last executing test programs: 15.424880625s ago: executing program 0 (id=157): unshare(0x4020400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7, 0xfe8, 0xb, 0x100, 0x8000000000000000, 0x1000000}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) r2 = epoll_create1(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_io_uring_setup(0x2257, &(0x7f0000000200), &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0xfffffe40}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x48}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102a120ac40b804020284a12b8a67ce8700000000d74e6f010603010902120001080880fa094f160e9aab6604"], &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0}) write$P9_RSYMLINK(r9, &(0x7f0000000400)={0x14, 0x11, 0x2, {0x4, 0x2, 0x6}}, 0x14) 13.975124038s ago: executing program 2 (id=161): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) socket$kcm(0x29, 0x3f727c9d0c1c9a09, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000040)={0x5, 0xffffffd7, 0x7, 0xbe8, 0x9d}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="50080000100039040000000000000000000000005b7e458b7f363fb424e637c4d5b7a63e8c67ac752725847a27650bb8880c8e9a544b28281661452f66f02d2a0e7101503c7d6e22b5e1c1f8f41557", @ANYRES32=r2, @ANYBLOB="e3eb0000000000003000127e70000100697036746e6c00002000028014160100008000000000000000deff00000000000500040040000000"], 0x50}, 0x1, 0x0, 0x0, 0x20811}, 0x1) 13.08785335s ago: executing program 2 (id=163): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$GIO_CMAP(r2, 0x4b70, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffcdf, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e2b4, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 12.09328929s ago: executing program 0 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x48, r7, 0x1, 0x470bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}}, 0x20000880) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 11.464966845s ago: executing program 0 (id=166): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') fchdir(r9) timer_gettime(r8, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x74, &(0x7f0000000480)={r6, 0xfffe, 0x30, 0x20000000000005, 0x3b0000}, &(0x7f00000009c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r6, 0x328, 0x40, 0x9, 0x800, 0x7ac, 0x0, 0x3, {r10, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x401, 0x26, 0x4, 0x7, 0x10000}}, &(0x7f00000001c0)=0xb0) rmdir(&(0x7f0000000100)='./file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) 10.342295212s ago: executing program 4 (id=173): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x203, 0x2, 0x8, 0x6, 0x1, 0x2, 0x0, 0x1}}) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 9.866306438s ago: executing program 2 (id=175): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x800, 0x0) lseek(r0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040880) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8044) syz_usb_connect(0x0, 0x47, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3303910daa658744d2d010203010902350001080010000904df0203080662ff09050c022000f0060309050710003e8fc167020102070824", @ANYBLOB="0132b8"], 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x30, r3, 0x10ada85e65c25349, 0x3, 0xfffffffc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x29}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xb8, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_KEY_SEQ={0xe, 0xa, "e2fa9a872e173bc749d7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "abfe699cfa"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) 9.550380837s ago: executing program 1 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe0000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES8], 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1fc0, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008840) io_submit(r4, 0x2, &(0x7f0000000840)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x7f, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}]) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 9.007108536s ago: executing program 1 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000003c0)="0f20e035004000000f22e0c4c1c154b9f3e50000f30f0119c4c27d0fd6b805000000b9008000000f01c1f4c744240000600000c7442402c3000000c7442406000000000f011424c1be00800000000fc75886c4c39148363c", 0x58}], 0x1, 0x57, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x20) 7.453296477s ago: executing program 3 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000400ffff14000780080012400000000504001500090000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 7.355921153s ago: executing program 3 (id=180): syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="0332b2aebdc5", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @local}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r7, &(0x7f0000001b00)=""/194, 0xc2) 7.139218113s ago: executing program 1 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3}, &(0x7f0000000240), &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000000)={0x0}, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) socket$l2tp(0x2, 0x2, 0x73) 6.977016292s ago: executing program 2 (id=182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000001400)=@x25, 0x80, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000240)=""/125, 0x7d}], 0x2, &(0x7f0000001340)=""/190, 0xbe}, 0x40000100) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/116, 0x74, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'cpuacct'}, {0x2d, 'pids'}, {0x2b, 'net'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}, {0x2d, 'io'}, {0x2b, 'rdma'}, {0x2b, 'freezer'}]}, 0x3c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = syz_open_dev$evdev(0x0, 0x200, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40084503, &(0x7f0000ffcffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da204020014977470102030109022b0001000000000904"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="77ba00000000000000001f0000"], 0x48}}, 0x0) getsockopt$inet_int(r4, 0x10d, 0x92, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid_for_children\x00') r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_pidfd_open(0x0, 0x0) 6.917437406s ago: executing program 0 (id=183): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x4}}, 0x20) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000016c0)={0x2, 0x0, 0x0, &(0x7f0000001640)=[{}, {0x0}], 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) 6.693650489s ago: executing program 4 (id=184): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x72b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x2a157f}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r5, 0x0, r8}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, 0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r10, 0x1276, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) 5.065232799s ago: executing program 4 (id=185): mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0xa400) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x202000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) 4.862605173s ago: executing program 4 (id=186): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x14004841) 4.596977192s ago: executing program 3 (id=187): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r0, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe7, 0x13}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}}, 0x40) (async) timerfd_create(0x2, 0x800) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) (async) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0xd, 0x8c, 0x4, 0x9, 0x7, 0xd, 0x9, 0x9, 0x9, 0x4, 0x2, 0xb, 0x2, 0x8, 0x9], 0x1, [0x0, 0x5, 0xa604, 0x3, 0x101, 0xb23, 0x0, 0x7, 0x3, 0x0, 0xc83, 0x5, 0x5, 0x22, 0x6, 0x9], [0x5, 0x3ff, 0x8, 0x1, 0x9, 0xfffd, 0xa95, 0x6, 0xb728, 0x1c0, 0x0, 0x8, 0x1, 0x8001, 0x1, 0x10]}}]}}]}, 0x8c}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x1, 0xa, {{0x16, 0x4, 0x2, 0x3, 0x58, 0x66, 0x0, 0x6, 0x29, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0xb6, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0xa}, 0xfffffffe}, {@loopback, 0x81}, {@private=0xa010102, 0x8}, {@multicast2, 0xffffffff}, {@multicast2, 0x2}, {@loopback, 0x5}, {@private=0xa010102, 0x100}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x5, 0x3c27, {{0x26, 0x4, 0x0, 0x9, 0x98, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast2, {[@cipso={0x86, 0x52, 0x3, [{0x5, 0x4, '|P'}, {0x2, 0x3, "8f"}, {0x1, 0x7, "434e1b7fbf"}, {0x1, 0x12, "65cb6031f1e05899ca54db44380a3c4c"}, {0x1, 0x4, "4e11"}, {0x2, 0x2}, {0x2, 0x9, "1a7db1af354eeb"}, {0x2, 0x5, "2971e0"}, {0x7, 0xf, "b668ad483b91c9bddc4aa1ba7a"}, {0x6, 0x9, "d51c77e2bd809e"}]}, @cipso={0x86, 0x2a, 0x3, [{0x5, 0x10, "b24366183e78e0d9d3a4c314a675"}, {0x2, 0x12, "36322a5b12d60ddc5e5eda9b37ec3d34"}, {0x0, 0x2}]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x376}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x60}}, 0x0) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @local}, &(0x7f0000000740)=0xc) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x10, 0x700, 0x2, 0x7, {{0x24, 0x4, 0x3, 0x32, 0x90, 0x66, 0x0, 0x2c, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@end, @lsrr={0x83, 0x1f, 0x45, [@local, @loopback, @loopback, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp_prespec={0x44, 0x14, 0x77, 0x3, 0x3, [{@broadcast, 0x1}, {@rand_addr=0x64010101, 0x10}]}, @timestamp={0x44, 0x20, 0x4b, 0x0, 0x8, [0x7ff, 0x90c6, 0x0, 0xfff, 0x9, 0x0, 0xf]}, @rr={0x7, 0x13, 0x1d, [@broadcast, @private=0xa010101, @loopback, @local]}, @lsrr={0x83, 0x13, 0xd9, [@loopback, @rand_addr=0x64010100, @empty, @remote]}, @end]}}}}}) (async) r14 = socket(0x400000000010, 0x3, 0x0) (async) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8d32}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r16, {0x0, 0x7}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x4, 0x6, 0x8, 0x10000, {0x5, 0x1, 0x1, 0x1e1, 0x7, 0x1}, {0x3, 0x2, 0x9, 0xfffe, 0x9, 0x5}, 0x4, 0x8, 0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000b40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)={0x208, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x4}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x400c080}, 0x4008081) syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003020000082505a1a44000010203010902580001fd02a005090400390202060002052406000005240004000da40f010300000030000900041524120000a317a88b045e4f01a607c0ffcb7e392a082413"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) r17 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050006"], 0x48}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r18) 4.265065174s ago: executing program 0 (id=188): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) r2 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000000)={0x0}, 0x1) socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x1000, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000380)) 4.264366901s ago: executing program 3 (id=189): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x2}, 0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000380)={&(0x7f0000000780)=[0x3ff, 0x2, 0x3, 0x40, 0x7, 0xa, 0x0, 0x101, 0x217ccf13, 0x5, 0x4f5, 0x9, 0x0, 0xf3, 0x0, 0x9, 0x0, 0x3d6a, 0x7f, 0x6, 0x400, 0x80000000, 0x0, 0x2, 0x618776c7, 0x8000, 0x2748, 0x2, 0xfff, 0x1, 0xeb, 0x10001, 0xfffffff9, 0x6, 0x5, 0x85, 0x8, 0xffff, 0x5, 0x7fffffff, 0x80000001, 0x5, 0x5, 0x8, 0x7, 0x6, 0x9, 0xfffffff8, 0xa5f0, 0x9, 0x5, 0x9, 0x3, 0x1, 0x1360, 0x7ff, 0x9, 0x9, 0x487e, 0x8, 0x7ff, 0x4, 0x3, 0x2, 0xfb3, 0x9, 0x60e, 0x7, 0x4, 0x7fff, 0x1, 0x1, 0x3, 0xfffffffd, 0xffffffff, 0x9, 0xa09c, 0x101, 0xfffffffd, 0xe, 0x2, 0x7, 0xf024, 0x200, 0xc49, 0x3, 0x0, 0xa790, 0x3, 0x0, 0x80000001, 0x8, 0x3, 0x8000, 0x4e0, 0x4, 0xfffffffe, 0x1, 0xffffffc8, 0x1, 0x4, 0x8000, 0x2, 0xb339, 0x9, 0x400, 0x4, 0x8, 0x0, 0xfff, 0x9, 0xafc, 0x8, 0xf994, 0x3, 0x400, 0xc, 0xd, 0x1ff, 0x1003, 0x2, 0x5, 0x8, 0x20b8, 0x4e, 0x4, 0x5, 0x5, 0x0, 0x66078cfa, 0x9, 0xfffffff8, 0x5, 0x1, 0x0, 0x1, 0x80, 0x6, 0x29, 0x7, 0x9, 0x7, 0x3, 0x6, 0x0, 0x5, 0x10000, 0x9, 0x200, 0x7, 0x347, 0x40, 0xa7, 0x7b, 0x8, 0x5, 0x7fffffff, 0x2, 0xa5, 0xbf, 0x3, 0xd, 0x3, 0x5, 0x0, 0xc, 0x997, 0x1, 0x6, 0xd, 0xc, 0x6, 0x7fff, 0x2, 0x0, 0x2a, 0x5, 0xe5, 0x3, 0x7f, 0xfff, 0xf, 0x5, 0x2, 0xffff0000, 0xa, 0x500, 0x6, 0x1000, 0x601b, 0xd, 0x1, 0x4d18, 0x7, 0xd42, 0x9, 0xb, 0x0, 0x0, 0x7, 0x5, 0xfffffffe, 0x401, 0xfffffffb, 0xd, 0x8000, 0x2, 0xfffffff4, 0x1, 0x9, 0x1, 0x1, 0x4, 0x80, 0x7, 0x0, 0xffffffff, 0x4, 0x7, 0x5, 0x0, 0x80000000, 0xdbde, 0x9, 0x6, 0x2, 0x2, 0xb, 0x17, 0x2, 0x3, 0x1000, 0xbbd, 0x8, 0xa, 0x1b, 0x5c, 0x8, 0xc5e, 0xc, 0x4, 0x6, 0x1, 0x2, 0x9ec, 0x17, 0x6, 0x9, 0x3, 0x1, 0x1, 0x6, 0x9, 0x3ff, 0xd, 0x9, 0x1000, 0x1400000, 0x3, 0x100, 0x81, 0x7, 0x0, 0xc76, 0x7288cacb, 0x5, 0x1, 0x4, 0x1000, 0x0, 0x1, 0x9, 0xfff, 0x8001, 0x2, 0x7ff, 0xffff, 0x0, 0x6, 0x8, 0x6, 0x4934, 0x0, 0x1, 0x3, 0x7, 0x0, 0xed, 0x0, 0x81d, 0xd9ad, 0x0, 0x5, 0x3, 0x6, 0x6, 0x7ff, 0x200, 0x5, 0x6a0, 0x3b3, 0x946a, 0x8, 0x8, 0x7, 0x5, 0x9, 0x5, 0x0, 0x80000000, 0x4, 0x0, 0x100, 0x10000, 0xff, 0x7df, 0x5, 0x19e, 0x1000, 0x2, 0x3, 0x100, 0x9, 0x8001, 0x401, 0x8, 0x0, 0xffff, 0x2a7a, 0x5b, 0x1, 0xc0, 0x3, 0x0, 0x8, 0x5, 0x2b25573d, 0x7, 0xe971, 0x1, 0x89c, 0xa, 0xa2, 0x7, 0x7fff, 0x80, 0x2, 0xe7e9, 0x200, 0x0, 0x9, 0x0, 0x8, 0x9, 0x6, 0x611, 0x3, 0x4, 0x6, 0x8, 0xfffffffa, 0xfff, 0x80000001, 0x7, 0xf, 0x40, 0xc, 0xde, 0x5, 0x7, 0x6, 0xfa4, 0x5, 0x7, 0x7, 0x2f74, 0x3ff, 0x190a, 0x6, 0x1, 0x1, 0x0, 0x42fac47, 0x478, 0xb, 0x7fff, 0x7, 0xe4, 0x4, 0x4, 0x8, 0x1a, 0x80000001, 0x1, 0x9, 0xffff, 0xfffffff6, 0xf46, 0x4, 0x7, 0x6000000, 0x0, 0x401, 0x0, 0x400, 0x737, 0xfff, 0x0, 0x8, 0x4, 0x8, 0x99d, 0x200, 0x1, 0x0, 0x9, 0x7, 0x181, 0x0, 0x8, 0x1, 0x8, 0xffffad91, 0x1, 0x3, 0xd48a, 0x373, 0x401, 0xf8, 0x2, 0x8001, 0x2, 0x3, 0xd, 0xc, 0x200, 0x6, 0xfffffffa, 0x217, 0x10001, 0xe, 0x2, 0x4ab5, 0x8, 0x10000, 0x8, 0x6, 0x1, 0x96, 0x6, 0x8000, 0x2255, 0x6, 0x8, 0x7, 0x4, 0x800, 0x200, 0x407, 0x8, 0x1000, 0x8000, 0x8, 0xff, 0x975f, 0x9, 0x3, 0x4, 0xc, 0x0, 0x3, 0x8, 0x1200000, 0x8000, 0xfff, 0x6, 0xca8, 0x10000, 0x8, 0x93, 0x6, 0x80000000, 0x1, 0x8, 0x3, 0x2, 0x8, 0x5, 0x0, 0x9, 0xffffffff, 0x1, 0xf75, 0xe65, 0x0, 0x4, 0x6, 0x6, 0x7, 0x1, 0x3, 0x5, 0x0, 0x0, 0x4, 0xf, 0x3, 0x400, 0x4, 0x0, 0x6, 0xf, 0x2, 0x80, 0x7, 0x4, 0xff, 0x0, 0x7fff, 0x8, 0x7, 0x3, 0x66be, 0x8, 0xffffffff, 0x3, 0x10, 0xa0000000, 0x2, 0x3, 0x8, 0x80, 0xfffffffa, 0xa, 0x4, 0x313, 0x8, 0x2, 0x0, 0x6ad, 0xa, 0x7fff, 0x9, 0x7, 0x0, 0x7f, 0x4, 0x1, 0x10, 0x3, 0xfffffffd, 0x2, 0x1, 0x6, 0xfffffffc, 0x8, 0xefd, 0x800, 0x2, 0x9, 0x3, 0x7, 0x1, 0x400, 0x8, 0x9, 0x6, 0x9dc00000, 0xff, 0x6, 0x9, 0xa45, 0x0, 0x3, 0xfffffff9, 0x4, 0x43, 0xa, 0xc, 0x6, 0x7fffffff, 0x6, 0x2, 0x2, 0x80, 0x3, 0x9, 0x3, 0x5, 0x5e, 0x5, 0x1ff, 0x3, 0x7, 0x0, 0x7fff, 0x63, 0x7ff, 0x2, 0x7f, 0x1, 0x2, 0x6, 0x8, 0x4, 0x5, 0x7, 0x3, 0xd5f, 0x2, 0x8, 0x3b, 0xc48d, 0x27, 0x4, 0x2, 0x6, 0x4, 0x5, 0x7, 0x1, 0x7ff, 0xe7b9, 0xfffffff8, 0xff, 0xfab2, 0xc, 0xf, 0x1, 0x10, 0x0, 0x4, 0x3, 0x8, 0x40, 0x0, 0x75c358f8, 0x100, 0x9, 0x2, 0x8, 0x9, 0x2, 0x0, 0x2, 0x80, 0x8, 0x3ff, 0x788, 0x10000, 0xfffffc01, 0x8, 0x40, 0x7fffffff, 0x4, 0x8c8f, 0x0, 0x56, 0x0, 0x80000001, 0x8, 0xd, 0xd, 0x8, 0xc, 0x1, 0xffff, 0xf, 0xe, 0x0, 0x100, 0x80000001, 0x2, 0x6, 0x0, 0x3, 0xc, 0x0, 0x0, 0x9, 0x7, 0x7ff, 0xc71, 0x4, 0x9, 0xffffffff, 0x4, 0x4, 0x5, 0x7ffc, 0x6, 0x1, 0x10000, 0x3, 0x8, 0x7f, 0x0, 0x4, 0x7, 0x4800, 0x3, 0x252, 0xfaef, 0x4, 0xa3, 0x44d, 0xd, 0x9, 0x0, 0x2, 0x51, 0x3, 0x1, 0x3, 0x400000, 0x6, 0x3f, 0xb, 0x2, 0x400, 0xa6c, 0x3, 0x0, 0x7, 0x7fffffff, 0x6, 0x2, 0x4, 0xe, 0x6, 0x3, 0x6, 0x27400000, 0x4, 0x8, 0x7fffffff, 0x81, 0x6, 0x9, 0x2, 0x9, 0x3, 0x5, 0x8, 0x800, 0x5, 0x3, 0x6, 0xffff1e28, 0x100, 0x8, 0x8, 0xee9d, 0x8000, 0x80, 0x5, 0x9, 0x6, 0x3e, 0x4, 0x4, 0x1ff, 0x5, 0xffff, 0x4, 0x5f, 0x6, 0xdb33, 0x6, 0x9, 0x5, 0x37, 0x10001, 0x7, 0x0, 0x733b, 0x4325, 0xc, 0xfffffff7, 0x5, 0x4, 0x9, 0xfffffff7, 0xa5, 0x6, 0x1, 0x7, 0x4, 0x0, 0x410, 0x9, 0xd, 0xd, 0x9, 0x2, 0x80000000, 0x1, 0x4, 0xaf4, 0x8acc00, 0x4, 0x100, 0x7, 0x84, 0x2d4d, 0x4, 0x8, 0xffff, 0x720, 0x7, 0x8, 0x6, 0x4, 0xc082, 0x161d, 0x80000000, 0x10001, 0x4, 0x0, 0x8, 0x7fffffff, 0x9, 0x0, 0x2, 0x56a, 0x7fffffff, 0x4, 0x101, 0x10000, 0x800, 0x9, 0x6, 0x3, 0x6, 0x2, 0x3, 0x10000, 0x67, 0x5, 0x8, 0x5, 0xffff0710, 0x6, 0xcf9, 0x5, 0x7a19, 0x4, 0xffff4ed7, 0x8, 0x1, 0xcff2, 0x5, 0x101, 0x8, 0x9, 0x8000, 0x1, 0x3, 0x2, 0xfff, 0x9, 0x0, 0x0, 0x8, 0x7, 0x9, 0x0, 0x78000000, 0x6, 0x6, 0x7f, 0x0, 0x9, 0x5, 0x10000, 0x6, 0x0, 0x15c2429a, 0x7, 0x7d, 0xa222, 0x4, 0xf, 0x1, 0x3, 0x8, 0x3, 0x2, 0x7, 0x287e, 0x0, 0x4, 0x2, 0x9, 0x6, 0x2, 0x1, 0xfa1, 0x10000, 0x1ff35398, 0x1, 0x40, 0x4160, 0x3, 0x8, 0x3, 0x6, 0x19, 0x4, 0x3ff, 0x3, 0x1000, 0x4, 0x1, 0x3fe0000, 0x3, 0x7, 0x5, 0x3, 0x5, 0xfffffff8, 0x3, 0x7, 0x8001, 0x3, 0xe, 0xa66, 0x0, 0xfff, 0xc2, 0x4, 0x800, 0xb9, 0x4, 0x600, 0xa, 0x2, 0x0, 0x5, 0x9, 0x5, 0x800, 0x7f, 0xbf83, 0x4, 0xdb28, 0x7f, 0x6, 0x1, 0x1, 0x2, 0x4, 0xffffffff, 0xffff, 0x5, 0x3, 0x8, 0xa53, 0x1, 0x5, 0x5, 0xb438, 0x4f, 0x186, 0x10000, 0x6, 0x6, 0x9, 0x81, 0x5, 0x1000, 0x3, 0x1, 0xf48, 0xffff, 0x3, 0x7ff, 0x6, 0xfffffffc, 0x4, 0x9, 0x81, 0x4, 0xe1, 0x6d1, 0x7, 0xce9, 0x7, 0xffffffc9, 0x7, 0x3, 0x1, 0x80000000, 0xab2, 0x6, 0x0, 0x800, 0x81, 0x2234, 0x1, 0x9, 0xc, 0x7, 0x1, 0xc31, 0xf, 0x2fe, 0x7, 0x6, 0x8, 0xb80, 0x5, 0xe4, 0x2, 0x7, 0x4, 0x200000e, 0xffff8bc5, 0x2, 0xfffff000, 0xc, 0x4848, 0xfff, 0xc5], 0x6, 0x400, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000000700000000000000ffff00000800000005000000000000000d000000010000000300000002000000215c00000000000001000000000000f8f7ffffffffffff7f6d09c86d2c"]) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x1, 0x6, 0x8000, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "4a4faa7920a000ad"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) getcwd(&(0x7f00000001c0)=""/197, 0xc5) sendmsg$can_bcm(r4, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) syz_usb_connect(0x2, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0xc3, 0x49, 0x40, 0x2040, 0xb124, 0xce00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x4, 0x0, 0x1f, 0xf5, 0x28}}]}}]}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x24a82, 0x0) 4.24042923s ago: executing program 4 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01040000000000000000070000000900010073797a300000000008000240000000032c0000000b0a010400000000000000000700ffff0900010073797a300000"], 0x7c}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001880)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000001780)={&(0x7f0000000180), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f00000016c0)=""/137, 0x89}, {&(0x7f00000000c0)=""/16, 0x10}], 0x6, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20100000", @ANYRES16=r1, @ANYBLOB="07000000000000000000020000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 3.550767106s ago: executing program 2 (id=191): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ustat(0x11, 0x0) semget$private(0x0, 0x6, 0x0) semctl$SETALL(0x0, 0x0, 0xe, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0xebff0000) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) sched_setattr(0x0, 0x0, 0x0) 3.218371641s ago: executing program 1 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01040000000000000000070000000900010073797a300000000008000240000000032c0000000b0a010400000000000000000700ffff0900010073797a300000"], 0x7c}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001880)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000001780)={&(0x7f0000000180), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f00000016c0)=""/137, 0x89}, {&(0x7f00000000c0)=""/16, 0x10}], 0x6, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20100000", @ANYRES16=r1, @ANYBLOB="07000000000000000000020000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 2.657222654s ago: executing program 0 (id=193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') fchdir(r9) timer_gettime(r8, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x74, &(0x7f0000000480)={r6, 0xfffe, 0x30, 0x20000000000005, 0x3b0000}, &(0x7f00000009c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r6, 0x328, 0x40, 0x9, 0x800, 0x7ac, 0x0, 0x3, {r10, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x401, 0x26, 0x4, 0x7, 0x10000}}, &(0x7f00000001c0)=0xb0) rmdir(&(0x7f0000000100)='./file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) 1.720680691s ago: executing program 3 (id=194): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f000000e700)=[{{0x0, 0x0, 0x0, 0x1f}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048004) 1.611495841s ago: executing program 4 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRES8=0x0], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x1, 0xd853, 0x400, 0x0, 0xf}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x40000000}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x29ff, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r6, 0x29, 0x4d, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=0x0], 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{&(0x7f0000001d80)=@caif=@util, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/16, 0x10}], 0x1}, 0x277c9a1f}, {{&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)=""/126, 0x7e}], 0x1, &(0x7f0000000480)=""/53, 0x35}, 0x8}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000540)=""/230, 0xe6}], 0x3}, 0x3}, {{&(0x7f0000000680)=@nfc_llcp, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000800)=""/82, 0x52}, {&(0x7f0000000880)}], 0x3, &(0x7f0000000a80)=""/116, 0x74}, 0x8}, {{&(0x7f0000000980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001e00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/56, 0x38}, {&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f0000000c80)=""/70, 0x46}], 0x4, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000000d80)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000e00)=""/100, 0x64}, {&(0x7f0000000e80)=""/158, 0x9e}, {&(0x7f0000000f40)=""/26, 0x1a}, {&(0x7f0000000f80)=""/153, 0x99}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/69, 0x45}, {&(0x7f00000011c0)=""/142, 0x8e}, {&(0x7f0000001280)=""/62, 0x3e}], 0x8, &(0x7f0000000a00)=""/89, 0x59}, 0x81}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000013c0)=""/33, 0x21}, {&(0x7f0000001400)=""/239, 0xef}, {&(0x7f0000001500)=""/222, 0xde}, {&(0x7f0000001600)=""/215, 0xd7}, {&(0x7f0000001700)=""/217, 0xd9}, {&(0x7f0000001800)=""/131, 0x83}, {&(0x7f00000018c0)=""/6, 0x6}, {&(0x7f0000001900)=""/132, 0x84}, {&(0x7f00000019c0)=""/194, 0xc2}, {&(0x7f0000001ac0)=""/32, 0x20}], 0xa}, 0x4}], 0x7, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) 1.053236399s ago: executing program 2 (id=196): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x20800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r9, @ANYRESOCT], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r11, 0x29, 0x4a, &(0x7f0000000000)=0x3, 0x4) 162.002263ms ago: executing program 1 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000001600)=""/179, 0xb3}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000001500)=""/125, 0x7d}], 0x6}, 0x80000700}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) 101.250605ms ago: executing program 3 (id=198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x4}}, 0x20) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000016c0)={0x2, 0x0, 0x0, &(0x7f0000001640)=[{}, {0x0}], 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) 0s ago: executing program 1 (id=199): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x4000080000000500) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 83.553887][ T5828] cgroup: Unknown subsys name 'net' [ 83.685862][ T5828] cgroup: Unknown subsys name 'cpuset' [ 83.695197][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.332422][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.523219][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.531204][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.541348][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.549237][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.557482][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.565986][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.588792][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.596831][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.604503][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.605620][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.619996][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.620812][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.627937][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.671442][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.697693][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.706262][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.713820][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.722189][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.731264][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.742722][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.776681][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.788018][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.796630][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.805453][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.813825][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.402967][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 90.486725][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 90.553070][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 90.652801][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 90.695614][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 90.775955][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.783620][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.794966][ T5853] bridge_slave_0: entered allmulticast mode [ 90.802606][ T5853] bridge_slave_0: entered promiscuous mode [ 90.819600][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.826827][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.834251][ T5853] bridge_slave_1: entered allmulticast mode [ 90.842656][ T5853] bridge_slave_1: entered promiscuous mode [ 90.995643][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.003028][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.010204][ T5851] bridge_slave_0: entered allmulticast mode [ 91.019048][ T5851] bridge_slave_0: entered promiscuous mode [ 91.055210][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.067951][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.106105][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.113350][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.120844][ T5851] bridge_slave_1: entered allmulticast mode [ 91.128152][ T5851] bridge_slave_1: entered promiscuous mode [ 91.178189][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.186495][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.193956][ T5852] bridge_slave_0: entered allmulticast mode [ 91.202081][ T5852] bridge_slave_0: entered promiscuous mode [ 91.223022][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.230255][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.238367][ T5856] bridge_slave_0: entered allmulticast mode [ 91.246089][ T5856] bridge_slave_0: entered promiscuous mode [ 91.287730][ T5853] team0: Port device team_slave_0 added [ 91.294418][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.302099][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.309536][ T5852] bridge_slave_1: entered allmulticast mode [ 91.317439][ T5852] bridge_slave_1: entered promiscuous mode [ 91.341504][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.351813][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.358938][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.366808][ T5856] bridge_slave_1: entered allmulticast mode [ 91.375014][ T5856] bridge_slave_1: entered promiscuous mode [ 91.382269][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.389411][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.397671][ T5855] bridge_slave_0: entered allmulticast mode [ 91.405607][ T5855] bridge_slave_0: entered promiscuous mode [ 91.419662][ T5853] team0: Port device team_slave_1 added [ 91.456783][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.494025][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.501664][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.508835][ T5855] bridge_slave_1: entered allmulticast mode [ 91.517885][ T5855] bridge_slave_1: entered promiscuous mode [ 91.541216][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.548199][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.574389][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.611615][ T5846] Bluetooth: hci1: command tx timeout [ 91.652292][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.659295][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.685332][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.699125][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.708637][ T5846] Bluetooth: hci0: command tx timeout [ 91.716418][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.730030][ T5851] team0: Port device team_slave_0 added [ 91.739763][ T5851] team0: Port device team_slave_1 added [ 91.748843][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.780704][ T55] Bluetooth: hci2: command tx timeout [ 91.786303][ T5846] Bluetooth: hci3: command tx timeout [ 91.829256][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.841484][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.851124][ T5846] Bluetooth: hci4: command tx timeout [ 91.856564][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.909951][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.919699][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.946863][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.977753][ T5855] team0: Port device team_slave_0 added [ 91.988384][ T5855] team0: Port device team_slave_1 added [ 91.997298][ T5852] team0: Port device team_slave_0 added [ 92.006790][ T5852] team0: Port device team_slave_1 added [ 92.013988][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.021582][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.047770][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.137874][ T5856] team0: Port device team_slave_0 added [ 92.147622][ T5856] team0: Port device team_slave_1 added [ 92.174773][ T5853] hsr_slave_0: entered promiscuous mode [ 92.182412][ T5853] hsr_slave_1: entered promiscuous mode [ 92.203015][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.210052][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.236704][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.283637][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.291052][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.317517][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.330972][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.337986][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.364612][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.376413][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.383863][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.410025][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.455737][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.462808][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.490719][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.530743][ T5851] hsr_slave_0: entered promiscuous mode [ 92.537283][ T5851] hsr_slave_1: entered promiscuous mode [ 92.543917][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.552054][ T5851] Cannot create hsr debugfs directory [ 92.572921][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.579909][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.606012][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.769538][ T5852] hsr_slave_0: entered promiscuous mode [ 92.776543][ T5852] hsr_slave_1: entered promiscuous mode [ 92.783229][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.791508][ T5852] Cannot create hsr debugfs directory [ 92.823738][ T5855] hsr_slave_0: entered promiscuous mode [ 92.830209][ T5855] hsr_slave_1: entered promiscuous mode [ 92.836704][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.844371][ T5855] Cannot create hsr debugfs directory [ 92.912136][ T5856] hsr_slave_0: entered promiscuous mode [ 92.918744][ T5856] hsr_slave_1: entered promiscuous mode [ 92.926238][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.938597][ T5856] Cannot create hsr debugfs directory [ 93.454103][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.468738][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.486482][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.500708][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.576033][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.589981][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.603881][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.632056][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.692085][ T5846] Bluetooth: hci1: command tx timeout [ 93.724197][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.736080][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.749090][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.763293][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.770936][ T5846] Bluetooth: hci0: command tx timeout [ 93.850754][ T5846] Bluetooth: hci3: command tx timeout [ 93.856244][ T5846] Bluetooth: hci2: command tx timeout [ 93.928844][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.940304][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.941370][ T5846] Bluetooth: hci4: command tx timeout [ 93.957351][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.986961][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.010222][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.069340][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.084718][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.118240][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.131589][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.166993][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.208091][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.219769][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.227109][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.259160][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.266338][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.332968][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.346783][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.412718][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.419851][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.457989][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.465172][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.496330][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.521452][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.528660][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.583703][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.590990][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.615789][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.672963][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.703252][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.736840][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.766701][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.773897][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.784458][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.791648][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.848925][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.866412][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.888492][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.896247][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.924975][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.977699][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.984913][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.079565][ T5853] veth0_vlan: entered promiscuous mode [ 95.140029][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.148713][ T5853] veth1_vlan: entered promiscuous mode [ 95.163713][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.193332][ T5855] veth0_vlan: entered promiscuous mode [ 95.254368][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.271381][ T5855] veth1_vlan: entered promiscuous mode [ 95.278908][ T5853] veth0_macvtap: entered promiscuous mode [ 95.295005][ T5853] veth1_macvtap: entered promiscuous mode [ 95.353452][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.376803][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.398665][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.409432][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.420676][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.429411][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.496686][ T5856] veth0_vlan: entered promiscuous mode [ 95.525424][ T5851] veth0_vlan: entered promiscuous mode [ 95.551239][ T5855] veth0_macvtap: entered promiscuous mode [ 95.563524][ T5856] veth1_vlan: entered promiscuous mode [ 95.573202][ T5851] veth1_vlan: entered promiscuous mode [ 95.593548][ T5855] veth1_macvtap: entered promiscuous mode [ 95.612364][ T5852] veth0_vlan: entered promiscuous mode [ 95.659721][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.675041][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.688843][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.724884][ T5852] veth1_vlan: entered promiscuous mode [ 95.747916][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.759093][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.771802][ T5846] Bluetooth: hci1: command tx timeout [ 95.778318][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.806823][ T5851] veth0_macvtap: entered promiscuous mode [ 95.839657][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.849443][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.859226][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.869446][ T5846] Bluetooth: hci0: command tx timeout [ 95.875771][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.889429][ T5851] veth1_macvtap: entered promiscuous mode [ 95.897599][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.903934][ T5856] veth0_macvtap: entered promiscuous mode [ 95.916283][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.931221][ T5846] Bluetooth: hci3: command tx timeout [ 95.936673][ T5846] Bluetooth: hci2: command tx timeout [ 95.968678][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.979415][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.990557][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.001062][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.012680][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.021008][ T55] Bluetooth: hci4: command tx timeout [ 96.039324][ T5856] veth1_macvtap: entered promiscuous mode [ 96.066009][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.079356][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.090117][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.101166][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.112557][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.122731][ T5852] veth0_macvtap: entered promiscuous mode [ 96.145985][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.152300][ T5852] veth1_macvtap: entered promiscuous mode [ 96.164322][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.164343][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.184377][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.193475][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.202631][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.224955][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.235885][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.247740][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.260053][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.270037][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.280797][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.292480][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.311215][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.327286][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.338135][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.349939][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.359985][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.370691][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.382966][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.436244][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.446192][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.458128][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.467102][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.505065][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.508651][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.532029][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.543395][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.554146][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.564067][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.575227][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.585144][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.595686][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.607029][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.654585][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.667357][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.678970][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.691661][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.705238][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.716188][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.727435][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.738713][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.748910][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.766072][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.779247][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.820088][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.835902][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.845460][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.855849][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.925567][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.935704][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.013567][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.038973][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.141761][ T10] cfg80211: failed to load regulatory.db [ 97.252731][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.263531][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.286926][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.320922][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.395300][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.414838][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.596850][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.649451][ T5906] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.667056][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.701758][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.789136][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.798871][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.848707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.876038][ T55] Bluetooth: hci1: command tx timeout [ 97.944014][ T55] Bluetooth: hci0: command tx timeout [ 98.021032][ T5846] Bluetooth: hci3: command tx timeout [ 98.029248][ T55] Bluetooth: hci2: command tx timeout [ 98.091473][ T55] Bluetooth: hci4: command tx timeout [ 98.761208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.980688][ T5894] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.100824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.110586][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.217828][ T5894] usb 4-1: config 0 has an invalid interface number: 241 but max is 1 [ 99.236010][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.302366][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 99.524420][ T5894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 99.537460][ T5891] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 99.544057][ T1210] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.613412][ T5894] usb 4-1: config 0 has no interface number 0 [ 99.624088][ T5891] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.711907][ T5894] usb 4-1: config 0 interface 241 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 8 [ 99.751015][ T5891] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.785455][ T5894] usb 4-1: config 0 interface 241 has no altsetting 0 [ 99.800818][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.811672][ T5894] usb 4-1: New USB device found, idVendor=2c42, idProduct=1608, bcdDevice=bd.4b [ 99.831246][ T5891] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 99.848159][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.863233][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.889969][ T5894] usb 4-1: config 0 descriptor?? [ 99.898013][ T5891] usb 5-1: config 0 descriptor?? [ 99.917904][ T5894] usb 4-1: Interface #241 referenced by multiple IADs [ 99.960418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.050406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.101043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.180375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.188898][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.211417][ T1210] usb 2-1: config 0 has no interfaces? [ 100.438709][ T9] usb 3-1: config 0 has no interfaces? [ 100.459256][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.474799][ T5891] playstation 0003:054C:0CE6.0001: item fetching failed at offset 0/2 [ 100.491731][ T5894] usb 4-1: string descriptor 0 read error: -71 [ 100.498425][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.510951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 100.533137][ T5894] f81232 4-1:0.241: f81534a converter detected [ 100.555392][ T5891] playstation 0003:054C:0CE6.0001: Parse failed [ 100.581119][ T9] usb 3-1: Product: syz [ 100.605143][ T5891] playstation 0003:054C:0CE6.0001: probe with driver playstation failed with error -22 [ 100.616062][ T9] usb 3-1: Manufacturer: syz [ 100.648398][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.668644][ T5894] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 100.692720][ T1210] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.708987][ T9] usb 3-1: SerialNumber: syz [ 100.714127][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.725087][ T5894] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 100.747928][ T1210] usb 2-1: Product: syz [ 100.754475][ T1210] usb 2-1: Manufacturer: syz [ 100.768524][ T9] usb 3-1: config 0 descriptor?? [ 100.778831][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.825010][ T1210] usb 2-1: SerialNumber: syz [ 100.841178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.864129][ T5894] usb 4-1: USB disconnect, device number 2 [ 100.926883][ T5894] f81232 4-1:0.241: device disconnected [ 100.933546][ T1210] usb 2-1: config 0 descriptor?? [ 100.951748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.092424][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.102518][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.338851][ T5900] usb 5-1: USB disconnect, device number 2 [ 101.427471][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.550647][ T5958] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 101.577060][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.822689][ T5962] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17'. [ 102.557473][ T5890] usb 2-1: USB disconnect, device number 2 [ 102.598912][ T5972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.724739][ T5975] 8021q: VLANs not supported on gre0 [ 102.737272][ T5972] x_tables: duplicate underflow at hook 2 [ 102.841044][ T9] usb 3-1: USB disconnect, device number 2 [ 102.884324][ T5979] input: syz0 as /devices/virtual/input/input5 [ 103.553899][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 103.681517][ T5986] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 104.185910][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.242091][ T5988] sctp: failed to load transform for md5: -2 [ 104.351047][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 104.416588][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.446320][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.461710][ T9] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 104.474741][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.501834][ T9] usb 3-1: config 0 descriptor?? [ 104.534537][ T9] usbhid 3-1:0.0: can't add hid device: -22 [ 104.540981][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.555826][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 104.600504][ T5900] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.707369][ T5894] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 104.719510][ T5894] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 104.751662][ T5900] usb 2-1: device descriptor read/64, error -71 [ 104.790500][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.816846][ T5983] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.887072][ T5894] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 104.916399][ T5983] kvm: pic: non byte read [ 105.020562][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.030521][ T5949] usb 3-1: USB disconnect, device number 3 [ 105.180468][ T5900] usb 2-1: device descriptor read/64, error -71 [ 105.291661][ T5900] usb usb2-port1: attempt power cycle [ 105.490464][ T5949] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 105.640603][ T5900] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.665369][ T5900] usb 2-1: device descriptor read/8, error -71 [ 105.681066][ T5949] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 105.689204][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.712893][ T5949] usb 4-1: config 0 has no interface number 0 [ 105.719079][ T5949] usb 4-1: config 0 interface 20 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.747633][ T5949] usb 4-1: config 0 interface 20 has no altsetting 0 [ 105.762364][ T5949] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 105.778828][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.788376][ T5949] usb 4-1: Product: syz [ 105.793096][ T5949] usb 4-1: Manufacturer: syz [ 105.797800][ T5949] usb 4-1: SerialNumber: syz [ 105.813855][ T5949] usb 4-1: config 0 descriptor?? [ 105.850612][ T5949] keyspan 4-1:0.20: Keyspan 1 port adapter converter detected [ 105.859749][ T5949] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 87 [ 105.868417][ T5949] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 7 [ 105.879644][ T5949] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 81 [ 105.889991][ T5949] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 1 [ 105.898996][ T5949] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 2 [ 105.908155][ T5949] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 85 [ 105.910577][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.919779][ T5949] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 5 [ 105.956328][ T5894] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 105.964864][ T5900] usb 2-1: device descriptor read/8, error -71 [ 105.971976][ T5949] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 106.080661][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.084900][ T5900] usb usb2-port1: unable to enumerate USB device [ 106.120764][ T5999] netlink: 'syz.3.27': attribute type 5 has an invalid length. [ 106.186789][ T5894] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 106.202633][ T5894] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 106.216626][ T5894] usb 5-1: USB disconnect, device number 3 [ 106.283325][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 106.307767][ T5949] usb 4-1: USB disconnect, device number 3 [ 106.324007][ T5891] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 106.344542][ T5949] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 106.360521][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.372081][ T5891] usb 1-1: config 0 has no interface number 0 [ 106.378240][ T5891] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 106.390292][ T5949] keyspan 4-1:0.20: device disconnected [ 106.423014][ T5891] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 106.453834][ T5891] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 106.468632][ T5891] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.481412][ T5891] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 106.487918][ T6025] team0: Device ipvlan2 failed to register rx_handler [ 106.492157][ T5891] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 106.515677][ T5891] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 106.525560][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.535072][ T5891] usb 1-1: Product: syz [ 106.539292][ T5891] usb 1-1: Manufacturer: syz [ 106.544947][ T5891] usb 1-1: SerialNumber: syz [ 106.558278][ T5891] usb 1-1: config 0 descriptor?? [ 106.564456][ T6012] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 106.571978][ T6012] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 107.250952][ T5949] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 107.471195][ T5949] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.485950][ T5949] usb 3-1: config 179 has no interface number 0 [ 107.512317][ T5949] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 107.647637][ T6042] FAULT_INJECTION: forcing a failure. [ 107.647637][ T6042] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.674891][ T5949] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 107.688878][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.1.39 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 107.688901][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.688914][ T6042] Call Trace: [ 107.688920][ T6042] [ 107.688930][ T6042] dump_stack_lvl+0x241/0x360 [ 107.688966][ T6042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.688988][ T6042] ? __pfx__printk+0x10/0x10 [ 107.689018][ T6042] should_fail_ex+0x424/0x570 [ 107.689046][ T6042] _copy_from_user+0x2d/0xb0 [ 107.689069][ T6042] generic_map_update_batch+0x59f/0x8e0 [ 107.689100][ T6042] ? __pfx_generic_map_update_batch+0x10/0x10 [ 107.689120][ T6042] ? __fget_files+0x39d/0x420 [ 107.689133][ T6042] ? __fget_files+0x2a/0x420 [ 107.689152][ T6042] ? __pfx_generic_map_update_batch+0x10/0x10 [ 107.689171][ T6042] bpf_map_do_batch+0x39a/0x660 [ 107.689192][ T6042] __sys_bpf+0x3c1/0x8b0 [ 107.689209][ T6042] ? __pfx___sys_bpf+0x10/0x10 [ 107.689233][ T6042] ? ksys_write+0x275/0x2d0 [ 107.689259][ T6042] __x64_sys_bpf+0x7c/0x90 [ 107.689282][ T6042] do_syscall_64+0xf3/0x230 [ 107.689298][ T6042] ? clear_bhb_loop+0x45/0xa0 [ 107.689316][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.689330][ T6042] RIP: 0033:0x7f094678d169 [ 107.689346][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.689358][ T6042] RSP: 002b:00007f094753f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.689374][ T6042] RAX: ffffffffffffffda RBX: 00007f09469a5fa0 RCX: 00007f094678d169 [ 107.689385][ T6042] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 107.689394][ T6042] RBP: 00007f094753f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.689404][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.689412][ T6042] R13: 0000000000000000 R14: 00007f09469a5fa0 R15: 00007f0946acfa28 [ 107.689434][ T6042] [ 107.690000][ T5949] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 108.022825][ T5949] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.060456][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.115007][ T5949] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.212110][ T6046] vlan2: entered allmulticast mode [ 108.231914][ T5949] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.343927][ T5891] usb 1-1: NFC: intf ffff888011fd7000 id ffffffff8f73ce40 [ 108.364809][ T5894] usb 5-1: no configurations [ 108.374834][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.387992][ T5894] usb 5-1: can't read configurations, error -22 [ 108.598442][ T6030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.626696][ T5891] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 108.634416][ T5949] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 108.670548][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.716174][ T5891] usb 1-1: USB disconnect, device number 2 [ 108.850689][ T5891] usb 1-1: NFC: intf ffff888011fd7000 [ 108.889621][ T5894] usb 5-1: no configurations [ 108.990221][ T5894] usb 5-1: can't read configurations, error -22 [ 109.001069][ T6030] vlan2: entered allmulticast mode [ 109.006266][ T6030] hsr0: entered allmulticast mode [ 109.109692][ T5894] usb usb5-port1: attempt power cycle [ 109.289980][ T6030] hsr_slave_0: entered allmulticast mode [ 109.353252][ T6030] hsr_slave_1: entered allmulticast mode [ 109.497991][ T9] usb 3-1: USB disconnect, device number 4 [ 109.640685][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.687322][ T5894] usb 5-1: no configurations [ 109.692676][ T5894] usb 5-1: can't read configurations, error -22 [ 109.840545][ T5894] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.887080][ T5894] usb 5-1: no configurations [ 109.895202][ T5894] usb 5-1: can't read configurations, error -22 [ 109.913841][ T5894] usb usb5-port1: unable to enumerate USB device [ 110.050706][ T6071] input: syz0 as /devices/virtual/input/input6 [ 110.269785][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 111.150835][ T6087] fuse: Bad value for 'rootmode' [ 111.156303][ T6093] FAULT_INJECTION: forcing a failure. [ 111.156303][ T6093] name failslab, interval 1, probability 0, space 0, times 1 [ 111.410565][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: syz.4.53 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 111.410589][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.410598][ T6093] Call Trace: [ 111.410605][ T6093] [ 111.410612][ T6093] dump_stack_lvl+0x241/0x360 [ 111.410643][ T6093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.410665][ T6093] ? __pfx__printk+0x10/0x10 [ 111.410690][ T6093] ? __pfx___might_resched+0x10/0x10 [ 111.410711][ T6093] should_fail_ex+0x424/0x570 [ 111.410739][ T6093] should_failslab+0xac/0x100 [ 111.410772][ T6093] __kmalloc_noprof+0xdf/0x4d0 [ 111.410800][ T6093] ? tomoyo_encode+0x26f/0x540 [ 111.410833][ T6093] tomoyo_encode+0x26f/0x540 [ 111.410865][ T6093] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 111.410891][ T6093] tomoyo_realpath_from_path+0x59e/0x5e0 [ 111.410924][ T6093] tomoyo_path_number_perm+0x245/0x790 [ 111.410945][ T6093] ? tomoyo_path_number_perm+0x215/0x790 [ 111.410965][ T6093] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.410988][ T6093] ? ksys_write+0x24e/0x2d0 [ 111.411012][ T6093] ? __lock_acquire+0xad5/0xd80 [ 111.411041][ T6093] ? __fget_files+0x2a/0x420 [ 111.411055][ T6093] ? __fget_files+0x2a/0x420 [ 111.411070][ T6093] ? __fget_files+0x2a/0x420 [ 111.411087][ T6093] security_file_ioctl+0xc6/0x2a0 [ 111.411105][ T6093] __se_sys_ioctl+0x46/0x160 [ 111.411125][ T6093] do_syscall_64+0xf3/0x230 [ 111.411141][ T6093] ? clear_bhb_loop+0x45/0xa0 [ 111.411159][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.411174][ T6093] RIP: 0033:0x7fd88478d169 [ 111.411187][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.411201][ T6093] RSP: 002b:00007fd885529038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.411218][ T6093] RAX: ffffffffffffffda RBX: 00007fd8849a5fa0 RCX: 00007fd88478d169 [ 111.411229][ T6093] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 111.411239][ T6093] RBP: 00007fd885529090 R08: 0000000000000000 R09: 0000000000000000 [ 111.411247][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.411256][ T6093] R13: 0000000000000000 R14: 00007fd8849a5fa0 R15: 00007fd884acfa28 [ 111.411278][ T6093] [ 111.411296][ T6093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.790452][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.024810][ T9] usb 4-1: config 0 has no interfaces? [ 112.129342][ T6101] vlan2: entered allmulticast mode [ 112.134919][ T6101] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 112.149447][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 112.159855][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.168367][ T9] usb 4-1: Product: syz [ 112.173069][ T9] usb 4-1: Manufacturer: syz [ 112.177821][ T9] usb 4-1: SerialNumber: syz [ 112.192101][ T6101] bridge0: port 3(vlan2) entered blocking state [ 112.200562][ T6101] bridge0: port 3(vlan2) entered disabled state [ 112.210298][ T9] usb 4-1: config 0 descriptor?? [ 112.232836][ T6101] vlan2: entered promiscuous mode [ 112.238015][ T6101] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 112.247045][ T6101] bridge0: port 3(vlan2) entered blocking state [ 112.253643][ T6101] bridge0: port 3(vlan2) entered forwarding state [ 112.437092][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.448192][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.570559][ T6095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.610463][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.690218][ T6095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.800484][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 112.840719][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.866113][ T6110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.57'. [ 112.908261][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 112.935778][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.976546][ T5891] usb 3-1: Product: syz [ 112.987682][ T5891] usb 3-1: Manufacturer: syz [ 113.009541][ T5891] usb 3-1: SerialNumber: syz [ 113.040539][ T5931] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.045030][ T5891] usb 3-1: config 0 descriptor?? [ 113.108834][ T5891] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 113.118074][ T5891] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 113.324364][ T6106] netlink: 52 bytes leftover after parsing attributes in process `syz.2.54'. [ 113.450688][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.610615][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 113.649341][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.681757][ T5891] usb 2-1: config 244 has an invalid interface number: 68 but max is 0 [ 113.727252][ T5891] usb 2-1: config 244 has no interface number 0 [ 113.768647][ T5891] usb 2-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 113.890073][ T5891] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 113.940383][ T5891] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 113.976197][ T5891] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid maxpacket 25956, setting to 1024 [ 114.003285][ T5891] usb 2-1: config 244 interface 68 altsetting 3 bulk endpoint 0xA has invalid maxpacket 1024 [ 114.017412][ T5891] usb 2-1: config 244 interface 68 has no altsetting 0 [ 114.028947][ T5891] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 114.039331][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.070393][ T5891] usb 2-1: Product: syz [ 114.080388][ T5891] usb 2-1: Manufacturer: syz [ 114.095358][ T5891] usb 2-1: SerialNumber: syz [ 114.121675][ T5900] usb 4-1: USB disconnect, device number 4 [ 114.125212][ T6115] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 114.377844][ T5891] comedi comedi0: Endpoint has wrong direction [ 114.395954][ T5891] dt9812 2-1:244.68: driver 'dt9812' failed to auto-configure device. [ 114.471184][ T5891] usb 2-1: USB disconnect, device number 7 [ 114.632309][ T6132] FAULT_INJECTION: forcing a failure. [ 114.632309][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 114.685489][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.3.63 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 114.685521][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.685534][ T6132] Call Trace: [ 114.685543][ T6132] [ 114.685552][ T6132] dump_stack_lvl+0x241/0x360 [ 114.685593][ T6132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.685625][ T6132] ? __pfx__printk+0x10/0x10 [ 114.685669][ T6132] should_fail_ex+0x424/0x570 [ 114.685710][ T6132] should_failslab+0xac/0x100 [ 114.685743][ T6132] __kmalloc_cache_noprof+0x73/0x370 [ 114.685773][ T6132] ? sctp_add_bind_addr+0x89/0x3a0 [ 114.685802][ T6132] sctp_add_bind_addr+0x89/0x3a0 [ 114.685831][ T6132] sctp_copy_local_addr_list+0x313/0x500 [ 114.685858][ T6132] ? sctp_copy_local_addr_list+0xad/0x500 [ 114.685883][ T6132] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 114.685909][ T6132] ? sctp_v6_is_any+0x60/0x70 [ 114.685936][ T6132] ? sctp_copy_one_addr+0x94/0x360 [ 114.685965][ T6132] sctp_bind_addr_copy+0xad/0x3b0 [ 114.685989][ T6132] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 114.686027][ T6132] sctp_connect_new_asoc+0x337/0x700 [ 114.686061][ T6132] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 114.686088][ T6132] ? sctp_sendmsg+0xf30/0x3620 [ 114.686122][ T6132] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 114.686158][ T6132] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 114.686185][ T6132] sctp_sendmsg+0x2009/0x3620 [ 114.686238][ T6132] ? __pfx_sctp_sendmsg+0x10/0x10 [ 114.686271][ T6132] ? aa_sk_perm+0x96f/0xac0 [ 114.686317][ T6132] ? inet_sendmsg+0x330/0x390 [ 114.686343][ T6132] __sock_sendmsg+0x1a6/0x270 [ 114.686375][ T6132] __sys_sendto+0x365/0x4c0 [ 114.686411][ T6132] ? __pfx___sys_sendto+0x10/0x10 [ 114.686457][ T6132] ? __fget_files+0x2a/0x420 [ 114.686492][ T6132] ? ksys_write+0x275/0x2d0 [ 114.686528][ T6132] __x64_sys_sendto+0xde/0x100 [ 114.686563][ T6132] do_syscall_64+0xf3/0x230 [ 114.686586][ T6132] ? clear_bhb_loop+0x45/0xa0 [ 114.686610][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.686630][ T6132] RIP: 0033:0x7f884d58d169 [ 114.686649][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.686666][ T6132] RSP: 002b:00007f884d3f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.686688][ T6132] RAX: ffffffffffffffda RBX: 00007f884d7a5fa0 RCX: 00007f884d58d169 [ 114.686703][ T6132] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 114.686715][ T6132] RBP: 00007f884d3f7090 R08: 0000200000000080 R09: 000000000000001c [ 114.686729][ T6132] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 114.686741][ T6132] R13: 0000000000000000 R14: 00007f884d7a5fa0 R15: 00007f884d8cfa28 [ 114.686773][ T6132] [ 115.054768][ T5891] usb 3-1: USB disconnect, device number 5 [ 115.448811][ T6146] pim6reg: entered allmulticast mode [ 115.640562][ T5890] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 115.650921][ T5900] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 115.747556][ T6143] pim6reg: left allmulticast mode [ 115.824555][ T5890] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 115.835883][ T5890] usb 3-1: config 179 has no interface number 0 [ 115.854409][ T5890] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 115.875188][ T5900] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 115.891897][ T5900] usb 2-1: config 179 has no interface number 0 [ 115.903048][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 115.914936][ T5890] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 115.928087][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 115.940074][ T5890] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 115.953552][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 115.970168][ T5890] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 116.016889][ T5890] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 116.030645][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 116.129071][ T5900] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 116.146711][ T5890] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.161702][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.171904][ T5900] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.299433][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.311090][ T6142] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.321868][ T5890] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 116.359737][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 116.373397][ T6156] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 116.400706][ T5891] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.499504][ T6145] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.547318][ T5900] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 116.563244][ T6142] vlan2: entered allmulticast mode [ 116.608177][ T5891] usb 5-1: config 0 has no interfaces? [ 116.642159][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 116.651895][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.664805][ T5891] usb 5-1: Product: syz [ 116.681343][ T5891] usb 5-1: Manufacturer: syz [ 116.687465][ T5891] usb 5-1: SerialNumber: syz [ 116.732596][ T5891] usb 5-1: config 0 descriptor?? [ 116.797293][ T5891] usb 3-1: USB disconnect, device number 6 [ 116.899228][ T6145] vlan3: entered allmulticast mode [ 116.979687][ T6145] hsr0: entered allmulticast mode [ 116.985153][ T6145] hsr_slave_0: entered allmulticast mode [ 116.992239][ T6145] hsr_slave_1: entered allmulticast mode [ 117.044583][ T6161] FAULT_INJECTION: forcing a failure. [ 117.044583][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 117.065457][ T6161] CPU: 0 UID: 0 PID: 6161 Comm: syz.0.74 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 117.065489][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.065510][ T6161] Call Trace: [ 117.065519][ T6161] [ 117.065527][ T6161] dump_stack_lvl+0x241/0x360 [ 117.065566][ T6161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.065589][ T6161] ? __pfx__printk+0x10/0x10 [ 117.065613][ T6161] ? __pfx___might_resched+0x10/0x10 [ 117.065634][ T6161] should_fail_ex+0x424/0x570 [ 117.065662][ T6161] should_failslab+0xac/0x100 [ 117.065684][ T6161] __kmalloc_node_noprof+0xe7/0x4d0 [ 117.065714][ T6161] ? alloc_slab_obj_exts+0x3a/0xa0 [ 117.065737][ T6161] alloc_slab_obj_exts+0x3a/0xa0 [ 117.065756][ T6161] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 117.065779][ T6161] ? kasan_unpoison+0x48/0x70 [ 117.065798][ T6161] __kmalloc_cache_noprof+0x289/0x370 [ 117.065818][ T6161] ? ipv6_add_addr+0x599/0x10d0 [ 117.065844][ T6161] ipv6_add_addr+0x599/0x10d0 [ 117.065871][ T6161] ? __pfx_ipv6_add_addr+0x10/0x10 [ 117.065903][ T6161] inet6_addr_add+0x3be/0xee0 [ 117.065924][ T6161] ? __pfx_inet6_addr_add+0x10/0x10 [ 117.065939][ T6161] ? ipv6_get_ifaddr+0x1e1/0x8f0 [ 117.065966][ T6161] ? ipv6_get_ifaddr+0x801/0x8f0 [ 117.065990][ T6161] ? ipv6_get_ifaddr+0x1e1/0x8f0 [ 117.066013][ T6161] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 117.066035][ T6161] ? ipv6_mc_up+0x3c9/0x570 [ 117.066056][ T6161] inet6_rtm_newaddr+0xac8/0xf40 [ 117.066082][ T6161] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 117.066121][ T6161] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 117.066142][ T6161] rtnetlink_rcv_msg+0x80f/0xd70 [ 117.066161][ T6161] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 117.066183][ T6161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.066207][ T6161] ? ref_tracker_free+0x63e/0x7e0 [ 117.066228][ T6161] netlink_rcv_skb+0x208/0x480 [ 117.066248][ T6161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.066268][ T6161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.066300][ T6161] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.066328][ T6161] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.066356][ T6161] netlink_unicast+0x7f8/0x9a0 [ 117.066390][ T6161] ? __pfx_netlink_unicast+0x10/0x10 [ 117.066414][ T6161] ? skb_put+0x114/0x1f0 [ 117.066440][ T6161] netlink_sendmsg+0x8c3/0xcd0 [ 117.066469][ T6161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.066491][ T6161] ? aa_sock_msg_perm+0x91/0x160 [ 117.066516][ T6161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.066533][ T6161] __sock_sendmsg+0x221/0x270 [ 117.066554][ T6161] ____sys_sendmsg+0x523/0x860 [ 117.066575][ T6161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.066602][ T6161] __sys_sendmmsg+0x3a0/0x7b0 [ 117.066625][ T6161] ? __pfx___sys_sendmmsg+0x10/0x10 [ 117.066665][ T6161] ? rcu_read_lock_any_held+0xbb/0x160 [ 117.066686][ T6161] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 117.066750][ T6161] ? vfs_write+0xb29/0xd10 [ 117.066774][ T6161] ? ksys_write+0x24e/0x2d0 [ 117.066794][ T6161] ? __mutex_unlock_slowpath+0x229/0x800 [ 117.066832][ T6161] ? ksys_write+0x275/0x2d0 [ 117.066858][ T6161] __x64_sys_sendmmsg+0xa0/0xb0 [ 117.066874][ T6161] do_syscall_64+0xf3/0x230 [ 117.066889][ T6161] ? clear_bhb_loop+0x45/0xa0 [ 117.066907][ T6161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.066922][ T6161] RIP: 0033:0x7f7ee758d169 [ 117.066940][ T6161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.066953][ T6161] RSP: 002b:00007f7ee8434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.066974][ T6161] RAX: ffffffffffffffda RBX: 00007f7ee77a5fa0 RCX: 00007f7ee758d169 [ 117.066985][ T6161] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 117.066995][ T6161] RBP: 00007f7ee8434090 R08: 0000000000000000 R09: 0000000000000000 [ 117.067004][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.067012][ T6161] R13: 0000000000000000 R14: 00007f7ee77a5fa0 R15: 00007f7ee78cfa28 [ 117.067035][ T6161] [ 117.478768][ T6164] process 'syz.3.73' launched './file0' with NULL argv: empty string added [ 117.542369][ T9] usb 2-1: USB disconnect, device number 8 [ 118.036962][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 118.360534][ T5900] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.510419][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 118.521764][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.566669][ T5900] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 118.588736][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.600162][ T5900] usb 4-1: Product: syz [ 118.607041][ T5900] usb 4-1: Manufacturer: syz [ 118.627736][ T5900] usb 4-1: SerialNumber: syz [ 118.658816][ T5900] usb 4-1: config 0 descriptor?? [ 118.695066][ T5900] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 118.733448][ T5900] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 118.788077][ T6184] FAULT_INJECTION: forcing a failure. [ 118.788077][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.906715][ T6172] netlink: 52 bytes leftover after parsing attributes in process `syz.3.76'. [ 118.929074][ T5894] usb 5-1: USB disconnect, device number 9 [ 118.939495][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.2.82 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 118.939526][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.939539][ T6184] Call Trace: [ 118.939546][ T6184] [ 118.939555][ T6184] dump_stack_lvl+0x241/0x360 [ 118.939594][ T6184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.939623][ T6184] ? __pfx__printk+0x10/0x10 [ 118.939666][ T6184] should_fail_ex+0x424/0x570 [ 118.939704][ T6184] _copy_from_iter+0x211/0x1c70 [ 118.939737][ T6184] ? __build_skb_around+0x247/0x3d0 [ 118.939772][ T6184] ? __alloc_skb+0x298/0x480 [ 118.939810][ T6184] ? __pfx__copy_from_iter+0x10/0x10 [ 118.939839][ T6184] ? __pfx___alloc_skb+0x10/0x10 [ 118.939870][ T6184] ? skb_put+0x114/0x1f0 [ 118.939908][ T6184] netlink_sendmsg+0x73c/0xcd0 [ 118.939949][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.939980][ T6184] ? aa_sock_msg_perm+0x91/0x160 [ 118.940014][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.940038][ T6184] __sock_sendmsg+0x221/0x270 [ 118.940067][ T6184] ____sys_sendmsg+0x523/0x860 [ 118.940096][ T6184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.940114][ T6184] ? __fget_files+0x2a/0x420 [ 118.940136][ T6184] ? __fget_files+0x2a/0x420 [ 118.940164][ T6184] __sys_sendmsg+0x271/0x360 [ 118.940190][ T6184] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.940266][ T6184] ? do_syscall_64+0xb6/0x230 [ 118.940291][ T6184] do_syscall_64+0xf3/0x230 [ 118.940312][ T6184] ? clear_bhb_loop+0x45/0xa0 [ 118.940336][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.940354][ T6184] RIP: 0033:0x7fa415f8d169 [ 118.940372][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.940388][ T6184] RSP: 002b:00007fa416e9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.940409][ T6184] RAX: ffffffffffffffda RBX: 00007fa4161a5fa0 RCX: 00007fa415f8d169 [ 118.940424][ T6184] RDX: 0000000000040080 RSI: 0000200000001700 RDI: 0000000000000003 [ 118.940436][ T6184] RBP: 00007fa416e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 118.940448][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.940460][ T6184] R13: 0000000000000000 R14: 00007fa4161a5fa0 R15: 00007fa4162cfa28 [ 118.940491][ T6184] [ 119.450647][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 119.624609][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.722594][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 119.747273][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 23094, setting to 64 [ 119.778138][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.804272][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 119.861260][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.880402][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.903292][ T9] usb 2-1: Manufacturer: syz [ 119.951940][ T9] usb 2-1: config 0 descriptor?? [ 120.165613][ T6185] Invalid logical block size (254) [ 120.206036][ T5931] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.245657][ T1210] usb 2-1: USB disconnect, device number 9 [ 120.380786][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 120.567759][ T5931] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.663823][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.761822][ T5931] usb 3-1: Product: syz [ 120.792870][ T5931] usb 3-1: Manufacturer: syz [ 120.813197][ T5931] usb 3-1: SerialNumber: syz [ 120.856957][ T5931] usb 3-1: config 0 descriptor?? [ 121.068859][ T9] usb 4-1: USB disconnect, device number 5 [ 121.170264][ T5931] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.880459][ T5900] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.200446][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 122.207654][ T5900] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 122.216368][ T5900] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 122.244781][ T5900] usb 4-1: config 6 has no interface number 0 [ 122.263010][ T5900] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 122.298819][ T5900] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 122.344956][ T5900] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.403544][ T5900] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 122.413251][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.439010][ T5900] usb 4-1: Product: syz [ 122.450965][ T5900] usb 4-1: Manufacturer: syz [ 122.470119][ T5900] usb 4-1: SerialNumber: syz [ 122.502838][ T5900] hso 4-1:6.2: Failed to find INT IN ep [ 123.624264][ T5900] usb 4-1: USB disconnect, device number 6 [ 124.116000][ T5931] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 124.133702][ T5931] usb 3-1: USB disconnect, device number 7 [ 124.522604][ T6233] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 124.985606][ T5949] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.043037][ T6245] Zero length message leads to an empty skb [ 125.164227][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 125.187987][ T5949] usb 3-1: config index 0 descriptor too short (expected 46935, got 18) [ 125.200561][ T5949] usb 3-1: config 184 has too many interfaces: 116, using maximum allowed: 32 [ 125.232281][ T5949] usb 3-1: config 184 has an invalid interface descriptor of length 5, skipping [ 125.264229][ T5949] usb 3-1: config 184 has an invalid descriptor of length 114, skipping remainder of the config [ 125.276847][ T5949] usb 3-1: config 184 has 0 interfaces, different from the descriptor's value: 116 [ 125.327212][ T5949] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 125.347234][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.362713][ T5949] usb 3-1: Product: syz [ 125.367527][ T5949] usb 3-1: Manufacturer: syz [ 125.376425][ T5949] usb 3-1: SerialNumber: syz [ 125.461471][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.524754][ T6257] netem: incorrect ge model size [ 125.532674][ T6258] netem: incorrect ge model size [ 125.570278][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 125.590589][ T5900] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.625496][ T5949] usb 3-1: USB disconnect, device number 8 [ 125.650486][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 125.657676][ T5890] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 125.693554][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.735508][ T5890] usb 1-1: config 0 descriptor?? [ 125.775130][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 125.793534][ T5890] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 125.812483][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.833012][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 125.842309][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.850681][ T5900] usb 5-1: Product: syz [ 125.854999][ T5900] usb 5-1: Manufacturer: syz [ 125.859614][ T5900] usb 5-1: SerialNumber: syz [ 125.899794][ T5900] usb 5-1: config 0 descriptor?? [ 125.919877][ T5900] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 125.941158][ T5900] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 126.024951][ T5890] usb 1-1: qt2_attach - failed to power on unit: -71 [ 126.035423][ T5890] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 126.074449][ T5890] usb 1-1: USB disconnect, device number 3 [ 126.134043][ T6255] netlink: 52 bytes leftover after parsing attributes in process `syz.4.99'. [ 126.345968][ T6274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.444773][ T6279] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.270540][ T5949] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.688995][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 127.706673][ T5949] usb 2-1: too many configurations: 16, using maximum allowed: 8 [ 127.727179][ T5949] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 127.735536][ T5949] usb 2-1: can't read configurations, error -61 [ 127.870845][ T5949] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 128.119997][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 128.135805][ T5949] usb 2-1: too many configurations: 16, using maximum allowed: 8 [ 128.162005][ T5949] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 128.169934][ T5949] usb 2-1: can't read configurations, error -61 [ 128.179815][ T5949] usb usb2-port1: attempt power cycle [ 128.219548][ T24] usb 5-1: USB disconnect, device number 10 [ 128.575593][ T5949] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 128.631749][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 128.655284][ T5949] usb 2-1: too many configurations: 16, using maximum allowed: 8 [ 128.680127][ T5949] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 128.710225][ T5949] usb 2-1: can't read configurations, error -61 [ 128.840515][ T5891] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.905307][ T5949] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 128.952072][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 128.970665][ T5949] usb 2-1: too many configurations: 16, using maximum allowed: 8 [ 128.989394][ T5949] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 128.999531][ T5891] usb 5-1: device descriptor read/64, error -71 [ 129.007704][ T5949] usb 2-1: can't read configurations, error -61 [ 129.017244][ T5949] usb usb2-port1: unable to enumerate USB device [ 129.250658][ T5891] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.355355][ T6320] input: syz0 as /devices/virtual/input/input7 [ 129.418803][ T5891] usb 5-1: device descriptor read/64, error -71 [ 129.485033][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'. [ 129.530698][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 129.560889][ T5891] usb usb5-port1: attempt power cycle [ 129.920635][ T5891] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.953133][ T5891] usb 5-1: device descriptor read/8, error -71 [ 130.201419][ T5891] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.224111][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 130.270717][ T5891] usb 5-1: device descriptor read/8, error -71 [ 130.400961][ T5891] usb usb5-port1: unable to enumerate USB device [ 130.494521][ T6332] vlan2: entered allmulticast mode [ 130.524931][ T6332] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 130.596218][ T6332] bridge0: port 3(vlan2) entered blocking state [ 130.626953][ T6332] bridge0: port 3(vlan2) entered disabled state [ 130.678960][ T6332] vlan2: entered promiscuous mode [ 130.696310][ T6332] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 130.727364][ T6332] bridge0: port 3(vlan2) entered blocking state [ 130.734559][ T6332] bridge0: port 3(vlan2) entered forwarding state [ 130.933053][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 132.011023][ T5891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.224279][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.246421][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.340700][ T5949] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.363641][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.430625][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.520798][ T5891] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.550941][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 132.568979][ T5949] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.590947][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.614131][ T5949] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.632809][ T5891] usb 5-1: config 0 descriptor?? [ 132.780252][ T5949] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.941561][ T5949] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.023210][ T5949] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.040410][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.085206][ T6369] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 133.134927][ T5891] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 133.164307][ T5891] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 133.231680][ T5891] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 133.285277][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.295838][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.319276][ T6367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.129'. [ 133.331857][ T6367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.129'. [ 133.378979][ T5891] usb 5-1: USB disconnect, device number 15 [ 135.103272][ T6386] autofs4:pid:6386:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 135.180631][ T6386] autofs4:pid:6386:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 135.704060][ T5890] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 135.807695][ T5949] usb 3-1: usb_control_msg returned -71 [ 135.841461][ T5949] usbtmc 3-1:16.0: can't read capabilities [ 135.893437][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 135.923305][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.939427][ T5949] usb 3-1: USB disconnect, device number 9 [ 135.952576][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.047924][ T5890] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 136.107265][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.241638][ T5890] usb 5-1: config 0 descriptor?? [ 136.713125][ T6394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.762968][ T6413] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 136.775112][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 137.657124][ T6435] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 138.098764][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.105450][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.150722][ T5949] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 138.323459][ T5949] usb 4-1: config 0 has no interfaces? [ 138.338142][ T5949] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 138.379552][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.411895][ T5949] usb 4-1: Product: syz [ 138.416124][ T5949] usb 4-1: Manufacturer: syz [ 138.453181][ T5949] usb 4-1: SerialNumber: syz [ 138.501410][ T5949] usb 4-1: config 0 descriptor?? [ 138.820280][ T6434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.513825][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 139.532913][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 139.568839][ T5890] usb 5-1: USB disconnect, device number 16 [ 139.942652][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.4.154'. [ 139.952665][ T6475] netlink: 60 bytes leftover after parsing attributes in process `syz.4.154'. [ 140.380476][ T5890] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 140.535035][ T5890] usb 5-1: config 0 has no interfaces? [ 140.543503][ T5890] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.555860][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.626393][ T5949] usb 4-1: USB disconnect, device number 7 [ 140.634242][ T5890] usb 5-1: Product: syz [ 140.659217][ T5890] usb 5-1: Manufacturer: syz [ 140.679001][ T5890] usb 5-1: SerialNumber: syz [ 140.746362][ T5890] usb 5-1: config 0 descriptor?? [ 140.966310][ T6475] mmap: syz.4.154 (6475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.193216][ T5949] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.419328][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.480504][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.644462][ T5890] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 141.652025][ T5949] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 141.652058][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.671192][ T5949] usb 4-1: config 0 descriptor?? [ 141.780918][ T5891] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.877227][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.896693][ T5890] usb 1-1: not running at top speed; connect to a high speed hub [ 141.917945][ T5890] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 141.949740][ T5890] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 141.960703][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 141.968251][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.978545][ T5890] usb 1-1: can't read configurations, error -61 [ 141.993711][ T6508] FAULT_INJECTION: forcing a failure. [ 141.993711][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 142.004990][ T5891] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 142.009306][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.2.159 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 142.009342][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.009355][ T6508] Call Trace: [ 142.009366][ T6508] [ 142.009375][ T6508] dump_stack_lvl+0x241/0x360 [ 142.009418][ T6508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.009450][ T6508] ? __pfx__printk+0x10/0x10 [ 142.009493][ T6508] ? __pfx___might_resched+0x10/0x10 [ 142.009526][ T6508] should_fail_ex+0x424/0x570 [ 142.009567][ T6508] should_failslab+0xac/0x100 [ 142.009600][ T6508] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 142.009633][ T6508] ? __alloc_skb+0x1c2/0x480 [ 142.009669][ T6508] __alloc_skb+0x1c2/0x480 [ 142.009707][ T6508] ? __pfx___alloc_skb+0x10/0x10 [ 142.009740][ T6508] ? netlink_autobind+0xd6/0x2f0 [ 142.009767][ T6508] ? netlink_autobind+0x2b0/0x2f0 [ 142.009802][ T6508] netlink_sendmsg+0x638/0xcd0 [ 142.009843][ T6508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.009877][ T6508] ? aa_sock_msg_perm+0x91/0x160 [ 142.009914][ T6508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.009939][ T6508] __sock_sendmsg+0x221/0x270 [ 142.009969][ T6508] ____sys_sendmsg+0x523/0x860 [ 142.010001][ T6508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.010019][ T6508] ? __fget_files+0x2a/0x420 [ 142.010043][ T6508] ? __fget_files+0x2a/0x420 [ 142.010073][ T6508] __sys_sendmsg+0x271/0x360 [ 142.010101][ T6508] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.010186][ T6508] ? do_syscall_64+0xb6/0x230 [ 142.010214][ T6508] do_syscall_64+0xf3/0x230 [ 142.010237][ T6508] ? clear_bhb_loop+0x45/0xa0 [ 142.010263][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.010284][ T6508] RIP: 0033:0x7fa415f8d169 [ 142.010309][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.010327][ T6508] RSP: 002b:00007fa416e9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.010351][ T6508] RAX: ffffffffffffffda RBX: 00007fa4161a5fa0 RCX: 00007fa415f8d169 [ 142.010367][ T6508] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 142.010381][ T6508] RBP: 00007fa416e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 142.010394][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.010407][ T6508] R13: 0000000000000000 R14: 00007fa4161a5fa0 R15: 00007fa4162cfa28 [ 142.010440][ T6508] [ 142.240564][ T5890] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 142.251088][ T5949] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 142.296290][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.318237][ T5891] usb 2-1: config 0 descriptor?? [ 142.425750][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 142.443881][ T5890] usb 1-1: not running at top speed; connect to a high speed hub [ 142.463296][ T5890] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 142.486243][ T5890] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 142.506056][ T5890] usb 1-1: can't read configurations, error -61 [ 142.528466][ T5890] usb usb1-port1: attempt power cycle [ 142.850724][ T5931] usb 5-1: USB disconnect, device number 17 [ 142.921141][ T5890] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 142.964983][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 142.965651][ T5890] usb 1-1: not running at top speed; connect to a high speed hub [ 142.965702][ T5890] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 142.983750][ T5890] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 142.983795][ T5890] usb 1-1: can't read configurations, error -61 [ 143.120433][ T5890] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 143.144757][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.145432][ T5890] usb 1-1: not running at top speed; connect to a high speed hub [ 143.145480][ T5890] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 143.147020][ T5890] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 143.147060][ T5890] usb 1-1: can't read configurations, error -61 [ 143.147360][ T5890] usb usb1-port1: unable to enumerate USB device [ 143.270542][ T5931] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 143.420986][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 143.434348][ T5931] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.445768][ T5931] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.530279][ T5931] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 143.540219][ T5931] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 143.556910][ T5931] usb 5-1: Product: syz [ 143.567953][ T5931] usb 5-1: Manufacturer: syz [ 143.608505][ T5931] hub 5-1:4.0: USB hub found [ 143.812519][ T5900] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.880716][ T5931] hub 5-1:4.0: 7 ports detected [ 143.907638][ T5931] hub 5-1:4.0: insufficient power available to use all downstream ports [ 143.956098][ T5949] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71 [ 143.981093][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 144.002096][ T5900] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 144.004357][ T5949] usb 4-1: USB disconnect, device number 8 [ 144.021905][ T5900] usb 3-1: config 0 has no interface number 0 [ 144.028297][ T5900] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.045647][ T5900] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 144.057915][ T5900] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 144.113152][ T5900] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.136517][ T5900] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 144.152988][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.170838][ T5900] usb 3-1: Product: syz [ 144.178237][ T5900] usb 3-1: Manufacturer: syz [ 144.186702][ T5900] usb 3-1: SerialNumber: syz [ 144.196700][ T5900] usb 3-1: config 0 descriptor?? [ 144.263751][ T30] audit: type=1326 audit(1743652474.341:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 144.308922][ T5931] hub 5-1:4.0: set hub depth failed [ 144.321194][ T30] audit: type=1326 audit(1743652474.351:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 144.396020][ T5931] usb 5-1: USB disconnect, device number 18 [ 144.438255][ T5900] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 144.521861][ T30] audit: type=1326 audit(1743652474.351:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 144.545203][ T30] audit: type=1326 audit(1743652474.351:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 144.567115][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.573921][ T30] audit: type=1326 audit(1743652474.351:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 144.596468][ T30] audit: type=1326 audit(1743652474.351:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 144.618457][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.647794][ T30] audit: type=1326 audit(1743652474.351:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 144.658347][ T5900] usb 3-1: USB disconnect, device number 10 [ 144.669864][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.846979][ T30] audit: type=1326 audit(1743652474.351:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 144.868977][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.904091][ T5891] usb 2-1: USB disconnect, device number 14 [ 145.007423][ T30] audit: type=1326 audit(1743652474.351:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 145.034704][ T30] audit: type=1326 audit(1743652474.351:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f884d58d169 code=0x7ffc0000 [ 145.410449][ T5900] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.520550][ T5890] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.594509][ T5900] usb 3-1: too many configurations: 180, using maximum allowed: 8 [ 145.596190][ T5900] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 145.596230][ T5900] usb 3-1: can't read configurations, error -22 [ 145.720480][ T5900] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.131272][ T5900] usb 3-1: too many configurations: 180, using maximum allowed: 8 [ 146.139957][ T5890] usb 1-1: no configurations [ 146.161607][ T5890] usb 1-1: can't read configurations, error -22 [ 146.179390][ T5900] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 146.240497][ T5900] usb 3-1: can't read configurations, error -22 [ 146.272327][ T5900] usb usb3-port1: attempt power cycle [ 146.391030][ T5890] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.683158][ T5890] usb 1-1: no configurations [ 146.687844][ T5890] usb 1-1: can't read configurations, error -22 [ 146.730488][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 146.889191][ T5890] usb usb1-port1: attempt power cycle [ 147.094941][ T24] usb 5-1: config 0 has no interfaces? [ 147.178692][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.253172][ T5900] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 147.261048][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.269085][ T24] usb 5-1: Product: syz [ 147.318759][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.405334][ T24] usb 5-1: Manufacturer: syz [ 147.422433][ T24] usb 5-1: SerialNumber: syz [ 147.464538][ T24] usb 5-1: config 0 descriptor?? [ 147.472666][ T5890] usb 1-1: no configurations [ 147.477293][ T5890] usb 1-1: can't read configurations, error -22 [ 147.514182][ T5900] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.625978][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 147.702537][ T5900] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 147.711682][ T5900] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 147.734692][ T5900] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 147.750474][ T5890] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.769457][ T5900] usb 3-1: config 8 has no interface number 0 [ 147.852547][ T5900] usb 3-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 147.870775][ T5900] usb 3-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 147.890693][ T5900] usb 3-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.920704][ T5890] usb 1-1: no configurations [ 147.925471][ T5890] usb 1-1: can't read configurations, error -22 [ 147.937847][ T5890] usb usb1-port1: unable to enumerate USB device [ 148.335452][ T5900] usb 3-1: config 8 interface 223 has no altsetting 0 [ 148.351359][ T5900] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 148.360895][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.368915][ T5900] usb 3-1: Product: syz [ 148.373286][ T5900] usb 3-1: Manufacturer: syz [ 148.380438][ T5900] usb 3-1: SerialNumber: syz [ 148.693332][ T6604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.923346][ T5900] usb 3-1: USB disconnect, device number 14 [ 149.101723][ T6615] netlink: 'syz.3.179': attribute type 21 has an invalid length. [ 149.908189][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 150.016366][ T5900] usb 5-1: USB disconnect, device number 19 [ 150.090888][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 150.110067][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.138453][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 150.158904][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.169251][ T24] usb 3-1: Product: syz [ 150.178429][ T24] usb 3-1: Manufacturer: syz [ 150.185953][ T24] usb 3-1: SerialNumber: syz [ 150.966506][ T24] usb 3-1: config 0 descriptor?? [ 151.004711][ T24] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 151.063789][ T24] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 151.257190][ T6625] netlink: 52 bytes leftover after parsing attributes in process `syz.2.182'. [ 152.670630][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 152.705580][ T24] usb 3-1: USB disconnect, device number 15 [ 152.870540][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 152.950549][ T9] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 153.038973][ T9] usb 4-1: config 0 has no interface number 0 [ 153.062211][ T9] usb 4-1: config 0 interface 156 has no altsetting 0 [ 153.103054][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b124, bcdDevice=ce.00 [ 153.122910][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.136721][ T9] usb 4-1: Product: syz [ 153.155317][ T9] usb 4-1: Manufacturer: syz [ 153.337404][ T9] usb 4-1: SerialNumber: syz [ 153.446978][ T9] usb 4-1: config 0 descriptor?? [ 153.761832][ T9] usb 4-1: USB disconnect, device number 9 [ 154.046494][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 154.605821][ T5890] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.877374][ T5890] usb 1-1: no configurations [ 154.886000][ T5890] usb 1-1: can't read configurations, error -22 [ 155.160557][ T5890] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.390560][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 155.485751][ T5890] usb 1-1: no configurations [ 155.502683][ T5890] usb 1-1: can't read configurations, error -22 [ 155.510104][ T5890] usb usb1-port1: attempt power cycle [ 155.540528][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 155.547745][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.559524][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.578513][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.602466][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 155.611729][ T24] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 155.622451][ T24] usb 5-1: Product: syz [ 155.626803][ T24] usb 5-1: Manufacturer: syz [ 155.632232][ T24] usb 5-1: SerialNumber: syz [ 155.746127][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 155.860502][ T5890] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.901882][ T5890] usb 1-1: no configurations [ 155.906609][ T5890] usb 1-1: can't read configurations, error -22 [ 156.001269][ T5900] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 156.025333][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.040422][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.051723][ T5890] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 156.087687][ T5890] usb 1-1: no configurations [ 156.093731][ T5890] usb 1-1: can't read configurations, error -22 [ 156.110026][ T5890] usb usb1-port1: unable to enumerate USB device [ 156.196339][ T5900] usb 3-1: config 0 has no interfaces? [ 156.213690][ T5900] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.228064][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.259178][ T5900] usb 3-1: Product: syz [ 156.267672][ T5900] usb 3-1: Manufacturer: syz [ 156.278098][ T5900] usb 3-1: SerialNumber: syz [ 156.304636][ T5900] usb 3-1: config 0 descriptor?? [ 156.405083][ T5900] usb 5-1: USB disconnect, device number 20 [ 156.464948][ T5900] appletouch 5-1:1.0: input: appletouch disconnected [ 156.625921][ T6688] netlink: 64 bytes leftover after parsing attributes in process `syz.2.196'. [ 156.636386][ T6688] [ 156.638747][ T6688] ====================================================== [ 156.645769][ T6688] WARNING: possible circular locking dependency detected [ 156.652820][ T6688] 6.14.0-syzkaller-12508-g92b71befc349 #0 Not tainted [ 156.659583][ T6688] ------------------------------------------------------ [ 156.666607][ T6688] syz.2.196/6688 is trying to acquire lock: [ 156.672502][ T6688] ffff888027b5b0d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: gtp_encap_enable_socket+0x306/0x630 [ 156.682456][ T6688] [ 156.682456][ T6688] but task is already holding lock: [ 156.689824][ T6688] ffffffff900fc2c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 156.698472][ T6688] [ 156.698472][ T6688] which lock already depends on the new lock. [ 156.698472][ T6688] [ 156.708880][ T6688] [ 156.708880][ T6688] the existing dependency chain (in reverse order) is: [ 156.717897][ T6688] [ 156.717897][ T6688] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 156.725129][ T6688] lock_acquire+0x116/0x2f0 [ 156.730175][ T6688] __mutex_lock+0x1a5/0x10c0 [ 156.735296][ T6688] start_sync_thread+0xde/0x2d60 [ 156.740765][ T6688] do_ip_vs_set_ctl+0x48e/0xe50 [ 156.746146][ T6688] nf_setsockopt+0x295/0x2c0 [ 156.751275][ T6688] smc_setsockopt+0x25c/0xd50 [ 156.756480][ T6688] do_sock_setsockopt+0x3b1/0x710 [ 156.762039][ T6688] __x64_sys_setsockopt+0x1ee/0x280 [ 156.767780][ T6688] do_syscall_64+0xf3/0x230 [ 156.772809][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.779229][ T6688] [ 156.779229][ T6688] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 156.787850][ T6688] lock_acquire+0x116/0x2f0 [ 156.792883][ T6688] __mutex_lock+0x1a5/0x10c0 [ 156.798002][ T6688] smc_switch_to_fallback+0x35/0xda0 [ 156.803819][ T6688] smc_sendmsg+0x11f/0x530 [ 156.808769][ T6688] __sock_sendmsg+0x221/0x270 [ 156.813977][ T6688] __sys_sendto+0x365/0x4c0 [ 156.819013][ T6688] __x64_sys_sendto+0xde/0x100 [ 156.824311][ T6688] do_syscall_64+0xf3/0x230 [ 156.829341][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.835759][ T6688] [ 156.835759][ T6688] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 156.843417][ T6688] validate_chain+0xa69/0x24e0 [ 156.848711][ T6688] __lock_acquire+0xad5/0xd80 [ 156.853910][ T6688] lock_acquire+0x116/0x2f0 [ 156.858934][ T6688] lock_sock_nested+0x48/0x100 [ 156.864224][ T6688] gtp_encap_enable_socket+0x306/0x630 [ 156.870213][ T6688] gtp_newlink+0x605/0xf80 [ 156.875164][ T6688] rtnl_newlink_create+0x39b/0xcb0 [ 156.880809][ T6688] rtnl_newlink+0x18b0/0x1fe0 [ 156.886013][ T6688] rtnetlink_rcv_msg+0x80f/0xd70 [ 156.891478][ T6688] netlink_rcv_skb+0x208/0x480 [ 156.896771][ T6688] netlink_unicast+0x7f8/0x9a0 [ 156.902072][ T6688] netlink_sendmsg+0x8c3/0xcd0 [ 156.907367][ T6688] __sock_sendmsg+0x221/0x270 [ 156.912572][ T6688] ____sys_sendmsg+0x523/0x860 [ 156.917858][ T6688] __sys_sendmsg+0x271/0x360 [ 156.922970][ T6688] do_syscall_64+0xf3/0x230 [ 156.928007][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.934429][ T6688] [ 156.934429][ T6688] other info that might help us debug this: [ 156.934429][ T6688] [ 156.944754][ T6688] Chain exists of: [ 156.944754][ T6688] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 156.944754][ T6688] [ 156.958337][ T6688] Possible unsafe locking scenario: [ 156.958337][ T6688] [ 156.965789][ T6688] CPU0 CPU1 [ 156.971183][ T6688] ---- ---- [ 156.976553][ T6688] lock(rtnl_mutex); [ 156.980546][ T6688] lock(&smc->clcsock_release_lock); [ 156.988447][ T6688] lock(rtnl_mutex); [ 156.994961][ T6688] lock(sk_lock-AF_INET); [ 156.999389][ T6688] [ 156.999389][ T6688] *** DEADLOCK *** [ 156.999389][ T6688] [ 157.007540][ T6688] 2 locks held by syz.2.196/6688: [ 157.012567][ T6688] #0: ffffffff906002f0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 157.022096][ T6688] #1: ffffffff900fc2c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 157.031177][ T6688] [ 157.031177][ T6688] stack backtrace: [ 157.037086][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.2.196 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 157.037107][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.037119][ T6688] Call Trace: [ 157.037128][ T6688] [ 157.037136][ T6688] dump_stack_lvl+0x241/0x360 [ 157.037178][ T6688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.037202][ T6688] ? __pfx__printk+0x10/0x10 [ 157.037225][ T6688] ? print_lock+0x171/0x1a0 [ 157.037247][ T6688] print_circular_bug+0x2e1/0x300 [ 157.037271][ T6688] check_noncircular+0x142/0x160 [ 157.037296][ T6688] validate_chain+0xa69/0x24e0 [ 157.037317][ T6688] ? __schedule+0x1ba6/0x5240 [ 157.037346][ T6688] ? look_up_lock_class+0x7b/0x170 [ 157.037362][ T6688] ? register_lock_class+0x54/0x330 [ 157.037378][ T6688] ? __lock_acquire+0xad5/0xd80 [ 157.037397][ T6688] __lock_acquire+0xad5/0xd80 [ 157.037418][ T6688] lock_acquire+0x116/0x2f0 [ 157.037434][ T6688] ? gtp_encap_enable_socket+0x306/0x630 [ 157.037462][ T6688] ? __fget_files+0x39d/0x420 [ 157.037478][ T6688] lock_sock_nested+0x48/0x100 [ 157.037498][ T6688] ? gtp_encap_enable_socket+0x306/0x630 [ 157.037524][ T6688] gtp_encap_enable_socket+0x306/0x630 [ 157.037551][ T6688] ? __pfx_gtp_encap_enable_socket+0x10/0x10 [ 157.037580][ T6688] ? gtp_newlink+0x301/0xf80 [ 157.037605][ T6688] gtp_newlink+0x605/0xf80 [ 157.037628][ T6688] ? __pfx_gtp_newlink+0x10/0x10 [ 157.037651][ T6688] rtnl_newlink_create+0x39b/0xcb0 [ 157.037676][ T6688] ? __mutex_lock+0x380/0x10c0 [ 157.037694][ T6688] ? __pfx_aa_get_newest_label+0x10/0x10 [ 157.037719][ T6688] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 157.037744][ T6688] ? __pfx___mutex_lock+0x10/0x10 [ 157.037765][ T6688] ? ns_capable+0x8a/0xf0 [ 157.037783][ T6688] rtnl_newlink+0x18b0/0x1fe0 [ 157.037812][ T6688] ? __pfx_rtnl_newlink+0x10/0x10 [ 157.037834][ T6688] ? preempt_schedule_common+0x84/0xd0 [ 157.037862][ T6688] ? __pfx___schedule+0x10/0x10 [ 157.037894][ T6688] ? preempt_schedule+0xe4/0xf0 [ 157.037918][ T6688] ? preempt_schedule_common+0x84/0xd0 [ 157.037944][ T6688] ? preempt_schedule+0xe4/0xf0 [ 157.037968][ T6688] ? __pfx_preempt_schedule+0x10/0x10 [ 157.037992][ T6688] ? lockdep_hardirqs_on+0x9d/0x150 [ 157.038009][ T6688] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 157.038030][ T6688] ? preempt_schedule_thunk+0x16/0x30 [ 157.038050][ T6688] ? trace_irq_enable+0x2c/0x120 [ 157.038070][ T6688] ? aa_get_newest_label+0x101/0x6f0 [ 157.038094][ T6688] ? __lock_acquire+0xad5/0xd80 [ 157.038119][ T6688] ? __pfx_rtnl_newlink+0x10/0x10 [ 157.038147][ T6688] rtnetlink_rcv_msg+0x80f/0xd70 [ 157.038169][ T6688] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 157.038190][ T6688] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 157.038209][ T6688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.038237][ T6688] netlink_rcv_skb+0x208/0x480 [ 157.038258][ T6688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.038280][ T6688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.038307][ T6688] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.038329][ T6688] ? __rcu_read_unlock+0xa1/0x110 [ 157.038345][ T6688] netlink_unicast+0x7f8/0x9a0 [ 157.038367][ T6688] ? __pfx_netlink_unicast+0x10/0x10 [ 157.038385][ T6688] ? netlink_sendmsg+0x6c8/0xcd0 [ 157.038407][ T6688] ? skb_put+0x114/0x1f0 [ 157.038433][ T6688] netlink_sendmsg+0x8c3/0xcd0 [ 157.038460][ T6688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.038483][ T6688] ? aa_sock_msg_perm+0x91/0x160 [ 157.038507][ T6688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.038527][ T6688] __sock_sendmsg+0x221/0x270 [ 157.038548][ T6688] ____sys_sendmsg+0x523/0x860 [ 157.038567][ T6688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.038581][ T6688] ? __fget_files+0x2a/0x420 [ 157.038596][ T6688] ? __fget_files+0x2a/0x420 [ 157.038614][ T6688] __sys_sendmsg+0x271/0x360 [ 157.038628][ T6688] ? __pfx_futex_wake+0x10/0x10 [ 157.038646][ T6688] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.038681][ T6688] ? do_syscall_64+0xb6/0x230 [ 157.038699][ T6688] do_syscall_64+0xf3/0x230 [ 157.038716][ T6688] ? clear_bhb_loop+0x45/0xa0 [ 157.038736][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.038753][ T6688] RIP: 0033:0x7fa415f8d169 [ 157.038768][ T6688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.038783][ T6688] RSP: 002b:00007fa416e5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.038800][ T6688] RAX: ffffffffffffffda RBX: 00007fa4161a6160 RCX: 00007fa415f8d169 [ 157.038813][ T6688] RDX: 0000000020000800 RSI: 0000200000000040 RDI: 000000000000000a [ 157.038824][ T6688] RBP: 00007fa41600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.038834][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.038844][ T6688] R13: 0000000000000000 R14: 00007fa4161a6160 R15: 00007fa4162cfa28 [ 157.038862][ T6688] [ 158.061537][ T5890] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.232637][ T5890] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 158.245400][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.262054][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 158.282412][ T5890] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.298896][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.312258][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.330057][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.341874][ T5890] usb 2-1: invalid MIDI out EP 0 [ 158.386455][ T5890] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 158.416017][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.536347][ T5890] usb 2-1: USB disconnect, device number 15 [ 159.042279][ T5890] usb 3-1: USB disconnect, device number 16