] ? __fget_files+0x2a/0x420 [ 124.627884][ T6567] ? __fget_files+0x39d/0x420 [ 124.627900][ T6567] ? __fget_files+0x2a/0x420 [ 124.627927][ T6567] ksys_read+0x19d/0x2d0 [ 124.627953][ T6567] ? __pfx_ksys_read+0x10/0x10 [ 124.627984][ T6567] ? do_syscall_64+0xb6/0x210 [ 124.628007][ T6567] do_syscall_64+0xf3/0x210 [ 124.628027][ T6567] ? clear_bhb_loop+0x45/0xa0 [ 124.628048][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.628066][ T6567] RIP: 0033:0x7f1219f8cb7c [ 124.628084][ T6567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.628099][ T6567] RSP: 002b:00007f121ae94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.628119][ T6567] RAX: ffffffffffffffda RBX: 00007f121a1b5fa0 RCX: 00007f1219f8cb7c [ 124.628132][ T6567] RDX: 000000000000000f RSI: 00007f121ae940a0 RDI: 0000000000000004 [ 124.628143][ T6567] RBP: 00007f121ae94090 R08: 0000000000000000 R09: 0000000000000000 [ 124.628154][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.628165][ T6567] R13: 0000000000000000 R14: 00007f121a1b5fa0 R15: 00007f121a2dfa28 [ 124.628193][ T6567] [ 124.972269][ T9] usb 1-1: 0:2 : does not exist [ 125.009312][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 125.040382][ T9] usb 1-1: USB disconnect, device number 6 [ 125.109393][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 125.119613][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 125.227631][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.297003][ T9] usb 4-1: USB disconnect, device number 7 [ 125.452426][ T6583] netlink: 'syz.2.197': attribute type 10 has an invalid length. [ 125.492674][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.527299][ T6583] bond0: entered promiscuous mode [ 125.578569][ T6583] team0: Port device bond0 added [ 126.093926][ T5898] usb 5-1: USB disconnect, device number 6 [ 126.564402][ T5898] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 126.794374][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 126.814920][ T5898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.894337][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.936798][ T9] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 126.949630][ T5898] usb 2-1: Product: syz [ 126.953832][ T5898] usb 2-1: Manufacturer: syz [ 127.035557][ T5898] usb 2-1: SerialNumber: syz [ 127.050791][ T5898] usb 2-1: config 0 descriptor?? [ 127.069514][ T6627] __nla_validate_parse: 2 callbacks suppressed [ 127.069531][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.213'. [ 127.174358][ T1931] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.178126][ T9] usb 1-1: device descriptor read/64, error -71 [ 127.269296][ T5898] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.334489][ T1931] usb 3-1: device descriptor read/64, error -71 [ 127.524417][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 127.534510][ T5945] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.644801][ T1931] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.674669][ T9] usb 1-1: device descriptor read/64, error -71 [ 127.710689][ T5945] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.720493][ T5945] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.734618][ T5945] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.744007][ T5945] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 127.764431][ T5945] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 127.792162][ T5945] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.804329][ T1931] usb 3-1: device descriptor read/64, error -71 [ 127.812050][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.831834][ T5945] usb 5-1: Product: syz [ 127.832355][ T9] usb usb1-port1: attempt power cycle [ 127.839252][ T5945] usb 5-1: Manufacturer: syz [ 127.858346][ T5945] cdc_wdm 5-1:1.0: skipping garbage [ 127.864113][ T5945] cdc_wdm 5-1:1.0: skipping garbage [ 127.876991][ T5945] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 127.889332][ T5945] cdc_wdm 5-1:1.0: Unknown control protocol [ 127.914606][ T1931] usb usb3-port1: attempt power cycle [ 128.263805][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 128.271464][ T1931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.274382][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 128.286212][ T6633] CIFS: VFS: Malformed UNC in devname [ 128.321019][ T1931] usb 3-1: device descriptor read/8, error -71 [ 128.338101][ T9] usb 1-1: device descriptor read/8, error -71 [ 128.364201][ T5898] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 128.565840][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.572593][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.578926][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.585519][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.591788][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.598421][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.614963][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.621593][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.624176][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 128.628371][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.641741][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.649217][ T1931] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.656794][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.656816][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.663505][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.663518][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.669660][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.669673][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.676570][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.676583][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.682696][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.682708][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.723661][ T5893] usb 5-1: USB disconnect, device number 7 [ 128.729611][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 128.745407][ T9] usb 1-1: device descriptor read/8, error -71 [ 128.832660][ T1931] usb 3-1: device descriptor read/8, error -71 [ 128.865398][ T9] usb usb1-port1: unable to enumerate USB device [ 128.965924][ T1931] usb usb3-port1: unable to enumerate USB device [ 129.094178][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.218'. [ 129.104748][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.218'. [ 129.421953][ T1931] usb 2-1: USB disconnect, device number 10 [ 129.515385][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.533443][ T6653] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma? [ 129.794632][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 129.817353][ T9] usb 4-1: config 2 has an invalid interface number: 81 but max is 0 [ 129.917202][ T9] usb 4-1: config 2 has no interface number 0 [ 129.932918][ T9] usb 4-1: config 2 interface 81 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 129.987927][ T9] usb 4-1: config 2 interface 81 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 130.007080][ T9] usb 4-1: config 2 interface 81 altsetting 9 endpoint 0xC has invalid maxpacket 43452, setting to 64 [ 130.019258][ T9] usb 4-1: config 2 interface 81 altsetting 9 endpoint 0xE has invalid maxpacket 46074, setting to 64 [ 130.033749][ T9] usb 4-1: config 2 interface 81 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 130.075790][ T9] usb 4-1: config 2 interface 81 altsetting 9 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 130.129899][ T9] usb 4-1: config 2 interface 81 has no altsetting 0 [ 130.159542][ T9] usb 4-1: New USB device found, idVendor=0506, idProduct=0a01, bcdDevice=3e.c3 [ 130.563972][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.657416][ T9] usb 4-1: Product: 몕䏹ὲ亢蒗蛜嗽︜築먪ﻍ䵏똕덑浄먮궁훰뚁첾샙퍳䶅傮晩⸵䂄叴냏꿠鑺䫳꣺੷쩥硫쾔샗睇葧搕䶒臲휣ꂩ䧷솔⺖씤ᇢ丣卂烩愷⥽኉六苢孝埔ᮟ꼮꽏㍈쐗Ὠ㏆럼揜ᘧ鬽آ雗頙퇛 [ 130.851581][ T9] usb 4-1: Manufacturer: 뺃鱁沯柰혡蓃൜澢 [ 130.906186][ T9] usb 4-1: SerialNumber: Ⰹ [ 130.994845][ T6666] netlink: 228 bytes leftover after parsing attributes in process `syz.1.227'. [ 131.274184][ T9] usb 4-1: USB disconnect, device number 8 [ 131.744444][ T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.962430][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 131.971805][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 132.018536][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 132.044081][ T47] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.054148][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.064547][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.082159][ T47] usb 3-1: Product: syz [ 132.104360][ T47] usb 3-1: Manufacturer: syz [ 132.115573][ T47] usb 3-1: SerialNumber: syz [ 132.157476][ T47] usb 3-1: config 0 descriptor?? [ 132.273328][ T10] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 132.294531][ T10] usb 2-1: config 0 has no interface number 0 [ 132.375251][ T47] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.404537][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 132.449343][ T10] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 132.511718][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.567814][ T10] usb 2-1: Product: syz [ 132.578816][ T10] usb 2-1: Manufacturer: syz [ 132.583462][ T10] usb 2-1: SerialNumber: syz [ 132.640094][ T10] usb 2-1: config 0 descriptor?? [ 132.686573][ T10] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 132.776959][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783385][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.022235][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.231'. [ 133.034939][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 133.043723][ T10] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 133.055574][ T10] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 133.077255][ T10] usb 2-1: media controller created [ 133.088091][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.121482][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 133.134717][ T10] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 133.181010][ T6704] netlink: 228 bytes leftover after parsing attributes in process `syz.0.242'. [ 133.441257][ T47] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 133.474495][ T10] rc_core: IR keymap rc-dtt200u not found [ 133.506719][ T10] Registered IR keymap rc-empty [ 133.543434][ T10] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 133.584435][ T5924] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 133.652215][ T10] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 133.698020][ T10] dvb-usb: schedule remote query interval to 300 msecs. [ 133.711030][ T10] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 133.737221][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.246'. [ 133.773879][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.246'. [ 133.774361][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 133.838036][ T5924] usb 5-1: config 1 interface 0 has no altsetting 0 [ 133.851356][ T6715] bond0: entered promiscuous mode [ 133.860317][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 133.872240][ T6715] bond_slave_0: entered promiscuous mode [ 133.898788][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.899576][ T6715] bond_slave_1: entered promiscuous mode [ 133.912702][ T5924] usb 5-1: Product: syz [ 133.934060][ T5924] usb 5-1: Manufacturer: syz [ 133.967506][ T6715] syz_tun: entered promiscuous mode [ 133.978940][ T5924] usb 5-1: SerialNumber: syz [ 134.015223][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 134.025801][ T10] dvb-usb: error -22 while querying for an remote control event. [ 134.034756][ T6715] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 134.054935][ T6715] Cannot create hsr debugfs directory [ 134.338965][ T6725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.250'. [ 134.374438][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 134.402754][ T9] dvb-usb: error -22 while querying for an remote control event. [ 134.502246][ T5893] usb 3-1: USB disconnect, device number 8 [ 134.673346][ T6731] bridge_slave_0: left allmulticast mode [ 134.702600][ T6731] bridge_slave_0: left promiscuous mode [ 134.794791][ T6734] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 134.794854][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.850228][ T6731] bridge_slave_1: left allmulticast mode [ 134.880417][ T6731] bridge_slave_1: left promiscuous mode [ 134.895694][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.905424][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 134.934412][ T10] dvb-usb: error -22 while querying for an remote control event. [ 134.977475][ T6731] bond0: (slave bond_slave_0): Releasing backup interface [ 135.042662][ T6731] bond_slave_0: left promiscuous mode [ 135.063331][ T6731] bond0: (slave bond_slave_1): Releasing backup interface [ 135.078412][ T6731] bond_slave_1: left promiscuous mode [ 135.100582][ T6731] team_slave_0: left promiscuous mode [ 135.136183][ T6731] team0: Port device team_slave_0 removed [ 135.144166][ T6731] team_slave_1: left promiscuous mode [ 135.147776][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 135.162619][ T6731] team0: Port device team_slave_1 removed [ 135.189723][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.197847][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.208794][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.217847][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.236350][ T6731] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 135.243522][ T6731] batman_adv: batadv0: Removing interface: ip6gretap1 [ 135.284533][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 135.284835][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.294466][ T5898] dvb-usb: error -22 while querying for an remote control event. [ 135.306268][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.313140][ T6734] team0: Device bond0 failed to register rx_handler [ 135.326816][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.339842][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.362398][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.377765][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 135.387090][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.399764][ T10] usb 4-1: config 0 descriptor?? [ 135.434405][ T5897] usb 2-1: USB disconnect, device number 11 [ 135.499106][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 135.529448][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.583452][ T9] usb 3-1: config 0 descriptor?? [ 135.597726][ T5897] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 135.638697][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 135.804826][ T47] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 135.849222][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.858025][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.930351][ T5924] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 135.959731][ T5924] usb 5-1: USB disconnect, device number 8 [ 135.972818][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 135.981804][ T5924] usblp0: removed [ 135.990026][ T47] usb 1-1: New USB device found, idVendor=2087, idProduct=0f01, bcdDevice= 0.00 [ 136.005137][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.022804][ T6752] ucma_write: process 138 (syz.4.261) changed security contexts after opening file descriptor, this is not allowed. [ 136.038205][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.047647][ T47] usb 1-1: config 0 descriptor?? [ 136.054940][ T6741] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.067390][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.094828][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 136.159419][ T9] gspca_spca508: reg_read err -110 [ 136.168037][ T9] gspca_spca508: reg_read err -32 [ 136.177078][ T9] gspca_spca508: reg_read err -32 [ 136.182579][ T9] gspca_spca508: reg_read err -32 [ 136.189486][ T9] gspca_spca508: reg_read err -32 [ 136.196213][ T9] gspca_spca508: reg write: error -32 [ 136.201808][ T9] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 136.211520][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 136.220533][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 136.363715][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 136.386355][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 136.434992][ T47] usb 1-1: USB disconnect, device number 11 [ 136.511628][ T6765] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 136.520666][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.525424][ T10] ath6kl: Failed to submit usb control message: -110 [ 136.541603][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 136.541837][ T6765] team0: Device bond0 failed to register rx_handler [ 136.551277][ T10] ath6kl: Unable to send get target info: -110 [ 136.576562][ T10] ath6kl: Failed to init ath6kl core: -110 [ 136.592622][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 136.668074][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.265'. [ 136.679943][ T5898] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.752253][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 136.837533][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 136.849726][ T5898] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.863942][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.876221][ T5898] usb 5-1: Product: syz [ 136.880457][ T5898] usb 5-1: Manufacturer: syz [ 136.892262][ T5898] usb 5-1: SerialNumber: syz [ 136.910240][ T5898] usb 5-1: config 0 descriptor?? [ 137.133435][ T5898] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.752018][ T1931] usb 4-1: USB disconnect, device number 9 [ 137.771407][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.797521][ T6792] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.802338][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 137.822624][ T5897] usb 2-1: can't read configurations, error -71 [ 138.042213][ T10] usb 3-1: USB disconnect, device number 9 [ 138.105327][ T6798] __nla_validate_parse: 1 callbacks suppressed [ 138.105342][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 138.121695][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 138.161792][ T5898] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 138.282570][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'. [ 138.291890][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'. [ 138.394714][ T5893] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.430797][ T6804] cgroup: fork rejected by pids controller in /syz1 [ 138.469191][ T5898] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 138.495370][ T6894] bond0: left promiscuous mode [ 138.503103][ T6894] team0: Port device bond0 removed [ 138.543545][ T6894] netlink: 'syz.2.278': attribute type 10 has an invalid length. [ 138.554231][ T5893] usb 4-1: device descriptor read/64, error -71 [ 138.562508][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.577910][ T6894] bond0: entered promiscuous mode [ 138.583484][ T6894] team0: Port device bond0 added [ 138.663876][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 138.785887][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 138.799025][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.815786][ T5893] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 138.819059][ T5898] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.832639][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.860280][ T5898] usb 1-1: config 0 descriptor?? [ 138.995667][ T5893] usb 4-1: device descriptor read/64, error -71 [ 139.002016][ T1931] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.107711][ T5893] usb usb4-port1: attempt power cycle [ 139.177855][ T1931] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.198801][ T1931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.222064][ T1931] usb 3-1: config 0 descriptor?? [ 139.233861][ T1931] cp210x 3-1:0.0: cp210x converter detected [ 139.258411][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 139.281590][ T5898] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 139.464732][ T5893] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 139.524911][ T5893] usb 4-1: device descriptor read/8, error -71 [ 139.639757][ T1931] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 139.690822][ T1931] usb 3-1: cp210x converter now attached to ttyUSB0 [ 139.784794][ T5893] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 139.826376][ T5893] usb 4-1: device descriptor read/8, error -71 [ 139.849485][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 139.945484][ T5893] usb usb4-port1: unable to enumerate USB device [ 139.947993][ T5898] usb 3-1: USB disconnect, device number 10 [ 139.974173][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.001897][ T5898] cp210x 3-1:0.0: device disconnected [ 140.098197][ T8320] tun0: tun_chr_ioctl cmd 1074025677 [ 140.103698][ T8320] tun0: linktype set to 778 [ 140.304926][ T5893] usb 5-1: USB disconnect, device number 9 [ 140.392911][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 140.737416][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 140.788220][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 141.263490][ T8343] bond0: left promiscuous mode [ 141.275895][ T5905] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.313502][ T8346] netlink: 'syz.2.292': attribute type 10 has an invalid length. [ 141.345338][ T8343] team0: Port device bond0 removed [ 141.350301][ T10] usb 1-1: USB disconnect, device number 12 [ 141.458275][ T8346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.464943][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 141.466922][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 141.472291][ T8346] bond0: entered promiscuous mode [ 141.487933][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.509204][ T8346] team0: Port device bond0 added [ 141.513260][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.544686][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.554845][ T5905] usb 2-1: Product: syz [ 141.559045][ T5905] usb 2-1: Manufacturer: syz [ 141.595232][ T5905] usb 2-1: SerialNumber: syz [ 141.614897][ T5905] usb 2-1: config 0 descriptor?? [ 141.633726][ T5905] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.644980][ T5905] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 141.754908][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 141.884478][ T5897] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 141.922928][ T10] usb 1-1: device descriptor read/64, error -71 [ 142.082756][ T8368] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 142.096480][ T5897] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 142.107341][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.120849][ T5897] usb 3-1: config 0 descriptor?? [ 142.132080][ T5897] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 142.166145][ T8368] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 142.184378][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 142.251579][ T5905] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 142.263723][ T5905] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 142.324354][ T10] usb 1-1: device descriptor read/64, error -71 [ 142.474794][ T10] usb usb1-port1: attempt power cycle [ 142.650208][ T5897] gspca_sunplus: reg_w_riv err -110 [ 142.664416][ T5897] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 142.824687][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 142.855102][ T10] usb 1-1: device descriptor read/8, error -71 [ 143.093344][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 143.101500][ T8385] bridge0: port 1(batadv1) entered blocking state [ 143.108230][ T8385] bridge0: port 1(batadv1) entered disabled state [ 143.115012][ T8385] batadv1: entered allmulticast mode [ 143.123335][ T8385] batadv1: entered promiscuous mode [ 143.130940][ T8385] bridge0: port 1(batadv1) entered blocking state [ 143.137696][ T8385] bridge0: port 1(batadv1) entered forwarding state [ 143.174584][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 143.242651][ T10] usb 1-1: device descriptor read/8, error -71 [ 143.314647][ T5905] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 143.649461][ T10] usb usb1-port1: unable to enumerate USB device [ 143.674086][ T1100] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 143.683748][ T1100] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 143.927833][ T5905] em28xx 2-1:0.0: No AC97 audio processor [ 144.123028][ T5905] usb 2-1: USB disconnect, device number 14 [ 144.177837][ T5905] em28xx 2-1:0.0: Disconnecting em28xx [ 144.201908][ T5905] em28xx 2-1:0.0: Freeing device [ 144.524322][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.613286][ T8398] loop2: detected capacity change from 0 to 7 [ 144.664987][ T8398] Dev loop2: unable to read RDB block 7 [ 144.675742][ T8398] loop2: unable to read partition table [ 144.684703][ T8398] loop2: partition table beyond EOD, truncated [ 144.691064][ T8398] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 144.703534][ T47] usb 4-1: config 0 has no interfaces? [ 144.720729][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.747822][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.818905][ T47] usb 4-1: Product: syz [ 144.823202][ T47] usb 4-1: Manufacturer: syz [ 144.859128][ T47] usb 4-1: SerialNumber: syz [ 144.885591][ T47] usb 4-1: config 0 descriptor?? [ 145.002015][ T9] usb 3-1: USB disconnect, device number 11 [ 145.084450][ T5893] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 145.304463][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 145.353359][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.364611][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.379655][ T5893] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 145.392030][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.402386][ T5893] usb 1-1: config 0 descriptor?? [ 145.644675][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 145.814333][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 145.845996][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.905846][ T8426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.932952][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.368960][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.968840][ T5897] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 147.117216][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.440316][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.762618][ T1931] usb 4-1: USB disconnect, device number 14 [ 148.811308][ T10] usb 2-1: config 0 descriptor?? [ 149.157598][ T10] usb 2-1: can't set config #0, error -71 [ 149.228588][ T10] usb 2-1: USB disconnect, device number 15 [ 150.543218][ T5893] usbhid 1-1:0.0: can't add hid device: -71 [ 150.822880][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 150.871570][ T5893] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 151.161093][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 151.263297][ T10] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 151.280841][ T5893] usb 1-1: USB disconnect, device number 17 [ 151.384662][ T10] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 151.560141][ T10] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 151.667488][ T10] usb 2-1: config 8 has no interface number 0 [ 151.734161][ T10] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 151.891800][ T10] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 152.007695][ T8453] __nla_validate_parse: 6 callbacks suppressed [ 152.007714][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 152.314282][ T10] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.556036][ T10] usb 2-1: config 8 interface 223 has no altsetting 0 [ 152.607300][ T10] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 152.734677][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.795613][ T10] usb 2-1: Product: syz [ 152.799846][ T10] usb 2-1: Manufacturer: syz [ 153.044584][ T10] usb 2-1: SerialNumber: syz [ 153.130560][ T5897] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 153.154704][ T5897] usb 3-1: can't read configurations, error -71 [ 153.163282][ T8444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.484836][ T10] usb 2-1: USB disconnect, device number 16 [ 153.496142][ T5898] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 153.563248][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.326'. [ 153.724435][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 153.924629][ T5898] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 154.020082][ T5898] usb 4-1: config 0 has no interface number 0 [ 154.162062][ T5898] usb 4-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 154.282654][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.328783][ T5898] usb 4-1: Product: syz [ 154.342099][ T5898] usb 4-1: Manufacturer: syz [ 154.364940][ T5898] usb 4-1: SerialNumber: syz [ 154.492938][ T5898] usb 4-1: config 0 descriptor?? [ 154.733398][ T5898] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 154.922240][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.325'. [ 155.135983][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.524629][ T5898] gspca_sn9c20x: Write register 1000 failed -110 [ 155.533464][ T5898] gspca_sn9c20x: Device initialization failed [ 155.541357][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.024876][ T5898] gspca_sn9c20x 4-1:0.250: probe with driver gspca_sn9c20x failed with error -110 [ 156.876480][ T5898] usb 4-1: USB disconnect, device number 15 [ 158.146670][ T8486] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 158.634369][ T5898] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 162.346282][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.394365][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 163.883951][ T5898] usb 2-1: device descriptor read/all, error -71 [ 164.894317][ T9] usb 4-1: device descriptor read/64, error -71 [ 165.323645][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 165.974301][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 166.009109][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.145472][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.374649][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.812692][ T9] usb 4-1: config 0 descriptor?? [ 167.150806][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 170.116681][ T5893] usb 4-1: USB disconnect, device number 17 [ 175.222794][ T8549] syz.1.347 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.671097][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.354'. [ 181.705530][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.354'. [ 185.848563][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 185.944601][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 186.554801][ T5898] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 187.084996][ T5898] usb 4-1: config index 0 descriptor too short (expected 49817, got 36) [ 187.093390][ T5898] usb 4-1: config 254 has too many interfaces: 182, using maximum allowed: 32 [ 187.104789][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.113054][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.121303][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.129566][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.138103][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.174523][ T5898] usb 4-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 187.424337][ T5898] usb 4-1: config 254 has 1 interface, different from the descriptor's value: 182 [ 187.533165][ T5898] usb 4-1: config 254 interface 0 has no altsetting 0 [ 187.540620][ T5898] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 187.554531][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.465729][ T5847] Bluetooth: hci5: command tx timeout [ 190.701442][ T5924] usb 4-1: USB disconnect, device number 18 [ 191.562792][ T5847] Bluetooth: hci5: command tx timeout [ 191.564410][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 191.966487][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 195.984356][ T5847] Bluetooth: hci5: command tx timeout [ 196.154776][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.161117][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.644235][ C1] sched: DL replenish lagged too much [ 198.045246][ T5153] Bluetooth: hci5: command tx timeout [ 199.879290][ T8604] chnl_net:caif_netlink_parms(): no params data found [ 200.735552][ T8633] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 200.829038][ T8520] syz_tun (unregistering): left promiscuous mode [ 201.800037][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 201.806241][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 201.813822][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 215.005714][ T8657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.376'. [ 256.244578][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.264687][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.229352][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.249535][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.944170][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 347.951152][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8643/1:b..l [ 347.959407][ C0] rcu: (detected by 0, t=10503 jiffies, g=18741, q=1102125 ncpus=2) [ 347.967488][ C0] task:syz-executor state:R running task stack:23624 pid:8643 tgid:8643 ppid:5828 task_flags:0x400000 flags:0x00004002 [ 347.981787][ C0] Call Trace: [ 347.985079][ C0] [ 347.988037][ C0] __schedule+0x1b88/0x5240 [ 347.992585][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 347.997893][ C0] ? __pfx___schedule+0x10/0x10 [ 348.002801][ C0] ? stack_trace_save+0x11a/0x1d0 [ 348.007850][ C0] ? __lock_acquire+0xad5/0xd80 [ 348.012736][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 348.018038][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 348.023169][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 348.028948][ C0] irqentry_exit+0x5e/0x90 [ 348.033376][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.039382][ C0] RIP: 0010:unwind_next_frame+0x18a8/0x23b0 [ 348.045321][ C0] Code: f8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 5c 0a 00 00 48 0f bf 03 48 8b 74 24 08 48 01 c6 49 8d 54 24 40 4c 89 e7 e8 38 0e 00 00 <84> c0 0f 84 52 01 00 00 49 bd 00 00 00 00 00 fc ff df 48 8b 44 24 [ 348.064951][ C0] RSP: 0018:ffffc9000b52eea8 EFLAGS: 00000282 [ 348.071053][ C0] RAX: 1ffff920016a5d01 RBX: ffffffff90f7b77e RCX: 0000000000000000 [ 348.079046][ C0] RDX: dffffc0000000000 RSI: ffffc9000b528000 RDI: ffffc9000b52f3a8 [ 348.087039][ C0] RBP: dffffc0000000000 R08: ffffc9000b52f3a8 R09: 0000000000000000 [ 348.095033][ C0] R10: ffffc9000b52efd0 R11: fffff520016a5dfc R12: ffffc9000b52ef80 [ 348.103028][ C0] R13: ffffc9000b530000 R14: ffffffff90f7b780 R15: ffffffff90f7b77f [ 348.111040][ C0] ? unwind_next_frame+0x18a8/0x23b0 [ 348.116361][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 348.121502][ C0] ? qlist_free_all+0x9a/0x140 [ 348.126298][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 348.132479][ C0] arch_stack_walk+0x11e/0x150 [ 348.137273][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 348.142945][ C0] stack_trace_save+0x11a/0x1d0 [ 348.147825][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 348.153222][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 348.159164][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.165537][ C0] save_stack+0xfc/0x1f0 [ 348.169816][ C0] ? __pfx_save_stack+0x10/0x10 [ 348.174698][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 348.180089][ C0] ? __slab_free+0x2c6/0x390 [ 348.184713][ C0] ? qlist_free_all+0x9a/0x140 [ 348.189530][ C0] __reset_page_owner+0x76/0x1e0 [ 348.194508][ C0] __free_frozen_pages+0xde8/0x10a0 [ 348.199746][ C0] __slab_free+0x2c6/0x390 [ 348.204192][ C0] ? __phys_addr+0xba/0x170 [ 348.208725][ C0] qlist_free_all+0x9a/0x140 [ 348.213346][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 348.218833][ C0] __kasan_slab_alloc+0x23/0x80 [ 348.223722][ C0] kmem_cache_alloc_noprof+0x1e1/0x390 [ 348.229200][ C0] ? ptlock_alloc+0x20/0x70 [ 348.233731][ C0] ptlock_alloc+0x20/0x70 [ 348.238086][ C0] pte_alloc_one+0x6d/0x160 [ 348.242618][ C0] __pte_alloc+0x7b/0x240 [ 348.246973][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 348.251938][ C0] ? walk_to_pmd+0x19b/0x240 [ 348.256567][ C0] insert_page+0x2e7/0x310 [ 348.261019][ C0] ? __pfx_insert_page+0x10/0x10 [ 348.265984][ C0] ? vm_insert_page+0x204/0x3b0 [ 348.270873][ C0] kcov_mmap+0xc6/0x130 [ 348.275064][ C0] mmap_region+0x241d/0x2ea0 [ 348.279731][ C0] ? __pfx_mmap_region+0x10/0x10 [ 348.284694][ C0] ? __pfx_mmap_region+0x10/0x10 [ 348.289715][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 348.296352][ C0] ? cap_mmap_addr+0xaa/0xf0 [ 348.300971][ C0] ? bpf_lsm_mmap_addr+0x9/0x10 [ 348.305937][ C0] ? security_mmap_addr+0x6f/0x250 [ 348.311077][ C0] ? shmem_mapping+0xd/0x50 [ 348.315606][ C0] do_mmap+0xd42/0x1420 [ 348.319799][ C0] ? __pfx_do_mmap+0x10/0x10 [ 348.324408][ C0] ? down_write_killable+0x1a0/0x260 [ 348.329725][ C0] ? vm_mmap_pgoff+0x214/0x530 [ 348.334509][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 348.340167][ C0] ? common_file_perm+0x1a6/0x210 [ 348.345222][ C0] vm_mmap_pgoff+0x2a2/0x530 [ 348.349838][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 348.354980][ C0] ? __fget_files+0x2a/0x420 [ 348.359591][ C0] ? __fget_files+0x39d/0x420 [ 348.364290][ C0] ? __fget_files+0x2a/0x420 [ 348.368912][ C0] ksys_mmap_pgoff+0x4ee/0x720 [ 348.373724][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 348.378521][ C0] do_syscall_64+0xf3/0x210 [ 348.383052][ C0] ? clear_bhb_loop+0x45/0xa0 [ 348.387753][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.393669][ C0] RIP: 0033:0x7fb6c038e1a3 [ 348.398095][ C0] RSP: 002b:00007ffcb6969c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 348.406570][ C0] RAX: ffffffffffffffda RBX: 00007fb6c05b6118 RCX: 00007fb6c038e1a3 [ 348.414565][ C0] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fb6bf5fd000 [ 348.422548][ C0] RBP: 00007fb6c05b6118 R08: 00000000000000d9 R09: 0000000000000000 [ 348.430536][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000008 [ 348.438530][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 348.446555][ C0] [ 348.449592][ C0] rcu: rcu_preempt kthread starved for 8498 jiffies! g18741 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 348.460713][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 348.470692][ C0] rcu: RCU grace-period kthread stack dump: [ 348.476584][ C0] task:rcu_preempt state:R running task stack:26376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 348.490108][ C0] Call Trace: [ 348.493397][ C0] [ 348.496356][ C0] __schedule+0x1b88/0x5240 [ 348.500918][ C0] ? schedule+0x163/0x360 [ 348.505306][ C0] ? __pfx___schedule+0x10/0x10 [ 348.510209][ C0] ? schedule+0x90/0x360 [ 348.514478][ C0] ? schedule+0x90/0x360 [ 348.518749][ C0] schedule+0x163/0x360 [ 348.522938][ C0] schedule_timeout+0x15b/0x2b0 [ 348.527815][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 348.533212][ C0] ? __pfx_process_timeout+0x10/0x10 [ 348.538551][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 348.544127][ C0] ? prepare_to_swait_event+0x308/0x340 [ 348.549710][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 348.554610][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 348.560794][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 348.566117][ C0] ? finish_swait+0xdb/0x200 [ 348.570732][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 348.575964][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 348.580590][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 348.585824][ C0] ? __kthread_parkme+0x1a8/0x200 [ 348.590873][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 348.596105][ C0] kthread+0x7b7/0x940 [ 348.600200][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 348.605427][ C0] ? __pfx_kthread+0x10/0x10 [ 348.610040][ C0] ? __pfx_kthread+0x10/0x10 [ 348.614650][ C0] ? __pfx_kthread+0x10/0x10 [ 348.619262][ C0] ? __pfx_kthread+0x10/0x10 [ 348.623872][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.629103][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 348.634320][ C0] ? __pfx_kthread+0x10/0x10 [ 348.638940][ C0] ret_from_fork+0x4b/0x80 [ 348.643383][ C0] ? __pfx_kthread+0x10/0x10 [ 348.647999][ C0] ret_from_fork_asm+0x1a/0x30 [ 348.652799][ C0] [ 348.655844][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 348.662210][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 348.673892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.683963][ C0] RIP: 0010:unwind_next_frame+0x114e/0x23b0 [ 348.689884][ C0] Code: e3 90 49 c7 c5 38 d6 6d 90 4c 29 e9 48 21 c1 4c 8d 34 11 49 81 c6 38 d6 6d 90 48 c7 c5 38 d6 6d 90 4c 89 f0 48 29 e8 48 89 c1 <48> c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 48 8d 1c 45 00 00 00 [ 348.709598][ C0] RSP: 0018:ffffc90000006b88 EFLAGS: 00000206 [ 348.715692][ C0] RAX: 000000000001d4ac RBX: ffffffff90e12ef0 RCX: 000000000001d4ac [ 348.723682][ C0] RDX: fffffffffffffffc RSI: ffffffff8ca1b660 RDI: ffffffff8ca1b620 [ 348.731669][ C0] RBP: ffffffff90df5a40 R08: 0000000000000000 R09: 0000000000000000 [ 348.739656][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff91c1b739 [ 348.747642][ C0] R13: ffffffff90df5a3c R14: ffffffff90e12eec R15: ffffffff816d9bc8 [ 348.755638][ C0] FS: 0000000000000000(0000) GS:ffff888124f9a000(0000) knlGS:0000000000000000 [ 348.764584][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.771179][ C0] CR2: 0000200000158030 CR3: 00000000341a0000 CR4: 00000000003526f0 [ 348.779167][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.787152][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.795136][ C0] Call Trace: [ 348.798426][ C0] [ 348.801295][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 348.806432][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 348.812618][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 348.818264][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 348.823911][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 348.830094][ C0] arch_stack_walk+0x11e/0x150 [ 348.834906][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 348.840561][ C0] stack_trace_save+0x11a/0x1d0 [ 348.845444][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 348.850842][ C0] ? do_raw_spin_lock+0x151/0x370 [ 348.855908][ C0] kasan_save_track+0x3f/0x80 [ 348.860610][ C0] ? kasan_save_track+0x3f/0x80 [ 348.865483][ C0] ? kasan_save_free_info+0x40/0x50 [ 348.870703][ C0] ? __kasan_slab_free+0x59/0x70 [ 348.875664][ C0] ? kmem_cache_free+0x197/0x410 [ 348.880622][ C0] ? nft_synproxy_eval_v4+0x3d4/0x610 [ 348.886019][ C0] ? nft_synproxy_do_eval+0x36a/0xa90 [ 348.891414][ C0] ? nft_do_chain+0x4b2/0x1db0 [ 348.896200][ C0] ? nft_do_chain_inet+0x41f/0x6b0 [ 348.901335][ C0] ? nf_hook_slow+0xc8/0x220 [ 348.905964][ C0] ? NF_HOOK+0x29b/0x450 [ 348.910226][ C0] ? NF_HOOK+0x3a0/0x450 [ 348.914480][ C0] ? __netif_receive_skb+0x2c9/0x670 [ 348.919780][ C0] ? process_backlog+0x664/0x15c0 [ 348.924840][ C0] ? __napi_poll+0xcb/0x480 [ 348.929363][ C0] ? net_rx_action+0x89d/0x1240 [ 348.934231][ C0] ? handle_softirqs+0x2d6/0x9b0 [ 348.939192][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 348.943996][ C0] ? irq_exit_rcu+0x9/0x30 [ 348.948430][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 348.954262][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.960429][ C0] ? pv_native_safe_halt+0x13/0x20 [ 348.965561][ C0] ? default_idle+0x13/0x20 [ 348.970086][ C0] ? default_idle_call+0x74/0xb0 [ 348.975037][ C0] ? do_idle+0x22e/0x5d0 [ 348.979289][ C0] ? cpu_startup_entry+0x42/0x60 [ 348.984236][ C0] ? rest_init+0x2dc/0x300 [ 348.988669][ C0] ? start_kernel+0x484/0x510 [ 348.993369][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 348.999045][ C0] ? skb_release_data+0x67a/0x8b0 [ 349.004094][ C0] kasan_save_free_info+0x40/0x50 [ 349.009149][ C0] __kasan_slab_free+0x59/0x70 [ 349.013938][ C0] ? nft_synproxy_eval_v4+0x3d4/0x610 [ 349.019330][ C0] kmem_cache_free+0x197/0x410 [ 349.024123][ C0] ? nft_synproxy_eval_v4+0x3d4/0x610 [ 349.029531][ C0] nft_synproxy_eval_v4+0x3d4/0x610 [ 349.034763][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 349.040508][ C0] ? nf_ip_checksum+0x13a/0x500 [ 349.045403][ C0] nft_synproxy_do_eval+0x36a/0xa90 [ 349.050634][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 349.056377][ C0] ? sched_clock_cpu+0x77/0x4d0 [ 349.061260][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 349.066590][ C0] nft_do_chain+0x4b2/0x1db0 [ 349.071203][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 349.076441][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 349.081498][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 349.086910][ C0] ? ipt_do_table+0xf48/0x1870 [ 349.091720][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 349.096956][ C0] nft_do_chain_inet+0x41f/0x6b0 [ 349.101936][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 349.107415][ C0] ? ipt_do_table+0x314/0x1870 [ 349.112208][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 349.117683][ C0] nf_hook_slow+0xc8/0x220 [ 349.122118][ C0] NF_HOOK+0x29b/0x450 [ 349.126210][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 349.132213][ C0] ? NF_HOOK+0x9e/0x450 [ 349.136387][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 349.141000][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 349.146995][ C0] ? ip_rcv_finish+0x409/0x560 [ 349.151783][ C0] NF_HOOK+0x3a0/0x450 [ 349.155890][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 349.161026][ C0] ? NF_HOOK+0x9e/0x450 [ 349.165194][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 349.169795][ C0] ? ip_rcv_core+0x80c/0xd20 [ 349.174410][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 349.179561][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 349.184083][ C0] __netif_receive_skb+0x2c9/0x670 [ 349.189230][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 349.194910][ C0] process_backlog+0x664/0x15c0 [ 349.199803][ C0] ? process_backlog+0x33d/0x15c0 [ 349.204867][ C0] ? __pfx_process_backlog+0x10/0x10 [ 349.210191][ C0] ? __lock_acquire+0xad5/0xd80 [ 349.215090][ C0] ? do_raw_spin_lock+0x151/0x370 [ 349.220145][ C0] __napi_poll+0xcb/0x480 [ 349.224501][ C0] net_rx_action+0x89d/0x1240 [ 349.229226][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 349.234362][ C0] ? __run_timer_base+0x17a/0x8e0 [ 349.239412][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 349.245094][ C0] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 349.251377][ C0] handle_softirqs+0x2d6/0x9b0 [ 349.256181][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 349.260983][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 349.266302][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 349.271530][ C0] __irq_exit_rcu+0xfb/0x220 [ 349.276147][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 349.281380][ C0] irq_exit_rcu+0x9/0x30 [ 349.285650][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 349.291503][ C0] [ 349.294457][ C0] [ 349.297408][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.303407][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 349.309149][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7e 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 349.328778][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c6 [ 349.334889][ C0] RAX: b1acb4e7c0f72500 RBX: ffffffff8197272e RCX: ffffffff8c2fb89c [ 349.342882][ C0] RDX: 0000000000000001 RSI: ffffffff8e6497f7 RDI: ffffffff8ca1b680 [ 349.350874][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 349.358862][ C0] R10: dffffc0000000000 R11: ffffed10170c656c R12: 1ffffffff1d40fc6 [ 349.366884][ C0] R13: 1ffffffff1d52cb0 R14: 0000000000000000 R15: dffffc0000000000 [ 349.374882][ C0] ? do_idle+0x22e/0x5d0 [ 349.379155][ C0] ? ct_kernel_exit+0x12c/0x1a0 [ 349.384035][ C0] default_idle+0x13/0x20 [ 349.388394][ C0] default_idle_call+0x74/0xb0 [ 349.393187][ C0] do_idle+0x22e/0x5d0 [ 349.397287][ C0] ? __pfx_do_idle+0x10/0x10 [ 349.401907][ C0] ? rest_init+0x31/0x300 [ 349.406365][ C0] ? do_idle+0x5/0x5d0 [ 349.410457][ C0] ? rest_init+0x31/0x300 [ 349.414830][ C0] cpu_startup_entry+0x42/0x60 [ 349.419613][ C0] rest_init+0x2dc/0x300 [ 349.423874][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 349.429447][ C0] start_kernel+0x484/0x510 [ 349.433984][ C0] x86_64_start_reservations+0x2a/0x30 [ 349.439473][ C0] x86_64_start_kernel+0x66/0x70 [ 349.444437][ C0] common_startup_64+0x13e/0x147 [ 349.449422][ C0] [ 356.973787][ T5847] Bluetooth: hci5: command 0x0406 tx timeout