last executing test programs: 6m35.800606516s ago: executing program 2 (id=394): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x6}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setresgid(0xee00, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRES8=r3]) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000003c0)="a90500000000746400010000000000009f3f699c9c78616e591ed0c6b856f985b867cd0ca4", 0x25}, {0x0}], 0x2}}], 0x1, 0x24004044) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) r6 = socket$pptp(0x18, 0x1, 0x2) accept4(r6, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000002000000000000130400000000002e655f00"], &(0x7f0000000cc0)=""/8, 0x2a, 0x8, 0x1, 0x9}, 0x28) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, 0x0) 6m31.772881408s ago: executing program 2 (id=410): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/image_size', 0x121a02, 0x0) write$UHID_CREATE(r0, &(0x7f0000001880)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffa, 0x5f, 0x9, 0x2, 0x4485}}, 0x120) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$unix(r5, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28, 0x2000c000}}], 0x2, 0x88) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 6m30.87571292s ago: executing program 2 (id=411): ioperm(0x0, 0x9, 0xd648) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') 6m29.755052225s ago: executing program 2 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa20000000000000702000000feffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m28.444148019s ago: executing program 2 (id=425): r0 = openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0xf1c9, 0x2, {0x2, 0x3, 0x1, 0x3, 0x2}, 0x8}) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x56, 0x2, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x2}) epoll_create1(0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r0, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, r8}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 6m27.132023212s ago: executing program 2 (id=430): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100311395b40d8050c815f180902030109021b00010601f1080904c808017ff8ac4c090501030002"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x155551fa}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x65, &(0x7f0000000140)=""/101) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x1, './bus\x00'}, 0x9d) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r5, 0x891e, &(0x7f0000000100)="26a8415a54a6867f8a1e3a") ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x7fffffff}}, './bus\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0xc, 0x0, 0x400}, 0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r7, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x0, 0x37, 0x0, 0xfffffffc, 0x7}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000400)=0x200000000) 6m11.688714086s ago: executing program 32 (id=430): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100311395b40d8050c815f180902030109021b00010601f1080904c808017ff8ac4c090501030002"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x155551fa}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x65, &(0x7f0000000140)=""/101) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x1, './bus\x00'}, 0x9d) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r5, 0x891e, &(0x7f0000000100)="26a8415a54a6867f8a1e3a") ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x7fffffff}}, './bus\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0xc, 0x0, 0x400}, 0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r7, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x0, 0x37, 0x0, 0xfffffffc, 0x7}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000400)=0x200000000) 20.360124217s ago: executing program 1 (id=2276): syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x200, @loopback, 0x2}, 0xa) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180)=0x400, 0x42) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @mcast2, 0x3}, 0x1c) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) shutdown(r7, 0x1) write$P9_RMKNOD(r6, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb40000000000008004500002000000000001190780a010101e000000100004e20001f9078213d0000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 18.842965982s ago: executing program 1 (id=2280): r0 = syz_io_uring_setup(0x687b, &(0x7f00000002c0)={0x0, 0x983c, 0x1, 0x1, 0x1bc}, &(0x7f0000000240)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000006c0)={0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="000004000000a7100c77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc0505510, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 'syz1\x00'}) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x76, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x1a, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xe, 0x5, 0x91}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x0, 0x3}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x0, 0x7, 0x3, 0x20, 0x3}, 0x24, &(0x7f0000000340)={0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x6, 0x100}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x9, 0xe100, 0x2, [0xf, 0xff0180, 0x0]}]}, 0x5, [{0x84, &(0x7f0000000500)=@string={0x84, 0x3, "422b6e670093bc3cfcb8a08ae333bd9ce97792f4548304b75d5480e7ab34748968567cb0e9b6a9a929ad6692cb7adac967301e0dc691a02872be81c5c8685d01ebd24e90a527bde24bfef145b2fc8f70f4b87e72499538363844ff8c507cff598d221311767e1220646cad02a4a07e6b933d2582aadc8213bf00b940164d44a1c723"}}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x69, &(0x7f0000000800)=@string={0x69, 0x3, "ff66b8cc7817b157070170df9c4fb3fa49317afb00cf1848482005c14af710c70637b1d5642d72e9815ce086a15a1cc9e13841d87999af36a0bbc272503e30afe86f0c8500ea074d64b465284c90fd4285ca7100215b356f9d575d19c1d155f948c923d85fb85f"}}, {0x71, &(0x7f0000000900)=@string={0x71, 0x3, "d318d5dc61c481618c9c9349724b28fceb26bd4ca797c1999425fb302a437ef0d74312ab647a3f2d146b59f348ddf1c04ef7e81d969642ee6f706a241e9e5c8f1326b885b82dfe9ca8c893613b68d4e15d35b5f8d875f3ea2e0b0d3ab401267b379b264fc84462d926dbf786d4ba63"}}]}) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) writev(r7, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x55, 0x0, 0x80, 0x20000000000002, 0x0, 0x5, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_80211_inject_frame(&(0x7f0000000d40)=@broadcast, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 14.164537538s ago: executing program 1 (id=2303): openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x80) syz_open_dev$sndpcmp(0x0, 0xbb5, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 11.919892379s ago: executing program 1 (id=2310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) execve(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000100000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11.150833494s ago: executing program 5 (id=2312): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x76, &(0x7f0000000080)=""/118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, 0x0, 0x4000, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x10000, 0xd9, r4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 10.572242206s ago: executing program 1 (id=2315): r0 = socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = socket(0x15, 0x5, 0x0) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x18, 0x110, 0xa, "0e"}], 0x18}, 0xfc00) 6.392234044s ago: executing program 5 (id=2326): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xfffffffc, 0x32344d59, 0x1280, 0x168}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access\x00', 0x2, 0x0) 6.183064892s ago: executing program 1 (id=2329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12011c03001f66088f0510660548010203010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80b0000010501010000000000000000070000035402010001000000000400000604a908ff070c0073797a31000000000000000000000000000000000000000000000000000000007768c7325bbd740a655f26fc7c6eb48600047388aff7356c5393fec441850deb2f2c06db919e2ecdaf3e677ec801980e8f1064b461fa73f2f942d2390424b6c4a806080002000000f9741f080100020003000000000000000200001000000000060000000500060002000000ee0000000400000801000000080000000900000000000000848100000800000001000000faffffff8100020002000000faffffff0400008002000000080000000700030003000000c1a500000400010003000000010000000400020002000000050000000000030000000000030000000200020002000000040000000100010002000000000000000800000100000000090000000000060002000000fdffffff0600ffff00000000010000000e00090000000000320600000100040003000000ff030000ff7f3fc30200000007000000010003000100000008000000090b010002000000ffffffff0700e400000000000400000001000100020000008e0000000101020001000000c4000000000009000300000009000000810c070001000000060000000100ff0700000000000100000008070001000000010000000300020002000000040000000100018002000000010000003d00e90900000000ffffffff00004000030000000600000003001100010000007f0000000004d30000000000e50c00000c000d00010000000e000000040004000200000000000100060000000100000002000000f8ff10000200000001000000540201000100000000800000720903000700260073797a3000000000000000000000000000000000000000000000000000000000aaa2c6d9943070889ad14b593d19f4106c69fdcdf9fbfd6bbd2baf92e1625cc80102a7d34818ac796e81fa3b6476314dea9fa99a27aca3cc00b100b132dc399a0050008000000000000000000018f8ff02000000060000009000070000000000566f00000001090003000000090000000c000400030000000200000008000700000000000500000000020700020000000c0400000002090000000000030000000900179d02000000000000800200510000000000030000000000000200000000ffffffff0000010003000000080000000800070000000000000400000400e87c01000000010000800600450003000000000800000e009100030000000900000008000300030000000200000004000700020000000300000002000900010000000600000005000000000000003729156100020000010000002b7b00000104010402000000060000000200ff0301000000ff0f000009000600020000000100000004000d000200000007000000b000008000000000000001000700ffff0100000050ffffff0400080002000000a9f3000007000000010000000800000004000200020000000f0000000100980003000000c8000000ff07000003000000190000000900ff7f00000000050000000900010101000000020000000000040000000000ffffffff0e00f8ff000000009c3700000d000008030000001ec900000000090002000000020000000002070003000000080000000101010003000000050000005402010002000000020000004800d10b0000240073797a30000000000000000000000000000000000000000000000000000000002571ca9bf76326529d566cba6c74ff624819174b6f9581130f0c322413821faf6156a9b65128e59ad9568925585590619e738bc53d89fb0d7c667cd38d62e7bcd669000001000000000000000900a431010000000100000000013c00000000000200000006000a0003000000ff0f00000040ff03020000000600000005000500000000000300000009000800010000000300000097000000020000000000000069055a91010000000100000008000400010000000180ffff0900020003000000cc050000650fff070200000004000000050035ea030000000000000005000300010000000000000000400900010000000900000001000200000000000800000006000c000100000005000000008009000100000008000000ab00040002000000ff0100000000030000000000070000008001ff0001000000070000000600010002000000010000000900ffff000000000700000002002b000200000009000000050030cc00000000090000000200df8600000000040000000200c78c0100000010000000060000000200000006000000e400070003000000fcfffffff20006000000000004000000c80d01800300000001000080854148000100000006000000020088dd00000000dd0200000000ff01000000000100000006000200020000000080000005000000020000000700000005000100020000000f0000004a00060003000000070000000000cd070100000004000000020008000200000008000000540201000200000087766c6d0640d00dfcff1b0073797a3100000000000000000000000000000000000000000000000000000000846c70bff2aff8248008c6d464b02fa4cd4e8a115c7deba80695e525d27b2bfc2672e2d0449a4100109c3c80a104a1734779434f4c6051fa23c41ddef4baa36a060000008000000044e80000bf000b0003000000010000000010030003000000000000000600010103000000af03000006000500010000000600000008005a0702000000030000000800060002000000080000000100800000000000a038ffff0400060002000000040000000700a00f02000000050000000c000c0000000000f7660000884e03000200000007000000ff0f010000000000000000000300ff7f000000000100010002008cff0000000007000000002001ff03000000780b00000400060003000000ff0300001e00070003000000ff7f0000ff03d20701000000050000000100010401000000060000000500c0cf03000000018000004356010000000000000000000400070002000000000000008d020004010000000500000004000700030000000900000009000300020000000400000008000f00010000007b24134c0900090006000000ff07000082b0080002000000080000000700070002000000000000000400070000000000060000000d05070001000000020000005b00110602000000030000007f000100000000006b8800000800ff03010000000500000000000000000000000a00000000004309030000000600000005000600010000000400000008000500030000000700000001000e00030000001000000054020100000000008b02d80d075e090000001b0073797a30000000000000000000000000000000000000000000000000000000009c663c12445ddbb29d2c2cd05c0463872c588d5af4cd885aa1a02654a992a7dce99443db1f45d090253ecbfd18fb709f20b2b55da853c8bbbbe5ca38d6d19b270500d34a020000000100000000000700030000000500000001800100020000000c000000ffffff07030000000600000008000500020000001f0000002e89030002000000100000000d00070002000000150e00000300020002000000010000805450070000000000050000000500f9ff01000000060000000400030000000000050000000100fdff02000000080000000800050002000000010001000600f8ff020000000100000004000000020000000080000004000a000100000007000000b702030000000000b17900000900000001000000f7ffffffa609f5ff010000000008000000080c000000000012e6000008000800000000000200000009008b0003000000ffff0000ff7f000002000000a80e000000f0050000000000f7ffffff0b00440102000000c77900001000520301000000020000000600000100000000000000001901f7ff000000000000000002007f0002000000030000000400070003000000070000000000b700020000000900000003000500000000006cd600000000800003000000ff0000001000080000000000090000004000040002000000070000000700020000000000fb0000000b00020002000000ff0700000900ff7f010000008000000080000000020000000a00000080ff00020200000002000000"], 0xbb8}, 0x1, 0x0, 0x0, 0x4040855}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2205d96c717ab96f0ded75d88a8", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1020, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x8, 0xea, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0x0, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x1fc, 0x1ba, 0x9, 0xab, 0x6, 0xfffffffb, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0xcee9, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x10000008, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x0, 0x2, 0x81, 0x7, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0x1ff, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0x13, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x4, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xfffffffa, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x6, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xfffffffb, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x80400, 0x10001, 0x1, 0x800, 0x6000, 0x6, 0xfffffffd]}]}}]}, 0x468}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000000c0)=""/104, 0x13) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000300)={"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"}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r9, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r10, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x1, @name="1070bc2c576effbf7ff8ea8030a6dc82d6eb35df689367a2d69cd54c739c5f41"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 5.376149939s ago: executing program 4 (id=2335): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 14) 5.355326175s ago: executing program 5 (id=2336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0xe5, 0x70bd2a, 0xffffffff, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}]}, 0x38}}, 0xc4c4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) dup(r4) (async) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000014c0)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000014c0)={'syztnl2\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x1dc24f8d, 0x2, 0x1, r0, 0x2, '\x00', r3, r5, 0x5, 0x0, 0x5, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7, 0x40, 0xa9, 0xfffffff8, {{0x38, 0x4, 0x0, 0x2, 0xe0, 0x64, 0x0, 0x90, 0x2f, 0x0, @multicast1, @empty, {[@end, @lsrr={0x83, 0x7, 0xfc, [@remote]}, @timestamp_prespec={0x44, 0x24, 0x3c, 0x3, 0x7, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@multicast2, 0x8}, {@local, 0x6}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x79, 0x1, 0x3, [{@empty, 0xffffffd8}, {@loopback, 0xc939}, {@loopback, 0x8}, {@local, 0x69ba}]}, @lsrr={0x83, 0x27, 0x45, [@broadcast, @loopback, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @multicast2, @remote]}, @generic={0x44, 0x12, "c0d5b82769feefee810b8b7faec22994"}, @timestamp_prespec={0x44, 0x3c, 0x6c, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x43}}, {@private=0xa010100, 0xc}, {@local, 0xd9}, {@broadcast, 0x5}, {@private=0xa010100, 0x401}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x7ff}]}]}}}}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/2, 0x2, 0x0, &(0x7f0000000700)=""/214, 0xd6}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/2, 0x2, 0x0, &(0x7f0000000700)=""/214, 0xd6}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') (async) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r13, 0x402c542c, &(0x7f0000000100)={0x1000, 0x7ff, 0xe57, 0x1ff, 0x6, "3ce69208710000003eecffff0000009c00", 0x5, 0x1ff}) (async) ioctl$TCSETSW2(r13, 0x402c542c, &(0x7f0000000100)={0x1000, 0x7ff, 0xe57, 0x1ff, 0x6, "3ce69208710000003eecffff0000009c00", 0x5, 0x1ff}) ioctl$TIOCSTI(r13, 0x5412, &(0x7f00000000c0)=0x8) (async) ioctl$TIOCSTI(r13, 0x5412, &(0x7f00000000c0)=0x8) ftruncate(r12, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x14, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, [@ldst={0x3, 0x1, 0x4, 0x7, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffe7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0x5, 0x5, 0x8, 0x30, 0xffffffffffffffff}, @ldst={0x1, 0x1, 0x1, 0x1, 0x8, 0xffffffffffffffe0, 0xfffffffffffffffc}, @exit, @ldst={0x1, 0x1, 0x1, 0xd4205c544723894f, 0x5, 0xfffffffffffffff2, 0xffffffffffffffff}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0xb3, &(0x7f0000000300)=""/179, 0x40f00, 0x0, '\x00', r7, @fallback=0xb, r10, 0x8, &(0x7f0000000640)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xa, 0x800007, 0xe}, 0x10, r11, r12, 0x0, &(0x7f0000000880)=[r6, r6, r6, r0, r0, r0], &(0x7f00000008c0), 0x10, 0x6}, 0x94) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r14, 0x1) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) (async) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) connect$inet6(r14, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000006, @empty, 0x9f}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.807679396s ago: executing program 0 (id=2340): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xef, 0x56a, 0xdf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x90, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x6e34, 0xbb, 0x1, {0x22, 0x6b9}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x8, 0x6, 0x8, 0x2}, 0x17, &(0x7f0000000140)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x0, 0x3ff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x28, 0x9, 0xc, 0x6, 0x9}]}, 0x3, [{0xca, &(0x7f0000000380)=@string={0xca, 0x3, "c3694a416caec756fe5d16b32c764f97c8a5ab998cb3b8e7d345a7072c97b611fd538978fcef1fde67078abd867d801681cc3e3c379d99cc9b9b7bd895777cf9dff67497fccfb2d7d5fd8c43a53c2fd047c56727c5530d7c2db0ff6b056beb2fd033a0b8489aef76f1533c8c13e9e1743aed9592993da02ecf1b1bf90f815a409a20f56b828bcce6b0f036bcf96666d37ca4980a0b82669aa3ed2bd46b1ca947d172f7924469a6725ee017121289cadb4b9aafd992dd67fb8e0d6da03f491f8456f54a9a31c49d1c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x827}}, {0x66, &(0x7f00000002c0)=@string={0x66, 0x3, "7aaaab5395de90840f33e3075745ec11c190168beef11c81ed28e1240df231cb7d2f18721a672db13a5b1993fdaaced36603f0e6c8a60c5366cadb341dc73c69a58da5fca35bc9fed4115796bfacc735a408cf56656fc05fac188114552325497771bc5b"}}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0)="ac", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000021002101"], 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="5d0b591a0388bf6a15abd580da0cb7cdf1dbe4615ace95b6f083e6b5a4194144e8f0f759877de29f4f52d6f106e67b9c4ca17c782f4211f086b02193f9eb78d51ec41cbe3692956ba8b03b1c8094acc948f7feb23bd6ac8875de1cd69ee004bcdeaab3143dcc8fdf7f5efa0be9d79a0fc1586a045a70544c7bfd445000b48b19"], 0x0, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, &(0x7f0000000e00)={0x40, 0xb, 0x2, "1575"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x7}, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r6, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@empty}, {}, {@rand_addr=0x64010101, 0x1}]}, @generic={0x7, 0x3, "f4"}, @cipso={0x86, 0x6}, @end]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x48a6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) 4.772265055s ago: executing program 4 (id=2341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) getrusage(0xffffffffffffffff, &(0x7f0000000900)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='bdev\x00', 0x800000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000cd0400383a00fc010000380500000000000000000000ff0200000000000000000000000000010300907800000000600bae2b00002f0000000000000000000000000000000000fe880000000000000000000000000001870000000000002591287e00"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000380)=0x80, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r6, 0x1, 0x3, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x63) 4.320028308s ago: executing program 5 (id=2342): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "cba50009e6e7d615335483d0af05ce3ea75e4b50c34c64a5609d8fe6f99884a4ed618f0889bc587ce7fc19b272da9f7ea3bb81cd3b76fa242f8d2763a0a5199f", 0x10}, 0x48, 0xfffffffffffffffe) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, 0x0, 0xfffffffffffffffd, {0x2, 0xff, 0x4}, 0xfe}, 0x18) keyctl$clear(0x7, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000040005"], 0xd0}}, 0x0) pipe(&(0x7f0000000100)) 4.147437832s ago: executing program 3 (id=2344): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r1, r2+60000000}, {r3, r4+60000000}}, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0x5) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x7e, 0xffffffff, 0x1}) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r5], 0x108}}], 0x2, 0xc040) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f00000006c0)=0xe, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r6, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) prlimit64(r7, 0x5, &(0x7f0000000140)={0x3, 0x2}, &(0x7f0000000180)) 4.064193743s ago: executing program 5 (id=2345): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b100020301090261000100000000090400"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f00000005c0)={0x0, 0xb, 0xf4, {0xf4, 0x8, "7baafd123218dae86130f396d88e2c759707ddc7912de3b74019a354d319f9201f99dcff9f7466eb469603227ce28d8e16513057e2ba1cf9f6152e159444238099bdb90b548252a669da0e8f8f87a580b60fe997855fbc32e2b2cb28eba1a14e6e084bab7c6286fc2d38c6d30c160d48713f5b2b5f645c23e19d9b072a8797aa642a99fff6077fd529fca0fa396fd02a6e78aa2083bfbe83b796f595f659d3c0b95ff5758dc1c6b1ecdf61d8561900365f336860354d3086c7b1f0dc54b2e99a8318228004bb33664b31e23e72e6ae1a4ddd64242fed817315f0f86062b7c8a8781e641c7d042cd2357c8cd416aa80f7d2e1"}}, &(0x7f0000000700)=ANY=[@ANYBLOB="0003460000004603d24bfec5d947dc7c9f50dfbf7c30e92b311294f4cdcea35683b5fc6613478fb2e909332b5c30ff4e8ea3d68aa94852ee5b36a1e69aa09286e3c9834bb15508d9187becd9a0a761b8f4064b6cb887d2b9823940294ebe96"]}, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)={0x60, 0x30, 0xb3, "b671b3de94df929793b0724fd336d3b7ec5abd7456e98aa9a8cadc8eeb0394f0e36c941ccf650bb6faf6a8a13a9cc0f586e04bd309217764ad420bc7ca5d2698d9be655cf73561a46932f60bb79cda329e160c78a3c4708a4e0be6752232e1dc7e3b24137419423ec0b9b273d5a5e9f6ad3b1c8a3b3083a20fdd4fb6b21bd2f0a44f664c7069992359ea8ca5c045a9ff808036572c5f3787e7ef31983f12053f636ba064f860a8518a41b1317924a8484e1833"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xfc}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0xc0, 0x5, 0x6, "0594362c18b8"}, &(0x7f0000000380)}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000340)={0x34, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x12}, &(0x7f0000000280)={0x20, 0x0, 0x2}, 0x0, 0x0}) 3.865532099s ago: executing program 3 (id=2346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) socketpair(0x1a, 0xa, 0x10, &(0x7f00000035c0)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009ac0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)="9d3b87ea5d3ccf74833f0a4619ebd9f455c64a957b42a3", 0x17}, {&(0x7f0000000080)="88a853312c2e5cfd", 0x8}, {&(0x7f0000000680)="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", 0x902}, {&(0x7f0000001780)}], 0x4, 0x0, 0xd8, 0x20004000}}], 0x1, 0x20048000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.715664192s ago: executing program 3 (id=2347): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000001a17370cb574cbfd3700"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x10}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @multicast1}, &(0x7f0000000040)=0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x4, 0x5, 0x30, 0x10, 0x8, 0x2, 0x3, 0x2, 0x55, 0x7, 0x7, 0x9, 0x2, 0x3, 0x1, 0x5}}) 3.664113093s ago: executing program 4 (id=2348): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffecf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) shutdown(r1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x2004c840) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f00000007c0)=""/258, 0x102}, {&(0x7f0000004e00)=""/4107, 0x100b}, {&(0x7f0000000a40)=""/229, 0xe5}], 0x4}, 0xa}], 0x4, 0x0, 0x0) 3.458481149s ago: executing program 3 (id=2349): socket$inet(0x2, 0x3, 0x9) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x1}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x24008804) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/133], 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xfffffffffffffec9, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x800) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT2(r6, &(0x7f0000000280)={0xc, {0xd0, "27635be3a22d50560050fbef1598fba5a9e054ac11ef9a8bd484a5ca414db5e4272f9522610330c6ca2ad04b8b9248dd9278a35519e2eae5294b99d6a9dbdf90633012cd879d058ed0d0d8b24e9dfc93b747de16086dd8435ae53934a82900bbe0886152467dfbb7c86222e3390029ff05134825456edda0f486f6e3f23370cd9f1e9f6869299a2eafab6a8be4af0d2ad307e8a9e0015d43734816616db3eab2b6a8022fa46cf31bcfdd3d2bbeef00f522b71a2bfa1ad1ebc89d8ed6b5921645bfc2acea6523f701c0d841ede82b3a45"}}, 0xd6) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x8010) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.354164762s ago: executing program 3 (id=2350): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10002030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB]}, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)={0x60, 0x30, 0x8, "b671b3de94df9297"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000380)}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x12}, &(0x7f0000000280)={0x20, 0x0, 0x2}, 0x0, 0x0}) 3.203974843s ago: executing program 3 (id=2351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) (async) r1 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x10000001}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x4b, 0xa, "f1ddaad035b35c28455c"}}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r5, 0x0, 0x24, 0x31e5d, 0x0, 0x0, 0x10001}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x4805) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f000000cffc), 0xa, 0x1, 0x0, 0x0, 0x5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd86, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r8, &(0x7f0000000080), 0x0}, 0x20) (async) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r9, 0x1000000, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x18, 0x15, 0x301, 0x70bd29, 0x0, {0xc}, [@typed={0x4, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) (async) process_mrelease(r9, 0x0) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 3.17722283s ago: executing program 4 (id=2352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x8000000, 0xc, 0x0, 0x0, 0x0, 0x2]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005d80)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0xa, 0x9}, {0xa, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 2.101253211s ago: executing program 0 (id=2353): rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x36ad, &(0x7f0000000180)={0x0, 0x3485, 0x0, 0x1}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x0, 0x1}, 0x20) poll(0x0, 0x0, 0x9e) 1.648217068s ago: executing program 0 (id=2354): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_mmap={0x3, 0x2, 0x4, 0xe000, 0x1, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a950fd28"}, 0xfffffffe, 0x1, {0x0}, 0x3}) 1.476231751s ago: executing program 0 (id=2355): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000490}, 0xc) r2 = getpid() fcntl$lock(r0, 0x26, &(0x7f0000000500)={0x0, 0x1, 0x401, 0x414, r2}) 1.423818387s ago: executing program 4 (id=2356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) setrlimit(0x7, &(0x7f0000000f80)={0x2, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @mcast2, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af0", 0x9f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000640)=""/109, 0x6d}], 0x2}}], 0x1, 0x41, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYRESHEX=r3, @ANYRES8=r3, @ANYRES64=r3, @ANYRES32, @ANYRES32=r3, @ANYRESOCT=0x0, @ANYRES16=r3], 0x90}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044845) 1.269270264s ago: executing program 0 (id=2357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) socketpair(0x1a, 0xa, 0x10, &(0x7f00000035c0)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009ac0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)="9d3b87ea5d3ccf74833f0a4619ebd9f455c64a957b42a3", 0x17}, {&(0x7f0000000080)="88a853312c2e5cfd", 0x8}, {&(0x7f0000000680)="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", 0x902}, {&(0x7f0000001780)}], 0x4, 0x0, 0xd8, 0x20004000}}], 0x1, 0x20048000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 792.615915ms ago: executing program 5 (id=2358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) getrusage(0xffffffffffffffff, &(0x7f0000000900)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='bdev\x00', 0x800000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000cd0400383a00fc010000380500000000000000000000ff0200000000000000000000000000010300907800000000600bae2b00002f0000000000000000000000000000000000fe880000000000000000000000000001870000000000002591287e00"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000380)=0x80, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r7, 0x1, 0x3, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x63) 250.608177ms ago: executing program 0 (id=2359): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000001a17370cb574cbfd3700"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x10}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @multicast1}, &(0x7f0000000040)=0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x4, 0x5, 0x30, 0x10, 0x8, 0x2, 0x3, 0x2, 0x55, 0x7, 0x7, 0x9, 0x2, 0x3, 0x1, 0x5}}) 0s ago: executing program 4 (id=2360): socket$inet(0x2, 0x3, 0x9) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x1}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x24008804) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/133], 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xfffffffffffffec9, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x800) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT2(r6, &(0x7f0000000280)={0xc, {0xd0, "27635be3a22d50560050fbef1598fba5a9e054ac11ef9a8bd484a5ca414db5e4272f9522610330c6ca2ad04b8b9248dd9278a35519e2eae5294b99d6a9dbdf90633012cd879d058ed0d0d8b24e9dfc93b747de16086dd8435ae53934a82900bbe0886152467dfbb7c86222e3390029ff05134825456edda0f486f6e3f23370cd9f1e9f6869299a2eafab6a8be4af0d2ad307e8a9e0015d43734816616db3eab2b6a8022fa46cf31bcfdd3d2bbeef00f522b71a2bfa1ad1ebc89d8ed6b5921645bfc2acea6523f701c0d841ede82b3a45"}}, 0xd6) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x8010) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): 3] drm_client_modeset_commit_atomic+0xe2/0x760 [ 428.610010][T10893] ? do_raw_spin_lock+0x121/0x290 [ 428.610039][T10893] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 428.610085][T10893] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 428.610110][T10893] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 428.610139][T10893] ? mutex_lock_nested+0x154/0x1d0 [ 428.610159][T10893] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 428.610188][T10893] drm_client_modeset_commit_locked+0xce/0x4d0 [ 428.610218][T10893] drm_client_modeset_commit+0x4a/0x70 [ 428.610243][T10893] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 428.610276][T10893] drm_fb_helper_set_par+0xaf/0x100 [ 428.610304][T10893] fb_set_var+0x82b/0xf50 [ 428.610344][T10893] ? __pfx_fb_set_var+0x10/0x10 [ 428.610385][T10893] ? pfn_valid+0x125/0x4d0 [ 428.610410][T10893] ? pfn_valid+0x125/0x4d0 [ 428.610442][T10893] ? pfn_valid+0x125/0x4d0 [ 428.610495][T10893] fbcon_resize+0xc51/0x1610 [ 428.610569][T10893] ? __pfx_fbcon_resize+0x10/0x10 [ 428.610613][T10893] ? rcu_is_watching+0x15/0xb0 [ 428.610637][T10893] ? vc_do_resize+0x39b/0x1770 [ 428.610656][T10893] ? vzalloc_noprof+0xb2/0xf0 [ 428.610681][T10893] vc_do_resize+0x535/0x1770 [ 428.610716][T10893] ? __lock_acquire+0xab9/0xd20 [ 428.610750][T10893] ? __pfx_vc_do_resize+0x10/0x10 [ 428.610768][T10893] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 428.610807][T10893] vt_resizex+0x3c0/0x550 [ 428.610825][T10893] ? rcu_is_watching+0x15/0xb0 [ 428.610852][T10893] ? __pfx_vt_resizex+0x10/0x10 [ 428.610871][T10893] ? bpf_lsm_capable+0x9/0x20 [ 428.610892][T10893] ? security_capable+0x7e/0x2e0 [ 428.610927][T10893] vt_ioctl+0x127b/0x1f20 [ 428.610953][T10893] ? __pfx_vt_ioctl+0x10/0x10 [ 428.610972][T10893] ? __asan_memset+0x22/0x50 [ 428.610998][T10893] ? smack_file_ioctl+0x24d/0x340 [ 428.611023][T10893] ? __pfx_smack_file_ioctl+0x10/0x10 [ 428.611057][T10893] ? tty_jobctrl_ioctl+0x360/0xb50 [ 428.611074][T10893] ? __fget_files+0x3a6/0x420 [ 428.611093][T10893] ? __fget_files+0x2a/0x420 [ 428.611116][T10893] tty_ioctl+0x92f/0xde0 [ 428.611139][T10893] ? __pfx_tty_ioctl+0x10/0x10 [ 428.611160][T10893] __se_sys_ioctl+0xff/0x170 [ 428.611190][T10893] do_syscall_64+0xfa/0xfa0 [ 428.611214][T10893] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.611239][T10893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.611258][T10893] ? clear_bhb_loop+0x60/0xb0 [ 428.611281][T10893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.611299][T10893] RIP: 0033:0x7fc8b17deec9 [ 428.611317][T10893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.611334][T10893] RSP: 002b:00007fc8afa46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.611355][T10893] RAX: ffffffffffffffda RBX: 00007fc8b1a35fa0 RCX: 00007fc8b17deec9 [ 428.611370][T10893] RDX: 0000200000000000 RSI: 000000000000560a RDI: 0000000000000003 [ 428.611382][T10893] RBP: 00007fc8afa46090 R08: 0000000000000000 R09: 0000000000000000 [ 428.611394][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.611405][T10893] R13: 00007fc8b1a36038 R14: 00007fc8b1a35fa0 R15: 00007ffe60fb1d58 [ 428.611441][T10893] [ 429.172012][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 429.472898][ T44] usb 1-1: USB disconnect, device number 49 [ 429.647608][ T5887] usb 5-1: USB disconnect, device number 37 [ 430.122515][ T6054] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 430.306802][ T6054] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.306845][ T6054] usb 1-1: config 0 interface 0 has no altsetting 0 [ 430.309146][ T6054] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 430.309173][ T6054] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 430.309193][ T6054] usb 1-1: Product: syz [ 430.309206][ T6054] usb 1-1: SerialNumber: syz [ 430.321111][ T6054] usb 1-1: config 0 descriptor?? [ 430.354961][ T6054] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 430.380797][ T6054] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 431.392092][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.413131][ T6054] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 432.272565][ T8977] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 432.342850][ T5909] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 432.431247][ T8977] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.431278][ T8977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.459415][ T8977] usb 4-1: config 0 descriptor?? [ 432.490362][ T8977] cp210x 4-1:0.0: cp210x converter detected [ 432.512576][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 432.519178][ T5909] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.519204][ T5909] usb 2-1: config 0 has no interface number 0 [ 432.526263][ T5909] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 432.526292][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.526310][ T5909] usb 2-1: Product: syz [ 432.526323][ T5909] usb 2-1: Manufacturer: syz [ 432.526336][ T5909] usb 2-1: SerialNumber: syz [ 432.535827][ T5909] usb 2-1: config 0 descriptor?? [ 432.565615][ T5909] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 432.881134][ T8977] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 432.913308][ T8977] usb 4-1: cp210x converter now attached to ttyUSB0 [ 433.040619][ T8977] usb 1-1: USB disconnect, device number 50 [ 433.116829][ T44] usb 4-1: USB disconnect, device number 43 [ 433.135460][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 433.167550][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1808'. [ 433.290747][ T44] cp210x 4-1:0.0: device disconnected [ 433.570825][ T8977] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 433.630980][ T5909] gspca_spca1528: reg_w err -110 [ 433.653939][ T5909] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 434.102439][ T8977] usb 1-1: Using ep0 maxpacket: 16 [ 434.139739][ T8977] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32 [ 434.139769][ T8977] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1023 [ 434.139793][ T8977] usb 1-1: config 1 interface 0 has no altsetting 0 [ 434.168846][ T8977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.168875][ T8977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.168894][ T8977] usb 1-1: Product: syz [ 434.168907][ T8977] usb 1-1: Manufacturer: syz [ 434.168920][ T8977] usb 1-1: SerialNumber: syz [ 434.244637][T10972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.244779][T10972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.334329][T10987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1810'. [ 434.457967][ T8977] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 434.480777][ T8977] usb 1-1: USB disconnect, device number 51 [ 435.952853][ T5909] usb 2-1: USB disconnect, device number 58 [ 436.190891][T11021] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1826'. [ 436.242476][ T8977] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 436.364478][ T5887] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 436.415145][ T8977] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 436.415176][ T8977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.420566][ T8977] usb 4-1: config 0 descriptor?? [ 436.435035][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1829'. [ 436.457116][ T8977] cp210x 4-1:0.0: cp210x converter detected [ 436.516163][ T5887] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 436.516190][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.516207][ T5887] usb 1-1: config 0 has no interface number 0 [ 436.516307][ T5887] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 436.516333][ T5887] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 436.516353][ T5887] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.516426][ T5887] usb 1-1: config 0 interface 52 has no altsetting 0 [ 436.518568][ T5887] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 436.518593][ T5887] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 436.518661][ T5887] usb 1-1: Manufacturer: syz [ 436.631338][ T5887] usb 1-1: config 0 descriptor?? [ 436.642450][ T44] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 436.662633][ T5887] hub 1-1:0.52: bad descriptor, ignoring hub [ 436.662672][ T5887] hub 1-1:0.52: probe with driver hub failed with error -5 [ 436.796160][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.796300][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.800037][ T44] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 436.800123][ T44] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 436.800143][ T44] usb 5-1: Product: syz [ 436.800156][ T44] usb 5-1: SerialNumber: syz [ 436.847335][ T8977] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 436.918473][ T44] usb 5-1: config 0 descriptor?? [ 436.971642][ T8977] usb 4-1: cp210x converter now attached to ttyUSB0 [ 436.980279][ T44] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 437.004971][ T5887] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 437.005232][ T5887] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 437.008741][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 437.051183][ T44] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 437.113239][ T5880] usb 4-1: USB disconnect, device number 44 [ 437.143907][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 437.392444][ T8794] usb 1-1: USB disconnect, device number 52 [ 437.463775][ T5909] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 437.546966][T11045] FAULT_INJECTION: forcing a failure. [ 437.546966][T11045] name failslab, interval 1, probability 0, space 0, times 0 [ 437.547034][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.5.1835 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.547057][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.547069][T11045] Call Trace: [ 437.547077][T11045] [ 437.547086][T11045] dump_stack_lvl+0x189/0x250 [ 437.547114][T11045] ? __pfx____ratelimit+0x10/0x10 [ 437.547142][T11045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.547164][T11045] ? __pfx__printk+0x10/0x10 [ 437.547193][T11045] ? __pfx___might_resched+0x10/0x10 [ 437.547219][T11045] ? fs_reclaim_acquire+0x7d/0x100 [ 437.547245][T11045] should_fail_ex+0x46c/0x600 [ 437.547275][T11045] should_failslab+0xa8/0x100 [ 437.547299][T11045] __kmalloc_noprof+0xcc/0x7d0 [ 437.547318][T11045] ? inotify_handle_inode_event+0x1cf/0x680 [ 437.547350][T11045] inotify_handle_inode_event+0x1cf/0x680 [ 437.547387][T11045] fsnotify+0x182f/0x1aa0 [ 437.547427][T11045] ? fsnotify+0x735/0x1aa0 [ 437.547447][T11045] ? __pfx_fsnotify+0x10/0x10 [ 437.547465][T11045] ? smack_file_open+0x206/0x260 [ 437.547492][T11045] ? irqentry_exit+0x74/0x90 [ 437.547528][T11045] __fsnotify_parent+0x470/0x540 [ 437.547557][T11045] ? __pfx___fsnotify_parent+0x10/0x10 [ 437.547575][T11045] ? file_ra_state_init+0x3d/0xc0 [ 437.547613][T11045] vfs_open+0x293/0x350 [ 437.547640][T11045] path_openat+0x2ef1/0x3840 [ 437.547703][T11045] ? __pfx_path_openat+0x10/0x10 [ 437.547729][T11045] ? finish_task_switch+0x266/0x950 [ 437.547753][T11045] ? rcu_is_watching+0x15/0xb0 [ 437.547777][T11045] ? trace_sched_exit_tp+0x36/0x110 [ 437.547798][T11045] ? __schedule+0x1709/0x4c20 [ 437.547841][T11045] do_filp_open+0x1fa/0x410 [ 437.547869][T11045] ? __pfx_do_filp_open+0x10/0x10 [ 437.547927][T11045] ? __lock_acquire+0xab9/0xd20 [ 437.547945][T11045] ? do_open_execat+0x93/0x560 [ 437.547982][T11045] do_open_execat+0x135/0x560 [ 437.548006][T11045] ? __pfx_do_open_execat+0x10/0x10 [ 437.548046][T11045] alloc_bprm+0x28/0x5c0 [ 437.548076][T11045] do_execveat_common+0x1b3/0x6a0 [ 437.548116][T11045] __x64_sys_execve+0x94/0xb0 [ 437.548144][T11045] do_syscall_64+0xfa/0xfa0 [ 437.548172][T11045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.548190][T11045] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 437.548208][T11045] ? clear_bhb_loop+0x60/0xb0 [ 437.548232][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.548250][T11045] RIP: 0033:0x7fc8b17deec9 [ 437.548267][T11045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.548284][T11045] RSP: 002b:00007fc8afa04038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 437.548305][T11045] RAX: ffffffffffffffda RBX: 00007fc8b1a36180 RCX: 00007fc8b17deec9 [ 437.548324][T11045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 437.548336][T11045] RBP: 00007fc8afa04090 R08: 0000000000000000 R09: 0000000000000000 [ 437.548349][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.548360][T11045] R13: 00007fc8b1a36218 R14: 00007fc8b1a36180 R15: 00007ffe60fb1d58 [ 437.548394][T11045] [ 438.213002][ T5880] cp210x 4-1:0.0: device disconnected [ 438.502044][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 438.503100][ T5909] usb 2-1: no configurations [ 438.503115][ T5909] usb 2-1: can't read configurations, error -22 [ 438.617347][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1836'. [ 438.642428][ T5909] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 438.812455][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 438.813321][ T5909] usb 2-1: no configurations [ 438.813337][ T5909] usb 2-1: can't read configurations, error -22 [ 438.813966][ T5909] usb usb2-port1: attempt power cycle [ 439.112445][ T5887] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 439.172858][ T5909] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 439.193349][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 439.194059][ T5909] usb 2-1: no configurations [ 439.194069][ T5909] usb 2-1: can't read configurations, error -22 [ 439.242462][ T5887] usb 1-1: device descriptor read/64, error -71 [ 439.344240][ T5909] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 439.363160][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 439.364986][ T5909] usb 2-1: no configurations [ 439.365002][ T5909] usb 2-1: can't read configurations, error -22 [ 439.366859][ T5909] usb usb2-port1: unable to enumerate USB device [ 439.389481][ T5880] usb 5-1: USB disconnect, device number 38 [ 439.468697][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'. [ 439.471154][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 439.482469][ T5887] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 439.612442][ T5887] usb 1-1: device descriptor read/64, error -71 [ 439.722786][ T5887] usb usb1-port1: attempt power cycle [ 440.082484][ T5887] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 440.103126][ T5887] usb 1-1: device descriptor read/8, error -71 [ 440.117085][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.117183][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.143193][T11087] FAULT_INJECTION: forcing a failure. [ 440.143193][T11087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.143226][T11087] CPU: 0 UID: 0 PID: 11087 Comm: syz.3.1849 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.143247][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.143258][T11087] Call Trace: [ 440.143266][T11087] [ 440.143274][T11087] dump_stack_lvl+0x189/0x250 [ 440.143301][T11087] ? __pfx____ratelimit+0x10/0x10 [ 440.143327][T11087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.143348][T11087] ? __pfx__printk+0x10/0x10 [ 440.143382][T11087] should_fail_ex+0x46c/0x600 [ 440.143410][T11087] _copy_from_user+0x2d/0xb0 [ 440.143429][T11087] bpf_test_init+0xd8/0x150 [ 440.143457][T11087] bpf_prog_test_run_skb+0x206/0x1550 [ 440.143481][T11087] ? __fget_files+0x2a/0x420 [ 440.143507][T11087] ? __fget_files+0x2a/0x420 [ 440.143531][T11087] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 440.143555][T11087] bpf_prog_test_run+0x2cd/0x340 [ 440.143581][T11087] __sys_bpf+0x562/0x860 [ 440.143601][T11087] ? __pfx___sys_bpf+0x10/0x10 [ 440.143618][T11087] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 440.143659][T11087] ? ksys_write+0x230/0x260 [ 440.143692][T11087] ? __pfx_ksys_write+0x10/0x10 [ 440.143724][T11087] __x64_sys_bpf+0x7c/0x90 [ 440.143752][T11087] do_syscall_64+0xfa/0xfa0 [ 440.143775][T11087] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.143799][T11087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.143817][T11087] ? clear_bhb_loop+0x60/0xb0 [ 440.143840][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.143857][T11087] RIP: 0033:0x7f4d61a2eec9 [ 440.143873][T11087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.143889][T11087] RSP: 002b:00007f4d5fc54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.143908][T11087] RAX: ffffffffffffffda RBX: 00007f4d61c86180 RCX: 00007f4d61a2eec9 [ 440.143923][T11087] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 440.143936][T11087] RBP: 00007f4d5fc54090 R08: 0000000000000000 R09: 0000000000000000 [ 440.143948][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.143960][T11087] R13: 00007f4d61c86218 R14: 00007f4d61c86180 R15: 00007ffdd8000988 [ 440.143994][T11087] [ 440.342416][ T5887] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 440.363139][ T5887] usb 1-1: device descriptor read/8, error -71 [ 440.472817][ T5887] usb usb1-port1: unable to enumerate USB device [ 441.969612][T11102] 9pnet_fd: Insufficient options for proto=fd [ 443.162472][ T993] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 443.292636][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 443.296693][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1860'. [ 443.324072][ T993] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 443.324102][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.352492][ T993] usb 1-1: config 0 descriptor?? [ 443.375756][ T993] cp210x 1-1:0.0: cp210x converter detected [ 443.778035][ T993] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 443.802055][ T993] usb 1-1: cp210x converter now attached to ttyUSB0 [ 444.000274][ T993] usb 1-1: USB disconnect, device number 57 [ 444.012888][ T993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 444.159931][ T993] cp210x 1-1:0.0: device disconnected [ 444.782487][ T5880] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 444.937039][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.937072][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.937110][ T5880] usb 5-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 444.937133][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.998830][ T5880] usb 5-1: config 0 descriptor?? [ 445.226246][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.636511][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.082993][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.089068][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.272600][ T5887] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 446.353712][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 446.356949][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'. [ 446.412506][ T5887] usb 1-1: device descriptor read/64, error -71 [ 446.502087][ T5880] nintendo 0003:057E:2017.0005: hidraw0: USB HID v80.00 Device [HID 057e:2017] on usb-dummy_hcd.4-1/input0 [ 446.569003][ T5880] nintendo 0003:057E:2017.0005: Failed to get joycon info; ret=-38 [ 446.569029][ T5880] nintendo 0003:057E:2017.0005: Failed to retrieve controller info; ret=-38 [ 446.569048][ T5880] nintendo 0003:057E:2017.0005: Failed to initialize controller; ret=-38 [ 446.610563][ T5880] nintendo 0003:057E:2017.0005: probe - fail = -38 [ 446.610704][ T5880] nintendo 0003:057E:2017.0005: probe with driver nintendo failed with error -38 [ 446.692425][ T5887] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 446.707912][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.728670][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.772434][ T993] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 446.832477][ T5887] usb 1-1: device descriptor read/64, error -71 [ 446.837987][ T5880] usb 5-1: USB disconnect, device number 39 [ 446.943223][ T5887] usb usb1-port1: attempt power cycle [ 446.946138][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.946177][ T993] usb 2-1: config 0 interface 0 has no altsetting 0 [ 446.969499][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 446.969517][ T37] audit: type=1326 audit(1760453722.760:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.970430][ T37] audit: type=1326 audit(1760453722.760:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.970795][ T37] audit: type=1326 audit(1760453722.760:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.971722][ T37] audit: type=1326 audit(1760453722.760:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.975546][ T37] audit: type=1326 audit(1760453722.770:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.975900][ T37] audit: type=1326 audit(1760453722.770:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.978135][ T37] audit: type=1326 audit(1760453722.770:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.978487][ T37] audit: type=1326 audit(1760453722.770:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.980575][ T37] audit: type=1326 audit(1760453722.770:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.981890][ T37] audit: type=1326 audit(1760453722.770:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d61a2eec9 code=0x7ffc0000 [ 446.990235][T11175] loop6: detected capacity change from 0 to 7 [ 446.998428][T11175] Dev loop6: unable to read RDB block 7 [ 446.998474][T11175] loop6: unable to read partition table [ 446.998715][T11175] loop6: partition table beyond EOD, truncated [ 446.998743][T11175] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 447.030951][ T993] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 447.030982][ T993] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 447.031001][ T993] usb 2-1: Product: syz [ 447.031014][ T993] usb 2-1: SerialNumber: syz [ 447.271792][ T993] usb 2-1: config 0 descriptor?? [ 447.302018][ T993] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 447.329694][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.384736][T11180] FAULT_INJECTION: forcing a failure. [ 447.384736][T11180] name failslab, interval 1, probability 0, space 0, times 0 [ 447.384767][T11180] CPU: 0 UID: 0 PID: 11180 Comm: syz.5.1887 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 447.384790][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.384805][T11180] Call Trace: [ 447.384812][T11180] [ 447.384821][T11180] dump_stack_lvl+0x189/0x250 [ 447.384849][T11180] ? __pfx____ratelimit+0x10/0x10 [ 447.384876][T11180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.384898][T11180] ? __pfx__printk+0x10/0x10 [ 447.384927][T11180] ? __pfx___might_resched+0x10/0x10 [ 447.384951][T11180] ? fs_reclaim_acquire+0x7d/0x100 [ 447.384978][T11180] should_fail_ex+0x46c/0x600 [ 447.385016][T11180] should_failslab+0xa8/0x100 [ 447.385043][T11180] __kmalloc_noprof+0xcc/0x7d0 [ 447.385062][T11180] ? tomoyo_encode+0x28b/0x550 [ 447.385094][T11180] tomoyo_encode+0x28b/0x550 [ 447.385121][T11180] ? tomoyo_mount_permission+0x27a/0x970 [ 447.385146][T11180] tomoyo_mount_permission+0x331/0x970 [ 447.385177][T11180] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 447.385264][T11180] security_sb_mount+0xec/0x350 [ 447.385296][T11180] path_mount+0xbc/0xfe0 [ 447.385315][T11180] ? user_path_at+0x44/0x60 [ 447.385350][T11180] __se_sys_mount+0x313/0x410 [ 447.385376][T11180] ? __pfx___se_sys_mount+0x10/0x10 [ 447.385400][T11180] ? do_syscall_64+0xbe/0xfa0 [ 447.385426][T11180] ? __x64_sys_mount+0x20/0xc0 [ 447.385448][T11180] do_syscall_64+0xfa/0xfa0 [ 447.385472][T11180] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.385498][T11180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.385516][T11180] ? clear_bhb_loop+0x60/0xb0 [ 447.385539][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.385563][T11180] RIP: 0033:0x7fc8b17deec9 [ 447.385580][T11180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.385597][T11180] RSP: 002b:00007fc8afa46038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 447.385619][T11180] RAX: ffffffffffffffda RBX: 00007fc8b1a35fa0 RCX: 00007fc8b17deec9 [ 447.385633][T11180] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 447.385647][T11180] RBP: 00007fc8afa46090 R08: 00002000000003c0 R09: 0000000000000000 [ 447.385660][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.385672][T11180] R13: 00007fc8b1a36038 R14: 00007fc8b1a35fa0 R15: 00007ffe60fb1d58 [ 447.385705][T11180] [ 447.404229][ T993] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 447.554247][ T5909] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 447.622422][ T5887] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 447.687711][ T5887] usb 1-1: device descriptor read/8, error -71 [ 447.705837][ T5909] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 447.705866][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.718240][ T5909] usb 4-1: config 0 descriptor?? [ 447.734782][ T5909] cp210x 4-1:0.0: cp210x converter detected [ 447.922500][ T5887] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 447.943272][ T5887] usb 1-1: device descriptor read/8, error -71 [ 448.052751][ T5887] usb usb1-port1: unable to enumerate USB device [ 448.228381][ T5909] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 448.285161][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 448.287775][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 448.307871][ T5909] usb 4-1: cp210x converter now attached to ttyUSB0 [ 448.434395][ T5887] usb 4-1: USB disconnect, device number 45 [ 448.442105][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 448.635849][ T5887] cp210x 4-1:0.0: device disconnected [ 449.259664][T11204] netlink: 1640 bytes leftover after parsing attributes in process `syz.0.1896'. [ 449.259689][T11204] netlink: 6400 bytes leftover after parsing attributes in process `syz.0.1896'. [ 449.571776][T11226] nfs: Unknown parameter '' [ 450.270635][ T5887] usb 2-1: USB disconnect, device number 63 [ 450.466621][T11230] Bluetooth: MGMT ver 1.23 [ 450.746311][T11241] ucma_write: process 593 (syz.0.1908) changed security contexts after opening file descriptor, this is not allowed. [ 450.932509][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 451.062496][ T9] usb 4-1: device descriptor read/64, error -71 [ 451.276639][ T6054] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 451.386148][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 451.623046][ T9] usb 4-1: device descriptor read/64, error -71 [ 451.751725][ T9] usb usb4-port1: attempt power cycle [ 452.297621][ T6054] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 452.297697][ T6054] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.297723][ T6054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 452.297747][ T6054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 452.297773][ T6054] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 452.297815][ T6054] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.297837][ T6054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.396312][ T6054] usb 2-1: config 0 descriptor?? [ 452.397115][T11245] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 452.652838][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 452.674162][ T9] usb 4-1: device descriptor read/8, error -71 [ 452.912504][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 452.933912][ T9] usb 4-1: device descriptor read/8, error -71 [ 452.977399][ T6054] usbhid 2-1:0.0: can't add hid device: -71 [ 452.977534][ T6054] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 453.004407][ T6054] usb 2-1: USB disconnect, device number 64 [ 453.044490][ T9] usb usb4-port1: unable to enumerate USB device [ 453.484987][ T6054] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 453.642647][ T6054] usb 5-1: Using ep0 maxpacket: 32 [ 453.645150][ T6054] usb 5-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.645179][ T6054] usb 5-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 453.645202][ T6054] usb 5-1: config 1 interface 0 altsetting 254 has an endpoint descriptor with address 0x95, changing to 0x85 [ 453.645234][ T6054] usb 5-1: config 1 interface 0 altsetting 254 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 453.645258][ T6054] usb 5-1: config 1 interface 0 altsetting 254 endpoint 0x85 has invalid wMaxPacketSize 0 [ 453.645277][ T6054] usb 5-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 453.645302][ T6054] usb 5-1: config 1 interface 0 has no altsetting 0 [ 453.646796][ T6054] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.646824][ T6054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 453.646842][ T6054] usb 5-1: SerialNumber: syz [ 453.758805][T11267] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 453.772498][ T6054] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 453.901326][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 453.904199][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1925'. [ 453.922731][ T5809] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 454.072457][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 454.075803][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.077220][ T5809] usb 1-1: config 4 interface 0 has no altsetting 0 [ 454.081328][ T5809] usb 1-1: string descriptor 0 read error: -22 [ 454.081543][ T5809] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 454.081556][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.099906][ T993] usb 5-1: USB disconnect, device number 40 [ 454.175854][ T5809] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 454.200877][ T5809] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 454.249131][ T5809] dvb_usb_au6610 1-1:4.0: probe with driver dvb_usb_au6610 failed with error -23 [ 454.833629][T11301] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 456.681729][T11326] overlayfs: upper fs does not support file handles, falling back to index=off. [ 456.972469][ T5809] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 457.371279][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 457.373568][ T5809] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 457.373594][ T5809] usb 4-1: config 0 has no interface number 0 [ 457.419995][ T5809] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 457.420025][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.420045][ T5809] usb 4-1: Product: syz [ 457.420059][ T5809] usb 4-1: Manufacturer: syz [ 457.420073][ T5809] usb 4-1: SerialNumber: syz [ 457.875857][ T5117] Bluetooth: hci2: command 0x0405 tx timeout [ 458.114155][ T5809] usb 4-1: config 0 descriptor?? [ 458.486893][T11349] futex_wake_op: syz.4.1950 tries to shift op by 32; fix this program [ 458.498695][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 458.611846][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1937'. [ 458.734554][T11355] FAULT_INJECTION: forcing a failure. [ 458.734554][T11355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.734590][T11355] CPU: 1 UID: 0 PID: 11355 Comm: syz.5.1952 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.734613][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.734625][T11355] Call Trace: [ 458.734634][T11355] [ 458.734643][T11355] dump_stack_lvl+0x189/0x250 [ 458.734671][T11355] ? __pfx____ratelimit+0x10/0x10 [ 458.734696][T11355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.734716][T11355] ? __pfx__printk+0x10/0x10 [ 458.734737][T11355] ? __might_fault+0xb0/0x130 [ 458.734766][T11355] should_fail_ex+0x46c/0x600 [ 458.734793][T11355] _copy_from_user+0x2d/0xb0 [ 458.734814][T11355] __sys_bpf+0x1e3/0x860 [ 458.734840][T11355] ? __pfx___sys_bpf+0x10/0x10 [ 458.734858][T11355] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 458.734902][T11355] ? rcu_read_unlock_trace_special+0x246/0x350 [ 458.734939][T11355] __x64_sys_bpf+0x7c/0x90 [ 458.734975][T11355] do_syscall_64+0xfa/0xfa0 [ 458.735001][T11355] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.735024][T11355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.735041][T11355] ? clear_bhb_loop+0x60/0xb0 [ 458.735063][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.735081][T11355] RIP: 0033:0x7fc8b17deec9 [ 458.735097][T11355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.735114][T11355] RSP: 002b:00007fc8afa46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.735134][T11355] RAX: ffffffffffffffda RBX: 00007fc8b1a35fa0 RCX: 00007fc8b17deec9 [ 458.735147][T11355] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 458.735160][T11355] RBP: 00007fc8afa46090 R08: 0000000000000000 R09: 0000000000000000 [ 458.735171][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.735183][T11355] R13: 00007fc8b1a36038 R14: 00007fc8b1a35fa0 R15: 00007ffe60fb1d58 [ 458.735215][T11355] [ 459.206834][ T9] usb 1-1: USB disconnect, device number 62 [ 460.349169][ T8794] usb 4-1: USB disconnect, device number 50 [ 460.350491][ T8794] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -19 [ 460.350511][ T8794] f81534a_ctrl 4-1:0.88: failed to enable ports: -19 [ 460.487590][ T6054] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 460.643909][ T6054] usb 2-1: Using ep0 maxpacket: 8 [ 460.663084][ T6054] usb 2-1: config 6 has an invalid interface number: 51 but max is 1 [ 460.663113][ T6054] usb 2-1: config 6 has no interface number 1 [ 460.663163][ T6054] usb 2-1: config 6 interface 0 has no altsetting 0 [ 460.663181][ T6054] usb 2-1: config 6 interface 51 has no altsetting 0 [ 460.706622][ T6054] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 460.706650][ T6054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.706668][ T6054] usb 2-1: Product: syz [ 460.706682][ T6054] usb 2-1: Manufacturer: syz [ 460.706694][ T6054] usb 2-1: SerialNumber: syz [ 460.770919][T11381] netlink: 'syz.5.1963': attribute type 9 has an invalid length. [ 460.771258][T11381] netlink: 'syz.5.1963': attribute type 9 has an invalid length. [ 460.830750][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1964'. [ 461.018730][T11389] FAULT_INJECTION: forcing a failure. [ 461.018730][T11389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.018764][T11389] CPU: 1 UID: 0 PID: 11389 Comm: syz.5.1965 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.018786][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.018797][T11389] Call Trace: [ 461.018804][T11389] [ 461.018813][T11389] dump_stack_lvl+0x189/0x250 [ 461.018839][T11389] ? __pfx____ratelimit+0x10/0x10 [ 461.018866][T11389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.018887][T11389] ? __pfx__printk+0x10/0x10 [ 461.018910][T11389] ? __might_fault+0xb0/0x130 [ 461.018941][T11389] should_fail_ex+0x46c/0x600 [ 461.018971][T11389] _copy_from_user+0x2d/0xb0 [ 461.018992][T11389] __sys_bpf+0x1e3/0x860 [ 461.019014][T11389] ? __pfx___sys_bpf+0x10/0x10 [ 461.019031][T11389] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 461.019071][T11389] ? ksys_write+0x230/0x260 [ 461.019100][T11389] ? __pfx_ksys_write+0x10/0x10 [ 461.019132][T11389] __x64_sys_bpf+0x7c/0x90 [ 461.019159][T11389] do_syscall_64+0xfa/0xfa0 [ 461.019184][T11389] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.019209][T11389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.019228][T11389] ? clear_bhb_loop+0x60/0xb0 [ 461.019249][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.019267][T11389] RIP: 0033:0x7fc8b17deec9 [ 461.019283][T11389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.019316][T11389] RSP: 002b:00007fc8afa46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.019336][T11389] RAX: ffffffffffffffda RBX: 00007fc8b1a35fa0 RCX: 00007fc8b17deec9 [ 461.019351][T11389] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 461.019363][T11389] RBP: 00007fc8afa46090 R08: 0000000000000000 R09: 0000000000000000 [ 461.019375][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.019387][T11389] R13: 00007fc8b1a36038 R14: 00007fc8b1a35fa0 R15: 00007ffe60fb1d58 [ 461.019419][T11389] [ 461.256546][ T6054] xr_serial 2-1:6.51: xr_serial converter detected [ 461.274192][ T6054] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 461.274253][ T6054] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 461.281015][ T6054] usb 2-1: USB disconnect, device number 65 [ 461.307452][ T6054] xr_serial 2-1:6.0: device disconnected [ 461.337734][T11395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1967'. [ 462.696056][T11405] netlink: 'syz.0.1966': attribute type 1 has an invalid length. [ 462.696085][T11405] netlink: 'syz.0.1966': attribute type 4 has an invalid length. [ 462.696100][T11405] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1966'. [ 463.412580][ T8794] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 463.542438][ T8794] usb 5-1: device descriptor read/64, error -71 [ 463.785229][ T8794] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 463.912709][ T8794] usb 5-1: device descriptor read/64, error -71 [ 464.023147][ T8794] usb usb5-port1: attempt power cycle [ 465.098701][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 465.098722][ T37] audit: type=1326 audit(1760453740.890:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d8d805d67 code=0x7ffc0000 [ 465.099002][ T37] audit: type=1326 audit(1760453740.890:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d8d7aaf79 code=0x7ffc0000 [ 465.099280][ T37] audit: type=1326 audit(1760453740.890:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d80eec9 code=0x7ffc0000 [ 465.099554][ T37] audit: type=1326 audit(1760453740.890:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d80eec9 code=0x7ffc0000 [ 465.101033][ T37] audit: type=1326 audit(1760453740.890:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d8d80eec9 code=0x7ffc0000 [ 465.101083][ T37] audit: type=1326 audit(1760453740.890:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d80eec9 code=0x7ffc0000 [ 465.101127][ T37] audit: type=1326 audit(1760453740.890:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d80eec9 code=0x7ffc0000 [ 465.108856][ T37] audit: type=1326 audit(1760453740.900:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3d8d80eec9 code=0x7ffc0000 [ 465.108905][ T37] audit: type=1326 audit(1760453740.900:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d80eec9 code=0x7ffc0000 [ 465.108944][ T37] audit: type=1326 audit(1760453740.900:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11434 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d80eec9 code=0x7ffc0000 [ 465.388900][ T8794] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 465.403382][ T8794] usb 5-1: device descriptor read/8, error -71 [ 465.662406][ T8794] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 465.684314][ T8794] usb 5-1: device descriptor read/8, error -71 [ 465.792936][ T8794] usb usb5-port1: unable to enumerate USB device [ 468.594524][ T6054] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 468.632394][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 468.733114][ T6054] usb 5-1: device descriptor read/64, error -71 [ 468.798216][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 468.799912][ T9] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 468.799935][ T9] usb 1-1: config 6 has no interface number 0 [ 468.799992][ T9] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 72, changing to 10 [ 468.800018][ T9] usb 1-1: config 6 interface 200 has no altsetting 0 [ 468.805628][ T9] usb 1-1: string descriptor 0 read error: -22 [ 468.805778][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 468.805800][ T9] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 468.947373][ T9] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 469.019872][T11484] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 469.020961][T11484] netlink: 'syz.1.1999': attribute type 4 has an invalid length. [ 469.048167][T11484] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1999'. [ 469.090027][ T6054] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 469.100688][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.104847][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.108041][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.110315][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.112113][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.194657][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.213291][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T error while loading driver (-23) [ 469.213345][ T9] dvb_usb_dibusb_mc 1-1:6.200: probe with driver dvb_usb_dibusb_mc failed with error -23 [ 469.306376][ T6054] usb 5-1: device descriptor read/64, error -71 [ 469.413014][ T6054] usb usb5-port1: attempt power cycle [ 469.632527][ T5887] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 469.752600][ T6054] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 469.775498][ T6054] usb 5-1: device descriptor read/8, error -71 [ 469.782459][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 469.830068][ T5887] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 469.830096][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.830114][ T5887] usb 4-1: Product: syz [ 469.830128][ T5887] usb 4-1: Manufacturer: syz [ 469.830141][ T5887] usb 4-1: SerialNumber: syz [ 469.889918][ T5887] usb 4-1: config 0 descriptor?? [ 470.012435][ T6054] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 470.035486][ T6054] usb 5-1: device descriptor read/8, error -71 [ 470.104173][ T5887] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 470.104190][ T5887] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 470.161738][ T6054] usb usb5-port1: unable to enumerate USB device [ 470.196504][ T6158] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.341748][ T6054] usb 4-1: USB disconnect, device number 51 [ 470.609380][ T6158] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.152442][ T5811] Bluetooth: hci4: command tx timeout [ 472.391901][T11485] chnl_net:caif_netlink_parms(): no params data found [ 472.582543][ T5809] usb 1-1: USB disconnect, device number 63 [ 473.053242][ T6158] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.238962][ T5811] Bluetooth: hci4: command tx timeout [ 474.611623][ T5887] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 474.682236][ T6158] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.772618][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 474.776727][ T5887] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 474.776755][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.776773][ T5887] usb 4-1: config 0 has no interface number 0 [ 474.776845][ T5887] usb 4-1: config 0 interface 114 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.776870][ T5887] usb 4-1: config 0 interface 114 has no altsetting 0 [ 474.782118][ T5887] usb 4-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 474.782147][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.782165][ T5887] usb 4-1: Product: syz [ 474.782179][ T5887] usb 4-1: Manufacturer: syz [ 474.782191][ T5887] usb 4-1: SerialNumber: syz [ 474.894820][ T5887] usb 4-1: config 0 descriptor?? [ 475.114627][ T5887] usb 4-1: bad CDC descriptors [ 475.137130][ T5887] usb 4-1: USB disconnect, device number 52 [ 475.224011][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.224220][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.224477][T11485] bridge_slave_0: entered allmulticast mode [ 475.229555][T11485] bridge_slave_0: entered promiscuous mode [ 475.272924][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.273052][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.273224][T11485] bridge_slave_1: entered allmulticast mode [ 475.275040][T11485] bridge_slave_1: entered promiscuous mode [ 475.319147][T11547] netlink: 'syz.4.2015': attribute type 1 has an invalid length. [ 475.319169][T11547] netlink: 'syz.4.2015': attribute type 4 has an invalid length. [ 475.319179][T11547] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.2015'. [ 475.322810][ T5811] Bluetooth: hci4: command tx timeout [ 475.671201][T11552] netlink: 'syz.1.2017': attribute type 11 has an invalid length. [ 475.705866][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.983908][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.525977][T11485] team0: Port device team_slave_0 added [ 476.531157][T11485] team0: Port device team_slave_1 added [ 476.666128][ T6158] bridge_slave_1: left allmulticast mode [ 476.666152][ T6158] bridge_slave_1: left promiscuous mode [ 476.674342][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.754252][ T6158] bridge_slave_0: left allmulticast mode [ 476.754281][ T6158] bridge_slave_0: left promiscuous mode [ 476.754547][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.804006][ T6054] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 476.954528][ T6054] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 476.954588][ T6054] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.954605][ T6054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 476.954617][ T6054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.954631][ T6054] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.954654][ T6054] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.954665][ T6054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.959068][ T6054] usb 2-1: config 0 descriptor?? [ 476.960127][T11562] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.408311][ T5811] Bluetooth: hci4: command tx timeout [ 477.852394][ T5887] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 477.879911][T11602] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 478.048046][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.048104][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.048123][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.059416][ T5887] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 478.059445][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.059465][ T5887] usb 1-1: Product: syz [ 478.059478][ T5887] usb 1-1: Manufacturer: syz [ 478.059492][ T5887] usb 1-1: SerialNumber: syz [ 478.124832][ T5887] usb 1-1: config 0 descriptor?? [ 478.129927][ T5887] usb 1-1: ucan: probing device on interface #0 [ 478.129950][ T5887] usb 1-1: ucan: invalid EP count (0) [ 478.129964][ T5887] usb 1-1: ucan: probe failed; try to update the device firmware [ 478.323585][ T6158] dvmrp1 (unregistering): left allmulticast mode [ 479.874140][ T6158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.954896][ T6158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.016252][ T6158] bond0 (unregistering): Released all slaves [ 480.482471][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.482489][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.482516][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.587400][ T6054] usbhid 2-1:0.0: can't add hid device: -71 [ 480.587523][ T6054] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 480.635171][ T6054] usb 2-1: USB disconnect, device number 66 [ 480.660280][ T993] usb 1-1: USB disconnect, device number 64 [ 481.267515][T11691] overlay: ./file0 is not a directory [ 482.286699][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.286717][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.286753][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.650268][T11702] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 482.650440][T11702] netlink: 'syz.0.2079': attribute type 4 has an invalid length. [ 482.650520][T11702] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.2079'. [ 483.323371][T11710] netlink: 'syz.4.2088': attribute type 5 has an invalid length. [ 484.995257][T11485] hsr_slave_0: entered promiscuous mode [ 484.996683][T11485] hsr_slave_1: entered promiscuous mode [ 484.997692][T11485] debugfs: 'hsr0' already exists in 'hsr' [ 484.997718][T11485] Cannot create hsr debugfs directory [ 485.393574][ T5909] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 485.433300][ T6158] hsr_slave_0: left promiscuous mode [ 485.482728][ T6158] hsr_slave_1: left promiscuous mode [ 485.483737][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.483763][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.536208][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.536235][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.555175][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.555218][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.557528][ T5909] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 485.557554][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 485.557573][ T5909] usb 1-1: Product: syz [ 485.557586][ T5909] usb 1-1: SerialNumber: syz [ 485.573915][ T5909] usb 1-1: config 0 descriptor?? [ 485.591411][ T5909] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 485.616773][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.641884][ T5909] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 485.845321][ T6158] veth1_macvtap: left promiscuous mode [ 485.845459][ T6158] veth0_macvtap: left promiscuous mode [ 485.845747][ T6158] veth1_vlan: left promiscuous mode [ 485.845951][ T6158] veth0_vlan: left promiscuous mode [ 489.011594][ T5887] usb 1-1: USB disconnect, device number 65 [ 490.712528][ T6054] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 491.617914][T11812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2128'. [ 491.634975][ T6054] usb 4-1: Using ep0 maxpacket: 16 [ 491.637220][ T6054] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 491.637245][ T6054] usb 4-1: config 0 has no interface number 0 [ 491.641303][ T6054] usb 4-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 491.641332][ T6054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.641350][ T6054] usb 4-1: Product: syz [ 491.641364][ T6054] usb 4-1: Manufacturer: syz [ 491.641378][ T6054] usb 4-1: SerialNumber: syz [ 491.673880][ T6054] usb 4-1: config 0 descriptor?? [ 491.960962][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.967830][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.199341][T11813] binder: 11810:11813 ioctl 40182103 200000000300 returned -22 [ 492.220787][T11813] binder: 11810:11813 ioctl 5603 200000000240 returned -22 [ 492.236942][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.237275][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.267126][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.267678][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.431705][ T5887] usb 4-1: USB disconnect, device number 53 [ 492.502510][ T5909] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 492.613092][ T5809] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 492.652422][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 492.655919][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.655972][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 492.655997][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.656018][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 492.659425][ T5909] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 492.659453][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.659480][ T5909] usb 1-1: Product: syz [ 492.659493][ T5909] usb 1-1: Manufacturer: syz [ 492.659506][ T5909] usb 1-1: SerialNumber: syz [ 492.687039][ T5909] usb 1-1: config 0 descriptor?? [ 492.785125][ T5809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.785193][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 492.787525][ T5809] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 492.787553][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 492.787571][ T5809] usb 5-1: Product: syz [ 492.787585][ T5809] usb 5-1: SerialNumber: syz [ 492.836342][ T5809] usb 5-1: config 0 descriptor?? [ 492.841686][ T5809] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 492.865760][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 492.922669][ T5809] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 494.753159][ T6158] team0 (unregistering): Port device team_slave_1 removed [ 495.064161][ T6158] team0 (unregistering): Port device team_slave_0 removed [ 495.986792][ T5887] usb 5-1: USB disconnect, device number 49 [ 496.402557][ T5887] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 496.554679][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.554721][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 496.556833][ T5887] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 496.556859][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 496.556878][ T5887] usb 5-1: Product: syz [ 496.556892][ T5887] usb 5-1: SerialNumber: syz [ 496.561618][ T5887] usb 5-1: config 0 descriptor?? [ 496.627763][ T5887] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 496.642156][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.656719][ T5887] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 497.753469][ T5909] cxacru 1-1:0.0: cxacru_bind: interface has incorrect endpoints [ 497.753554][ T5909] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 498.261447][ T6054] usb 1-1: USB disconnect, device number 66 [ 498.712736][ T6054] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 498.842587][ T6054] usb 1-1: device descriptor read/64, error -71 [ 499.082676][ T6054] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 499.092979][T11919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2168'. [ 499.159528][ T9] usb 5-1: USB disconnect, device number 50 [ 499.219487][ T6054] usb 1-1: device descriptor read/64, error -71 [ 499.266104][T11925] IPv6: NLM_F_CREATE should be specified when creating new route [ 499.266468][T11925] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.266480][T11925] IPv6: NLM_F_CREATE should be set when creating new route [ 499.266608][T11925] IPv6: NLM_F_CREATE should be set when creating new route [ 499.527202][ T6054] usb usb1-port1: attempt power cycle [ 499.640714][T11938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2170'. [ 500.169854][ T6054] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 500.356529][ T6054] usb 1-1: device descriptor read/8, error -71 [ 500.447215][T11947] FAULT_INJECTION: forcing a failure. [ 500.447215][T11947] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 500.447251][T11947] CPU: 0 UID: 0 PID: 11947 Comm: syz.1.2181 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 500.447272][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 500.447284][T11947] Call Trace: [ 500.447291][T11947] [ 500.447300][T11947] dump_stack_lvl+0x189/0x250 [ 500.447328][T11947] ? __pfx____ratelimit+0x10/0x10 [ 500.447355][T11947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.447378][T11947] ? __pfx__printk+0x10/0x10 [ 500.447402][T11947] ? fs_reclaim_acquire+0x7d/0x100 [ 500.447431][T11947] should_fail_ex+0x46c/0x600 [ 500.447462][T11947] prepare_alloc_pages+0x213/0x670 [ 500.447492][T11947] __alloc_frozen_pages_noprof+0x123/0x370 [ 500.447519][T11947] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 500.447560][T11947] alloc_pages_mpol+0xd1/0x380 [ 500.447587][T11947] alloc_pages_noprof+0xcf/0x1e0 [ 500.447611][T11947] get_free_pages_noprof+0xf/0x80 [ 500.447633][T11947] kasan_populate_vmalloc+0x38/0x270 [ 500.447662][T11947] ? rt_spin_unlock+0x161/0x200 [ 500.447688][T11947] alloc_vmap_area+0xd7a/0x14c0 [ 500.447731][T11947] ? __pfx_alloc_vmap_area+0x10/0x10 [ 500.447757][T11947] ? __kasan_kmalloc+0x93/0xb0 [ 500.447777][T11947] ? __kmalloc_cache_node_noprof+0x2a9/0x700 [ 500.447798][T11947] ? __get_vm_area_node+0x172/0x350 [ 500.447815][T11947] ? bpf_check+0x1aa/0x1d730 [ 500.447843][T11947] __get_vm_area_node+0x227/0x350 [ 500.447869][T11947] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 500.447889][T11947] ? bpf_check+0x1aa/0x1d730 [ 500.447916][T11947] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 500.447963][T11947] ? __phys_addr+0xd3/0x180 [ 500.447985][T11947] ? __kasan_kmalloc_large+0x85/0xa0 [ 500.448008][T11947] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 500.448035][T11947] ? bpf_check+0x1aa/0x1d730 [ 500.448062][T11947] vzalloc_noprof+0xb2/0xf0 [ 500.448080][T11947] ? bpf_check+0x1aa/0x1d730 [ 500.448108][T11947] bpf_check+0x1aa/0x1d730 [ 500.448167][T11947] ? rtlock_slowlock_locked+0xd8/0x4010 [ 500.448197][T11947] ? __lock_acquire+0xab9/0xd20 [ 500.448221][T11947] ? __lock_acquire+0xab9/0xd20 [ 500.448250][T11947] ? do_raw_spin_lock+0x121/0x290 [ 500.448294][T11947] ? __lock_acquire+0xab9/0xd20 [ 500.448322][T11947] ? __pfx_bpf_check+0x10/0x10 [ 500.448358][T11947] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 500.448385][T11947] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.448412][T11947] ? ktime_get_with_offset+0x93/0x2a0 [ 500.448435][T11947] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 500.448461][T11947] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 500.448497][T11947] ? __asan_memset+0x22/0x50 [ 500.448523][T11947] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 500.448545][T11947] ? security_bpf_prog_load+0x125/0x3f0 [ 500.448575][T11947] bpf_prog_load+0x13ba/0x19e0 [ 500.448609][T11947] ? __pfx_bpf_prog_load+0x10/0x10 [ 500.448654][T11947] ? bpf_lsm_bpf+0x9/0x20 [ 500.448674][T11947] ? security_bpf+0x7e/0x300 [ 500.448701][T11947] __sys_bpf+0x507/0x860 [ 500.448723][T11947] ? __pfx___sys_bpf+0x10/0x10 [ 500.448740][T11947] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 500.448779][T11947] ? ksys_write+0x230/0x260 [ 500.448808][T11947] ? __pfx_ksys_write+0x10/0x10 [ 500.448841][T11947] __x64_sys_bpf+0x7c/0x90 [ 500.448869][T11947] do_syscall_64+0xfa/0xfa0 [ 500.448894][T11947] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.448920][T11947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.448939][T11947] ? clear_bhb_loop+0x60/0xb0 [ 500.448968][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.448986][T11947] RIP: 0033:0x7f3d8d80eec9 [ 500.449004][T11947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.449021][T11947] RSP: 002b:00007f3d8ba76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.449041][T11947] RAX: ffffffffffffffda RBX: 00007f3d8da65fa0 RCX: 00007f3d8d80eec9 [ 500.449055][T11947] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 500.449068][T11947] RBP: 00007f3d8ba76090 R08: 0000000000000000 R09: 0000000000000000 [ 500.449080][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.449092][T11947] R13: 00007f3d8da66038 R14: 00007f3d8da65fa0 R15: 00007fffe3e795c8 [ 500.449125][T11947] [ 500.449186][T11947] syz.1.2181: vmalloc error: size 1056, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 500.449249][T11947] CPU: 0 UID: 0 PID: 11947 Comm: syz.1.2181 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 500.449270][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 500.449282][T11947] Call Trace: [ 500.449289][T11947] [ 500.449296][T11947] dump_stack_lvl+0x189/0x250 [ 500.449322][T11947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.449344][T11947] ? __pfx__printk+0x10/0x10 [ 500.449366][T11947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 500.449392][T11947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 500.449420][T11947] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 500.449445][T11947] warn_alloc+0x22e/0x3b0 [ 500.449467][T11947] ? kasan_quarantine_put+0xdd/0x220 [ 500.449493][T11947] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.449522][T11947] ? __pfx_warn_alloc+0x10/0x10 [ 500.449544][T11947] ? __get_vm_area_node+0x240/0x350 [ 500.449560][T11947] ? __get_vm_area_node+0x172/0x350 [ 500.449578][T11947] ? bpf_check+0x1aa/0x1d730 [ 500.449605][T11947] ? __get_vm_area_node+0x240/0x350 [ 500.449631][T11947] __vmalloc_node_range_noprof+0x331/0x12d0 [ 500.449653][T11947] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 500.449692][T11947] ? __phys_addr+0xd3/0x180 [ 500.449713][T11947] ? __kasan_kmalloc_large+0x85/0xa0 [ 500.449736][T11947] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 500.449763][T11947] ? bpf_check+0x1aa/0x1d730 [ 500.449788][T11947] vzalloc_noprof+0xb2/0xf0 [ 500.449807][T11947] ? bpf_check+0x1aa/0x1d730 [ 500.449835][T11947] bpf_check+0x1aa/0x1d730 [ 500.449894][T11947] ? rtlock_slowlock_locked+0xd8/0x4010 [ 500.449924][T11947] ? __lock_acquire+0xab9/0xd20 [ 500.449946][T11947] ? __lock_acquire+0xab9/0xd20 [ 500.449981][T11947] ? do_raw_spin_lock+0x121/0x290 [ 500.450030][T11947] ? __lock_acquire+0xab9/0xd20 [ 500.450065][T11947] ? __pfx_bpf_check+0x10/0x10 [ 500.450101][T11947] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 500.450126][T11947] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.450153][T11947] ? ktime_get_with_offset+0x93/0x2a0 [ 500.450175][T11947] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 500.450201][T11947] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 500.450237][T11947] ? __asan_memset+0x22/0x50 [ 500.450261][T11947] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 500.450284][T11947] ? security_bpf_prog_load+0x125/0x3f0 [ 500.450313][T11947] bpf_prog_load+0x13ba/0x19e0 [ 500.450347][T11947] ? __pfx_bpf_prog_load+0x10/0x10 [ 500.450391][T11947] ? bpf_lsm_bpf+0x9/0x20 [ 500.450412][T11947] ? security_bpf+0x7e/0x300 [ 500.450438][T11947] __sys_bpf+0x507/0x860 [ 500.450461][T11947] ? __pfx___sys_bpf+0x10/0x10 [ 500.450478][T11947] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 500.450517][T11947] ? ksys_write+0x230/0x260 [ 500.450546][T11947] ? __pfx_ksys_write+0x10/0x10 [ 500.450579][T11947] __x64_sys_bpf+0x7c/0x90 [ 500.450607][T11947] do_syscall_64+0xfa/0xfa0 [ 500.450632][T11947] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.450658][T11947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.450676][T11947] ? clear_bhb_loop+0x60/0xb0 [ 500.450699][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.450715][T11947] RIP: 0033:0x7f3d8d80eec9 [ 500.450731][T11947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.450747][T11947] RSP: 002b:00007f3d8ba76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.450766][T11947] RAX: ffffffffffffffda RBX: 00007f3d8da65fa0 RCX: 00007f3d8d80eec9 [ 500.450780][T11947] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 500.450793][T11947] RBP: 00007f3d8ba76090 R08: 0000000000000000 R09: 0000000000000000 [ 500.450805][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.450817][T11947] R13: 00007f3d8da66038 R14: 00007f3d8da65fa0 R15: 00007fffe3e795c8 [ 500.450850][T11947] [ 500.450862][T11947] Mem-Info: [ 500.450870][T11947] active_anon:257 inactive_anon:8029 isolated_anon:0 [ 500.450870][T11947] active_file:20212 inactive_file:36981 isolated_file:0 [ 500.450870][T11947] unevictable:768 dirty:96 writeback:0 [ 500.450870][T11947] slab_reclaimable:12166 slab_unreclaimable:102968 [ 500.450870][T11947] mapped:30235 shmem:4224 pagetables:1043 [ 500.450870][T11947] sec_pagetables:0 bounce:0 [ 500.450870][T11947] kernel_misc_reclaimable:0 [ 500.450870][T11947] free:1301844 free_pcp:6365 free_cma:0 [ 500.450927][T11947] Node 0 active_anon:1028kB inactive_anon:32116kB active_file:80644kB inactive_file:147924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120940kB dirty:384kB writeback:0kB shmem:15360kB kernel_stack:13564kB pagetables:4012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 500.450978][T11947] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 500.451019][T11947] Node 0 DMA free:15352kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.451076][T11947] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 500.451109][T11947] Node 0 DMA32 free:1295364kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:32116kB active_file:80644kB inactive_file:147924kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2574612kB mlocked:0kB bounce:0kB free_pcp:25276kB local_pcp:11348kB free_cma:0kB [ 500.451170][T11947] lowmem_reserve[]: 0 0 1 1 1 [ 500.451200][T11947] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.451427][T11947] lowmem_reserve[]: 0 0 0 0 0 [ 500.451460][T11947] Node 1 Normal free:3896660kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:0kB free_cma:0kB [ 500.451517][T11947] lowmem_reserve[]: 0 0 0 0 0 [ 500.451548][T11947] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15352kB [ 500.451692][T11947] Node 0 DMA32: 265*4kB (UM) 8*8kB (M) 2*16kB (M) 126*32kB (UME) 200*64kB (ME) 206*128kB (UME) 145*256kB (UME) 75*512kB (UM) 34*1024kB (UME) 17*2048kB (UME) 270*4096kB (UM) = 1295428kB [ 500.451840][T11947] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 500.451936][T11947] Node 1 Normal: 239*4kB (UE) 53*8kB (UME) 47*16kB (UME) 218*32kB (UME) 95*64kB (UME) 34*128kB (UME) 17*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3896660kB [ 500.452099][T11947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.452116][T11947] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.452132][T11947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.452147][T11947] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.452163][T11947] 61439 total pagecache pages [ 500.452174][T11947] 0 pages in swap cache [ 500.452181][T11947] Free swap = 124996kB [ 500.452188][T11947] Total swap = 124996kB [ 500.452196][T11947] 2097051 pages RAM [ 500.452202][T11947] 0 pages HighMem/MovableOnly [ 500.452209][T11947] 421436 pages reserved [ 500.452215][T11947] 0 pages cma reserved [ 500.612515][ T6054] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 500.702366][ T6054] usb 1-1: device descriptor read/8, error -71 [ 500.833768][T11951] overlay: ./file0 is not a directory [ 501.562422][ T6054] usb usb1-port1: unable to enumerate USB device [ 501.690455][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.690623][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.794404][T11485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 502.841966][T11485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 502.895866][T11485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 502.940694][T11485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 503.047677][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.061792][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.079172][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.079304][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.085912][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.086053][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.280573][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.506768][T11485] veth0_vlan: entered promiscuous mode [ 503.513384][T11485] veth1_vlan: entered promiscuous mode [ 503.547651][T11485] veth0_macvtap: entered promiscuous mode [ 503.554933][T11485] veth1_macvtap: entered promiscuous mode [ 503.571932][T11485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.585371][T11485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.601106][ T6158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.601367][ T6158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.601418][ T6158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.601453][ T6158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.816786][ T3618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.816807][ T3618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.859325][ T3618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.859354][ T3618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.262543][ T993] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 504.392521][ T993] usb 6-1: device descriptor read/64, error -71 [ 504.632510][ T993] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 504.762946][ T993] usb 6-1: device descriptor read/64, error -71 [ 504.872879][ T993] usb usb6-port1: attempt power cycle [ 505.212581][ T993] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 505.237451][ T993] usb 6-1: device descriptor read/8, error -71 [ 505.473017][ T993] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 505.493183][ T993] usb 6-1: device descriptor read/8, error -71 [ 505.602831][ T993] usb usb6-port1: unable to enumerate USB device [ 562.997005][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.997096][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.144704][T12001] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2191'. [ 572.350209][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 572.502003][T12010] overlay: ./file0 is not a directory [ 572.623965][T12017] netlink: 'syz.5.2198': attribute type 11 has an invalid length. [ 572.623987][T12017] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2198'. [ 572.630424][T12017] netlink: 54759 bytes leftover after parsing attributes in process `syz.5.2198'. [ 574.655900][ T5887] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 575.224123][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.224199][ T5887] usb 1-1: config 0 has no interfaces? [ 575.224504][ T5887] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 575.224575][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.685205][ T5887] usb 1-1: config 0 descriptor?? [ 576.304513][T12054] netlink: 'syz.5.2209': attribute type 16 has an invalid length. [ 576.304535][T12054] netlink: 'syz.5.2209': attribute type 17 has an invalid length. [ 576.349749][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.419453][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.643317][T12054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.229990][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'. [ 578.296402][ T9] usb 1-1: USB disconnect, device number 71 [ 578.797760][T12092] overlay: ./file0 is not a directory [ 579.992756][ T5809] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 580.122554][ T5809] usb 1-1: device descriptor read/64, error -71 [ 580.372412][ T5809] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 580.587562][ T5809] usb 1-1: device descriptor read/64, error -71 [ 580.704492][ T5809] usb usb1-port1: attempt power cycle [ 580.872401][ T8794] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 580.910092][ T993] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 581.045000][ T5809] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 581.067266][ T5809] usb 1-1: device descriptor read/8, error -71 [ 581.082400][ T8794] usb 5-1: Using ep0 maxpacket: 16 [ 581.084899][ T8794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.084930][ T8794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.084968][ T8794] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 581.084989][ T8794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.085529][ T993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 581.085557][ T993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 581.085597][ T993] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 581.085622][ T993] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 581.181648][ T8794] usb 5-1: config 0 descriptor?? [ 581.182449][ T993] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.182474][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.182492][ T993] usb 6-1: Product: syz [ 581.182505][ T993] usb 6-1: Manufacturer: syz [ 581.182519][ T993] usb 6-1: SerialNumber: syz [ 581.195062][T12131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 581.209543][ T993] cdc_mbim 6-1:1.0: skipping garbage [ 581.232427][ T5799] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 581.314221][ T5809] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 581.333290][ T5809] usb 1-1: device descriptor read/8, error -71 [ 581.402818][ T5799] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 581.402848][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.402860][ T5799] usb 4-1: Product: syz [ 581.402868][ T5799] usb 4-1: Manufacturer: syz [ 581.402933][ T5799] usb 4-1: SerialNumber: syz [ 581.443146][ T5809] usb usb1-port1: unable to enumerate USB device [ 581.536607][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2238'. [ 581.553305][T12131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 581.563117][T12131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 581.571711][ T5799] usb 4-1: config 0 descriptor?? [ 581.788265][ T5799] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 582.011525][ T8794] usbhid 5-1:0.0: can't add hid device: -71 [ 582.011758][ T8794] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 582.031250][ T8794] usb 5-1: USB disconnect, device number 51 [ 582.305765][T12131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 582.305917][T12131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 582.306980][ T993] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 582.520058][ T993] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 582.616229][ T993] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 582.761527][ T993] wwan wwan0: port wwan0mbim0 attached [ 582.900565][ T993] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 52:a6:df:da:1d:e5 [ 582.955718][ T5799] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 583.042896][ T44] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 583.056059][ T5799] usb 4-1: USB disconnect, device number 54 [ 583.062503][ T993] usb 6-1: USB disconnect, device number 20 [ 583.065016][ T993] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 583.206825][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 583.206846][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 583.206859][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 583.206870][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 583.206895][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 583.206906][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.280185][ T44] usb 1-1: config 0 descriptor?? [ 583.721193][ T44] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 583.834464][ T993] wwan wwan0: port wwan0mbim0 disconnected [ 584.945816][T12203] overlay: ./file0 is not a directory [ 588.033790][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.046124][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.222494][ T5787] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 588.773664][ T5787] usb 2-1: Using ep0 maxpacket: 16 [ 588.897889][ T5787] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 588.897920][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.897940][ T5787] usb 2-1: Product: syz [ 588.897954][ T5787] usb 2-1: Manufacturer: syz [ 588.897967][ T5787] usb 2-1: SerialNumber: syz [ 589.046877][ T5787] r8152-cfgselector 2-1: Unknown version 0x0000 [ 589.046903][ T5787] r8152-cfgselector 2-1: config 0 descriptor?? [ 590.419278][T12281] overlay: ./file0 is not a directory [ 590.436712][T12243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.437279][T12243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.552486][T12245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.806410][ T993] r8152-cfgselector 2-1: USB disconnect, device number 67 [ 592.350496][ T5787] usb 1-1: USB disconnect, device number 76 [ 595.349019][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2310'. [ 595.875901][T12330] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2311'. [ 596.202694][ T5887] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 596.354748][ T5887] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 596.354777][ T5887] usb 6-1: config 0 has no interface number 0 [ 596.357935][ T5887] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 596.357962][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.357982][ T5887] usb 6-1: Product: syz [ 596.357996][ T5887] usb 6-1: Manufacturer: syz [ 596.358009][ T5887] usb 6-1: SerialNumber: syz [ 596.416825][ T5887] usb 6-1: config 0 descriptor?? [ 599.164775][ T5887] usb 6-1: Firmware version (0.0) predates our first public release. [ 599.164800][ T5887] usb 6-1: Please update to version 0.2 or newer [ 599.482153][T12360] netlink: 'syz.1.2315': attribute type 1 has an invalid length. [ 599.573245][T12360] netlink: 'syz.1.2315': attribute type 4 has an invalid length. [ 599.573444][T12360] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2315'. [ 600.050960][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2324'. [ 600.230027][ T5887] usb 6-1: USB disconnect, device number 21 [ 600.373119][ T37] kauditd_printk_skb: 676 callbacks suppressed [ 600.373140][ T37] audit: type=1326 audit(1760453876.160:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.5.2326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f199229eec9 code=0x0 [ 600.576997][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'. [ 600.863725][ T44] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 601.403764][T12397] FAULT_INJECTION: forcing a failure. [ 601.403764][T12397] name failslab, interval 1, probability 0, space 0, times 0 [ 601.403797][T12397] CPU: 0 UID: 0 PID: 12397 Comm: syz.4.2335 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 601.403819][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.403832][T12397] Call Trace: [ 601.403839][T12397] [ 601.403847][T12397] dump_stack_lvl+0x189/0x250 [ 601.403875][T12397] ? __pfx____ratelimit+0x10/0x10 [ 601.403901][T12397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.403923][T12397] ? __pfx__printk+0x10/0x10 [ 601.403952][T12397] ? __pfx___might_resched+0x10/0x10 [ 601.403981][T12397] should_fail_ex+0x46c/0x600 [ 601.404012][T12397] should_failslab+0xa8/0x100 [ 601.404036][T12397] __kmalloc_cache_noprof+0x6f/0x6c0 [ 601.404057][T12397] ? v9fs_mount+0xb2/0xa50 [ 601.404088][T12397] v9fs_mount+0xb2/0xa50 [ 601.404115][T12397] ? __kasan_kmalloc+0x93/0xb0 [ 601.404136][T12397] ? __pfx_v9fs_mount+0x10/0x10 [ 601.404164][T12397] ? rcu_is_watching+0x15/0xb0 [ 601.404187][T12397] ? cap_capable+0x11f/0x460 [ 601.404212][T12397] legacy_get_tree+0xfd/0x1a0 [ 601.404233][T12397] ? __pfx_v9fs_mount+0x10/0x10 [ 601.404261][T12397] vfs_get_tree+0x92/0x2b0 [ 601.404283][T12397] do_new_mount+0x302/0xa10 [ 601.404302][T12397] ? safesetid_security_capable+0xa9/0x1a0 [ 601.404330][T12397] ? __pfx_do_new_mount+0x10/0x10 [ 601.404349][T12397] ? ns_capable+0x8a/0xf0 [ 601.404378][T12397] ? path_mount+0x61c/0xfe0 [ 601.404416][T12397] __se_sys_mount+0x313/0x410 [ 601.404443][T12397] ? __pfx___se_sys_mount+0x10/0x10 [ 601.404467][T12397] ? do_syscall_64+0xbe/0xfa0 [ 601.404491][T12397] ? __x64_sys_mount+0x20/0xc0 [ 601.404514][T12397] do_syscall_64+0xfa/0xfa0 [ 601.404538][T12397] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.404563][T12397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.404583][T12397] ? clear_bhb_loop+0x60/0xb0 [ 601.404607][T12397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.404625][T12397] RIP: 0033:0x7f04b4d4eec9 [ 601.404642][T12397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.404659][T12397] RSP: 002b:00007f04b2fb6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.404681][T12397] RAX: ffffffffffffffda RBX: 00007f04b4fa5fa0 RCX: 00007f04b4d4eec9 [ 601.404696][T12397] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000000 [ 601.404709][T12397] RBP: 00007f04b2fb6090 R08: 00002000000002c0 R09: 0000000000000000 [ 601.404723][T12397] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 601.404735][T12397] R13: 00007f04b4fa6038 R14: 00007f04b4fa5fa0 R15: 00007ffd5da5a1b8 [ 601.404770][T12397] [ 601.422403][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 601.438631][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 601.445212][ T44] usb 2-1: config 4 interface 0 has no altsetting 0 [ 601.472685][ T44] usb 2-1: string descriptor 0 read error: -22 [ 601.472843][ T44] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 601.472865][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.525666][ T44] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 601.554453][T12401] 9pnet_fd: Insufficient options for proto=fd [ 601.566913][ T44] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 601.591921][ T44] dvb_usb_au6610 2-1:4.0: probe with driver dvb_usb_au6610 failed with error -23 [ 601.988299][T12407] FAULT_INJECTION: forcing a failure. [ 601.988299][T12407] name failslab, interval 1, probability 0, space 0, times 0 [ 601.988324][T12407] CPU: 0 UID: 0 PID: 12407 Comm: syz.3.2339 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 601.988337][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.988343][T12407] Call Trace: [ 601.988348][T12407] [ 601.988352][T12407] dump_stack_lvl+0x189/0x250 [ 601.988370][T12407] ? __pfx____ratelimit+0x10/0x10 [ 601.988387][T12407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.988399][T12407] ? __pfx__printk+0x10/0x10 [ 601.988416][T12407] ? __pfx___might_resched+0x10/0x10 [ 601.988431][T12407] ? fs_reclaim_acquire+0x7d/0x100 [ 601.988446][T12407] should_fail_ex+0x46c/0x600 [ 601.988463][T12407] should_failslab+0xa8/0x100 [ 601.988476][T12407] __kmalloc_noprof+0xcc/0x7d0 [ 601.988487][T12407] ? comedi_alloc_spriv+0x2d/0xa0 [ 601.988505][T12407] comedi_alloc_spriv+0x2d/0xa0 [ 601.988520][T12407] subdev_8255_io_init+0x2d/0x330 [ 601.988535][T12407] ? __comedi_request_region+0x74/0x140 [ 601.988549][T12407] dev_8255_attach+0x9bd/0xe90 [ 601.988568][T12407] comedi_device_attach+0x51f/0x720 [ 601.988584][T12407] comedi_unlocked_ioctl+0x605/0x1020 [ 601.988599][T12407] ? kasan_quarantine_put+0xdd/0x220 [ 601.988615][T12407] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.988634][T12407] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 601.988657][T12407] ? smack_log+0xef/0x3f0 [ 601.988676][T12407] ? __pfx_smack_log+0x10/0x10 [ 601.988691][T12407] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.988704][T12407] ? smk_access+0x14c/0x4e0 [ 601.988724][T12407] ? smk_tskacc+0x2fc/0x370 [ 601.988742][T12407] ? smack_file_ioctl+0x24d/0x340 [ 601.988755][T12407] ? __pfx_smack_file_ioctl+0x10/0x10 [ 601.988772][T12407] ? __fget_files+0x3a6/0x420 [ 601.988783][T12407] ? __fget_files+0x2a/0x420 [ 601.988796][T12407] ? bpf_lsm_file_ioctl+0x9/0x20 [ 601.988809][T12407] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 601.988824][T12407] __se_sys_ioctl+0xff/0x170 [ 601.988840][T12407] do_syscall_64+0xfa/0xfa0 [ 601.988855][T12407] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.988870][T12407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.988880][T12407] ? clear_bhb_loop+0x60/0xb0 [ 601.988892][T12407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.988902][T12407] RIP: 0033:0x7f4d61a2eec9 [ 601.988913][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.988922][T12407] RSP: 002b:00007f4d5fc96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.988933][T12407] RAX: ffffffffffffffda RBX: 00007f4d61c85fa0 RCX: 00007f4d61a2eec9 [ 601.988940][T12407] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000007 [ 601.988947][T12407] RBP: 00007f4d5fc96090 R08: 0000000000000000 R09: 0000000000000000 [ 601.988953][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.988959][T12407] R13: 00007f4d61c86038 R14: 00007f4d61c85fa0 R15: 00007ffdd8000988 [ 601.988976][T12407] [ 602.359039][T12415] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 602.412657][ T44] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 602.536022][T12418] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2342'. [ 602.536096][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 602.579133][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.579164][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.579202][ T44] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 602.579223][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.593201][ T44] usb 1-1: config 0 descriptor?? [ 603.272634][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 603.524588][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.537914][ T9] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 603.537941][ T9] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 603.537960][ T9] usb 6-1: Product: syz [ 603.537973][ T9] usb 6-1: SerialNumber: syz [ 603.573505][ T9] usb 6-1: config 0 descriptor?? [ 603.597073][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 603.599398][ T9] usb 6-1: Direct firmware load for dvb-usb-digivox-02.fw failed with error -2 [ 603.599436][ T9] usb 6-1: Falling back to sysfs fallback for: dvb-usb-digivox-02.fw [ 603.872599][ T5809] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 603.991921][ T44] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71 [ 604.005516][ T5809] usb 4-1: device descriptor read/64, error -71 [ 604.035470][ T44] usb 1-1: USB disconnect, device number 77 [ 604.093413][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 604.097746][ C1] vxcan1: j1939_session_tx_dat: 0xffff8880275de800: queue data error: -100 [ 604.110522][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.110547][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.110666][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.110682][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.110792][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.110810][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.110957][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.110974][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.111092][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.111110][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.111223][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.111241][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.111351][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.111369][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.111499][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.111517][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.111628][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.111645][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.111757][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.111774][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.111885][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.111903][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113076][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113099][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113181][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113194][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113273][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113286][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113384][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113402][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113500][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113516][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113600][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113611][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113718][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113730][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113811][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113823][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.113907][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.113920][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114005][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114019][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114111][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114123][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114205][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114217][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114303][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114315][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114401][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114413][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114503][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114517][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114607][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114621][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114711][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114725][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114821][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114836][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.114961][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.114978][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.115069][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.115085][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.115197][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.115213][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.115320][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.115338][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.115443][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.115461][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.115558][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.115576][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.115679][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.115694][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.115797][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.115813][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.115918][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.115936][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.116036][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.116052][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.116169][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.116185][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.116283][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.116298][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.116423][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.116440][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.116552][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.116569][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.117495][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.117515][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.117626][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.117643][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.117729][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 604.117746][ C1] vxcan1: j1939_xtp_rx_dat: no rx connection found [ 604.117845][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.117861][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.117949][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.117961][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118058][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118074][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118181][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118194][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118276][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118288][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118369][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118381][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118462][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118473][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118581][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118596][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118680][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118692][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118777][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118791][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118879][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118894][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.118981][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.118993][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119079][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119100][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119188][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119201][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119309][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119322][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119403][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119415][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119497][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119510][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119593][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119606][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119694][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119708][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119814][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119828][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.119913][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.119926][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120023][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120041][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120164][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120179][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120270][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120284][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120374][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120387][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120481][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120494][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120574][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120592][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120675][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120688][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120778][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120792][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120885][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120898][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.120980][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.120995][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121118][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121132][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121235][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121249][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121342][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121355][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121452][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121468][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121554][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121567][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121643][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121656][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121735][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121748][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121843][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121858][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.121960][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.121973][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.122054][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.122067][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.122161][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.122174][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.122958][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.122979][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.123120][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.123137][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.123250][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.123267][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.123379][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.123395][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.123500][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.123518][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.123629][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.123647][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.123760][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.123778][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.123878][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.123893][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.124003][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.124022][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.124135][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.124153][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.124267][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.124285][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.124402][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.124421][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.124534][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.124553][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.124699][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.124717][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.124828][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.124844][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.124946][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.124964][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.125067][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.125092][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.125202][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.125220][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.125331][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.125350][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.125562][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.125581][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.125707][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.125723][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.125837][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.125856][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.125970][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.125990][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.126110][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.126128][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.126242][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.126260][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.126396][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.126414][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.126524][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.126542][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.126656][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.126675][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.126788][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.126807][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.126922][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.126941][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.127054][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.127073][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.127194][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.127211][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.127323][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.127342][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.127453][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.127471][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.127580][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.127600][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.127711][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.127727][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.127837][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.127857][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.127998][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.128018][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.128136][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.128153][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.128270][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.128289][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.128402][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.128420][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.128533][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.128551][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.128659][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.128679][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.128793][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.128811][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.128921][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.128940][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.129041][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.129060][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.129174][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.129193][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.129303][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.129322][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.129434][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.129454][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.129594][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.129613][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.129724][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.129742][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.129904][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.129924][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.130038][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.130056][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.130177][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.130197][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.130312][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.130332][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.130445][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.130465][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.130582][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.130602][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.130716][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.130733][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.130844][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.130863][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.130972][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.130992][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.131108][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.131127][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.131264][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.131282][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.131396][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.131416][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.131528][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.131546][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.131639][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.131658][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.131753][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 604.131772][ C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.372486][ T5809] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 604.934210][ T5809] usb 4-1: device descriptor read/64, error -71 [ 605.202395][ T5809] usb usb4-port1: attempt power cycle [ 605.742422][ T5809] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 605.793059][ T5809] usb 4-1: device descriptor read/8, error -71 [ 606.092638][ T5809] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 606.244956][ T5809] usb 4-1: device descriptor read/8, error -71 [ 606.428758][ T5809] usb usb4-port1: unable to enumerate USB device [ 606.694330][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2360'. [ 607.346733][ T5811] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 607.346790][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 607.346827][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 607.346843][ T5811] Workqueue: hci0 hci_rx_work [ 607.346875][ T5811] Call Trace: [ 607.346886][ T5811] [ 607.346898][ T5811] dump_stack_lvl+0x189/0x250 [ 607.346930][ T5811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.346956][ T5811] ? __pfx__printk+0x10/0x10 [ 607.346985][ T5811] ? __rcu_read_unlock+0x84/0xe0 [ 607.347017][ T5811] ? kernfs_path_from_node+0x2c/0x280 [ 607.347044][ T5811] ? kernfs_path_from_node+0x243/0x280 [ 607.347068][ T5811] ? kernfs_path_from_node+0x2c/0x280 [ 607.347099][ T5811] sysfs_create_dir_ns+0x259/0x280 [ 607.347125][ T5811] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 607.347158][ T5811] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 607.347189][ T5811] ? rt_spin_unlock+0x161/0x200 [ 607.347217][ T5811] kobject_add_internal+0x5a5/0xb50 [ 607.347252][ T5811] kobject_add+0x155/0x220 [ 607.347273][ T5811] ? irqentry_exit+0x74/0x90 [ 607.347305][ T5811] ? __pfx_kobject_add+0x10/0x10 [ 607.347344][ T5811] device_add+0x408/0xb50 [ 607.347377][ T5811] hci_conn_add_sysfs+0xd5/0x1e0 [ 607.347405][ T5811] le_conn_complete_evt+0xf39/0x1500 [ 607.347434][ T5811] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 607.347476][ T5811] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 607.347515][ T5811] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 607.347543][ T5811] ? skb_pull_data+0xfb/0x200 [ 607.347571][ T5811] hci_le_conn_complete_evt+0x187/0x450 [ 607.347610][ T5811] hci_event_packet+0x78f/0x1200 [ 607.347641][ T5811] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 607.347677][ T5811] ? __pfx_hci_event_packet+0x10/0x10 [ 607.347705][ T5811] ? preempt_schedule_thunk+0x16/0x30 [ 607.347741][ T5811] ? hci_send_to_monitor+0xe2/0x570 [ 607.347775][ T5811] hci_rx_work+0x46a/0xe80 [ 607.347810][ T5811] ? process_scheduled_works+0x9ef/0x17b0 [ 607.347851][ T5811] process_scheduled_works+0xae1/0x17b0 [ 607.347916][ T5811] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.347967][ T5811] worker_thread+0x8a0/0xda0 [ 607.348004][ T5811] ? __kthread_parkme+0x7b/0x200 [ 607.348037][ T5811] kthread+0x711/0x8a0 [ 607.348065][ T5811] ? __pfx_worker_thread+0x10/0x10 [ 607.348084][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.348105][ T5811] ? rt_spin_unlock+0x150/0x200 [ 607.348135][ T5811] ? rt_spin_unlock+0x161/0x200 [ 607.348157][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.348181][ T5811] ret_from_fork+0x4bc/0x870 [ 607.348214][ T5811] ? __pfx_ret_from_fork+0x10/0x10 [ 607.348252][ T5811] ? __switch_to_asm+0x39/0x70 [ 607.348277][ T5811] ? __switch_to_asm+0x33/0x70 [ 607.348300][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.348325][ T5811] ret_from_fork_asm+0x1a/0x30 [ 607.348372][ T5811] [ 607.348734][ T5811] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 607.349048][ T5811] Bluetooth: hci0: failed to register connection device [ 607.410809][ T5811] ================================================================== [ 607.410830][ T5811] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 607.410866][ T5811] Read of size 8 at addr ffff8880348367a0 by task kworker/u9:4/5811 [ 607.410885][ T5811] [ 607.410899][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 607.410922][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 607.410938][ T5811] Workqueue: hci0 hci_rx_work [ 607.410964][ T5811] Call Trace: [ 607.410974][ T5811] [ 607.410986][ T5811] dump_stack_lvl+0x189/0x250 [ 607.411011][ T5811] ? rcu_is_watching+0x15/0xb0 [ 607.411035][ T5811] ? __kasan_check_byte+0x12/0x40 [ 607.411058][ T5811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.411080][ T5811] ? rcu_is_watching+0x15/0xb0 [ 607.411104][ T5811] ? lock_release+0x4b/0x3e0 [ 607.411129][ T5811] ? __virt_addr_valid+0x1c8/0x5c0 [ 607.411152][ T5811] ? __virt_addr_valid+0x4a5/0x5c0 [ 607.411176][ T5811] print_report+0xca/0x240 [ 607.411203][ T5811] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 607.411225][ T5811] kasan_report+0x118/0x150 [ 607.411248][ T5811] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 607.411277][ T5811] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 607.411303][ T5811] l2cap_connect_cfm+0x37a/0x1040 [ 607.411330][ T5811] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 607.411353][ T5811] ? mutex_lock_nested+0x154/0x1d0 [ 607.411376][ T5811] ? hci_connect_cfm+0x2c/0x140 [ 607.411402][ T5811] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 607.411422][ T5811] hci_connect_cfm+0x95/0x140 [ 607.411451][ T5811] le_conn_complete_evt+0xfb8/0x1500 [ 607.411480][ T5811] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 607.411516][ T5811] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 607.411550][ T5811] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 607.411576][ T5811] ? skb_pull_data+0xfb/0x200 [ 607.411602][ T5811] hci_le_conn_complete_evt+0x187/0x450 [ 607.411645][ T5811] hci_event_packet+0x78f/0x1200 [ 607.411672][ T5811] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 607.411702][ T5811] ? __pfx_hci_event_packet+0x10/0x10 [ 607.411727][ T5811] ? preempt_schedule_thunk+0x16/0x30 [ 607.411760][ T5811] ? hci_send_to_monitor+0xe2/0x570 [ 607.411793][ T5811] hci_rx_work+0x46a/0xe80 [ 607.411823][ T5811] ? process_scheduled_works+0x9ef/0x17b0 [ 607.411853][ T5811] process_scheduled_works+0xae1/0x17b0 [ 607.411903][ T5811] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.411944][ T5811] worker_thread+0x8a0/0xda0 [ 607.411972][ T5811] ? __kthread_parkme+0x7b/0x200 [ 607.411999][ T5811] kthread+0x711/0x8a0 [ 607.412024][ T5811] ? __pfx_worker_thread+0x10/0x10 [ 607.412043][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.412063][ T5811] ? rt_spin_unlock+0x150/0x200 [ 607.412090][ T5811] ? rt_spin_unlock+0x161/0x200 [ 607.412113][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.412136][ T5811] ret_from_fork+0x4bc/0x870 [ 607.412166][ T5811] ? __pfx_ret_from_fork+0x10/0x10 [ 607.412200][ T5811] ? __switch_to_asm+0x39/0x70 [ 607.412226][ T5811] ? __switch_to_asm+0x33/0x70 [ 607.412246][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.412265][ T5811] ret_from_fork_asm+0x1a/0x30 [ 607.412303][ T5811] [ 607.412311][ T5811] [ 607.412325][ T5811] Allocated by task 5811: [ 607.412337][ T5811] kasan_save_track+0x3e/0x80 [ 607.412354][ T5811] __kasan_kmalloc+0x93/0xb0 [ 607.412372][ T5811] __kmalloc_noprof+0x233/0x7d0 [ 607.412391][ T5811] sk_prot_alloc+0xe7/0x220 [ 607.412417][ T5811] sk_alloc+0x3a/0x370 [ 607.412442][ T5811] bt_sock_alloc+0x3b/0x310 [ 607.412465][ T5811] l2cap_sock_new_connection_cb+0xe2/0x2b0 [ 607.412486][ T5811] l2cap_connect_cfm+0x37a/0x1040 [ 607.412503][ T5811] hci_connect_cfm+0x95/0x140 [ 607.412527][ T5811] le_conn_complete_evt+0xfb8/0x1500 [ 607.412553][ T5811] hci_le_conn_complete_evt+0x187/0x450 [ 607.412576][ T5811] hci_event_packet+0x78f/0x1200 [ 607.412596][ T5811] hci_rx_work+0x46a/0xe80 [ 607.412623][ T5811] process_scheduled_works+0xae1/0x17b0 [ 607.412649][ T5811] worker_thread+0x8a0/0xda0 [ 607.412666][ T5811] kthread+0x711/0x8a0 [ 607.412684][ T5811] ret_from_fork+0x4bc/0x870 [ 607.412709][ T5811] ret_from_fork_asm+0x1a/0x30 [ 607.412733][ T5811] [ 607.412738][ T5811] Freed by task 12470: [ 607.412748][ T5811] kasan_save_track+0x3e/0x80 [ 607.412763][ T5811] __kasan_save_free_info+0x46/0x50 [ 607.412787][ T5811] __kasan_slab_free+0x5c/0x80 [ 607.412803][ T5811] kfree+0x197/0x950 [ 607.412827][ T5811] __sk_destruct+0x4e4/0x670 [ 607.412842][ T5811] l2cap_sock_cleanup_listen+0xda/0x3e0 [ 607.412861][ T5811] l2cap_sock_release+0x6a/0x230 [ 607.412879][ T5811] sock_close+0xc3/0x240 [ 607.412897][ T5811] __fput+0x45b/0xa80 [ 607.412918][ T5811] task_work_run+0x1d4/0x260 [ 607.412940][ T5811] get_signal+0x11c4/0x1310 [ 607.412964][ T5811] arch_do_signal_or_restart+0xa0/0x790 [ 607.412989][ T5811] exit_to_user_mode_loop+0x72/0x130 [ 607.413007][ T5811] do_syscall_64+0x2bd/0xfa0 [ 607.413032][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.413051][ T5811] [ 607.413057][ T5811] The buggy address belongs to the object at ffff888034836000 [ 607.413057][ T5811] which belongs to the cache kmalloc-2k of size 2048 [ 607.413074][ T5811] The buggy address is located 1952 bytes inside of [ 607.413074][ T5811] freed 2048-byte region [ffff888034836000, ffff888034836800) [ 607.413095][ T5811] [ 607.413102][ T5811] The buggy address belongs to the physical page: [ 607.413119][ T5811] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34830 [ 607.413139][ T5811] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 607.413157][ T5811] flags: 0x80000000000040(head|node=0|zone=1) [ 607.413175][ T5811] page_type: f5(slab) [ 607.413194][ T5811] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 607.413212][ T5811] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 607.413232][ T5811] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 607.413251][ T5811] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 607.413270][ T5811] head: 0080000000000003 ffffea0000d20c01 00000000ffffffff 00000000ffffffff [ 607.413287][ T5811] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 607.413299][ T5811] page dumped because: kasan: bad access detected [ 607.413315][ T5811] page_owner tracks the page as allocated [ 607.413323][ T5811] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5796, tgid 5796 (syz-executor), ts 87941641236, free_ts 67326119735 [ 607.413360][ T5811] post_alloc_hook+0x240/0x2a0 [ 607.413379][ T5811] get_page_from_freelist+0x28c0/0x2960 [ 607.413401][ T5811] __alloc_frozen_pages_noprof+0x181/0x370 [ 607.413424][ T5811] alloc_pages_mpol+0xd1/0x380 [ 607.413444][ T5811] allocate_slab+0x96/0x3a0 [ 607.413467][ T5811] ___slab_alloc+0xb12/0x13f0 [ 607.413490][ T5811] __slab_alloc+0xc6/0x1f0 [ 607.413510][ T5811] __kmalloc_cache_noprof+0xec/0x6c0 [ 607.413529][ T5811] rtnl_newlink+0xfb/0x1c80 [ 607.413551][ T5811] rtnetlink_rcv_msg+0x7cf/0xb70 [ 607.413574][ T5811] netlink_rcv_skb+0x208/0x470 [ 607.413596][ T5811] netlink_unicast+0x846/0xa10 [ 607.413622][ T5811] netlink_sendmsg+0x805/0xb30 [ 607.413647][ T5811] __sock_sendmsg+0x21c/0x270 [ 607.413668][ T5811] __sys_sendto+0x3c7/0x520 [ 607.413692][ T5811] __x64_sys_sendto+0xde/0x100 [ 607.413717][ T5811] page last free pid 5657 tgid 5657 stack trace: [ 607.413730][ T5811] __free_frozen_pages+0xfb6/0x1140 [ 607.413749][ T5811] __slab_free+0x2c6/0x370 [ 607.413772][ T5811] qlist_free_all+0x97/0x140 [ 607.413797][ T5811] kasan_quarantine_reduce+0x148/0x160 [ 607.413824][ T5811] __kasan_slab_alloc+0x22/0x80 [ 607.413841][ T5811] __kmalloc_noprof+0x1e1/0x7d0 [ 607.413857][ T5811] tomoyo_realpath_from_path+0xe3/0x5d0 [ 607.413890][ T5811] tomoyo_path_perm+0x213/0x4b0 [ 607.413911][ T5811] security_inode_getattr+0x12f/0x330 [ 607.413931][ T5811] __x64_sys_newfstat+0xfc/0x200 [ 607.413953][ T5811] do_syscall_64+0xfa/0xfa0 [ 607.413980][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.413999][ T5811] [ 607.414004][ T5811] Memory state around the buggy address: [ 607.414016][ T5811] ffff888034836680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.414030][ T5811] ffff888034836700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.414045][ T5811] >ffff888034836780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.414056][ T5811] ^ [ 607.414068][ T5811] ffff888034836800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 607.414082][ T5811] ffff888034836880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 607.414093][ T5811] ================================================================== [ 607.414177][ T5811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 607.414195][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 607.414224][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 607.414239][ T5811] Workqueue: hci0 hci_rx_work [ 607.414266][ T5811] Call Trace: [ 607.414275][ T5811] [ 607.414285][ T5811] dump_stack_lvl+0x99/0x250 [ 607.414311][ T5811] ? __asan_memcpy+0x40/0x70 [ 607.414337][ T5811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.414361][ T5811] ? __pfx__printk+0x10/0x10 [ 607.414392][ T5811] vpanic+0x237/0x6d0 [ 607.414411][ T5811] ? __pfx_vpanic+0x10/0x10 [ 607.414429][ T5811] ? preempt_schedule+0xae/0xc0 [ 607.414456][ T5811] ? __pfx_preempt_schedule+0x10/0x10 [ 607.414486][ T5811] panic+0xb9/0xc0 [ 607.414504][ T5811] ? __pfx_panic+0x10/0x10 [ 607.414525][ T5811] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 607.414558][ T5811] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 607.414582][ T5811] check_panic_on_warn+0x89/0xb0 [ 607.414612][ T5811] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 607.414635][ T5811] end_report+0x78/0x160 [ 607.414657][ T5811] kasan_report+0x129/0x150 [ 607.414680][ T5811] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 607.414708][ T5811] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 607.414734][ T5811] l2cap_connect_cfm+0x37a/0x1040 [ 607.414759][ T5811] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 607.414781][ T5811] ? mutex_lock_nested+0x154/0x1d0 [ 607.414803][ T5811] ? hci_connect_cfm+0x2c/0x140 [ 607.414830][ T5811] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 607.414850][ T5811] hci_connect_cfm+0x95/0x140 [ 607.414878][ T5811] le_conn_complete_evt+0xfb8/0x1500 [ 607.414906][ T5811] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 607.414939][ T5811] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 607.414972][ T5811] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 607.414998][ T5811] ? skb_pull_data+0xfb/0x200 [ 607.415022][ T5811] hci_le_conn_complete_evt+0x187/0x450 [ 607.415053][ T5811] hci_event_packet+0x78f/0x1200 [ 607.415079][ T5811] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 607.415107][ T5811] ? __pfx_hci_event_packet+0x10/0x10 [ 607.415131][ T5811] ? preempt_schedule_thunk+0x16/0x30 [ 607.415163][ T5811] ? hci_send_to_monitor+0xe2/0x570 [ 607.415194][ T5811] hci_rx_work+0x46a/0xe80 [ 607.415222][ T5811] ? process_scheduled_works+0x9ef/0x17b0 [ 607.415252][ T5811] process_scheduled_works+0xae1/0x17b0 [ 607.415295][ T5811] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.415333][ T5811] worker_thread+0x8a0/0xda0 [ 607.415358][ T5811] ? __kthread_parkme+0x7b/0x200 [ 607.415384][ T5811] kthread+0x711/0x8a0 [ 607.415408][ T5811] ? __pfx_worker_thread+0x10/0x10 [ 607.415426][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.415447][ T5811] ? rt_spin_unlock+0x150/0x200 [ 607.415474][ T5811] ? rt_spin_unlock+0x161/0x200 [ 607.415496][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.415527][ T5811] ret_from_fork+0x4bc/0x870 [ 607.415558][ T5811] ? __pfx_ret_from_fork+0x10/0x10 [ 607.415590][ T5811] ? __switch_to_asm+0x39/0x70 [ 607.415621][ T5811] ? __switch_to_asm+0x33/0x70 [ 607.415645][ T5811] ? __pfx_kthread+0x10/0x10 [ 607.415667][ T5811] ret_from_fork_asm+0x1a/0x30 [ 607.415704][ T5811] [ 607.415866][ T5811] Kernel Offset: disabled