last executing test programs: 8.783739895s ago: executing program 1 (id=161): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x884c}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x258, 0x30, 0x300, 0x71bd2d, 0x25dfdbff, {}, [{0x244, 0x1, [@m_gact={0x210, 0x110, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c91, 0xffffffffffffffff}}]}, {0x1d5, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x258}}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) pselect6(0x40, &(0x7f0000000400)={0x3, 0x3, 0x7, 0x1e35, 0x2, 0x100, 0x165e9858, 0x1}, &(0x7f0000000440)={0x6, 0xce, 0xbe6, 0x9, 0xaf1, 0x1, 0xffffffffffffffc0, 0x2000000000091}, &(0x7f0000000480)={0xe, 0x10001, 0x8, 0x8, 0x2, 0xfffffffffffffffe, 0x9a, 0x8}, 0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) pwritev2(r9, &(0x7f00000018c0)=[{&(0x7f0000000480)="10", 0x1}], 0x1, 0x7, 0x6, 0x3) 8.676696041s ago: executing program 2 (id=162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0xf, 0x4, 0x0, 0x84c0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x2, @value, @void, @void, @value}, 0x50) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, &(0x7f0000000080)) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = inotify_init1(0x800) r7 = syz_open_dev$video4linux(&(0x7f0000000a00), 0x8, 0x400000) r8 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000a40), 0x1, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$poke(0x4210, r9, 0x0, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r11 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r11) read$FUSE(r11, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f00000002c0)={0x50, 0x0, r12, {0x7, 0x1f, 0x7fff, 0x4503230, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(r11, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009885f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4dbcacea29d4554d2d95ed4444e9bcbd6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa35e548ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f5823", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x2, {0x4, 0x0, 0x0, {0x0, 0x4b4a, 0xfffffffffffffffc, 0xf21, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, r13, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = openat$dlm_monitor(0xffffff9c, &(0x7f00000030c0), 0x10200, 0x0) sendmmsg$unix(r1, &(0x7f0000003180)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)="c987cbec89841e52914f83b64ec101ef522d173f8aa8ad517e7f2d955f1b20fb561805e27f6c6611e983309f96d2f345d15dc7f6dbb829c4ed2793cd48182c854519fe9d0c9f51eb5603c0c8ca0088c14a32f4f7df1c261f48f69b4cebdff01b37a16b6127b3ec2016ab2ccf66c2bb899cdd7b28", 0x74}, {&(0x7f0000000300)="5f4c7305e415ea92def568f05bb93cb7fab41137a3915c0042af37d29fdb3a8e158b1463f992d93889ba8764061ae535b37a511ce83c8521a25b879ba90cbd42f539ddd5c34f2fbb1dd14ff2e0910a17978b9d11a5e78862024cb71931950452", 0x60}, {&(0x7f00000003c0)="5187d6737113da2ce5", 0x9}, {&(0x7f00000004c0)="6b45d99f64df4eaceed472072bb9289333cdac7cdfaa84b1220a4497bed6fab6d67a0e454e1fa60ec66cc30bd09c65d72fa8053de21ddfbb9c90a51fcb27e793faf2a9e7886ae44e008b6335945d937ec54a88aaa947da4e796dd1567fd362a2aa73d5c7b0db95412c232eaa575e937f0ee0eb829ffdb46094592a3d4d35efdd4c03e06692f377ca20d5370451c9ed0f6de0bad5f2a9d258b95aacd9d1e54b7f0e9fd779603784db5f42925b862c6d57", 0xb0}, {&(0x7f0000000640)="4b2cb48a1d6e95359f15255cf28c66ae00b67f663c3a96ff1cad36a2aaabf0246fde2756f20e28cca71368607f69a36c4e9bc45d80164e9fe34eb524ea35e1a95b0c7e661dfcc25e7d927a863f1aec88ac2690bbc3698c2d3a8ef9e08ad5c4556167c99ed4ade0e4e9452cc87b06a9543d3ab38edc2ddca03be54282ec506308160753c71f1d1dd52dd565a04b2fa4b22aa1417bcdc3ef7f5b896f27dcebab061011be2ca2ea48f811b8b1f6db8456509279b88fc79774dedbae89c79eea5c8cdfccc6ca250200aaf996e0e2b2d2a02f6e39eebeb550e787417cd8dd9c2eca830efbf20f97c676ee", 0xe8}, {&(0x7f0000000740)="3653215764ea75887bc69e8bb874d0ac9e7443fcc66a46a84fb061a55c90f892cbbe42f8b6a914f6b513dfb9c72a96f5418311d45d494ca25f565772386b7ed4ea8ecac19b513f44ea127cab0648d067e9c0deb5167233b0aeef5f0bb78f3f07f1dbe4eaf2e0ff9edb675fabfa301d6eb51455a600eba6b96af34d23149141a9de153d50167249a44ec07608677f9252e90a71868729018ae24afafe2c921c764c9984dc0119bbefdb2a216ad5ef5e6b69f200a6ad04b277b5ece19d1c65041f1f9221c54b6aef5f6a1b775c5023cae144", 0xd1}, {&(0x7f0000000400)="d22f3cfd69b1d1dc0c9cb2a83f9d18f9a2dafe73d5909179017a96fcb8125ad7dd128b18aa5b46f5065269646bd88fd8", 0x30}], 0x7, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [r2, r1, r0, 0xffffffffffffffff, r1, r1, r11, r3]}}, @cred={{0x18, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x34, 0x1, 0x1, [r6, r0, r1, r1, r0, r7, r0, r0, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r8, r0, r1]}}], 0x90, 0x11}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000c00)="d2ec46195ed4ac91bc1aa1e0b667a05bd60502605df9873f52233b3a57707d974f70496d8e3bc13b5187bfdd1e71218fa3348dac06859608ea667d8ae6898ce9587afb982cb7a0f330d3d0f03416a9d63e639fb39a0651bd9ac39c2aa9d7a3c610c9a758bcb0572730a47af9055a416503a9207850689b6e8d22bfeca38c387ab1299c4bc4cc4f83d143b3b8e2c639474e8e0ea23b36ae67bf9833f18a8faf84e09779c23d9292fe772579a3055bc18c17061ae60cb96b379d68098a72050f73f82ad9aaa304992884bbd42c50872f7cc2b86f26a265591c8b692bcf5894c529", 0xe0}, {&(0x7f0000000d00)="216e07071bab4a41b3f2ec6de67f90ce6f8aba8a5d14564f4c25eec1ac03587a24f9a19051dadd252751ffaf84badb474cbed39942ccba35d811b3a62e29e8740b6e1fc8a409869afa070b29e260ebb070a3e13f76268c786a218a4381e9fc016861ae597e17a34b2a163a", 0x6b}, {&(0x7f0000000d80)="7680879389755bf50b0a6ad2660b8ce496474f181e792372dfb06acaceaf21f5b14dedbdbfb4fbc092274cda350a470a074c58dc78993e0e6f9a18726d9144039207a63b71e99b76eeaba93bdbf6ba4d4283b4e75cf720f5f9ffc28de64d38fa2ae420c619587302cd7ac1aa741aeabf8d32a6df12580b47100a70efa9ee4b74f2735b321f507911a19f31e27909e191d56fa583e01707aad911fe3d5f6a79a0bf1281500e2fb5bc2e1e", 0xaa}, {&(0x7f0000000e40)="57533b049d3c6736b92bd91dce5af8fc62c38cae34fbc21156951519e9294febb9769ca1f20742de5c831abda6a6c24ee54a86baab7503526da5211e640fcb274728d6c1c5604641373f3179c11e447f584bb3000a69114ffc5c2db293a3be501ac09cf18fdf5c401b327696ebc1d272c1e292e6f7a448a05ecc46ad1a07db4766fe923e1fdb297efa0683807046bdfbc4ad7c98b352de738183a58bf980a2fe57e9bffe2b335ddc64196f46dfdfc0e4b2351decf51dbb391992e4", 0xbb}], 0x4, &(0x7f0000000f40)=[@rights={{0x18, 0x1, 0x1, [r1, r0, r2]}}], 0x18, 0x800}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f80)="fd2724a075103e382782a321bdc45982f71bc1576f9f78abdc3248d7a0decb9b8dece44a1019824f14e30ca7da36d2241999486f5955eaa9f6d36e5794e3a8415f076f5aee6559d7005c3adb51e9463ab17e687c2e0cc8946d9cfae8ec458cff3a887778e7f2dc197c0b6e18f062d157fc390ec6b8a531501ad09f4c9581c5e70c052b5ca32d24030ba2a0d63953dae4a26dd5d59ce43d4eb2f582e7edac6efd7478a0ebca06f265c411446753e1", 0xae}], 0x1, &(0x7f0000003100)=[@rights={{0x1c, 0x1, 0x1, [r8, r6, r2, r8]}}, @cred={{0x18, 0x1, 0x2, {r9, r10, r13}}}, @rights={{0x30, 0x1, 0x1, [r0, r6, r6, r7, r14, r6, r7, r6, r2]}}], 0x64, 0x80}}], 0x3, 0x20004001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r16 = syz_io_uring_setup(0x2412, &(0x7f00000001c0)={0x0, 0xaee1, 0x800, 0x11, 0xfddffffd}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r17, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(r17, r18, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x10, 0x0, r11, 0x0, &(0x7f0000000040)='./file0\x00', 0x88, 0x0, 0x1}) io_uring_enter(r16, 0x47f4, 0x0, 0x0, 0x0, 0x0) 7.675202735s ago: executing program 1 (id=166): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100302000040"], 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x189001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES32=r6, @ANYRES64=r3, @ANYRES64=r5, @ANYRES8=r6], 0x20) ptrace(0x4206, r1) ptrace(0x4207, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x26, 0x0, "e3112886f980a1d3119e74a94cc623e31eed0f63be3a408bd4ccf734475323df0af3f2750e197eb90edc5c5f847d7601800ae60126832e2614c7f5ea46e4a92e03998f73d7f87473a50daa582ab4b536"}, 0xd8) pipe2$9p(&(0x7f0000000140), 0x80) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="13000000000201", 0x7}], 0x1) 7.026315655s ago: executing program 4 (id=170): unshare(0x20000400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xfffffffffffff470, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 6.908227816s ago: executing program 3 (id=171): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f00000000c0)=0xffffffffffffffcb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00') preadv2(r1, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1, 0x1ff, 0x1, 0x1) socket(0x11, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r2 = openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x2, 0x40) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, 0x0) 6.720425445s ago: executing program 4 (id=172): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x5b8576e7, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}}}, 0x10, 0x0}, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') sched_setscheduler(0x0, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{r6, 0x6408}, {r7}, {r6, 0x232}], 0x3, &(0x7f0000000240), &(0x7f0000000280)={[0x6]}, 0x8) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.994501305s ago: executing program 1 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'dvmrp0\x00', 0xc012}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf2518000000"], 0x14}}, 0x40c0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x2a, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, 0x0, 0x0}, 0x1c) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x12}, 0x20048004) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r10, 0xc0040d07, &(0x7f0000000040)=0x121) 5.396215536s ago: executing program 3 (id=174): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 5.239848156s ago: executing program 3 (id=176): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="112257b615fad5e2efd832bc119a87d560b21a59194c965150971dcc100e5406abe154f62d454cdfa329ac649cadce2436edb6f5d6356b74424172562208140223d0159e111ed9c6639b3763e560b6489aa4", @ANYBLOB="4246e6d8e739e7b47c20ddb47a79fcd7dfcbcb03a132f6c57dbd5f94b16d894225", @ANYRES16=r0, @ANYBLOB="3e5f66e0b8810af80566e47d80a877ea2f58c6095f17a229e6281b8d180b3a8556d738b6123e3644b90847243063ca8976421407ad1ed166949ce55915771a5fcd78629c8edb57f4d8ff6c7122e8811fcd1c66e245b24ce5b32c9ef80fc0be6ceaf56249b216d3a1ac2f36d36fdf1b3955fb2c4dc7d2c928223e228ae4c0f008e5c1bca0c67ade48aeca746e9a787f9d2f83af63bea35040c9e864644fb2fe415bf9bc6e36c1cdb570368d0637af9944d1aee1"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xfc, 0xeb, 0xe4, 0x40, 0x547, 0x6801, 0x436f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x44, 0x13}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x41015500, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r7, 0x29, 0x0, 0x80, 0x206, 0xff06, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback={0xff00, 0xffff888101827518}, 0x80, 0x8000, 0x9, 0x5}}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r8 = syz_open_procfs(0x0, 0x0) r9 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r9, 0x0, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) 4.99236855s ago: executing program 2 (id=177): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0xff00}, 0x80, 0x0}, 0x0) 4.727880445s ago: executing program 2 (id=178): clock_nanosleep(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f00000004c0)) syz_open_dev$usbfs(0x0, 0x0, 0x10002) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xa, 0x9, 0x72, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x80, 0x20, 0x10001, 0x9}}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x213c, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) io_setup(0x8, &(0x7f0000004200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="010000007c00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x38}}, 0x0) epoll_pwait2(r6, &(0x7f0000000240)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) fanotify_init(0x0, 0x101000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) dup(r9) 4.644152604s ago: executing program 1 (id=179): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) read$char_usb(r0, &(0x7f0000000040)=""/131, 0x83) 4.221148923s ago: executing program 4 (id=182): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007ccc2d40450ca06222a800000001090212000100000000090400000048ede300"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='cq_poll\x00', r1, 0x0, 0xffffffffffffff3e}, 0x18) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000300)=""/125, 0x7d}, {&(0x7f0000001680)=""/141, 0x8d}], 0x4, &(0x7f0000000440)=""/122, 0x7a}}, {{&(0x7f00000004c0)=@caif=@rfm, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000640)=""/63, 0x3f}], 0x2, &(0x7f0000000540)=""/23, 0x17}, 0x1dc}, {{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000600)=""/19, 0x13}, {&(0x7f0000001600)=""/121, 0x79}, {&(0x7f00000006c0)=""/12, 0xc}, {&(0x7f0000000800)=""/161, 0xa1}, {&(0x7f00000008c0)=""/156, 0x9c}, {&(0x7f0000000980)=""/110, 0x6e}], 0x6, &(0x7f0000000a00)=""/152, 0x98}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/117, 0x75}, 0x2}, {{&(0x7f0000000e40)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f00000010c0)=""/193, 0xc1}, {&(0x7f0000000fc0)=""/55, 0x37}, {&(0x7f0000001000)=""/9, 0x9}, {&(0x7f0000001740)=""/232, 0xe8}, {&(0x7f00000011c0)=""/252, 0xfc}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001480)=""/198, 0xc6}, {&(0x7f0000000140)=""/23, 0x17}], 0x8, &(0x7f00000013c0)=""/93, 0x5d}, 0xb}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000140)}}], 0x6, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xe077, 0x0, 0xb49, 0x9, 0x4, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000001440)="c5674d", 0x3}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) unshare(0x20000400) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x800) readahead(r3, 0x2, 0xa14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.741218194s ago: executing program 0 (id=183): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0x28, 0x80000001}) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1, 0xa4}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 3.372052615s ago: executing program 0 (id=184): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x9, &(0x7f0000000300)=@raw=[@generic={0x6, 0x5, 0x7, 0xa3d, 0xbb}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}], 0x0, 0x9, 0x4a, &(0x7f0000000380)=""/74, 0x41100, 0x3, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x10, 0x7, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f00000037c0)={{0x0, 0x0, 0x80}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x31) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)=""/27, 0x1b}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r11, 0x0, 0x19, &(0x7f0000000000)='\x00', 0x1) close_range(r10, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r12 = io_uring_setup(0x2204, &(0x7f0000000000)={0x0, 0xf324, 0x800, 0x2, 0xb9}) io_uring_register$IORING_REGISTER_PBUF_RING(r12, 0x16, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) syz_clone(0x66040180, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.13967274s ago: executing program 1 (id=185): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x4031, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x80000001, 0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_xfrm(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) lsetxattr$security_capability(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @local}, {0x2, 0x4e29, @loopback}, 0x144, 0x0, 0x0, 0x0, 0x40e, 0x0, 0x3, 0x1, 0x81}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e20, @local}, 0x11, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='dummy0\x00', 0x40, 0x80000001, 0x43}) r6 = syz_open_dev$amidi(&(0x7f0000000600), 0x8, 0x440000) fremovexattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="6273656375726974792e2d5b28212d00c468dc72674bdc5a38b23f4046c1e6cfd139740feeee1942f4c14f42a4f373ae9f97422c775fc035c776a989fbae61419c5d66ea72b3ee5193460dd048e6ee6a3c881dbc77fc4440298bf7d1f3fdf293066785aa69d7312084cd592c3e10e8a3d0c6"]) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000140)=""/82, 0x328000, 0x1800}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x4, r8, &(0x7f0000000040), 0x4000007) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.057773927s ago: executing program 0 (id=186): io_setup(0x8, &(0x7f00000002c0)=0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfdfe, 0x0, 0x0, 0x0, r2}]) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) 2.88372369s ago: executing program 2 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095", @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffc}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000003000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="c9d722c96a39d4679e94b420d1f6"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040894) recvmmsg$unix(r8, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000680)=""/4105, 0x1009}], 0x1}}, {{&(0x7f0000002280), 0x6e, &(0x7f0000000640)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f00000016c0)=""/158, 0x9e}, {&(0x7f0000001780)=""/173, 0xad}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000001d00)=""/14, 0xe}], 0x8, &(0x7f0000001a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000001840), 0x6e, &(0x7f0000000280)=[{&(0x7f0000001b40)=""/164, 0xa4}], 0x1, &(0x7f0000001c40)=[@cred={{0x18}}], 0x18}}, {{&(0x7f0000001c80), 0x45, &(0x7f0000002000)=[{&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/10, 0xa}, {&(0x7f0000001d80)=""/191, 0xbf}, {&(0x7f0000001e40)=""/96, 0x60}, {&(0x7f0000001ec0)=""/178, 0xb2}, {&(0x7f0000001f80)=""/114, 0x72}], 0x6, &(0x7f00000021c0)=[@rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x4, 0x30102, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}]}, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r11, 0x7}, &(0x7f0000000100)=0x8) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0xffffffffffffff31, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0xc295, 0x0, {0x0, 0xfffffffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r4, r5, 0x2, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f00000002c0)='./file0\x00', 0x1c0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000018c0)=@newtfilter={0x48, 0x2c, 0x8, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0x0, 0x4}, {0x4, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xb}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc004884}, 0x2000c940) 2.869371324s ago: executing program 0 (id=188): r0 = syz_io_uring_setup(0x7ba, &(0x7f0000000080)={0x0, 0x3282, 0x8, 0x0, 0x211}, &(0x7f0000000180), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002980)=@newtfilter={0x888, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x858, 0x2, [@TCA_FLOW_POLICE={0x854, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0xffff0492, 0xfffffff8, 0xb, 0x1, 0x100, 0x6, 0x40, 0xdf25, 0xb, 0x4, 0x0, 0x7fff, 0xf67, 0x1, 0x0, 0x6, 0x4, 0x8, 0x3, 0xe82, 0xc, 0x6, 0xffff, 0x9, 0x10, 0x5, 0xe64, 0x5, 0x7, 0x8, 0x5, 0x1a501625, 0x95b, 0x568, 0x5, 0x0, 0x9, 0x1ff, 0xd4e8, 0x3bd, 0x5, 0xb, 0x3, 0x100, 0x81, 0xffffffff, 0x8000, 0x1, 0xdf1, 0x8, 0x22a3, 0x46d, 0x8000, 0x4, 0x7, 0x9aa, 0x3, 0x6, 0x8, 0x1ff, 0x2, 0x78, 0x2, 0x1, 0x3, 0x2, 0xffffffff, 0x4b0, 0x10000, 0x6, 0xfffffff5, 0x6190, 0x0, 0x7, 0x1, 0xf1ba, 0x7e46a352, 0x3, 0x62, 0xfff, 0x4, 0x6, 0x8, 0x101, 0x8, 0x9, 0xea2, 0x5, 0x10001, 0x10b, 0x2, 0x2, 0x735aa827, 0x0, 0xe3, 0x7ff, 0xcaa, 0x3, 0x90, 0x10, 0xbbc2, 0x5, 0x8, 0x5, 0x100, 0x10001, 0xbb49, 0x8001, 0x1, 0x9d6, 0x1, 0x16000000, 0xffff, 0xfffffffc, 0xc, 0x80000000, 0x4, 0x401, 0x0, 0x8, 0x6, 0x6, 0x2e11, 0x8000, 0xee, 0xa, 0x2, 0x8, 0x9, 0x0, 0xf, 0x7, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x8004, 0xd825, 0x10e, 0x4, 0x0, 0xef, 0x30000, 0x456fe48d, 0x80000000, 0x781b, 0x101, 0x8, 0x40, 0x8, 0x5, 0x6, 0xffffff01, 0xede, 0x7, 0x7b, 0x401, 0x7, 0xf, 0x4, 0x1000, 0x2, 0x5, 0xa1, 0xff, 0x10, 0x7fff, 0x8, 0x4, 0x0, 0xfffffff7, 0xa, 0x1, 0x4, 0xfffffffc, 0x2, 0x2, 0x2, 0x6, 0x8, 0x5, 0x2, 0x591, 0x0, 0x1, 0x7, 0xa542f845, 0x5, 0x4, 0x9, 0xfffffffa, 0xa, 0x4, 0x5, 0x10000, 0x0, 0x3ff, 0x6, 0x0, 0x5, 0x5, 0xe, 0x6, 0xb, 0x2, 0x8, 0x9, 0x4, 0x80, 0xb6, 0x81, 0x3b, 0x8f, 0x5, 0x10000000, 0xfffffffe, 0xc, 0x9, 0xffff, 0x34c0, 0xf547, 0x5, 0xe9a3, 0xff, 0x1000, 0x9, 0x4, 0x6, 0x81, 0x7, 0xfff, 0x93b1, 0x8, 0xffffff37, 0x5d74, 0x7, 0x3, 0x20, 0x7fff, 0x6db, 0x8, 0x8, 0xe, 0xff80, 0x800, 0x4b, 0x4, 0x9, 0x4, 0xdca9, 0x4, 0x3, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7fffffff, 0xffff, 0x5, 0x69, 0x13, 0xfff, 0xb, 0x6, 0xff, 0x6, 0x6, 0x3, 0x7, 0x9, 0x8, 0x9, 0x43, 0x77fc, 0x2, 0x1, 0x80000001, 0x8001, 0x69, 0x6, 0x708bea95, 0x3, 0x3, 0x67000000, 0x1ff, 0x9, 0x7fff, 0x4, 0x9, 0x1def, 0x0, 0x1ff, 0xdc58, 0x6, 0x80000001, 0x4, 0x1, 0x7, 0x2, 0x5, 0xa, 0x80000000, 0x6ee, 0x3, 0x4, 0x100, 0x80000000, 0x6, 0x9, 0xffffe33e, 0x69c8, 0xb6, 0x8, 0x3, 0xa0, 0x9, 0x1ad, 0x2483, 0x1, 0x3, 0x992e, 0x3, 0x3ff, 0x81, 0xac, 0x0, 0x9f, 0x1000, 0x7f, 0x8, 0x9, 0x2, 0x6, 0x3, 0x7, 0xd, 0x2, 0x1, 0xfffffff9, 0xfffffe00, 0x2, 0x0, 0x9, 0x0, 0xf, 0x7, 0x10, 0x3, 0x80000c7e, 0x0, 0x9, 0x4, 0x6, 0x9, 0x69e0, 0xff800, 0x1048, 0xb54, 0x10001, 0x80, 0xddcc, 0x8, 0x7f, 0x7ff, 0x8, 0x6, 0x6, 0xe8, 0x2, 0xffffffff, 0x0, 0xfffff001, 0x7, 0xaec, 0x0, 0x5, 0x2ae, 0x3, 0x40, 0x160c000, 0x7, 0xfce, 0x6, 0xe56, 0x7ff, 0x3, 0xf6, 0xa, 0x3, 0x7, 0x10001, 0x3ff, 0x7, 0x2, 0xfffffff8, 0x8, 0x9, 0x0, 0x1000, 0xfffffff8, 0x8, 0x7ff, 0x7, 0x8, 0x9, 0x7, 0x1, 0x79, 0x6, 0x100, 0x56, 0x5, 0x1, 0x6, 0x82, 0x1, 0x8, 0x400, 0x1, 0x1, 0x0, 0x8, 0x2, 0xffff, 0x0, 0x7, 0x2, 0x8, 0xe09, 0x7, 0x18fca8aa, 0xd6d, 0x1600000, 0x0, 0x4, 0x3, 0x7, 0x7fff, 0x10000, 0x7, 0x8, 0x400, 0x31, 0x0, 0x4, 0x2, 0x1, 0x8, 0x7, 0x10001, 0x4, 0x0, 0xa, 0xfff, 0x8, 0x8, 0x1, 0x3, 0xfffffffd, 0x5, 0x4, 0x1ff, 0x639, 0x1ff, 0x5, 0x2, 0xe, 0x1e41, 0x8, 0x800, 0xfff, 0xdc2, 0x3, 0xffffffff, 0x80000000, 0x5, 0x9, 0x4, 0x4, 0x4, 0x3, 0x1, 0x6, 0x1, 0x4, 0xd, 0xa, 0x5a6, 0x1, 0xc, 0xb, 0x8, 0x6, 0x8, 0x4, 0x8, 0x8, 0x3, 0x276, 0x5, 0xef7, 0x8, 0x5, 0x4, 0x1, 0x7, 0x1, 0x91, 0x7, 0x8, 0x67]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff9, 0x1, 0xcc, 0x4, 0x5, {0x6, 0x2, 0x12, 0x7, 0xffbf, 0x7}, {0x3, 0x0, 0x6, 0x8, 0xf9, 0x7}, 0xfff, 0x5, 0x2}}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 2.779861137s ago: executing program 4 (id=189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = eventfd(0x10d5) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000007c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0xf3, &(0x7f0000000500)=""/243}]}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000640)=0x1) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x4) (async, rerun: 32) syz_io_uring_setup(0x40075af, &(0x7f0000000140)={0x0, 0x255, 0x1000, 0x2, 0xee}, &(0x7f0000000200), &(0x7f00000002c0)) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (rerun: 64) 2.668582422s ago: executing program 0 (id=190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000400)={"7df86894dbd8138362fc65acce8b99d1", r1, r2, {0x7fffffff, 0x3}, {0x7fffffffffffffff, 0x10000}, 0x9, [0x7, 0x7, 0x80000000, 0xcb, 0x100000000, 0x3, 0x367, 0x80000000, 0xffffffff8698efdb, 0x9, 0x7, 0x3, 0x0, 0x200, 0xb, 0x3]}) (async) r3 = openat$vimc0(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000500)={0x0, 0x0, '\x00', @bt={0xfffffffe, 0x9, 0xda51, 0x7f, 0x10000, 0x7, 0x13, 0xa}}) (async) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000005c0)={0x2, {0x1, 0x40, 0x4, 0xffff8000}}) (async) r4 = openat$bsg(0xffffff9c, &(0x7f0000000600), 0x140c0, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000640), 0x4) (async) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000006c0)={@private, @rand_addr, 0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@getstats={0x1c, 0x5e, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x60000840) (async) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r4, 0x0) r7 = syz_io_uring_setup(0x2474, &(0x7f0000000800)={0x0, 0xaeb6, 0x1, 0x2, 0x15b, 0x0, r4}, &(0x7f0000000880), &(0x7f00000008c0)=0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000cc0)=@IORING_OP_WRITEV={0x2, 0x10, 0x2000, @fd=r0, 0x5, &(0x7f0000000c80)=[{&(0x7f0000000900)="e7a81c2c0a14a88177bcb44fabaf438f785acde15513cda76095c06f59a87deae49b816318eba73a76943db0c6ad9bec99d3bb56ac6565ff0b05eedc6d0d40cdfe4dfa315c08aa12359a300709a67ece51229e425e4ac5a3ede555c5db7e45110715910e0569548680946c409039091549cf298e9f4bd25633a0aacabc301355bb", 0x81}, {&(0x7f00000009c0)="bcc3ca7ad437049dd33abd408537eb9883d26adb06d009f72e67c3b55a6498f63aee55693db7dab010e1d5c9d22610c6530c8ae31e4e8ab7e5835fb2dce5e9b72b6e155cf2ad48b861bf6c1cefb3de8999bad349298b3e848d30cbc4413254b5097ed089aef4127a3131edb53a0742f19543688c68c41d21fb75f7d5fbd7e99eed6b1099d6b6d1efd53081f62acac4f5a06c3cc5d271255294f551edbcfb1cc9442988cda0bd37e317126f5387de2db13d2966dfc584f710ee240ee3ba", 0xbd}, {&(0x7f0000000a80)="510f0b6f63cd345c76aab36398dbdf42c3082a7bd3d20e7fc40c850f82b57f497c2ad247dff9429897f7d748c001223313a5a545434b767267abbc0654cc960c396988217e891454a05c3a057738c04d99057a77e390410df2af8ca60a7264a4850a6357bbb46a0abada8ac0b8a60021275e8f9c29ce851d3ab433c41aaea908081116c2b58d40f20e050c271c066dcbe3779c9439a7779ae8274ad1f240326e500d45fce62a43c6605dec9765ae1252eeff1077d6f744ad0eb6c568", 0xbc}, {&(0x7f0000000b40)="ee5157da94ea625304eb77187a54133378c1f73283c18e44058d5c9c2cd8ececfe151140a768af5ce5ae135946", 0x2d}, {&(0x7f0000000b80)="02dd388c216e34f4aabecd284d334752070b0e4ceaa5702ae3b8dfb53e9a1077624b022e3bf29d265137c82b9a0bb408e9566b8aa1378822b92f079bfd694f97d55c4ad233dd9f689b4114e2bbe342643a1fbadf1bda81fc3d20029855d9102243719e6993276c668161e02a3952716a1d564317b01114984ab3717eddc9a8b5c2ee4aad503c117a468900ec92d549b4068a7be41030950f165643ca7c93433d4854db674a636058fc22215bc8922fc3298eaef270cc3d444ad4a568cf09ddd8b640bb", 0xc3}], 0x5, 0x1, 0x1, {0x2, r9}}) (async) r10 = openat$mice(0xffffff9c, &(0x7f0000000d00), 0x2a21c2) r11 = openat$procfs(0xffffff9c, &(0x7f0000000d40)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) (async) fsetxattr$security_capability(r7, &(0x7f0000000d80), &(0x7f0000000dc0)=@v2={0x2000000, [{0x4, 0xf}, {0x56b, 0xffff}]}, 0x14, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$VIDIOC_G_INPUT(r10, 0x80045626, &(0x7f0000000e00)) (async) getpeername$packet(r11, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)=@ipv6_deladdrlabel={0x3c, 0x49, 0x10, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r12, 0xfff}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440d4}, 0x20000004) (async) ftruncate(r4, 0x10000) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24004014) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000011c0)={'tunl0\x00', &(0x7f00000010c0)={'syztnl2\x00', r12, 0x7, 0x7800, 0x8, 0x9, {{0x2c, 0x4, 0x3, 0x3a, 0xb0, 0x65, 0x0, 0x7, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x34, 0x1c, 0x1, 0xa, [{@remote}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x2}, {@loopback, 0x5}, {@empty, 0x7fff}]}, @end, @timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0x9, [{@empty, 0x1}]}, @noop, @generic={0x86, 0xe, "f279d336ded549a4c866827c"}, @ra={0x94, 0x4}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x2, 0x3, "af"}, {0x1, 0x4, "025e"}, {0x5, 0x3, 'O'}, {0x2, 0xd, "e348b0251068d8dc8d14d2"}, {0x2, 0xa, "14ff6e3f3f595702"}, {0x6, 0x3, "a4"}]}, @rr={0x7, 0x1b, 0x48, [@dev={0xac, 0x14, 0x14, 0x43}, @empty, @empty, @multicast1, @private=0xa010101, @multicast2]}]}}}}}) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x13, r11, 0x5081e000) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000001200)={'veth1_macvtap\x00', {0x2, 0x0, @multicast1}}) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000001240)={0x0, 0x0, '\x00', @bt={0x8, 0x2, 0x65c, 0xf, 0x0, 0x6, 0xa, 0x4}}) (async) ioctl$VIDIOC_STREAMOFF(r10, 0x40045613, &(0x7f0000001300)=0x9) 2.376129154s ago: executing program 0 (id=191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ppoll(&(0x7f0000000180)=[{r1, 0x4047}], 0x1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) 2.373218007s ago: executing program 1 (id=192): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x18, &(0x7f00000006c0)={0x20, 0x9, 0x6, "0000eaff0000"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x5, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000140)={0x20, 0xe, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.089805652s ago: executing program 32 (id=191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ppoll(&(0x7f0000000180)=[{r1, 0x4047}], 0x1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) 2.081051214s ago: executing program 4 (id=194): iopl(0x4) r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x600680) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="280000002900000039000000020100000000fe80000000000000aa000000000000000000"], 0x28}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0x2, 0x0, 0x1, 0x0, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x44, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x44}}, 0x0) io_destroy(r6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x8, 0xfa04, 0x94, 0x6c02, 0x14c, 0x194, 0x194, 0x14c, 0x194, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0xffffffff, 0xffffffff, 'veth0_to_bond\x00', 'veth0_virt_wifi\x00', {}, {}, 0x1}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x200000, 0x1000000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000072e754f154509e0000000000002900"], 0x50) iopl(0x7f) syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100024b030910991115902d3ed95d560109022400037f07100509040009004583d6030904010e00ffffff080904660c00ffffff08"], 0x0) 2.00281833s ago: executing program 3 (id=195): r0 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6002080a00080000fe8000000000000000000000000000bbfe8000000000000000000000000000aa29000000000008"], 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x14, 0x37, 0xb, 0x1e, 0x7, 0x1, 0x3, 0x87}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x80000) r3 = getpid() ptrace$ARCH_GET_FS(0x1e, r3, &(0x7f0000000380), 0x1003) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="124876f9c055cabe3233933a94e6a7aba5a0d3d7690040866037771a340d46cc690a9ff63d17ae6e82769620e7338cee4c1271251347efcd383d803f8c8587d8f6ca0d1a120e9e4efed1f1c9ccedeee53718d82a00994690b58e654425138625b814487d0ed23db0c9fef14b875b5df59e40d19424ed8612407b4311f65742b7ff9d3101e468cbe7b01fb19acb91d35ddf43ac9c4eef7582ffb199b20c744e34b95abc6ef9aa72fef32b5d14e610941133c0949733964353e9d440f6e8bf5f3b54eaaa4d2193d62f2fa2ff6bb38440a6", 0xd0}], 0x1, &(0x7f0000000500)=[{0x64, 0x6, 0xb, "07902fa20016451f91fa74ef8462df558f780fb883e690360a2aa17ff7b34e55347a35e929d8d1d290fc5b6dbea821a6d714a6420122411fed52806ca21fc27d761d63736b0a906bb29c20e39dbf3feab83afc62c8"}, {0x100c, 0x109, 0x80, "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"}], 0x1070}, 0x8000) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_pidfd_open(r1, 0x0) 1.844209679s ago: executing program 2 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x2, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6}}}}, [@NL80211_ATTR_TX_RATES={0x8, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x44044) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d01014000010203010902780003010000000904000000010300000a2401000000020102082408000000007009040100000102000009040101010102000007246b0cccf1ad912b2601060400002ae3090501090000000000072501010000000904020000010300"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.843899318s ago: executing program 3 (id=197): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) read(r0, 0x0, 0xffffff0c) (fail_nth: 1) 171.578386ms ago: executing program 2 (id=198): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) read(r0, 0x0, 0xffffff0c) 146.142405ms ago: executing program 3 (id=199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x3f00, 0x1f00, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x84002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x38}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000d98000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="3e26660f388160640f8817350f01df660fe837d0200f01c3ba410066b8c100000066ef0f08d38ff3ff2e660fc77418", 0x2f}], 0x1, 0x4, &(0x7f00000001c0)=[@efer={0x2, 0x100}, @dstype3={0x7, 0x6}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x80, 0x8, 0x1, 0x0, {{0x18, 0x4, 0x1, 0x38, 0x60, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @private=0xa010101, {[@timestamp_prespec={0x44, 0x24, 0xd7, 0x3, 0x6, [{@local, 0x7}, {@multicast2, 0x7f}, {@remote, 0x7000000}, {@local, 0x401}]}, @generic={0x89, 0xe, "c7ce69d1cc7f4eecf570f68f"}, @generic={0x82, 0x8, "9982daf5fea7"}, @lsrr={0x83, 0xf, 0x7c, [@remote, @multicast2, @broadcast]}, @end]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f0000000440)}, 0x10) 0s ago: executing program 4 (id=200): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224"], 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYBLOB="020520001300000000000000000000000400030000000000000000000000000000000000000000010000020000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000000000000030005000000000002004e"], 0x98}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_emit_ethernet(0x13e3, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "2b66ac"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x4, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, r7, 0x1b}}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0xa4) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' \"\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 74.376661][ T5830] cgroup: Unknown subsys name 'net' [ 74.487721][ T5830] cgroup: Unknown subsys name 'cpuset' [ 74.497089][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.090765][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.684562][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.695157][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.702454][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.706796][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.710084][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.717927][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.731389][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.739261][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.739857][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.753849][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.761654][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.763585][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.769076][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.784642][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.784821][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.791826][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.805182][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.813988][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.822571][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.823367][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.831138][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.844731][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.863412][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.888947][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.896746][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.586472][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 79.654395][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 79.685643][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 79.771570][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 79.789920][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 80.004655][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.011885][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.019541][ T5861] bridge_slave_0: entered allmulticast mode [ 80.027697][ T5861] bridge_slave_0: entered promiscuous mode [ 80.036050][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.043504][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.050652][ T5859] bridge_slave_0: entered allmulticast mode [ 80.058273][ T5859] bridge_slave_0: entered promiscuous mode [ 80.090576][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.097810][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.105262][ T5861] bridge_slave_1: entered allmulticast mode [ 80.112446][ T5861] bridge_slave_1: entered promiscuous mode [ 80.120103][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.127674][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.134912][ T5859] bridge_slave_1: entered allmulticast mode [ 80.141969][ T5859] bridge_slave_1: entered promiscuous mode [ 80.193687][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.200821][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.208536][ T5862] bridge_slave_0: entered allmulticast mode [ 80.215917][ T5862] bridge_slave_0: entered promiscuous mode [ 80.250546][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.257743][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.265296][ T5860] bridge_slave_0: entered allmulticast mode [ 80.272937][ T5860] bridge_slave_0: entered promiscuous mode [ 80.294169][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.301326][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.311088][ T5862] bridge_slave_1: entered allmulticast mode [ 80.318467][ T5862] bridge_slave_1: entered promiscuous mode [ 80.366005][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.373262][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.380477][ T5860] bridge_slave_1: entered allmulticast mode [ 80.388379][ T5860] bridge_slave_1: entered promiscuous mode [ 80.423589][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.435683][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.472084][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.479439][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.486636][ T5857] bridge_slave_0: entered allmulticast mode [ 80.494046][ T5857] bridge_slave_0: entered promiscuous mode [ 80.502936][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.510183][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.518075][ T5857] bridge_slave_1: entered allmulticast mode [ 80.525395][ T5857] bridge_slave_1: entered promiscuous mode [ 80.534674][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.547844][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.559203][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.582198][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.594382][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.607292][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.714210][ T5861] team0: Port device team_slave_0 added [ 80.750520][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.763494][ T5862] team0: Port device team_slave_0 added [ 80.771789][ T5861] team0: Port device team_slave_1 added [ 80.796010][ T5859] team0: Port device team_slave_0 added [ 80.804788][ T5860] team0: Port device team_slave_0 added [ 80.813113][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.825827][ T5862] team0: Port device team_slave_1 added [ 80.846236][ T5859] team0: Port device team_slave_1 added [ 80.852948][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.859963][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.886654][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.886755][ T5847] Bluetooth: hci1: command tx timeout [ 80.905027][ T5860] team0: Port device team_slave_1 added [ 80.912748][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.919983][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.946000][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.956622][ T5847] Bluetooth: hci0: command tx timeout [ 80.959528][ T5851] Bluetooth: hci2: command tx timeout [ 80.962305][ T5847] Bluetooth: hci3: command tx timeout [ 80.968098][ T5854] Bluetooth: hci4: command tx timeout [ 81.087890][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.095002][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.121288][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.150491][ T5857] team0: Port device team_slave_0 added [ 81.157153][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.164426][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.190603][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.202795][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.209842][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.235830][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.247628][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.254733][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.280887][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.309864][ T5857] team0: Port device team_slave_1 added [ 81.330594][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.338362][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.364311][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.376091][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.383055][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.409057][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.433676][ T5861] hsr_slave_0: entered promiscuous mode [ 81.440110][ T5861] hsr_slave_1: entered promiscuous mode [ 81.481069][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.488231][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.514216][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.544625][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.551595][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.577734][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.708576][ T5859] hsr_slave_0: entered promiscuous mode [ 81.715448][ T5859] hsr_slave_1: entered promiscuous mode [ 81.721537][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.729416][ T5859] Cannot create hsr debugfs directory [ 81.755977][ T5860] hsr_slave_0: entered promiscuous mode [ 81.762272][ T5860] hsr_slave_1: entered promiscuous mode [ 81.768668][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.776407][ T5860] Cannot create hsr debugfs directory [ 81.794541][ T5862] hsr_slave_0: entered promiscuous mode [ 81.801065][ T5862] hsr_slave_1: entered promiscuous mode [ 81.807664][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.815358][ T5862] Cannot create hsr debugfs directory [ 81.950928][ T5857] hsr_slave_0: entered promiscuous mode [ 81.958128][ T5857] hsr_slave_1: entered promiscuous mode [ 81.964480][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.972050][ T5857] Cannot create hsr debugfs directory [ 82.392265][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.407654][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.446811][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.476236][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.553430][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.570638][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.582950][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.609545][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.683688][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.697002][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.712321][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.725310][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.842037][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.851250][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.872878][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.889694][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.920083][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.954164][ T5854] Bluetooth: hci1: command tx timeout [ 82.960604][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.999358][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.006659][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.034214][ T5851] Bluetooth: hci4: command tx timeout [ 83.039771][ T5851] Bluetooth: hci2: command tx timeout [ 83.043850][ T5847] Bluetooth: hci0: command tx timeout [ 83.045534][ T5854] Bluetooth: hci3: command tx timeout [ 83.057851][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.065082][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.085072][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.117650][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.142692][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.161016][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.236003][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.276357][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.317086][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.388840][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.400450][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.407605][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.440642][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.452505][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.463487][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.470599][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.511019][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.518190][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.569241][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.576398][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.591677][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.608492][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.627212][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.634383][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.681034][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.688262][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.718565][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.750478][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.757602][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.776892][ T5861] veth0_vlan: entered promiscuous mode [ 83.812683][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.819845][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.838588][ T5861] veth1_vlan: entered promiscuous mode [ 83.866185][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.965079][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.986952][ T5861] veth0_macvtap: entered promiscuous mode [ 84.019035][ T5861] veth1_macvtap: entered promiscuous mode [ 84.028979][ T5860] veth0_vlan: entered promiscuous mode [ 84.043526][ T5860] veth1_vlan: entered promiscuous mode [ 84.087065][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.122029][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.159278][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.180646][ T5859] veth0_vlan: entered promiscuous mode [ 84.191749][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.199859][ T5861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.209350][ T5861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.219180][ T5861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.228101][ T5861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.255070][ T5859] veth1_vlan: entered promiscuous mode [ 84.264018][ T5860] veth0_macvtap: entered promiscuous mode [ 84.276187][ T5860] veth1_macvtap: entered promiscuous mode [ 84.340417][ T5857] veth0_vlan: entered promiscuous mode [ 84.351584][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.363498][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.375540][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.397747][ T5857] veth1_vlan: entered promiscuous mode [ 84.418954][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.431909][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.448591][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.486719][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.498396][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.508395][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.517359][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.567108][ T5859] veth0_macvtap: entered promiscuous mode [ 84.585368][ T5859] veth1_macvtap: entered promiscuous mode [ 84.597131][ T5862] veth0_vlan: entered promiscuous mode [ 84.604946][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.612868][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.667461][ T5862] veth1_vlan: entered promiscuous mode [ 84.701500][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.712354][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.724331][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.735013][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.746393][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.761427][ T5857] veth0_macvtap: entered promiscuous mode [ 84.770851][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.779562][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.785754][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.799796][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.810154][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.820661][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.832349][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.865382][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.879077][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.891014][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.900107][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.920128][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.923890][ T5857] veth1_macvtap: entered promiscuous mode [ 84.937407][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.986197][ T5862] veth0_macvtap: entered promiscuous mode [ 85.010276][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.033550][ T5854] Bluetooth: hci1: command tx timeout [ 85.068598][ T5862] veth1_macvtap: entered promiscuous mode [ 85.076989][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.085258][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.100580][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.118203][ T5854] Bluetooth: hci3: command tx timeout [ 85.124199][ T5851] Bluetooth: hci2: command tx timeout [ 85.124230][ T5847] Bluetooth: hci4: command tx timeout [ 85.129598][ T5851] Bluetooth: hci0: command tx timeout [ 85.141693][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.151718][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.167760][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.178158][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.188843][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.200863][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.239887][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.253643][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.293452][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.306065][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.323576][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.343251][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.355242][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.363718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.373901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 85.439746][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.454045][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.467068][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.476528][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.526455][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.557777][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.623386][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.643951][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.654433][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.665358][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.679594][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.693268][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.715598][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.757965][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.839677][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.845189][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.858592][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.872788][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.885178][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.895472][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.899404][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.906533][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.925382][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.936229][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.948978][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.023801][ T5862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.047364][ T5862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.064370][ T5862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.082393][ T5862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.174656][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.207101][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.268695][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.304194][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.424159][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.475930][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.557289][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.590517][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.744759][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.752632][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.842252][ T5916] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6'. [ 86.911933][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 87.113526][ T975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.121422][ T5851] Bluetooth: hci1: command tx timeout [ 87.193610][ T5851] Bluetooth: hci0: command tx timeout [ 87.199072][ T5851] Bluetooth: hci3: command tx timeout [ 87.204622][ T5854] Bluetooth: hci4: command tx timeout [ 87.211192][ T5854] Bluetooth: hci2: command tx timeout [ 87.297085][ T975] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.312347][ T975] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.338805][ T975] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.374745][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.439921][ T5914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.468501][ T30] audit: type=1326 audit(1745223551.023:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 87.498705][ T975] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.517220][ T5930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.573373][ T30] audit: type=1326 audit(1745223551.023:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 87.609764][ T30] audit: type=1326 audit(1745223551.063:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 87.638390][ T30] audit: type=1326 audit(1745223551.063:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 87.720067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.900120][ T30] audit: type=1326 audit(1745223551.063:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 87.924504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.925506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.967101][ T30] audit: type=1326 audit(1745223551.073:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 88.111702][ T30] audit: type=1326 audit(1745223551.123:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 88.183296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 88.221749][ T30] audit: type=1326 audit(1745223551.123:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 88.278525][ T30] audit: type=1326 audit(1745223551.373:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 88.353446][ T30] audit: type=1326 audit(1745223551.373:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 88.454855][ T5914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.490519][ T5914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.683235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.373692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.404825][ T5924] usb 2-1: USB disconnect, device number 2 [ 90.185524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.193425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.343215][ T5897] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.785993][ T5897] usb 5-1: config 0 has no interfaces? [ 90.806051][ T5897] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 90.823425][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.831576][ T5897] usb 5-1: Product: syz [ 90.836813][ T5897] usb 5-1: Manufacturer: syz [ 90.841445][ T5897] usb 5-1: SerialNumber: syz [ 90.849913][ T5897] usb 5-1: config 0 descriptor?? [ 91.343351][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.513255][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 91.620820][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 91.635095][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 91.646713][ T5897] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 91.656623][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.667323][ T5897] usb 3-1: Product: syz [ 91.672832][ T5897] usb 3-1: Manufacturer: syz [ 91.680860][ T52] cfg80211: failed to load regulatory.db [ 91.690243][ T5897] usb 3-1: SerialNumber: syz [ 91.702344][ T5897] usb 3-1: config 0 descriptor?? [ 91.718324][ T5897] hub 3-1:0.0: bad descriptor, ignoring hub [ 91.726111][ T5897] hub 3-1:0.0: probe with driver hub failed with error -5 [ 91.737490][ T5897] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 91.752756][ T5897] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 91.770705][ T5897] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 91.843904][ T5924] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.010823][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.035900][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 92.051308][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.067954][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.083050][ T5924] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.096305][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.118125][ T5924] usb 2-1: config 0 descriptor?? [ 92.130737][ T6026] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 92.223599][ T5897] usb 3-1: USB disconnect, device number 2 [ 92.617093][ T5924] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 92.668753][ T5924] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 92.737783][ T5924] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 92.908568][ T6050] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65) [ 93.071244][ T5924] usb 5-1: USB disconnect, device number 2 [ 93.102572][ T3082] usb 2-1: USB disconnect, device number 3 [ 93.380824][ T6057] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 93.413217][ T5897] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.567452][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.588894][ T5897] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.614396][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.629003][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.679002][ T6050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.693606][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.696719][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.533323][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.581223][ T5924] usb 3-1: USB disconnect, device number 3 [ 96.798384][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.890723][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.921347][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.977324][ T5899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.025115][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.082104][ T5899] usb 5-1: config 0 descriptor?? [ 97.547960][ T5899] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 97.576738][ T5899] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 97.594354][ T5899] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 97.613205][ T5899] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 97.634028][ T5899] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 97.653941][ T5895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.675291][ T5899] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 97.853651][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 97.866047][ T5895] usb 3-1: no configurations [ 97.870683][ T5895] usb 3-1: can't read configurations, error -22 [ 98.034312][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.133932][ T5900] usb 5-1: USB disconnect, device number 3 [ 98.234407][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 98.240398][ T5895] usb 3-1: no configurations [ 98.253321][ T5895] usb 3-1: can't read configurations, error -22 [ 98.270478][ T5895] usb usb3-port1: attempt power cycle [ 98.643475][ T5895] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.671765][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 98.690899][ T5895] usb 3-1: no configurations [ 98.698749][ T5895] usb 3-1: can't read configurations, error -22 [ 98.787849][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 98.805904][ T6124] bond_slave_0: entered promiscuous mode [ 98.811699][ T6124] bond_slave_1: entered promiscuous mode [ 98.820797][ T6124] macvlan2: entered promiscuous mode [ 98.827058][ T6124] bond0: entered promiscuous mode [ 98.837760][ T6124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.863376][ T5895] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.893791][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 98.899546][ T5895] usb 3-1: no configurations [ 98.913174][ T5895] usb 3-1: can't read configurations, error -22 [ 98.942630][ T5895] usb usb3-port1: unable to enumerate USB device [ 99.092772][ T6129] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 99.464678][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.963253][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 99.989790][ T5895] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 100.021863][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.081690][ T5895] usb 5-1: config 0 descriptor?? [ 100.873596][ T5899] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 100.968110][ T5924] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.070992][ T5899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 101.109531][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.128922][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.163501][ T5899] usb 3-1: Product: syz [ 101.167736][ T5899] usb 3-1: Manufacturer: syz [ 101.178253][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 101.186681][ T5899] usb 3-1: SerialNumber: syz [ 101.196744][ T5924] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 101.211559][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.229486][ T5924] usb 4-1: Product: syz [ 101.234112][ T5924] usb 4-1: Manufacturer: syz [ 101.239572][ T5924] usb 4-1: SerialNumber: syz [ 101.302104][ T5924] usb 4-1: config 0 descriptor?? [ 101.329082][ T6160] misc userio: Invalid payload size [ 101.339634][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 101.368747][ T5924] gspca_main: se401-2.14.0 probing 047d:5003 [ 101.536875][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.564954][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.782571][ T5924] gspca_se401: ExtraFeatures: 1 [ 101.791174][ T5924] gspca_se401: Too many frame sizes [ 101.842696][ T5899] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 101.997131][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 102.011445][ T5900] usb 4-1: USB disconnect, device number 2 [ 102.198599][ T6165] FAULT_INJECTION: forcing a failure. [ 102.198599][ T6165] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.222519][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.2.51 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 102.222548][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.222567][ T6165] Call Trace: [ 102.222576][ T6165] [ 102.222584][ T6165] dump_stack_lvl+0x241/0x360 [ 102.222632][ T6165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.222662][ T6165] ? __pfx__printk+0x10/0x10 [ 102.222704][ T6165] should_fail_ex+0x424/0x570 [ 102.222741][ T6165] _copy_from_user+0x2d/0xb0 [ 102.222768][ T6165] usblp_write+0x397/0x850 [ 102.222799][ T6165] ? __pfx_usblp_write+0x10/0x10 [ 102.222820][ T6165] vfs_write+0x2bc/0xd10 [ 102.222862][ T6165] ? __pfx_vfs_write+0x10/0x10 [ 102.222891][ T6165] ? __fget_files+0x2a/0x420 [ 102.222911][ T6165] ? __fget_files+0x2a/0x420 [ 102.222932][ T6165] ? __fget_files+0x39d/0x420 [ 102.222950][ T6165] ? __fget_files+0x2a/0x420 [ 102.222978][ T6165] ksys_write+0x19d/0x2d0 [ 102.223009][ T6165] ? __pfx_ksys_write+0x10/0x10 [ 102.223048][ T6165] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 102.223070][ T6165] ? lockdep_hardirqs_on+0x9d/0x150 [ 102.223094][ T6165] __do_fast_syscall_32+0xb4/0x110 [ 102.223115][ T6165] ? exc_page_fault+0x5f8/0x920 [ 102.223140][ T6165] do_fast_syscall_32+0x34/0x80 [ 102.223163][ T6165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.223188][ T6165] RIP: 0023:0xf7ff2539 [ 102.223212][ T6165] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.223229][ T6165] RSP: 002b:00000000f50f555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 102.223251][ T6165] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001680 [ 102.223265][ T6165] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.223276][ T6165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.223288][ T6165] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.223299][ T6165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.223329][ T6165] [ 102.566867][ T6170] netlink: 'syz.0.59': attribute type 21 has an invalid length. [ 102.575766][ T6170] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 102.587089][ T6170] netlink: 'syz.0.59': attribute type 21 has an invalid length. [ 102.594902][ T6170] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.59'. [ 102.607055][ T5895] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 102.617637][ T5895] asix 5-1:0.0: probe with driver asix failed with error -71 [ 102.628322][ T5895] usb 5-1: USB disconnect, device number 4 [ 102.834396][ T6179] FAULT_INJECTION: forcing a failure. [ 102.834396][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.848006][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.3.61 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 102.848024][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.848031][ T6179] Call Trace: [ 102.848037][ T6179] [ 102.848042][ T6179] dump_stack_lvl+0x241/0x360 [ 102.848066][ T6179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.848085][ T6179] ? __pfx__printk+0x10/0x10 [ 102.848111][ T6179] should_fail_ex+0x424/0x570 [ 102.848133][ T6179] _copy_from_user+0x2d/0xb0 [ 102.848151][ T6179] snd_seq_write+0x323/0xac0 [ 102.848177][ T6179] ? __pfx_snd_seq_write+0x10/0x10 [ 102.848193][ T6179] ? bpf_lsm_file_permission+0x9/0x10 [ 102.848212][ T6179] ? rw_verify_area+0x246/0x630 [ 102.848228][ T6179] ? __pfx_snd_seq_write+0x10/0x10 [ 102.848244][ T6179] vfs_write+0x2bc/0xd10 [ 102.848268][ T6179] ? __pfx_vfs_write+0x10/0x10 [ 102.848286][ T6179] ? __fget_files+0x2a/0x420 [ 102.848297][ T6179] ? __fget_files+0x2a/0x420 [ 102.848309][ T6179] ? __fget_files+0x39d/0x420 [ 102.848320][ T6179] ? __fget_files+0x2a/0x420 [ 102.848337][ T6179] ksys_write+0x19d/0x2d0 [ 102.848355][ T6179] ? __pfx_ksys_write+0x10/0x10 [ 102.848392][ T6179] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 102.848406][ T6179] ? lockdep_hardirqs_on+0x9d/0x150 [ 102.848421][ T6179] __do_fast_syscall_32+0xb4/0x110 [ 102.848435][ T6179] ? exc_page_fault+0x5f8/0x920 [ 102.848451][ T6179] do_fast_syscall_32+0x34/0x80 [ 102.848466][ T6179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.848482][ T6179] RIP: 0023:0xf704d539 [ 102.848494][ T6179] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.848505][ T6179] RSP: 002b:00000000f503d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 102.848519][ T6179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 102.848528][ T6179] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.848536][ T6179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.848544][ T6179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.848551][ T6179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.848570][ T6179] [ 103.341445][ T6184] process 'syz.1.58' launched './file1' with NULL argv: empty string added [ 103.637747][ T6187] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.727422][ T5899] usb 3-1: USB disconnect, device number 8 [ 103.745030][ T5899] usblp0: removed [ 103.977790][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 104.393372][ T5897] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 104.558021][ T5897] usb 3-1: config 0 has an invalid interface number: 140 but max is 0 [ 104.591415][ T5897] usb 3-1: config 0 has no interface number 0 [ 104.632857][ T5897] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 104.668391][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.717310][ T5897] usb 3-1: Product: syz [ 104.742424][ T5897] usb 3-1: Manufacturer: syz [ 104.812244][ T5897] usb 3-1: SerialNumber: syz [ 104.868478][ T5897] usb 3-1: config 0 descriptor?? [ 104.941819][ T6195] fuse: Unknown parameter 'ƒÎ' [ 105.513221][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.663233][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 105.670115][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.683292][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.698066][ T5899] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 105.710684][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.728682][ T5899] usb 4-1: config 0 descriptor?? [ 106.011774][ T6208] FAULT_INJECTION: forcing a failure. [ 106.011774][ T6208] name failslab, interval 1, probability 0, space 0, times 1 [ 106.033526][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.1.68 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 106.033561][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.033573][ T6208] Call Trace: [ 106.033591][ T6208] [ 106.033599][ T6208] dump_stack_lvl+0x241/0x360 [ 106.033637][ T6208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.033667][ T6208] ? __pfx__printk+0x10/0x10 [ 106.033708][ T6208] should_fail_ex+0x424/0x570 [ 106.033745][ T6208] should_failslab+0xac/0x100 [ 106.033769][ T6208] __kmalloc_cache_noprof+0x73/0x370 [ 106.033789][ T6208] ? sctp_add_bind_addr+0x89/0x3a0 [ 106.033817][ T6208] sctp_add_bind_addr+0x89/0x3a0 [ 106.033845][ T6208] sctp_do_bind+0x5d2/0x950 [ 106.033886][ T6208] sctp_connect_new_asoc+0x2a0/0x700 [ 106.033919][ T6208] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 106.033946][ T6208] ? sctp_sendmsg+0xf30/0x3620 [ 106.033986][ T6208] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 106.034012][ T6208] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 106.034043][ T6208] sctp_sendmsg+0x2009/0x3620 [ 106.034094][ T6208] ? __pfx_sctp_sendmsg+0x10/0x10 [ 106.034124][ T6208] ? aa_sk_perm+0x96f/0xac0 [ 106.034165][ T6208] ? inet_sendmsg+0x330/0x390 [ 106.034203][ T6208] __sock_sendmsg+0x1a6/0x270 [ 106.034232][ T6208] __sys_sendto+0x365/0x4c0 [ 106.034267][ T6208] ? __pfx___sys_sendto+0x10/0x10 [ 106.034310][ T6208] ? __fget_files+0x2a/0x420 [ 106.034341][ T6208] ? ksys_write+0x275/0x2d0 [ 106.034380][ T6208] __ia32_sys_sendto+0xdd/0x100 [ 106.034413][ T6208] __do_fast_syscall_32+0xb4/0x110 [ 106.034435][ T6208] ? exc_page_fault+0x5f8/0x920 [ 106.034461][ T6208] do_fast_syscall_32+0x34/0x80 [ 106.034484][ T6208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.034508][ T6208] RIP: 0023:0xf70ad539 [ 106.034526][ T6208] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 106.034543][ T6208] RSP: 002b:00000000f509d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 106.034564][ T6208] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 106.034586][ T6208] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 106.034598][ T6208] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 106.034610][ T6208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.034621][ T6208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.034651][ T6208] [ 106.287443][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 106.343688][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 106.405243][ T5899] usb 4-1: USB disconnect, device number 3 [ 106.437641][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 106.733514][ T6221] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 106.770241][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.72'. [ 106.847258][ T6223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.858509][ T6223] bridge0: port 3(bond1) entered blocking state [ 106.865345][ T6223] bridge0: port 3(bond1) entered disabled state [ 106.873760][ T6223] bond1: entered allmulticast mode [ 106.882464][ T6223] bond1: entered promiscuous mode [ 106.891276][ T6223] bridge0: port 3(bond1) entered blocking state [ 106.897913][ T6223] bridge0: port 3(bond1) entered forwarding state [ 106.915446][ T6221] batadv0: entered promiscuous mode [ 106.936361][ T6221] batadv0: entered allmulticast mode [ 106.949256][ T6230] input: syz1 as /devices/virtual/input/input9 [ 106.979915][ T6221] bridge0: port 3(batadv0) entered blocking state [ 106.986679][ T6221] bridge0: port 3(batadv0) entered disabled state [ 106.997110][ T6221] bridge0: port 3(batadv0) entered blocking state [ 107.003802][ T6221] bridge0: port 3(batadv0) entered forwarding state [ 107.049286][ T5986] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 107.058783][ T5986] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 107.110788][ T6219] dummy0: entered allmulticast mode [ 107.172150][ T6219] batman_adv: batadv0: Adding interface: dummy0 [ 107.192609][ T6219] batman_adv: batadv0: Interface activated: dummy0 [ 107.193473][ T5897] as10x_usb: device has been detected [ 107.229835][ T5897] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 107.246077][ T6218] delete_channel: no stack [ 107.257696][ T5984] bridge0: port 3(bond1) entered disabled state [ 107.321275][ T6236] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 107.364516][ T5897] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 107.494073][ T5897] as10x_usb: error during firmware upload part1 [ 107.566953][ T5897] Registered device Elgato EyeTV DTT Deluxe [ 107.600545][ T6247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.648829][ T5897] usb 3-1: USB disconnect, device number 9 [ 107.709886][ T6249] mmap: syz.3.82 (6249) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.778263][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 107.811476][ T5897] Unregistered device Elgato EyeTV DTT Deluxe [ 107.838334][ T5897] as10x_usb: device has been disconnected [ 107.926633][ T6252] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.965838][ T6252] kvm: pic: non byte read [ 107.970617][ T6252] kvm: pic: level sensitive irq not supported [ 107.970749][ T6252] kvm: pic: non byte read [ 107.981854][ T6252] kvm: pic: level sensitive irq not supported [ 107.981974][ T6252] kvm: pic: non byte read [ 108.003014][ T6252] kvm: pic: level sensitive irq not supported [ 108.003081][ T6252] kvm: pic: non byte read [ 108.280938][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 109.860548][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 109.897762][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 109.946242][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 110.059957][ T6294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'. [ 110.083277][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 110.111577][ T6294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'. [ 110.121125][ T6294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'. [ 110.353214][ T5899] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.515188][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.528173][ T6310] netlink: 152 bytes leftover after parsing attributes in process `syz.0.97'. [ 110.548273][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.573170][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.619316][ T5899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.653214][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.690196][ T5899] usb 4-1: config 0 descriptor?? [ 111.126623][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 111.134295][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.173386][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 111.317285][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 111.363494][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 111.394595][ T5899] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 111.473320][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 111.505711][ T5899] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 111.543210][ T10] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 111.551340][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.751159][ T10] usb 3-1: config 0 has no interface number 0 [ 111.808624][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 111.837950][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.888569][ T10] usb 3-1: Product: syz [ 111.892789][ T10] usb 3-1: Manufacturer: syz [ 111.923393][ T10] usb 3-1: SerialNumber: syz [ 111.954330][ T10] usb 3-1: config 0 descriptor?? [ 112.012613][ T10] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 112.047754][ T10] usb 3-1: No valid video chain found. [ 112.197328][ T10] usb 4-1: USB disconnect, device number 4 [ 112.691400][ T6336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 112.698163][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.747484][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 112.763725][ T5899] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.792373][ T6343] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 112.799004][ T6343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.872577][ T6343] vhci_hcd vhci_hcd.0: Device attached [ 112.887314][ T6336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 112.893953][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.929625][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 112.933382][ T10] vhci_hcd: vhci_device speed not set [ 112.941417][ T6343] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 112.948044][ T6343] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.975690][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 112.988326][ T6336] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20) [ 112.994958][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.039115][ T6343] vhci_hcd vhci_hcd.0: Device attached [ 113.059496][ T5899] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 113.083828][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.084603][ T6357] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.091851][ T5899] usb 2-1: Product: syz [ 113.091882][ T5899] usb 2-1: Manufacturer: syz [ 113.091898][ T5899] usb 2-1: SerialNumber: syz [ 113.137215][ T10] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 113.141327][ T6359] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.169322][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 113.187648][ T5899] usb 2-1: config 0 descriptor?? [ 113.218944][ T5899] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 113.337063][ T6347] vhci_hcd: connection closed [ 113.339419][ T5996] vhci_hcd: stop threads [ 113.352467][ T6339] vhci_hcd: connection reset by peer [ 113.353517][ T6349] vhci_hcd: connection closed [ 113.360819][ T6344] vhci_hcd: connection closed [ 113.378075][ T6353] vhci_hcd: connection closed [ 113.397824][ T5996] vhci_hcd: release socket [ 113.439686][ T5996] vhci_hcd: disconnect device [ 113.451467][ T5996] vhci_hcd: stop threads [ 113.468330][ T5996] vhci_hcd: release socket [ 113.503504][ T5996] vhci_hcd: disconnect device [ 113.536251][ T5996] vhci_hcd: stop threads [ 113.548519][ T5996] vhci_hcd: release socket [ 113.557750][ T5996] vhci_hcd: disconnect device [ 113.628045][ T5899] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 113.647970][ T5996] vhci_hcd: stop threads [ 113.653204][ T5897] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.662711][ T5996] vhci_hcd: release socket [ 113.683564][ T5899] visor 2-1:0.0: probe with driver visor failed with error -71 [ 113.693538][ T5996] vhci_hcd: disconnect device [ 113.717504][ T5899] usb 2-1: USB disconnect, device number 4 [ 113.723445][ T5996] vhci_hcd: stop threads [ 113.760206][ T5996] vhci_hcd: release socket [ 113.801227][ T5996] vhci_hcd: disconnect device [ 113.807325][ T52] usb 3-1: USB disconnect, device number 10 [ 113.853241][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 113.875821][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.907135][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 113.935258][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.978018][ T5897] usb 5-1: config 0 descriptor?? [ 113.996925][ T5897] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 114.154916][ T5151] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 114.164121][ T5151] Bluetooth: hci1: Injecting HCI hardware error event [ 114.172215][ T5151] Bluetooth: hci1: hardware error 0x00 [ 114.211694][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.221678][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.234244][ T6361] loop6: detected capacity change from 0 to 524287999 [ 114.396015][ T6370] fuse: Bad value for 'group_id' [ 114.401056][ T6370] fuse: Bad value for 'group_id' [ 114.428463][ T6374] FAULT_INJECTION: forcing a failure. [ 114.428463][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.470131][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: syz.1.113 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 114.470165][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.470182][ T6374] Call Trace: [ 114.470190][ T6374] [ 114.470199][ T6374] dump_stack_lvl+0x241/0x360 [ 114.470235][ T6374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.470265][ T6374] ? __pfx__printk+0x10/0x10 [ 114.470304][ T6374] should_fail_ex+0x424/0x570 [ 114.470340][ T6374] _copy_to_user+0x31/0xb0 [ 114.470381][ T6374] simple_read_from_buffer+0xc4/0x170 [ 114.470419][ T6374] proc_fail_nth_read+0x1ef/0x260 [ 114.470440][ T6374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.470462][ T6374] ? rw_verify_area+0x246/0x630 [ 114.470486][ T6374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.470525][ T6374] vfs_read+0x21f/0xb90 [ 114.470558][ T6374] ? __pfx___mutex_lock+0x10/0x10 [ 114.470590][ T6374] ? __pfx_vfs_read+0x10/0x10 [ 114.470620][ T6374] ? __fget_files+0x2a/0x420 [ 114.470640][ T6374] ? __fget_files+0x39d/0x420 [ 114.470658][ T6374] ? __fget_files+0x2a/0x420 [ 114.470686][ T6374] ksys_read+0x19d/0x2d0 [ 114.470716][ T6374] ? __pfx_ksys_read+0x10/0x10 [ 114.470746][ T6374] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 114.470767][ T6374] ? lockdep_hardirqs_on+0x9d/0x150 [ 114.470790][ T6374] __do_fast_syscall_32+0xb4/0x110 [ 114.470811][ T6374] ? exc_page_fault+0x5f8/0x920 [ 114.470841][ T6374] do_fast_syscall_32+0x34/0x80 [ 114.470863][ T6374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.470887][ T6374] RIP: 0023:0xf70ad539 [ 114.470905][ T6374] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 114.470921][ T6374] RSP: 002b:00000000f509d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 114.470941][ T6374] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f509d620 [ 114.470955][ T6374] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 114.470966][ T6374] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 114.470977][ T6374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.470988][ T6374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.471017][ T6374] [ 114.700287][ T6370] capability: warning: `syz.0.112' uses deprecated v2 capabilities in a way that may be insecure [ 114.770370][ T6377] sctp: [Deprecated]: syz.0.112 (pid 6377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.770370][ T6377] Use struct sctp_sack_info instead [ 114.829542][ T5897] gspca_vc032x: reg_w err -110 [ 114.834480][ T5897] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 114.924575][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 115.137283][ T5924] IPVS: starting estimator thread 0... [ 115.443398][ T6388] IPVS: using max 28 ests per chain, 67200 per kthread [ 115.603178][ T5924] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.984336][ T52] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.163316][ T52] usb 4-1: device descriptor read/64, error -71 [ 116.257769][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 116.393703][ T5151] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 116.412994][ T5924] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 116.436463][ T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.440531][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.453941][ T5897] usb 5-1: USB disconnect, device number 6 [ 116.470447][ T5924] usb 2-1: Product: syz [ 116.482570][ T5924] usb 2-1: Manufacturer: syz [ 116.495697][ T5924] usb 2-1: SerialNumber: syz [ 116.515416][ T5924] usb 2-1: config 0 descriptor?? [ 116.573241][ T52] usb 4-1: device descriptor read/64, error -71 [ 116.691419][ T52] usb usb4-port1: attempt power cycle [ 116.869643][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.894777][ T5924] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 117.054035][ T52] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.090153][ T5895] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 117.094246][ T52] usb 4-1: device descriptor read/8, error -71 [ 117.140840][ T5895] usb 1-1: config 0 has no interface number 0 [ 117.161913][ T5895] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 117.209471][ T5895] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 117.223237][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.231399][ T5895] usb 1-1: Product: syz [ 117.236499][ T5895] usb 1-1: Manufacturer: syz [ 117.241184][ T5895] usb 1-1: SerialNumber: syz [ 117.249717][ T5895] usb 1-1: config 0 descriptor?? [ 117.256944][ T6406] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.282096][ T5899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.324664][ T6376] Zero length message leads to an empty skb [ 117.331874][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 117.347849][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 117.403346][ T52] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.423937][ T52] usb 4-1: device descriptor read/8, error -71 [ 117.568695][ T52] usb usb4-port1: unable to enumerate USB device [ 118.453408][ T10] vhci_hcd: vhci_device speed not set [ 119.012390][ T5924] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.022747][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.132779][ T5924] dvbdev: DVB: registering new adapter (Terratec H7) [ 119.191058][ T5895] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.199482][ T5899] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.223743][ T5924] usb 2-1: media controller created [ 119.229212][ T5895] usb 1-1: MIDIStreaming interface descriptor not found [ 119.274104][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 119.288774][ T6435] dccp_invalid_packet: P.Data Offset(100) too large [ 119.336972][ T5895] usb 1-1: USB disconnect, device number 2 [ 119.371637][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.401124][ T9] usb 5-1: config 0 has no interface number 0 [ 119.423832][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 119.445885][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.460556][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 119.498524][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 119.528620][ T5899] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 119.538032][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.553347][ T5899] usb 4-1: Product: syz [ 119.560028][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.572683][ T5899] usb 4-1: Manufacturer: syz [ 119.582174][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.599270][ T5899] usb 4-1: SerialNumber: syz [ 119.622110][ T9] usb 5-1: Product: syz [ 119.630938][ T5899] usb 4-1: config 0 descriptor?? [ 119.643073][ T9] usb 5-1: Manufacturer: syz [ 119.650585][ T9] usb 5-1: SerialNumber: syz [ 119.656359][ T5922] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 119.683041][ T9] usb 5-1: config 0 descriptor?? [ 119.716130][ T9] smsc75xx v1.0.0 [ 119.735255][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 119.796432][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 119.805607][ T5922] usb 3-1: device descriptor read/64, error -71 [ 119.813740][ T5900] usb usb34-port1: attempt power cycle [ 119.820222][ T5924] usb read operation failed. (-71) [ 119.837040][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.904757][ T5924] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 120.016541][ T5924] usb 2-1: USB disconnect, device number 5 [ 120.053251][ T5922] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 120.218609][ T6428] FAULT_INJECTION: forcing a failure. [ 120.218609][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 120.241491][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: syz.4.123 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 120.241518][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.241533][ T6428] Call Trace: [ 120.241545][ T6428] [ 120.241553][ T6428] dump_stack_lvl+0x241/0x360 [ 120.241596][ T6428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.241623][ T6428] ? __pfx__printk+0x10/0x10 [ 120.241648][ T6428] ? __lock_acquire+0xad5/0xd80 [ 120.241685][ T6428] should_fail_ex+0x424/0x570 [ 120.241720][ T6428] should_failslab+0xac/0x100 [ 120.241743][ T6428] kmem_cache_alloc_noprof+0x78/0x390 [ 120.241762][ T6428] ? skb_clone+0x20c/0x390 [ 120.241786][ T6428] skb_clone+0x20c/0x390 [ 120.241808][ T6428] __netlink_deliver_tap+0x3c4/0x7f0 [ 120.241844][ T6428] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.241866][ T6428] netlink_deliver_tap+0x19d/0x1b0 [ 120.241891][ T6428] netlink_unicast+0x7c6/0x9a0 [ 120.241921][ T6428] ? __pfx_netlink_unicast+0x10/0x10 [ 120.241944][ T6428] ? skb_put+0x114/0x1f0 [ 120.241975][ T6428] netlink_sendmsg+0x8c3/0xcd0 [ 120.242011][ T6428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.242035][ T6428] ? aa_sock_msg_perm+0x91/0x160 [ 120.242059][ T6428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.242077][ T6428] __sock_sendmsg+0x221/0x270 [ 120.242097][ T6428] ____sys_sendmsg+0x523/0x860 [ 120.242126][ T6428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.242155][ T6428] ? rcu_read_lock_any_held+0xbb/0x160 [ 120.242177][ T6428] __sys_sendmsg+0x271/0x360 [ 120.242203][ T6428] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.242224][ T6428] ? vfs_write+0xb29/0xd10 [ 120.242253][ T6428] ? __pfx_vfs_write+0x10/0x10 [ 120.242271][ T6428] ? do_sys_openat2+0x165/0x1d0 [ 120.242312][ T6428] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 120.242328][ T6428] ? lockdep_hardirqs_on+0x9d/0x150 [ 120.242345][ T6428] __do_fast_syscall_32+0xb4/0x110 [ 120.242362][ T6428] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 120.242377][ T6428] ? lockdep_hardirqs_on+0x9d/0x150 [ 120.242393][ T6428] do_fast_syscall_32+0x34/0x80 [ 120.242409][ T6428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.242427][ T6428] RIP: 0023:0xf70fd539 [ 120.242449][ T6428] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 120.242462][ T6428] RSP: 002b:00000000f50ab55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 120.242481][ T6428] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000580 [ 120.242491][ T6428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.242500][ T6428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.242508][ T6428] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.242516][ T6428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.242537][ T6428] [ 120.663616][ T5922] usb 3-1: device descriptor read/64, error -71 [ 120.748386][ T5900] usb usb34-port1: unable to enumerate USB device [ 120.785111][ T5922] usb usb3-port1: attempt power cycle [ 120.811929][ T5924] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.049727][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.061205][ T5924] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.078160][ T5924] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.111080][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.123410][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.155245][ T5922] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 121.180219][ T5924] usb 2-1: Product: syz [ 121.188848][ T5924] usb 2-1: Manufacturer: syz [ 121.196286][ T5922] usb 3-1: device descriptor read/8, error -71 [ 121.214804][ T5900] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.234880][ T5924] usb 2-1: SerialNumber: syz [ 121.373344][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 121.385252][ T5900] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.398144][ T5900] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 121.410646][ T5900] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 121.439578][ T5900] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 121.449167][ T5922] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 121.464530][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.475913][ T5900] usb 1-1: Product: syz [ 121.482899][ T5900] usb 1-1: Manufacturer: syz [ 121.493175][ T5900] usb 1-1: SerialNumber: syz [ 121.498445][ T5922] usb 3-1: device descriptor read/8, error -71 [ 121.617827][ T5922] usb usb3-port1: unable to enumerate USB device [ 121.755872][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.766344][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.143762][ T52] usb 5-1: USB disconnect, device number 7 [ 122.579900][ T5924] cdc_ncm 2-1:1.0: bind() failure [ 122.591730][ T5924] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 122.677668][ T5924] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 122.924856][ T5924] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 123.035117][ T5924] usb 2-1: USB disconnect, device number 6 [ 123.507939][ T5924] usb 4-1: USB disconnect, device number 9 [ 124.182382][ T5900] usb 1-1: USB disconnect, device number 3 [ 124.437116][ T6479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.477825][ T6482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.513917][ T6490] FAULT_INJECTION: forcing a failure. [ 124.513917][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.537964][ T6486] misc userio: No port type given on /dev/userio [ 124.550022][ T6490] CPU: 0 UID: 0 PID: 6490 Comm: syz.0.139 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 124.550050][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.550062][ T6490] Call Trace: [ 124.550069][ T6490] [ 124.550077][ T6490] dump_stack_lvl+0x241/0x360 [ 124.550113][ T6490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.550141][ T6490] ? __pfx__printk+0x10/0x10 [ 124.550181][ T6490] should_fail_ex+0x424/0x570 [ 124.550215][ T6490] _copy_from_user+0x2d/0xb0 [ 124.550243][ T6490] do_sys_poll+0x25f/0x13f0 [ 124.550292][ T6490] ? _parse_integer_limit+0x1b4/0x200 [ 124.550313][ T6490] ? __pfx_do_sys_poll+0x10/0x10 [ 124.550345][ T6490] ? kstrtoull+0x1d3/0x2f0 [ 124.550430][ T6490] ? rcu_read_lock_any_held+0xbb/0x160 [ 124.550453][ T6490] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 124.550477][ T6490] ? vfs_write+0xb29/0xd10 [ 124.550531][ T6490] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 124.550549][ T6490] ? __fget_files+0x2a/0x420 [ 124.550576][ T6490] __ia32_compat_sys_ppoll_time32+0x34e/0x3b0 [ 124.550608][ T6490] ? fput+0x9b/0xd0 [ 124.550631][ T6490] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 124.550669][ T6490] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 124.550691][ T6490] ? lockdep_hardirqs_on+0x9d/0x150 [ 124.550713][ T6490] __do_fast_syscall_32+0xb4/0x110 [ 124.550735][ T6490] ? exc_page_fault+0x5f8/0x920 [ 124.550758][ T6490] do_fast_syscall_32+0x34/0x80 [ 124.550779][ T6490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.550803][ T6490] RIP: 0023:0xf709d539 [ 124.550819][ T6490] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 124.550835][ T6490] RSP: 002b:00000000f508d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 124.550856][ T6490] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 124.550869][ T6490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.550881][ T6490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.550892][ T6490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.550903][ T6490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.550930][ T6490] [ 124.870156][ T6482] misc userio: The device must be registered before sending interrupts [ 125.174858][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 125.433437][ T5900] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 125.448950][ T6503] syz_tun: entered allmulticast mode [ 125.490141][ T6500] syz_tun: left allmulticast mode [ 125.613222][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 125.620414][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 125.653368][ T5899] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.674678][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.822692][ T5900] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.823317][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 125.833026][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.876907][ T5900] usb 3-1: Product: syz [ 125.884010][ T5900] usb 3-1: Manufacturer: syz [ 125.892430][ T5900] usb 3-1: SerialNumber: syz [ 126.015896][ T5899] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 126.034423][ T5900] usb 3-1: config 0 descriptor?? [ 126.035339][ T5899] usb 2-1: config 0 has no interface number 0 [ 126.092351][ T5900] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.123666][ T6513] syz.3.146 uses obsolete (PF_INET,SOCK_PACKET) [ 126.136830][ T5899] usb 2-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 126.137870][ T5900] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 126.167448][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.190695][ T5899] usb 2-1: Product: syz [ 126.212467][ T5899] usb 2-1: Manufacturer: syz [ 126.222533][ T5899] usb 2-1: SerialNumber: syz [ 126.281978][ T5899] usb 2-1: config 0 descriptor?? [ 126.365293][ T5899] xr_serial 2-1:0.109: More than one union descriptor, skipping ... [ 126.418313][ T5900] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 126.431767][ T5900] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 126.472300][ T5900] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 126.502118][ T5900] em28xx 3-1:0.0: No AC97 audio processor [ 126.554691][ T30] kauditd_printk_skb: 379 callbacks suppressed [ 126.554709][ T30] audit: type=1326 audit(1745223590.093:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.147" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2539 code=0x0 [ 126.557563][ T5900] usb 3-1: USB disconnect, device number 15 [ 126.614683][ T5900] em28xx 3-1:0.0: Disconnecting em28xx [ 126.638151][ T5846] usb 2-1: USB disconnect, device number 7 [ 126.670291][ T5900] em28xx 3-1:0.0: Freeing device [ 126.714657][ T30] audit: type=1326 audit(1745223590.273:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.147" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x80000000 [ 126.873602][ T5899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.588816][ T6526] netlink: 'syz.4.149': attribute type 21 has an invalid length. [ 127.618748][ T6526] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 127.667642][ T6526] netlink: 'syz.4.149': attribute type 21 has an invalid length. [ 127.693988][ T6526] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.149'. [ 127.851206][ T6524] "syz.1.148" (6524) uses obsolete ecb(arc4) skcipher [ 127.960601][ T6536] netlink: 220 bytes leftover after parsing attributes in process `syz.3.151'. [ 127.971131][ T6534] netlink: 52 bytes leftover after parsing attributes in process `syz.0.150'. [ 128.217314][ T6539] block device autoloading is deprecated and will be removed. [ 128.253215][ T5900] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.423394][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 128.435950][ T5900] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 128.459153][ T5900] usb 1-1: config 0 has no interface number 0 [ 128.505746][ T5900] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 128.536873][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.545356][ T5900] usb 1-1: Product: syz [ 128.549644][ T5900] usb 1-1: Manufacturer: syz [ 128.558708][ T5900] usb 1-1: SerialNumber: syz [ 128.576114][ T5900] usb 1-1: config 0 descriptor?? [ 128.593008][ T5900] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 128.693419][ T5899] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 128.802973][ T5900] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 128.839623][ T5900] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 128.843586][ T5899] usb 2-1: device descriptor read/64, error -71 [ 128.898420][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 128.920434][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 129.044358][ T6536] tipc: Invalid UDP bearer configuration [ 129.044419][ T6536] tipc: Enabling of bearer rejected, failed to enable media [ 129.104936][ T5899] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 129.202235][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 129.210536][ T5900] usb 1-1: USB disconnect, device number 4 [ 129.224961][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 129.253371][ T5899] usb 2-1: device descriptor read/64, error -71 [ 129.266620][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 129.304077][ T5900] quatech2 1-1:0.51: device disconnected [ 129.363807][ T5899] usb usb2-port1: attempt power cycle [ 129.501058][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 129.669878][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 129.714001][ T5899] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 129.746348][ T5899] usb 2-1: device descriptor read/8, error -71 [ 129.995735][ T5899] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 130.049057][ T5899] usb 2-1: device descriptor read/8, error -71 [ 130.173602][ T5899] usb usb2-port1: unable to enumerate USB device [ 130.933551][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 130.949855][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 130.970094][ T6564] netlink: 'syz.4.160': attribute type 14 has an invalid length. [ 130.990323][ T6564] netlink: 'syz.4.160': attribute type 11 has an invalid length. [ 132.456190][ T6578] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 132.521421][ T6578] team0: Port device dummy0 added [ 132.641262][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.672406][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.749769][ T6578] syz.2.162 (6578) used greatest stack depth: 19016 bytes left [ 133.023192][ T5922] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 133.363886][ T52] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.611750][ T52] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 133.637042][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.641358][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.664740][ T52] usb 1-1: Product: syz [ 133.669041][ T52] usb 1-1: Manufacturer: syz [ 133.691058][ T52] usb 1-1: SerialNumber: syz [ 133.705928][ T5922] usb 2-1: no configurations [ 133.720205][ T5922] usb 2-1: can't read configurations, error -22 [ 133.754182][ T52] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 133.804721][ T5900] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 134.493274][ T5924] usb 1-1: USB disconnect, device number 5 [ 134.762550][ T6608] dvmrp0: tun_chr_ioctl cmd 2148553947 [ 135.119383][ T5900] usb 1-1: Service connection timeout for: 256 [ 135.133172][ T5900] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 135.167729][ T5900] ath9k_htc: Failed to initialize the device [ 135.255042][ T5924] usb 1-1: ath9k_htc: USB layer deinitialized [ 135.416026][ T5897] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 135.522869][ T6618] "syz.0.175" (6618) uses obsolete ecb(arc4) skcipher [ 135.593579][ T5897] usb 4-1: device descriptor read/64, error -71 [ 135.873701][ T5897] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 135.913555][ T5924] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 136.053541][ T5897] usb 4-1: device descriptor read/64, error -71 [ 136.093412][ T52] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 136.114048][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 136.127220][ T5924] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 136.139650][ T6633] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.181'. [ 136.152666][ T5924] usb 3-1: config 0 has no interface number 0 [ 136.170340][ T5924] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.176816][ T5897] usb usb4-port1: attempt power cycle [ 136.202286][ T5924] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 136.223207][ T5924] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 136.232911][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 136.241410][ T5924] usb 3-1: Product: syz [ 136.246094][ T5924] usb 3-1: SerialNumber: syz [ 136.258084][ T5924] usb 3-1: config 0 descriptor?? [ 136.272027][ T5924] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 136.283778][ T5924] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11 [ 136.285352][ T52] usb 2-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 136.313199][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.335760][ T52] usb 2-1: config 0 descriptor?? [ 136.353951][ T52] usb-storage 2-1:0.0: USB Mass Storage device detected [ 136.392488][ T52] usb-storage 2-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc2-syzkaller-00493-gac71fabf1567) [ 136.392488][ T52] Please send a copy of this message to and [ 136.420459][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.431208][ T5922] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.482498][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 136.535417][ T5897] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 136.571656][ T5897] usb 4-1: device descriptor read/8, error -71 [ 136.575713][ T5924] usb 2-1: USB disconnect, device number 14 [ 136.615040][ T5922] usb 5-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 136.632507][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.646443][ T5922] usb 5-1: config 0 descriptor?? [ 136.656326][ T5922] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 136.695710][ T5899] usb 3-1: USB disconnect, device number 16 [ 136.748214][ T5899] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 136.813588][ T5897] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 136.864323][ T5897] usb 4-1: device descriptor read/8, error -71 [ 136.962594][ T6642] "syz.0.184" (6642) uses obsolete ecb(arc4) skcipher [ 136.978983][ T5897] usb usb4-port1: unable to enumerate USB device [ 137.192287][ T5922] gspca_sn9c20x: Write register 1000 failed -110 [ 137.210067][ T5922] gspca_sn9c20x: Device initialization failed [ 137.240239][ T5922] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 137.259893][ T6650] vivid-000: disconnect [ 137.272367][ T6649] vivid-000: reconnect [ 137.470543][ T52] usb 5-1: USB disconnect, device number 8 [ 137.907788][ T5986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.058653][ T5986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.151128][ T5986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.234063][ T5922] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 138.350919][ T5986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.427787][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 138.458061][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 138.478385][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.503218][ T5922] usb 2-1: Product: syz [ 138.522342][ T5922] usb 2-1: Manufacturer: syz [ 138.532001][ T5922] usb 2-1: SerialNumber: syz [ 138.553940][ T5922] usb 2-1: config 0 descriptor?? [ 138.671725][ T5986] bridge0: port 3(batadv0) entered disabled state [ 138.693815][ T5986] bridge_slave_1: left allmulticast mode [ 138.699785][ T5986] bridge_slave_1: left promiscuous mode [ 138.707375][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.721794][ T5986] bridge_slave_0: left allmulticast mode [ 138.733082][ T5986] bridge_slave_0: left promiscuous mode [ 138.742042][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.742853][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.752425][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.764937][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.773729][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.777846][ T5899] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 138.781598][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.788716][ T6669] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 138.795584][ T52] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.804455][ T5924] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 138.829743][ T5922] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 138.964345][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 138.991597][ T52] usb 5-1: config 127 has an invalid interface number: 102 but max is 2 [ 139.003327][ T52] usb 5-1: config 127 has no interface number 2 [ 139.009739][ T52] usb 5-1: config 127 interface 0 has no altsetting 0 [ 139.013629][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 139.018264][ T52] usb 5-1: config 127 interface 1 has no altsetting 0 [ 139.027814][ T5899] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 139.030785][ T52] usb 5-1: config 127 interface 102 has no altsetting 0 [ 139.052211][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.061081][ T52] usb 5-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=3e.2d [ 139.063974][ T5899] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.064330][ T5924] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 139.086859][ T52] usb 5-1: New USB device strings: Mfr=217, Product=93, SerialNumber=86 [ 139.103061][ T5899] usb 3-1: config 1 has no interface number 1 [ 139.110560][ T52] usb 5-1: Product: syz [ 139.115782][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.116193][ T52] usb 5-1: Manufacturer: syz [ 139.128970][ T5899] usb 3-1: string descriptor 0 read error: -22 [ 139.131263][ T52] usb 5-1: SerialNumber: syz [ 139.140932][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.150191][ T5924] usb 4-1: Product: syz [ 139.154461][ T5924] usb 4-1: Manufacturer: syz [ 139.159137][ T5924] usb 4-1: SerialNumber: syz [ 139.169734][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.189144][ T5924] usb 4-1: config 0 descriptor?? [ 139.203417][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.215248][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.225117][ T5924] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 139.235177][ T5899] usb 3-1: MIDIStreaming interface descriptor not found [ 139.243224][ T5924] usb 4-1: setting power ON [ 139.248287][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 139.273944][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.288985][ T5924] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 139.304166][ T5924] usb 4-1: media controller created [ 139.349670][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.410769][ T5924] usb 4-1: selecting invalid altsetting 6 [ 139.427201][ T6681] FAULT_INJECTION: forcing a failure. [ 139.427201][ T6681] name failslab, interval 1, probability 0, space 0, times 0 [ 139.433355][ T5899] usb 3-1: USB disconnect, device number 17 [ 139.453498][ T5924] usb 4-1: digital interface selection failed (-22) [ 139.477208][ T6681] CPU: 1 UID: 0 PID: 6681 Comm: syz.3.197 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 139.477241][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.477253][ T6681] Call Trace: [ 139.477260][ T6681] [ 139.477269][ T6681] dump_stack_lvl+0x241/0x360 [ 139.477305][ T6681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.477335][ T6681] ? __pfx__printk+0x10/0x10 [ 139.477368][ T6681] ? __pfx___might_resched+0x10/0x10 [ 139.477393][ T6681] should_fail_ex+0x424/0x570 [ 139.477427][ T6681] should_failslab+0xac/0x100 [ 139.477449][ T6681] __kmalloc_noprof+0xdf/0x4d0 [ 139.477469][ T6681] ? i2cdev_read+0xe6/0x220 [ 139.477504][ T6681] i2cdev_read+0xe6/0x220 [ 139.477532][ T6681] ? __pfx_i2cdev_read+0x10/0x10 [ 139.477564][ T6681] vfs_read+0x21f/0xb90 [ 139.477599][ T6681] ? __pfx_vfs_read+0x10/0x10 [ 139.477627][ T6681] ? __fget_files+0x2a/0x420 [ 139.477645][ T6681] ? __fget_files+0x2a/0x420 [ 139.477665][ T6681] ? __fget_files+0x39d/0x420 [ 139.477683][ T6681] ? __fget_files+0x2a/0x420 [ 139.477711][ T6681] ksys_read+0x19d/0x2d0 [ 139.477740][ T6681] ? __pfx_ksys_read+0x10/0x10 [ 139.477770][ T6681] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 139.477791][ T6681] ? lockdep_hardirqs_on+0x9d/0x150 [ 139.477814][ T6681] __do_fast_syscall_32+0xb4/0x110 [ 139.477835][ T6681] ? exc_page_fault+0x5f8/0x920 [ 139.477859][ T6681] do_fast_syscall_32+0x34/0x80 [ 139.477881][ T6681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.477904][ T6681] RIP: 0023:0xf704d539 [ 139.477920][ T6681] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 139.477937][ T6681] RSP: 002b:00000000f503d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 139.477957][ T6681] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 139.477968][ T6681] RDX: 00000000ffffff0c RSI: 0000000000000000 RDI: 0000000000000000 [ 139.477987][ T6681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.477998][ T6681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.478010][ T6681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.478036][ T6681] [ 139.479445][ T52] usb 5-1: selecting invalid altsetting 0 [ 139.497527][ T5924] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 139.544764][ T52] usb 5-1: Could not set interface, error -22 [ 139.673662][ T5924] usb 4-1: setting power OFF [ 139.696712][ T52] usb 5-1: selecting invalid altsetting 0 [ 139.718827][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 139.752324][ T5924] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 139.769023][ T52] usb 5-1: Could not set interface, error -22 [ 139.770819][ T5924] (NULL device *): no alternate interface [ 139.808129][ T52] usb 5-1: USB disconnect, device number 9 [ 139.884693][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.903020][ T5924] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 139.903670][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.918884][ T5924] usb 4-1: USB disconnect, device number 14 [ 139.955342][ T5986] bond0 (unregistering): Released all slaves [ 139.969359][ T6689] udevd[6689]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.472559][ T5924] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 140.653335][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 140.670612][ T5924] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 140.680152][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.688260][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.701737][ T5924] usb 3-1: Product: syz [ 140.756698][ T5922] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.834537][ T5924] usb 3-1: Manufacturer: syz [ 140.845254][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.856436][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.874179][ T5151] Bluetooth: hci1: command tx timeout [ 140.884077][ T5922] dvbdev: DVB: registering new adapter (Terratec H7) [ 140.893425][ T5986] hsr_slave_0: left promiscuous mode [ 140.899843][ T5924] usb 3-1: SerialNumber: syz [ 140.904914][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.914857][ T5922] usb 2-1: media controller created [ 140.920481][ T5986] hsr_slave_1: left promiscuous mode [ 140.921846][ T5924] usb 3-1: config 0 descriptor?? [ 140.930432][ T5986] batman_adv: batadv0: Interface deactivated: dummy0 [ 140.937361][ T5924] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 140.946038][ T5922] usb 2-1: dvb_usb_v2: MAC address: 00:00:00:10:00:80 [ 140.968611][ T9] usb 5-1: config 0 descriptor?? [ 140.973821][ T5924] usb 3-1: setting power ON [ 140.983399][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 140.995453][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.996615][ T5986] batman_adv: batadv0: Removing interface: dummy0 [ 141.017535][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.066073][ T5924] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 141.087215][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.105455][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.123261][ T5924] usb 3-1: media controller created [ 141.127445][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.150895][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.171799][ T6692] usb read operation failed. (-71) [ 141.214183][ T6692] ------------[ cut here ]------------ [ 141.219682][ T6692] UBSAN: array-index-out-of-bounds in drivers/media/usb/dvb-usb-v2/az6007.c:821:22 [ 141.252266][ T6692] index 4096 is out of range for type 'unsigned char[4096]' [ 141.277172][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: syz.2.198 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 141.277208][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.277222][ T6692] Call Trace: [ 141.277231][ T6692] [ 141.277240][ T6692] dump_stack_lvl+0x241/0x360 [ 141.277283][ T6692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.277317][ T6692] ? __pfx__printk+0x10/0x10 [ 141.277361][ T6692] ? scnprintf+0x14b/0x180 [ 141.277398][ T6692] __ubsan_handle_out_of_bounds+0x121/0x150 [ 141.277427][ T6692] ? __az6007_read+0xcf/0x150 [ 141.277463][ T6692] az6007_i2c_xfer+0x721/0xbf0 [ 141.277501][ T6692] ? __pfx_az6007_i2c_xfer+0x10/0x10 [ 141.277536][ T6692] __i2c_transfer+0x859/0x2250 [ 141.277570][ T6692] ? __pfx___i2c_transfer+0x10/0x10 [ 141.277593][ T6692] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 141.277618][ T6692] ? i2c_transfer+0x12d/0x430 [ 141.277641][ T6692] i2c_transfer+0x2c2/0x430 [ 141.277665][ T6692] ? __pfx_i2c_transfer+0x10/0x10 [ 141.277696][ T6692] i2c_transfer_buffer_flags+0x182/0x260 [ 141.277739][ T6692] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 141.277774][ T6692] ? rcu_is_watching+0x15/0xb0 [ 141.277796][ T6692] ? trace_kmalloc+0x1f/0xd0 [ 141.277817][ T6692] ? i2cdev_read+0xe6/0x220 [ 141.277884][ T6692] i2cdev_read+0x10a/0x220 [ 141.277919][ T6692] ? __pfx_i2cdev_read+0x10/0x10 [ 141.277953][ T6692] vfs_read+0x21f/0xb90 [ 141.277993][ T6692] ? __pfx_vfs_read+0x10/0x10 [ 141.278025][ T6692] ? __fget_files+0x2a/0x420 [ 141.278045][ T6692] ? __fget_files+0x2a/0x420 [ 141.278068][ T6692] ? __fget_files+0x39d/0x420 [ 141.278088][ T6692] ? __fget_files+0x2a/0x420 [ 141.278124][ T6692] ksys_read+0x19d/0x2d0 [ 141.278158][ T6692] ? __pfx_ksys_read+0x10/0x10 [ 141.278193][ T6692] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 141.278217][ T6692] ? lockdep_hardirqs_on+0x9d/0x150 [ 141.278244][ T6692] __do_fast_syscall_32+0xb4/0x110 [ 141.278268][ T6692] ? exc_page_fault+0x5f8/0x920 [ 141.278296][ T6692] do_fast_syscall_32+0x34/0x80 [ 141.278321][ T6692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.278349][ T6692] RIP: 0023:0xf7ff2539 [ 141.278368][ T6692] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 141.278387][ T6692] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 141.278412][ T6692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 141.278429][ T6692] RDX: 00000000ffffff0c RSI: 0000000000000000 RDI: 0000000000000000 [ 141.278443][ T6692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.278455][ T6692] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 141.278468][ T6692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.278499][ T6692] [ 141.561835][ T5986] veth1_macvtap: left promiscuous mode [ 141.570323][ T5986] veth0_macvtap: left promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 141.575719][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.576048][ T5986] veth1_vlan: left promiscuous mode [ 141.590461][ T5986] veth0_vlan: left promiscuous mode [ 141.607611][ T6692] ---[ end trace ]--- [ 141.612186][ T5922] DVB: Unable to find symbol drxk_attach() [ 141.663420][ T6692] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 141.670687][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: syz.2.198 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 141.682605][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.692675][ T6692] Call Trace: [ 141.695965][ T6692] [ 141.698902][ T6692] dump_stack_lvl+0x241/0x360 [ 141.703603][ T6692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.708819][ T6692] ? __pfx__printk+0x10/0x10 [ 141.713433][ T6692] ? vscnprintf+0x5d/0x90 [ 141.717794][ T6692] panic+0x349/0x880 [ 141.721700][ T6692] ? check_panic_on_warn+0x21/0xb0 [ 141.726816][ T6692] ? __pfx_panic+0x10/0x10 [ 141.731237][ T6692] ? _printk+0xd5/0x120 [ 141.735397][ T6692] ? __pfx__printk+0x10/0x10 [ 141.740001][ T6692] ? scnprintf+0x14b/0x180 [ 141.744443][ T6692] check_panic_on_warn+0x86/0xb0 [ 141.749391][ T6692] __ubsan_handle_out_of_bounds+0x141/0x150 [ 141.755286][ T6692] ? __az6007_read+0xcf/0x150 [ 141.759969][ T6692] az6007_i2c_xfer+0x721/0xbf0 [ 141.764752][ T6692] ? __pfx_az6007_i2c_xfer+0x10/0x10 [ 141.770055][ T6692] __i2c_transfer+0x859/0x2250 [ 141.774829][ T6692] ? __pfx___i2c_transfer+0x10/0x10 [ 141.780033][ T6692] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 141.785407][ T6692] ? i2c_transfer+0x12d/0x430 [ 141.790088][ T6692] i2c_transfer+0x2c2/0x430 [ 141.794602][ T6692] ? __pfx_i2c_transfer+0x10/0x10 [ 141.799641][ T6692] i2c_transfer_buffer_flags+0x182/0x260 [ 141.805280][ T6692] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 141.811440][ T6692] ? rcu_is_watching+0x15/0xb0 [ 141.816205][ T6692] ? trace_kmalloc+0x1f/0xd0 [ 141.820793][ T6692] ? i2cdev_read+0xe6/0x220 [ 141.825306][ T6692] i2cdev_read+0x10a/0x220 [ 141.829727][ T6692] ? __pfx_i2cdev_read+0x10/0x10 [ 141.834684][ T6692] vfs_read+0x21f/0xb90 [ 141.838861][ T6692] ? __pfx_vfs_read+0x10/0x10 [ 141.843552][ T6692] ? __fget_files+0x2a/0x420 [ 141.848142][ T6692] ? __fget_files+0x2a/0x420 [ 141.852732][ T6692] ? __fget_files+0x39d/0x420 [ 141.857405][ T6692] ? __fget_files+0x2a/0x420 [ 141.861996][ T6692] ksys_read+0x19d/0x2d0 [ 141.866247][ T6692] ? __pfx_ksys_read+0x10/0x10 [ 141.871033][ T6692] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 141.877625][ T6692] ? lockdep_hardirqs_on+0x9d/0x150 [ 141.882829][ T6692] __do_fast_syscall_32+0xb4/0x110 [ 141.887947][ T6692] ? exc_page_fault+0x5f8/0x920 [ 141.892803][ T6692] do_fast_syscall_32+0x34/0x80 [ 141.897655][ T6692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.903998][ T6692] RIP: 0023:0xf7ff2539 [ 141.908091][ T6692] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 141.927703][ T6692] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 141.936141][ T6692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 141.944114][ T6692] RDX: 00000000ffffff0c RSI: 0000000000000000 RDI: 0000000000000000 [ 141.952094][ T6692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.960060][ T6692] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 141.968096][ T6692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.976092][ T6692] [ 141.979498][ T6692] Kernel Offset: disabled [ 141.983880][ T6692] Rebooting in 86400 seconds..