last executing test programs: 11.313961489s ago: executing program 1 (id=154): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') lseek(r0, 0xfffffffffffffb67, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, 0x0) alarm(0x8000000000000001) alarm(0x0) listen(0xffffffffffffffff, 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000140)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) pwrite64(r6, &(0x7f00000002c0)="e6", 0x1, 0x4002) fcntl$addseals(r0, 0x409, 0xc) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000340)=ANY=[@ANYBLOB="000000001f000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000000000000000000798650b20e12f1f85127abd8fcaa860303b6f23982999461648355229aaa96686c1d97113036610330897f886b7c318b8c54c9520232a3a0cf653460bbb19c"]) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x2, 0x9, 0x2, 0x7}, {0xd, 0x7, 0x3c, 0x40}, {0x6, 0x41, 0xce}]}, 0xfffffffffffffd97) syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x806d2e, 0x400, 0x8003, 0x11f}, &(0x7f0000000300), &(0x7f00000000c0)) 10.467992762s ago: executing program 4 (id=158): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r0 = syz_open_procfs(0x0, 0x0) futimesat(r0, 0x0, &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) 10.294895594s ago: executing program 4 (id=159): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10003, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x8, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x1, 0x3, 0xf8, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x69, 0x1000000003, 0xfffffffffffffffe, 0x2, 0x6, 0x27, 0x96, 0xffffffff, 0x4, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x4, 0x8, 0x6, 0x6, 0x3, 0x0, 0x3, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffffa, 0x2, 0xe, 0x40, 0x0, 0x9, 0x200000000000101, 0x2, 0x9, 0x66, 0x6, 0x7, 0x40000045, 0x6, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfbfffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xfffffffffffffffc, 0x2, 0x7, 0x2, 0x5, 0x10fff, 0x6, 0x4, 0x9, 0x5, 0x0, 0x4, 0xfff, 0x5, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x2000000000003, 0xfffffffffffffffb, 0xf6, 0x8, 0x6, 0x200, 0x7, 0x3, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xfd1, 0x2, 0x5, 0x4, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x0, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00003, 0xb, 0xe]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008050}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0xceb4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xfff1, 0x2}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/173, 0xad}, {&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000640)=""/96, 0x60}, {&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f0000000780)=""/8, 0x8}, {&(0x7f00000007c0)=""/63, 0x3f}, {&(0x7f0000000800)=""/46, 0x2e}, {&(0x7f0000000840)=""/69, 0x45}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x9) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) chroot(&(0x7f0000000780)='./file0\x00') getcwd(&(0x7f0000001a80)=""/102, 0x66) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x8, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x36fb, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x3, 0xbdb], 0xffff1001, 0x120182}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x4, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x1, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001980), 0xfac7efa2ec9c6836, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000019c0)={[0x1200, 0x3, 0x100000001, 0xa68, 0x6a, 0x800, 0xff, 0x5, 0x4000, 0xffff, 0x0, 0x6, 0x1, 0xe5f, 0x7, 0x9], 0x8000000, 0x100}) 10.053984443s ago: executing program 3 (id=160): r0 = socket$kcm(0x10, 0x2, 0x0) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x1000, r4}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="340040001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001400350077673100"/28], 0x34}}, 0x0) 9.743721142s ago: executing program 4 (id=161): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffe7ffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x4, 0x3}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x90}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0x7f, 0x7, @vifc_lcl_addr=@multicast2, @rand_addr=0x64010101}, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 9.090012716s ago: executing program 4 (id=163): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a", 0x11, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r6 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r6, &(0x7f0000000200)=@encrypted_load={'load ', 'default', 0x20, 'user:', '$', 0x20, 0xffffffffffffffff, 0x20, [0x35, 0x51, 0x36]}, 0x2d, r7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) 8.301983306s ago: executing program 3 (id=166): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x9, 0x10400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x800, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401000000020102132406000006090000000000000000000000000924030000000000070924050000f8431cfd092403000203fc04000424050400fd090420000001090000"], 0x0) 8.015391123s ago: executing program 0 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r1, 0x81000000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000000)={0x4, "918f446fbbf40ee3471a6d21e4d8fe776803781b7b2cc877dfb4b877b8568c22ef8a7d645317e4e8398d5fed7a0eeb9f7dc33259b276838c4e51be32acaf52de", {0x9, 0x8}}) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x9, 0x80200) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x12a, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) (async) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r1, 0x81000000) (async) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000000)={0x4, "918f446fbbf40ee3471a6d21e4d8fe776803781b7b2cc877dfb4b877b8568c22ef8a7d645317e4e8398d5fed7a0eeb9f7dc33259b276838c4e51be32acaf52de", {0x9, 0x8}}) (async) syz_open_dev$sg(&(0x7f0000000140), 0x9, 0x80200) (async) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x12a, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 7.600337106s ago: executing program 0 (id=168): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079a62a000000000007000000000000009500640000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 7.251568229s ago: executing program 1 (id=169): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r0 = syz_open_procfs(0x0, 0x0) futimesat(r0, 0x0, &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) 7.145952249s ago: executing program 0 (id=170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) signalfd4(r1, &(0x7f00000001c0)={[0x8001]}, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0x0, 0x67, 0x0, @remote, @broadcast}, @info_reply={0x10, 0x0, 0x0, 0x6764, 0xf}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, 0x0) keyctl$session_to_parent(0x12) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32600) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x4048000) 7.121749871s ago: executing program 1 (id=171): io_setup(0x7, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = eventfd2(0x0, 0x800) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) io_submit(r0, 0x6, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x3, r1, &(0x7f00000002c0)='G', 0x1, 0x116, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x1, r1, 0x0, 0x0, 0x7, 0x0, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000001500)="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", 0x197, 0xbf, 0x0, 0x0, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5b6, r2, &(0x7f0000000280)="af50dbff71ddfa00878367c24b9e22cc0490e6383b216f24efb18f5a65476c5af5100faf7a8da943f143a6e4b2bd72e5c878ca", 0x33, 0x2, 0x0, 0x1, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f0000000340)="7e449d954482aa78753cc857e4e6f554c3b017502e2f1df9ad1a122cc5a77a5b4d32bca57e794da8d768068e3cfcf0a52c3b73b4b0ed9c0741467be9490d89d84700ce892e0a441e312ce8d447aff1b426d436bcb37144e5e68cc547", 0x5c, 0x3c69, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x4547, r5, &(0x7f0000000500)="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", 0x1000, 0x1, 0x0, 0x0, r4}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.721931577s ago: executing program 2 (id=173): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) 6.714094977s ago: executing program 4 (id=174): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001002000000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e000000200000000000000000200130001"], 0xa0}}, 0x0) 6.487514317s ago: executing program 3 (id=175): socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd701afbdbdf2506000000080006000010000014200380060007004e2100000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pread64(r1, 0x0, 0x0, 0x8) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x5c}}, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r6, &(0x7f00000001c0)=0x10, 0x8) tee(r5, r4, 0x8, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 6.358175652s ago: executing program 1 (id=176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x8}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x0, 0xa0}}, @tfcpad={0x8, 0x16, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0x24008039}, 0x0) 6.210380651s ago: executing program 2 (id=177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/99, 0x63}], 0x1}, 0xd6}], 0x2, 0x10020, 0x0) 5.890565201s ago: executing program 4 (id=178): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={0x0}}, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7], 0xc4}}, 0x8044) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) 5.829707428s ago: executing program 1 (id=179): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpgid(0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x85, {0x85, 0x28d1c92f85ac2fcc, "39644517f2e8f450c79da6b158161599f9574503a046c9227ab69691e01939879beaefc626f8e757f11a5d73acdded1437c6e056545ecf05fc1be8f19ec5ad56a6ed76362fa30e083f19b09c715e08aaef2bb1fba93d1b7eb3a35d4ddb9fd9c5f23c0b7522d89c2185c211cc3188157ff37bb00646e333bcf25d001660bb452f1df719"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000140)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0xaa}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x30, 0xd4, "d00d097c9661f9f665e58607ede7fcd67eea1b1b158d62b8afffbf26f9e3541271f4eb6c77077b947a8e3cfa1f6ebbdfd47afeb931f6686dcf49f4313a4a849f3d02e439da298e538c68b492c969155e5a1d8abae7c35860a82d7852bc80d4b1bdfe6bcef025bdc12cc1ebc40669239192097ac742e5fee8333ab8b2e36d3c77176fe346d649d9777c78ee04cf001c4cb188b6560e8e5fa813fd5260ff7945815688859dafe69e6dfb3317b5eecea401443b5b1fb6c5e1beb7c462654bf56f2502ee641ec584a2110827823bd05b5a7bcff2389f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0xb5, "6667dfde6590a3713a3ffea0700b41f4083dcc0286f52f366b494a67f19130f3e293302be5d8e60eed0da838ed4a4ae162b31b6110cd9803bc4124bc0917d6f16a902660cf43ad6e39ed87f904c4289094311897079dcada26c28a33191d7d693da9ceea1e7d31789a390ef7134d8849af24a54ef7ccd6fc2c6576fe392354c910d37f48897fecc90b65aeeeeb94ea941a4c3d8bd816d01d26eeeecef4826e268faae1263508b9f4328c9edcbe1fcfe75dbacbc87e"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x43}}) 5.799554124s ago: executing program 2 (id=180): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000040)={0x6, 0x1700, "778d8ce72aa8f35457c8617739b4948e07180be64604d3a5", {0x9, 0x8}, 0x2}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3ce22ede963b417e4300", @ANYRES16=r4, @ANYBLOB="000225bd7000fbdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000005) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r7, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x7, 0xe, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x41}, 0x47, 0x8, 0x0, 0xffff0000}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/555, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000010800000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="0800030019000000080001003b3099dc65977832bc7fd103218cdb409542b2507d108bbd49743fd9b4a1b2cf962167104f4634e8711bda07c31729f0644d2970ac82a5ee209bb8b1d2e6682b385c318192d58a4d9f5e0e2a7231fb0d305037e2f23ac22d9e755d93da9f8bf3d5b447beeaf82d4bb59b4f087659f1eee7ee81f6192600c0d4af9175df7c7db3ad9805000000000000004f7cf8a611f5948110fb2f3e8bb0a517a0eb3d2b67993d0c3743a4", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) 4.703639485s ago: executing program 3 (id=181): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r0 = syz_open_procfs(0x0, 0x0) futimesat(r0, 0x0, &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) 4.467571977s ago: executing program 2 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x63, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000180)="660f146cd20f0636360ff1bb00000fc7acd8000f01caba420066ed650f0926660f3880640ff30f59e4f30fc737", 0x2d}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x37, 0x0}, 0x2000000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000001280), &(0x7f0000001200), 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, 0x0, 0x5a) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 4.449955409s ago: executing program 3 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x40000) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe6f, 0xb, 0x8001}, {0x3, 0x11, 0x40}}, {@pci, {0x0, 0xb, 0xfba2}, {0x0, 0x11, 0x5}}, {@pci, {0x0, 0xb, 0x2}, {0x0, 0x11, 0xffff}}, {@pci, {0x0, 0xb, 0x8000}, {0x0, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0x59f3, 0x2, 0x9, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "6594844326f4a23ff094cd183f5a6a24"}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfc00) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103000000000000000001000000040001801000"], 0x28}, 0x1, 0x0, 0x0, 0x8002}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000571c0220da040d39a893010203f95109d76014c2748dcfaffaf016860109021b0001000000000924000e0741db7c2ac1c6a7fb1ca03469d3d134a7ae09c617a26c198c65a93b393b"], 0x0) 3.702695647s ago: executing program 0 (id=184): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd23, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x5f0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x7, 0x10000}) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f00000014c0)={0x0, 0x5000, 0xfb7f0000, r3}) 3.493663137s ago: executing program 0 (id=185): socket(0x22, 0x4, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x4, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x2, 0x1ff, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x20048000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x480001, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007040)=[{{&(0x7f0000000240)=@ax25={{0x3, @null}, [@default, @default, @netrom, @bcast, @rose, @netrom, @netrom, @netrom]}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/194, 0xc2}, {&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/89, 0x59}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/98, 0x62}, {&(0x7f0000001780)=""/39, 0x27}], 0x9}, 0xffff}, {{&(0x7f0000001880)=@caif=@dgm, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a40)=""/123, 0x7b}, {&(0x7f0000001900)=""/74, 0x4a}, {&(0x7f0000001980)=""/179, 0xb3}], 0x3, &(0x7f0000001b00)=""/141, 0x8d}, 0x4}, {{&(0x7f0000001bc0)=@in6, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001c40)=""/214, 0xd6}, {&(0x7f0000001d40)=""/141, 0x8d}, {&(0x7f0000001e00)=""/158, 0x9e}, {&(0x7f0000001ec0)=""/109, 0x6d}, {&(0x7f0000001f40)=""/74, 0x4a}, {&(0x7f0000003b80)=""/112, 0x70}, {&(0x7f0000002040)=""/25, 0x19}, {&(0x7f0000002080)=""/6, 0x6}], 0x8, &(0x7f0000007680)=""/100, 0x60}, 0x5}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000021c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/50, 0x32}, {&(0x7f0000002340)=""/154, 0x9a}], 0x3}, 0x5}, {{&(0x7f00000073c0)=@phonet, 0x80, &(0x7f0000001fc0)=[{&(0x7f00000024c0)=""/91, 0x5b}], 0x1, &(0x7f0000002580)=""/161, 0xa1}, 0x153c6000}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000003ac0)=""/47, 0x2f}], 0x1, &(0x7f00000026c0)=""/86, 0x56}, 0x9}, {{&(0x7f0000002740)=@hci, 0x80, &(0x7f0000003900)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/73, 0x49}, {&(0x7f0000003840)=""/163, 0xa3}], 0x3, &(0x7f0000003940)=""/41, 0x29}, 0x2be}, {{&(0x7f0000003980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002180)=[{&(0x7f0000003a00)=""/108, 0x6c}, {&(0x7f0000007440)=""/167}, {&(0x7f0000007500)=""/102}, {&(0x7f0000007580)=""/206}], 0x1, &(0x7f0000003ac0)}}, {{&(0x7f0000003b00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003d80)=[{&(0x7f00000072c0)=""/198, 0xc6}, {&(0x7f0000003c40)=""/76, 0x4c}, {&(0x7f0000003cc0)=""/171, 0xab}], 0x3}, 0x7}, {{&(0x7f0000003dc0)=@sco, 0xa8, &(0x7f0000006000)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/158, 0x9e}, {&(0x7f0000004f00)=""/236, 0xec}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x4, &(0x7f0000006040)=""/4096, 0x1000}, 0x9}], 0xa, 0x102, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002400)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r0], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f0000000240), 0x0}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, 0x0}, 0xc4055) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000000c0)=0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="1c000000150001032bbd70000036841a0934c2b61600040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000000) socket(0x10, 0x3, 0x0) 3.422320892s ago: executing program 3 (id=186): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24008141, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001d0001002abd7000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="80002900140001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000145c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x354, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x340, 0x1, [@m_csum={0xc4, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x7, 0x6, 0x9}, 0x69}}]}, {0x7a, 0x6, "482e8032524dd483502069ff55d3a1b509871979f086e2b3a8917258f03969bd78e61ac14edbef1462d10b2629cd60148a8c9d880e7f2024d0a635ce5c1e8d2c4123edfb658b0281d33e71a9c1ae5185de4d8b54f077794a8d1ebc58cc0b3504ca8258f95756c63a7711583fd5c1894be9b8785c2ac4"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x4c, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xd, 0xffffffffffffffff, 0x5, 0x8}, 0x14}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x22c, 0x1b, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x2, 0x6, 0x1}, @local, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x3, 0x101, 0x30000}, @remote, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffff00, 0x1}}]}, {0x111, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r4 = socket(0x22, 0x2, 0x2) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000000300)={0x9f, 0x0, 0x1}) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x10000}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) unshare(0x24000400) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x202000, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r5}, 0x10) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) close_range(r6, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r7 = socket(0xf, 0x3, 0x2) write(r7, &(0x7f0000a97ff0)="02", 0x1) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) 3.406489624s ago: executing program 2 (id=187): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) 3.186234315s ago: executing program 0 (id=188): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001000003000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e000000200000000000000000200130001"], 0xa0}}, 0x0) 2.554083475s ago: executing program 1 (id=189): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "b117bd952e7c3e58c098f7f03abee29054869a4a6a735eb203a5aabad1771ddf", "b5ec7f17535a400dd0edad7e0d3f9b44b443e65b5e6207e777166936950308c4", "66292b7994300582c6d84d12209b5fe29cc70000011500", "9a1d4e9af85218fae4c89c5069333f859b5b0b8081b18793df9bd16bf7ea60d8", "e2c1430ebc8cc369ac7ad43ebb4808c696bffef35a65ee0cd44eb864790e61c3", "fda64c952d8c2e38c7720c4b", 0x5, 0x8, 0x3, 0x8, 0xeb}}) socket$pppl2tp(0x18, 0x1, 0x1) 0s ago: executing program 2 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/99, 0x63}], 0x1}, 0xd6}], 0x2, 0x10020, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 81.340794][ T5833] cgroup: Unknown subsys name 'net' [ 81.434033][ T5833] cgroup: Unknown subsys name 'cpuset' [ 81.443526][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.183554][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.854102][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.868145][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.888223][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.894577][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.904009][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.907631][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.928276][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.936503][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.937042][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.967772][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.968548][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.976905][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.991055][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.996336][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.999019][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.014746][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.023688][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.030990][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.031135][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.048203][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.048405][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.064436][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.066207][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.099740][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.108302][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.706887][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 86.821956][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 87.069951][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 87.109538][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 87.236915][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.251512][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.259233][ T5867] bridge_slave_0: entered allmulticast mode [ 87.271602][ T5867] bridge_slave_0: entered promiscuous mode [ 87.372157][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.379484][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.387663][ T5867] bridge_slave_1: entered allmulticast mode [ 87.395783][ T5867] bridge_slave_1: entered promiscuous mode [ 87.451967][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 87.486878][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.494951][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.505689][ T5862] bridge_slave_0: entered allmulticast mode [ 87.513431][ T5862] bridge_slave_0: entered promiscuous mode [ 87.553566][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.561313][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.569470][ T5862] bridge_slave_1: entered allmulticast mode [ 87.577302][ T5862] bridge_slave_1: entered promiscuous mode [ 87.605343][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.665558][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.717448][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.766733][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.774796][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.782626][ T5866] bridge_slave_0: entered allmulticast mode [ 87.790668][ T5866] bridge_slave_0: entered promiscuous mode [ 87.800145][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.807489][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.814719][ T5866] bridge_slave_1: entered allmulticast mode [ 87.822151][ T5866] bridge_slave_1: entered promiscuous mode [ 87.832481][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.913352][ T5867] team0: Port device team_slave_0 added [ 87.920188][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.927783][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.934977][ T5865] bridge_slave_0: entered allmulticast mode [ 87.942419][ T5865] bridge_slave_0: entered promiscuous mode [ 87.964594][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.974530][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.982302][ T5864] bridge_slave_0: entered allmulticast mode [ 87.992007][ T5864] bridge_slave_0: entered promiscuous mode [ 88.018333][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.028710][ T5859] Bluetooth: hci1: command tx timeout [ 88.055058][ T5867] team0: Port device team_slave_1 added [ 88.061375][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.068624][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.075913][ T5865] bridge_slave_1: entered allmulticast mode [ 88.083467][ T5865] bridge_slave_1: entered promiscuous mode [ 88.090559][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.098899][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.106252][ T5864] bridge_slave_1: entered allmulticast mode [ 88.112811][ T5859] Bluetooth: hci2: command tx timeout [ 88.114769][ T5864] bridge_slave_1: entered promiscuous mode [ 88.118949][ T5859] Bluetooth: hci3: command tx timeout [ 88.124340][ T5852] Bluetooth: hci0: command tx timeout [ 88.155050][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.167988][ T5862] team0: Port device team_slave_0 added [ 88.187698][ T5859] Bluetooth: hci4: command tx timeout [ 88.230802][ T5862] team0: Port device team_slave_1 added [ 88.268635][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.282518][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.318306][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.325295][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.352467][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.369175][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.397090][ T5866] team0: Port device team_slave_0 added [ 88.418721][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.425805][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.452382][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.465926][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.492225][ T5866] team0: Port device team_slave_1 added [ 88.515064][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.522212][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.548958][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.584756][ T5864] team0: Port device team_slave_0 added [ 88.594833][ T5864] team0: Port device team_slave_1 added [ 88.615398][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.623007][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.650615][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.713870][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.721152][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.748251][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.761862][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.769311][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.795580][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.826701][ T5865] team0: Port device team_slave_0 added [ 88.848939][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.855948][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.882524][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.918398][ T5867] hsr_slave_0: entered promiscuous mode [ 88.925255][ T5867] hsr_slave_1: entered promiscuous mode [ 88.935062][ T5865] team0: Port device team_slave_1 added [ 88.941737][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.949165][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.975618][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.079475][ T5862] hsr_slave_0: entered promiscuous mode [ 89.085873][ T5862] hsr_slave_1: entered promiscuous mode [ 89.092851][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.100870][ T5862] Cannot create hsr debugfs directory [ 89.168749][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.175930][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.202827][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.216846][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.224059][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.275443][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.330298][ T5864] hsr_slave_0: entered promiscuous mode [ 89.338223][ T5864] hsr_slave_1: entered promiscuous mode [ 89.344400][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.352797][ T5864] Cannot create hsr debugfs directory [ 89.382627][ T5866] hsr_slave_0: entered promiscuous mode [ 89.390024][ T5866] hsr_slave_1: entered promiscuous mode [ 89.396172][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.404073][ T5866] Cannot create hsr debugfs directory [ 89.603540][ T5865] hsr_slave_0: entered promiscuous mode [ 89.612350][ T5865] hsr_slave_1: entered promiscuous mode [ 89.618791][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.626365][ T5865] Cannot create hsr debugfs directory [ 90.075826][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.091731][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.107933][ T5859] Bluetooth: hci1: command tx timeout [ 90.120486][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.141626][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.187661][ T5859] Bluetooth: hci0: command tx timeout [ 90.193778][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.197387][ T5859] Bluetooth: hci3: command tx timeout [ 90.200713][ T5852] Bluetooth: hci2: command tx timeout [ 90.235152][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.255014][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.267946][ T5852] Bluetooth: hci4: command tx timeout [ 90.281091][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.341346][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.371764][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.384504][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.397019][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.555078][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.593805][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.606997][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.641547][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.714901][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.722157][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.749511][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.765412][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.785495][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.802787][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.860745][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.895719][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.903034][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.921936][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.941134][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.948468][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.011222][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.018499][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.052675][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.087230][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.094440][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.215654][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.298110][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.305266][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.333738][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.352747][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.360058][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.399358][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.420164][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.464616][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.471833][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.494477][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.501620][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.516220][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.643214][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.662280][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.695724][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.702963][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.713052][ T5862] veth0_vlan: entered promiscuous mode [ 91.753846][ T5862] veth1_vlan: entered promiscuous mode [ 91.764263][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.771462][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.888150][ T5867] veth0_vlan: entered promiscuous mode [ 91.902919][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.940030][ T5867] veth1_vlan: entered promiscuous mode [ 91.956016][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.995246][ T5862] veth0_macvtap: entered promiscuous mode [ 92.043279][ T5862] veth1_macvtap: entered promiscuous mode [ 92.112306][ T43] cfg80211: failed to load regulatory.db [ 92.144038][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.186034][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.193809][ T5852] Bluetooth: hci1: command tx timeout [ 92.215345][ T5867] veth0_macvtap: entered promiscuous mode [ 92.234896][ T5865] veth0_vlan: entered promiscuous mode [ 92.246033][ T5867] veth1_macvtap: entered promiscuous mode [ 92.259355][ T5864] veth0_vlan: entered promiscuous mode [ 92.266182][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.267923][ T5852] Bluetooth: hci2: command tx timeout [ 92.280740][ T5859] Bluetooth: hci3: command tx timeout [ 92.281332][ T5852] Bluetooth: hci0: command tx timeout [ 92.286800][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.301613][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.310896][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.348676][ T5852] Bluetooth: hci4: command tx timeout [ 92.350039][ T5865] veth1_vlan: entered promiscuous mode [ 92.382574][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.391666][ T5864] veth1_vlan: entered promiscuous mode [ 92.446413][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.485754][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.525026][ T5867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.535113][ T5867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.544230][ T5867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.553197][ T5867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.578310][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.598334][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.663443][ T5865] veth0_macvtap: entered promiscuous mode [ 92.699167][ T5864] veth0_macvtap: entered promiscuous mode [ 92.706218][ T5866] veth0_vlan: entered promiscuous mode [ 92.716172][ T5865] veth1_macvtap: entered promiscuous mode [ 92.742266][ T5864] veth1_macvtap: entered promiscuous mode [ 92.747765][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.755898][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.803631][ T5866] veth1_vlan: entered promiscuous mode [ 92.862862][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.881156][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.892766][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.915444][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.950486][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.999790][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.036960][ T5866] veth0_macvtap: entered promiscuous mode [ 93.074650][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.078721][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.091852][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.107237][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.116008][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.135081][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154843][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.186980][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.201493][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.214309][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.226798][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.255879][ T5866] veth1_macvtap: entered promiscuous mode [ 93.363081][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.419193][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.485839][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.502018][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.518289][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.527042][ T5866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.668020][ T5179] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.686168][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.702265][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.781759][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.794571][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.865288][ T5179] usb 4-1: config 35 has an invalid descriptor of length 43, skipping remainder of the config [ 93.897287][ T5179] usb 4-1: config 35 has 0 interfaces, different from the descriptor's value: 1 [ 93.901841][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.933283][ T5179] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.935672][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.985708][ T5179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.111112][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.127730][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.254472][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.277381][ T5852] Bluetooth: hci1: command tx timeout [ 94.298427][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.344298][ T5951] raw_sendmsg: syz.3.4 forgot to set AF_INET. Fix it! [ 94.348281][ T5852] Bluetooth: hci0: command tx timeout [ 94.353328][ T5851] Bluetooth: hci3: command tx timeout [ 94.358097][ T5852] Bluetooth: hci2: command tx timeout [ 94.370570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.423590][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.431974][ T5851] Bluetooth: hci4: command tx timeout [ 94.439814][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.487368][ T5179] usb 4-1: string descriptor 0 read error: -71 [ 94.544428][ T5179] usb 4-1: USB disconnect, device number 2 [ 94.617861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.662520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 94.741843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.067533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.168233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.180767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 95.461654][ T5981] veth3: entered promiscuous mode [ 95.860234][ T5984] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.975100][ T5989] sctp: [Deprecated]: syz.1.10 (pid 5989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.975100][ T5989] Use struct sctp_sack_info instead [ 96.422121][ T5992] binder: 5991:5992 ioctl 89f0 200000000680 returned -22 [ 96.521294][ T5992] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 96.577368][ T5992] binder_alloc: 5991: binder_alloc_buf, no vma [ 96.838902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.912210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.013015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.337064][ T6007] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 98.189019][ T6021] loop2: detected capacity change from 0 to 7 [ 98.205253][ T6020] bridge0: port 3(gretap0) entered blocking state [ 98.220528][ T6021] Dev loop2: unable to read RDB block 7 [ 98.231958][ T6021] loop2: AHDI p2 p3 [ 98.236033][ T6021] loop2: partition table partially beyond EOD, truncated [ 98.257465][ T6020] bridge0: port 3(gretap0) entered disabled state [ 98.271052][ T6020] gretap0: entered allmulticast mode [ 98.295499][ T6021] loop2: p3 start 335544320 is beyond EOD, truncated [ 98.304438][ T6020] gretap0: entered promiscuous mode [ 98.314004][ T6020] bridge0: port 3(gretap0) entered blocking state [ 98.321564][ T6020] bridge0: port 3(gretap0) entered forwarding state [ 98.487351][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.639674][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.674761][ T5906] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.703637][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.751174][ T5906] usb 2-1: config 0 descriptor?? [ 98.805230][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 99.181272][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.199638][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.211883][ T5906] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.242634][ T5906] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.254508][ T5906] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.305433][ T5906] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.314065][ T5906] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.322315][ T5906] pwc: recv_control_msg error -32 req 02 val 2100 [ 99.329985][ T5906] pwc: recv_control_msg error -32 req 04 val 1500 [ 99.337497][ T5906] pwc: recv_control_msg error -32 req 02 val 2500 [ 99.699843][ T6040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.877247][ T6040] Zero length message leads to an empty skb [ 99.924110][ T6035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.931378][ T6035] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.943932][ T6035] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.952983][ T6035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.961893][ T6035] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.976153][ T6035] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.993247][ T6035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.005304][ T6035] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.023442][ T6035] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.042273][ T6035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.049400][ T6035] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.065730][ T6035] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.079496][ T6035] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.097737][ T6035] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.136277][ T6035] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.072927][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.154353][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 101.186084][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 101.210016][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 101.297439][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 101.338669][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 101.394445][ T5906] pwc: Registered as video103. [ 101.443358][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 101.563291][ T5906] usb 2-1: USB disconnect, device number 2 [ 101.599584][ T5889] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.860270][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 101.884282][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 101.922457][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 101.951440][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 102.004758][ T5889] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 102.018267][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.027566][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.027591][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.046302][ T5889] usb 5-1: Product: syz [ 102.051859][ T5889] usb 5-1: Manufacturer: syz [ 102.056948][ T5889] usb 5-1: SerialNumber: syz [ 102.067494][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.074095][ T5889] usb 5-1: config 0 descriptor?? [ 102.103456][ T5889] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 102.113177][ T5859] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.113191][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.277300][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 102.285659][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.298855][ T5927] usb 5-1: USB disconnect, device number 2 [ 102.322848][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.345527][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.379538][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.421697][ T5906] usb 2-1: config 0 descriptor?? [ 102.450421][ T5906] hub 2-1:0.0: USB hub found [ 102.952979][ T5906] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 103.068758][ T5906] usbhid 2-1:0.0: can't add hid device: -71 [ 103.147358][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.154186][ T5906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 103.586837][ T5906] usb 2-1: USB disconnect, device number 3 [ 104.087524][ T5889] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 104.107573][ T5859] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.107760][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.189687][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.189694][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.268380][ T5889] usb 5-1: device descriptor read/64, error -71 [ 104.292977][ T6105] ip6gre1: entered promiscuous mode [ 104.527318][ T5927] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.527468][ T5889] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.704259][ T5927] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 104.716334][ T5927] usb 1-1: config 5 has no interface number 0 [ 104.727518][ T5927] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 104.728087][ T5889] usb 5-1: device descriptor read/64, error -71 [ 104.740215][ T5927] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 104.810620][ T5927] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 104.854517][ T5927] usb 1-1: config 5 interface 123 has no altsetting 0 [ 104.875794][ T5927] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 104.894247][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.915396][ T5889] usb usb5-port1: attempt power cycle [ 104.922615][ T5927] usb 1-1: Product: syz [ 104.933656][ T5927] usb 1-1: Manufacturer: syz [ 104.946504][ T5927] usb 1-1: SerialNumber: syz [ 105.237433][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.268295][ T5927] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 105.277440][ T5889] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 105.337206][ T5889] usb 5-1: device descriptor read/8, error -71 [ 105.416344][ T5927] usb 1-1: USB disconnect, device number 2 [ 105.607953][ T5889] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 105.647236][ T5889] usb 5-1: device descriptor read/8, error -71 [ 105.778464][ T5889] usb usb5-port1: unable to enumerate USB device [ 106.193667][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.202896][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.267327][ T5859] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.277385][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.580880][ T6126] syz.2.39 (6126): drop_caches: 2 [ 107.857699][ T5960] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.947407][ T5927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.030369][ T5960] usb 4-1: config 5 has an invalid interface number: 196 but max is 0 [ 108.048911][ T5960] usb 4-1: config 5 has no interface number 0 [ 108.078058][ T5960] usb 4-1: config 5 interface 196 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 108.126192][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 108.127322][ T5960] usb 4-1: config 5 interface 196 altsetting 7 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 108.155624][ T5927] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.186397][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.205036][ T5960] usb 4-1: config 5 interface 196 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 108.206666][ T5927] usb 3-1: too many endpoints for config 1 interface 1 altsetting 48: 49, using maximum allowed: 30 [ 108.243307][ T5927] usb 3-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 108.247202][ T5960] usb 4-1: config 5 interface 196 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 108.281333][ T5960] usb 4-1: config 5 interface 196 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 108.293594][ T5927] usb 3-1: config 1 interface 1 has no altsetting 0 [ 108.302034][ T5960] usb 4-1: config 5 interface 196 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 108.304522][ T5927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.326991][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.335561][ T5927] usb 3-1: Product: syz [ 108.344414][ T5927] usb 3-1: Manufacturer: syz [ 108.352596][ T5927] usb 3-1: SerialNumber: syz [ 108.375264][ T5960] usb 4-1: config 5 interface 196 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 108.396917][ T5960] usb 4-1: config 5 interface 196 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 108.421013][ T5960] usb 4-1: config 5 interface 196 has no altsetting 0 [ 108.421798][ T5927] usb 3-1: selecting invalid altsetting 1 [ 108.434900][ T5960] usb 4-1: Dual-Role OTG device on HNP port [ 108.438581][ T5927] usb 3-1: selecting invalid altsetting 0 [ 108.451285][ T5960] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=ad.fb [ 108.460483][ T5927] usb 3-1: selecting invalid altsetting 0 [ 108.460579][ T5927] cdc_ncm 3-1:1.0: bind() failure [ 108.476291][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.487123][ T5960] usb 4-1: Product: syz [ 108.494445][ T5960] usb 4-1: Manufacturer: 袙 [ 108.499297][ T5960] usb 4-1: SerialNumber: syz [ 108.628483][ T5927] usb 3-1: selecting invalid altsetting 0 [ 108.635354][ T5927] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 108.653389][ T5927] usb 3-1: USB disconnect, device number 2 [ 108.737566][ T5906] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 108.740082][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.901298][ T5960] usb 4-1: USB disconnect, device number 3 [ 108.914725][ T5906] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 108.950788][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.962488][ T5906] usb 5-1: Product: syz [ 108.973744][ T5906] usb 5-1: Manufacturer: syz [ 108.978288][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.196/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.984549][ T5906] usb 5-1: SerialNumber: syz [ 109.054586][ T5906] usb 5-1: config 0 descriptor?? [ 109.076681][ T5906] gspca_main: sq930x-2.14.0 probing 2770:930c [ 109.562797][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.581480][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.634462][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.737356][ T5906] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 109.743359][ T5906] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 109.807306][ T5927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.848542][ T5906] usb 5-1: USB disconnect, device number 7 [ 109.937261][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.967456][ T5927] usb 4-1: device descriptor read/64, error -71 [ 110.075354][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.087351][ T5889] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 110.096412][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.117317][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 110.131235][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.140405][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.151294][ T9] usb 2-1: Product: syz [ 110.155591][ T9] usb 2-1: Manufacturer: syz [ 110.160680][ T9] usb 2-1: SerialNumber: syz [ 110.169396][ T9] usb 2-1: config 0 descriptor?? [ 110.227357][ T5927] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.253076][ T5889] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 110.262144][ T5889] usb 3-1: config 0 has no interface number 0 [ 110.268653][ T5889] usb 3-1: config 0 interface 113 has no altsetting 0 [ 110.288890][ T5889] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 110.303705][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.312434][ T5960] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.320708][ T5889] usb 3-1: Product: syz [ 110.329108][ T5889] usb 3-1: Manufacturer: syz [ 110.334406][ T5889] usb 3-1: SerialNumber: syz [ 110.344024][ T6213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.358447][ T5889] usb 3-1: config 0 descriptor?? [ 110.367280][ T5927] usb 4-1: device descriptor read/64, error -71 [ 110.370858][ T5889] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 110.383277][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.480114][ T5960] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 110.486871][ T5927] usb usb4-port1: attempt power cycle [ 110.495769][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.542328][ T5960] usb 1-1: config 0 descriptor?? [ 110.554004][ T5960] pwc: Creative Labs Webcam Pro Ex detected. [ 110.752869][ T5960] pwc: Failed to set LED on/off time (-71) [ 110.768787][ T6209] delete_channel: no stack [ 110.777754][ T5960] pwc: send_video_command error -71 [ 110.780796][ T6209] delete_channel: no stack [ 110.786338][ T5960] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 110.797054][ T5960] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 110.806868][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 110.847085][ T5960] usb 1-1: USB disconnect, device number 3 [ 110.857800][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.898123][ T5927] usb 4-1: device descriptor read/8, error -71 [ 111.137336][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.169339][ T5927] usb 4-1: device descriptor read/8, error -71 [ 111.280331][ T5927] usb usb4-port1: unable to enumerate USB device [ 111.513651][ T5906] usb 2-1: USB disconnect, device number 4 [ 111.596008][ T6233] input: syz0 as /devices/virtual/input/input8 [ 111.870174][ T5927] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.986818][ T6234] process 'syz.1.66' launched '/dev/fd/72' with NULL argv: empty string added [ 112.057391][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 112.070611][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.103323][ T5927] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 112.127119][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.172349][ T5927] usb 1-1: config 0 descriptor?? [ 112.392006][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.401088][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.409350][ T5889] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.583529][ T5889] usb 5-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 112.602179][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.623314][ T5889] usb 5-1: config 0 descriptor?? [ 112.646071][ T5889] gspca_main: tv8532-2.14.0 probing 0545:808b [ 112.692369][ T5927] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 112.712688][ T5927] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 112.722600][ T5927] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 112.731197][ T5927] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 112.743726][ T5927] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0 [ 112.803409][ T5927] cypress 0003:04B4:07B1.0001: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0 [ 112.824508][ T5960] usb 3-1: USB disconnect, device number 3 [ 112.877874][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.913895][ T5927] usb 1-1: USB disconnect, device number 4 [ 112.926389][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.021922][ T6250] netlink: 'syz.1.71': attribute type 29 has an invalid length. [ 113.122830][ T5889] usb 5-1: USB disconnect, device number 8 [ 113.155833][ T6246] fido_id[6246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 113.361172][ T5844] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.531290][ T6262] binder: 6261:6262 ioctl 4018620d 0 returned -22 [ 113.627119][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 113.642749][ T6264] binder: 6261:6264 ioctl c018620c 0 returned -14 [ 113.658407][ T5844] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 113.672799][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.699090][ T5844] usb 4-1: Product: syz [ 113.724159][ T5844] usb 4-1: Manufacturer: syz [ 113.748171][ T5844] usb 4-1: SerialNumber: syz [ 113.802736][ T5844] usb 4-1: config 0 descriptor?? [ 113.844156][ T5844] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 113.939943][ T5906] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.118191][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.125886][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 114.149778][ T5906] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 114.167380][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.176006][ T5906] usb 5-1: Product: syz [ 114.181136][ T5906] usb 5-1: Manufacturer: syz [ 114.185911][ T5906] usb 5-1: SerialNumber: syz [ 114.197925][ T5906] usb 5-1: config 0 descriptor?? [ 114.277321][ T5960] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.337875][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 114.349910][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 114.393656][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 114.424121][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 114.436889][ T5906] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 114.441176][ T5960] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 114.454987][ T5906] airspy 5-1:0.0: Could not detect board [ 114.461975][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 114.474246][ T5906] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 114.485332][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 114.493177][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.498594][ T5906] usb 5-1: USB disconnect, device number 9 [ 114.530384][ T5960] usb 3-1: config 0 descriptor?? [ 114.576450][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 114.593068][ T5960] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 114.629001][ T5927] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 114.646640][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.647029][ T5960] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 114.657736][ T5927] usb 1-1: Product: syz [ 114.674327][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.685458][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.755271][ T5927] usb 1-1: Manufacturer: syz [ 114.763764][ T5960] usb 3-1: USB disconnect, device number 4 [ 114.781957][ T5927] usb 1-1: SerialNumber: syz [ 114.790997][ T5960] ftdi_sio 3-1:0.0: device disconnected [ 114.815676][ T5927] usb 1-1: config 0 descriptor?? [ 114.873944][ T5927] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 114.948233][ T5844] gspca_sonixj: reg_r err -110 [ 114.976729][ T5844] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 115.109367][ T5906] usb 1-1: USB disconnect, device number 5 [ 115.861249][ T5889] usb 4-1: USB disconnect, device number 8 [ 115.905235][ T6300] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 115.937760][ T6300] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 116.430131][ T5960] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.438434][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.627497][ T5960] usb 4-1: config 0 has no interfaces? [ 116.637498][ T5889] usb 5-1: device descriptor read/all, error -61 [ 116.664901][ T5960] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 116.676690][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.690027][ T5960] usb 4-1: Product: syz [ 116.694306][ T5960] usb 4-1: Manufacturer: syz [ 116.700585][ T5960] usb 4-1: SerialNumber: syz [ 116.771660][ T5960] usb 4-1: config 0 descriptor?? [ 116.797570][ T5889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.947336][ T5889] usb 5-1: device descriptor read/64, error -71 [ 116.977348][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.065818][ T5889] usb usb5-port1: attempt power cycle [ 117.143115][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 117.154834][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.165940][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 117.191202][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.247318][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.316508][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.329809][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.359864][ T9] usb 3-1: Product: syz [ 117.374172][ T9] usb 3-1: Manufacturer: syz [ 117.397726][ T9] usb 3-1: SerialNumber: syz [ 117.417854][ T5889] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.523818][ T5889] usb 5-1: device descriptor read/8, error -71 [ 117.638815][ T6325] xt_cgroup: xt_cgroup: no path or classid specified [ 117.767801][ T5889] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.788953][ T5889] usb 5-1: device descriptor read/8, error -71 [ 117.813517][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.825464][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.847765][ T9] usb 3-1: 0:2 : does not exist [ 117.906544][ T9] usb 3-1: USB disconnect, device number 5 [ 117.913459][ T5889] usb usb5-port1: unable to enumerate USB device [ 117.927925][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.90'. [ 118.081439][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.953750][ T9] usb 4-1: USB disconnect, device number 9 [ 119.863616][ T6346] netlink: 312 bytes leftover after parsing attributes in process `syz.0.93'. [ 119.991933][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.037731][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.148020][ T5934] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.276515][ T6349] netlink: 5 bytes leftover after parsing attributes in process `syz.0.93'. [ 120.294188][ T6346] netlink: 5 bytes leftover after parsing attributes in process `syz.0.93'. [ 120.317712][ T5934] usb 1-1: device descriptor read/64, error -71 [ 120.445661][ T6349] 0猉功D: renamed from macvtap0 (while UP) [ 120.506282][ T6349] 0猉功D: entered allmulticast mode [ 120.527388][ T6349] veth0_macvtap: entered allmulticast mode [ 120.534129][ T6349] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 120.577530][ T5934] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.626807][ T6346] 1猉功D: renamed from 30猉功D (while UP) [ 120.642599][ T6346] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 121.246031][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.100'. [ 121.268722][ T6373] bond0: entered promiscuous mode [ 121.273983][ T6373] bond_slave_0: entered promiscuous mode [ 121.331304][ T6373] bond_slave_1: entered promiscuous mode [ 121.600940][ T6348] block device autoloading is deprecated and will be removed. [ 121.606822][ T6373] bond0: left promiscuous mode [ 121.611970][ T6348] syz.2.94: attempt to access beyond end of device [ 121.611970][ T6348] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.631012][ T6373] bond_slave_0: left promiscuous mode [ 121.723185][ T6373] bond_slave_1: left promiscuous mode [ 122.392709][ T6366] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 122.474568][ T6380] ptrace attach of "./syz-executor exec"[5862] was attempted by "./syz-executor exec"[6380] [ 122.487584][ T6380] xt_cgroup: invalid path, errno=-2 [ 124.215847][ T6413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.923744][ T5934] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 125.099277][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 125.162504][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.229380][ T5934] usb 1-1: config 1 interface 0 altsetting 206 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 125.294620][ T5934] usb 1-1: config 1 interface 0 altsetting 206 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.349107][ T5934] usb 1-1: config 1 interface 0 has no altsetting 0 [ 125.365750][ T5934] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 125.375389][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.416827][ T5934] usb 1-1: Product: syz [ 125.429120][ T5934] usb 1-1: Manufacturer: syz [ 125.442927][ T5934] usb 1-1: SerialNumber: syz [ 125.637428][ T5844] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.737582][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.772041][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.089359][ T5934] usbhid 1-1:1.0: can't add hid device: -71 [ 126.089619][ T30] audit: type=1326 audit(1753271062.218:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f9f8e9a9 code=0x7ffc0000 [ 126.097546][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 126.128089][ T5934] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 126.145933][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.162776][ T5934] usb 1-1: USB disconnect, device number 8 [ 126.170166][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 126.191170][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 126.488892][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 126.520133][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.556643][ T30] audit: type=1326 audit(1753271062.218:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f03f9f8e9a9 code=0x7ffc0000 [ 126.578716][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.596082][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 126.620060][ T5844] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 126.647222][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 126.674696][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 126.684721][ T30] audit: type=1326 audit(1753271062.218:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f9f8e9a9 code=0x7ffc0000 [ 126.701000][ T5844] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 126.792923][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.823442][ T5844] usb 3-1: Product: syz [ 126.842148][ T5844] usb 3-1: Manufacturer: syz [ 126.924993][ T5844] usb 3-1: SerialNumber: syz [ 126.938639][ T30] audit: type=1326 audit(1753271062.218:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03f9f8e9a9 code=0x7ffc0000 [ 126.960837][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.996058][ T5844] usb 3-1: config 0 descriptor?? [ 127.028204][ T5844] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.126557][ T30] audit: type=1326 audit(1753271062.218:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f9f8e9a9 code=0x7ffc0000 [ 127.148921][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.288368][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.321992][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.358214][ T30] audit: type=1326 audit(1753271062.218:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f03f9f8e9a9 code=0x7ffc0000 [ 127.380846][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.432870][ T6437] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.487640][ T6189] udevd[6189]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.552956][ T30] audit: type=1326 audit(1753271062.218:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f9f8e9a9 code=0x7ffc0000 [ 127.625710][ T5844] usb 3-1: USB disconnect, device number 6 [ 127.661436][ T30] audit: type=1326 audit(1753271062.218:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f9f8e9a9 code=0x7ffc0000 [ 127.863069][ T30] audit: type=1326 audit(1753271064.288:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 127.997669][ T30] audit: type=1326 audit(1753271064.328:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 128.090376][ T6449] binder: 6447:6449 ioctl c0306201 2000000003c0 returned -14 [ 128.120139][ T6448] binder: 6447:6448 ioctl c0306201 2000000003c0 returned -14 [ 128.147525][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.167422][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.307337][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 128.348011][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 128.374761][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 128.377768][ T5906] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 128.407021][ T6453] kthread_run failed with err -4 [ 128.409043][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.435951][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.473699][ T5906] usb 2-1: Product: syz [ 128.485706][ T9] usb 4-1: config 0 has no interface number 0 [ 128.493882][ T5906] usb 2-1: Manufacturer: syz [ 128.505077][ T5906] usb 2-1: SerialNumber: syz [ 128.517308][ T9] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 128.538336][ T5906] usb 2-1: config 0 descriptor?? [ 128.547395][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.586522][ T9] usb 4-1: config 0 descriptor?? [ 128.643486][ T9] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 128.665101][ T9] usb 4-1: No valid video chain found. [ 128.753075][ T5906] usb 2-1: ignoring: not an USB2CAN converter [ 128.854874][ T6475] input: syz0 as /devices/virtual/input/input10 [ 129.326826][ T5906] usb 4-1: USB disconnect, device number 10 [ 129.732087][ T5906] usb 2-1: USB disconnect, device number 5 [ 131.067431][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.067497][ T6475] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 131.539902][ T6488] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 131.677628][ T6492] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.810110][ T6475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.816424][ T6475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.823926][ T6475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.832934][ T6475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.087303][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.297366][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 132.328518][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 132.350231][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.404580][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 30061, setting to 64 [ 132.425607][ T9] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 132.448245][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.456392][ T9] usb 3-1: Product: syz [ 132.469654][ T9] usb 3-1: Manufacturer: syz [ 132.475016][ T9] usb 3-1: SerialNumber: syz [ 132.484363][ T9] usb 3-1: config 0 descriptor?? [ 132.563077][ T9] usb 3-1: can't set config #0, error -71 [ 132.595029][ T9] usb 3-1: USB disconnect, device number 7 [ 133.098028][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.104804][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.151659][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.227824][ T6517] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.868552][ T5859] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.875144][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.884461][ T5859] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.379545][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.527285][ T10] usb 2-1: device descriptor read/64, error -71 [ 134.948204][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.097258][ T10] usb 2-1: device descriptor read/64, error -71 [ 135.209266][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.217266][ T10] usb usb2-port1: attempt power cycle [ 135.297403][ T5934] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.335437][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 135.348889][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.357342][ T9] usb 4-1: device descriptor read/64, error -71 [ 135.398435][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.467502][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 135.478470][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.518797][ T5934] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 135.543666][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.553279][ T5934] usb 3-1: Product: syz [ 135.557904][ T5934] usb 3-1: Manufacturer: syz [ 135.563588][ T5934] usb 3-1: SerialNumber: syz [ 135.567426][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.574035][ T5934] usb 3-1: config 0 descriptor?? [ 135.597582][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.597618][ T5934] usb 3-1: bad CDC descriptors [ 135.609737][ T10] usb 2-1: device descriptor read/8, error -71 [ 135.612329][ T5934] usb 3-1: unsupported MDLM descriptors [ 135.766810][ T6549] fuse: Unknown parameter '' [ 135.779568][ T9] usb 4-1: device descriptor read/64, error -71 [ 135.785502][ T6549] capability: warning: `syz.4.146' uses deprecated v2 capabilities in a way that may be insecure [ 135.836608][ T5844] usb 3-1: USB disconnect, device number 8 [ 135.859247][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.888083][ T9] usb usb4-port1: attempt power cycle [ 135.900474][ T10] usb 2-1: device descriptor read/8, error -71 [ 136.018828][ T10] usb usb2-port1: unable to enumerate USB device [ 136.181743][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 136.227368][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.258017][ T9] usb 4-1: device descriptor read/8, error -71 [ 136.497319][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 136.523474][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.534071][ T9] usb 4-1: device descriptor read/8, error -71 [ 136.553875][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.570327][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.586406][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.603920][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.604038][ T6564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.652235][ T9] usb usb4-port1: unable to enumerate USB device [ 136.667652][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.692448][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.711838][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.767410][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.809861][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.836536][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.851131][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.863496][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.875791][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.889144][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.912949][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.929557][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.974202][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.029235][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.070806][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.118637][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.232587][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.274449][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.295174][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.318972][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.341183][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.361235][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.380590][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.399926][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.413481][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.482547][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.510123][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.524455][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.541667][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.556055][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.575511][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.637283][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.824385][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.866333][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 137.866347][ T30] audit: type=1326 audit(1753271074.288:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 137.924666][ T30] audit: type=1326 audit(1753271074.348:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 138.023309][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.121677][ T30] audit: type=1326 audit(1753271074.348:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 138.169161][ T5934] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 138.254470][ T30] audit: type=1326 audit(1753271074.348:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 138.356157][ T30] audit: type=1326 audit(1753271074.348:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 138.444268][ T30] audit: type=1326 audit(1753271074.348:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 138.522304][ T30] audit: type=1326 audit(1753271074.348:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 138.548309][ T6594] sock: sock_timestamping_bind_phc: sock not bind to device [ 138.644645][ T30] audit: type=1326 audit(1753271074.348:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 138.750956][ T30] audit: type=1326 audit(1753271074.818:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 138.813687][ T30] audit: type=1326 audit(1753271074.828:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b03f8e9a9 code=0x7ffc0000 [ 139.220779][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 139.305720][ T6606] pimreg: entered allmulticast mode [ 139.312858][ T6606] pimreg: left allmulticast mode [ 140.141397][ T6612] IPv6: sit1: Disabled Multicast RS [ 140.994843][ T5906] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 141.237204][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 141.287756][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.317194][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.345870][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.454867][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.491579][ T5906] usb 4-1: Product: syz [ 141.503402][ T5906] usb 4-1: Manufacturer: syz [ 141.509249][ T5906] usb 4-1: SerialNumber: syz [ 141.737597][ T5906] usb 4-1: 0:2 : does not exist [ 141.819452][ T5906] usb 4-1: USB disconnect, device number 15 [ 141.905109][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.177357][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.238315][ T5889] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 143.357233][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 143.380085][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 143.394777][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.406042][ T9] usb 2-1: Product: syz [ 143.412327][ T9] usb 2-1: Manufacturer: syz [ 143.419195][ T9] usb 2-1: SerialNumber: syz [ 143.435025][ T6666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.175'. [ 143.465124][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 143.494684][ T9] usb 2-1: config 0 descriptor?? [ 143.511232][ T5889] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 143.565988][ T5889] usb 5-1: config 4 has no interface number 0 [ 143.687410][ T5889] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.820451][ T9] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 143.892197][ T5889] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.936662][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.033680][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.156960][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 144.156980][ T30] audit: type=1326 audit(1753271080.578:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 144.196795][ T5889] hub 5-1:4.128: USB hub found [ 144.278490][ T30] audit: type=1326 audit(1753271080.578:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 144.360656][ T30] audit: type=1326 audit(1753271080.618:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f309458d310 code=0x7ffc0000 [ 144.397420][ T30] audit: type=1326 audit(1753271080.618:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f309458d310 code=0x7ffc0000 [ 144.438745][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 144.491083][ T30] audit: type=1326 audit(1753271080.618:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 144.581046][ T6684] xt_recent: Unsupported userspace flags (000000de) [ 144.607054][ T30] audit: type=1326 audit(1753271080.618:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 144.636984][ T30] audit: type=1326 audit(1753271080.648:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 144.667478][ T30] audit: type=1326 audit(1753271080.648:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 144.690175][ T30] audit: type=1326 audit(1753271080.648:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309458e9a9 code=0x7ffc0000 [ 144.847427][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 145.009582][ T10] usb 4-1: config 0 has no interfaces? [ 145.019146][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.028811][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.036984][ T10] usb 4-1: Product: syz [ 145.064332][ T10] usb 4-1: Manufacturer: syz [ 145.069505][ T10] usb 4-1: SerialNumber: syz [ 145.079863][ T10] usb 4-1: config 0 descriptor?? [ 145.251694][ T9] usb write operation failed. (-71) [ 145.263812][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.302822][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'. [ 145.334746][ T5960] usb 4-1: USB disconnect, device number 16 [ 145.391920][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 145.433554][ T9] usb 2-1: media controller created [ 145.455428][ T9] usb read operation failed. (-71) [ 145.469438][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.490907][ T9] usb write operation failed. (-71) [ 145.516344][ T9] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 145.928618][ T9] usb 2-1: USB disconnect, device number 10 [ 149.381207][ T5889] hub 5-1:4.128: config failed, can't read hub descriptor (err -22) [ 149.677147][ C0] sched: DL replenish lagged too much [ 254.997109][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 255.004129][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5865/1:b..l P9/1:b..l P6189/2:b..l P6700/1:b..l [ 255.015765][ C0] rcu: (detected by 0, t=10502 jiffies, g=17425, q=751 ncpus=2) [ 255.023914][ C0] task:modprobe state:R running task stack:24104 pid:6700 tgid:6700 ppid:49 task_flags:0x400000 flags:0x00004002 [ 255.038729][ C0] Call Trace: [ 255.042158][ C0] [ 255.045142][ C0] __schedule+0x16fd/0x4cf0 [ 255.049700][ C0] ? call_rcu+0x6ff/0x9c0 [ 255.054099][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 255.059709][ C0] ? __pfx___schedule+0x10/0x10 [ 255.064621][ C0] ? __lock_acquire+0xab9/0xd20 [ 255.069531][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 255.075037][ C0] preempt_schedule_irq+0xb5/0x150 [ 255.080181][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 255.085953][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 255.091800][ C0] irqentry_exit+0x6f/0x90 [ 255.096256][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.102270][ C0] RIP: 0010:unwind_next_frame+0x1166/0x2390 [ 255.108336][ C0] Code: 6c 24 50 74 0c 4c 89 ef e8 37 7e af 00 48 8b 14 24 4d 89 65 00 41 0f b6 04 2f 84 c0 0f 85 f9 0f 00 00 c6 03 00 4c 8b 64 24 10 <4c> 8b 7c 24 28 48 8b 44 24 40 0f b6 04 28 84 c0 0f 85 8a 0d 00 00 [ 255.128328][ C0] RSP: 0018:ffffc9000bea7278 EFLAGS: 00000246 [ 255.134649][ C0] RAX: ffffc9000bea73f8 RBX: ffffc9000bea73e0 RCX: 0000000000000000 [ 255.142672][ C0] RDX: ffffffff90315e9e RSI: 0000000000000000 RDI: ffffc9000bea7408 [ 255.150691][ C0] RBP: dffffc0000000000 R08: ffffc9000bea7407 R09: 0000000000000000 [ 255.158818][ C0] R10: ffffc9000bea73f8 R11: fffff520017d4e81 R12: ffffc9000bea73a8 [ 255.166816][ C0] R13: ffffc9000bea73f8 R14: ffffc9000bea73a8 R15: ffffc9000bea73f0 [ 255.174933][ C0] ? unwind_next_frame+0xc98/0x2390 [ 255.180187][ C0] ? unwind_next_frame+0xa5/0x2390 [ 255.185503][ C0] ? __unwind_start+0xf8/0x760 [ 255.190307][ C0] __unwind_start+0x5b9/0x760 [ 255.195198][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 255.201553][ C0] arch_stack_walk+0xe4/0x150 [ 255.206443][ C0] ? arch_stack_walk+0xe4/0x150 [ 255.211350][ C0] stack_trace_save+0x9c/0xe0 [ 255.216103][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 255.221525][ C0] kasan_save_track+0x3e/0x80 [ 255.226298][ C0] __kasan_slab_alloc+0x6c/0x80 [ 255.231280][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 255.237024][ C0] ? anon_vma_clone+0xb8/0x4f0 [ 255.241935][ C0] anon_vma_clone+0xb8/0x4f0 [ 255.246652][ C0] __split_vma+0x351/0xa00 [ 255.251231][ C0] ? __pfx___split_vma+0x10/0x10 [ 255.256324][ C0] ? smp_call_function_many_cond+0xbc5/0x12d0 [ 255.262518][ C0] ? can_vma_merge_left+0x195/0x6b0 [ 255.267852][ C0] vma_modify+0x13b3/0x1970 [ 255.272520][ C0] vma_modify_flags+0x1e8/0x230 [ 255.277417][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 255.282821][ C0] ? aa_file_perm+0x3e7/0xed0 [ 255.287732][ C0] mprotect_fixup+0x400/0x9b0 [ 255.292464][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 255.297785][ C0] ? common_file_perm+0x199/0x200 [ 255.302885][ C0] do_mprotect_pkey+0x8cd/0xce0 [ 255.307792][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 255.313238][ C0] __x64_sys_mprotect+0x80/0x90 [ 255.318163][ C0] do_syscall_64+0xfa/0x3b0 [ 255.322718][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.328098][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.334198][ C0] ? clear_bhb_loop+0x60/0xb0 [ 255.339007][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.345122][ C0] RIP: 0033:0x7f6b9b96f2c7 [ 255.349581][ C0] RSP: 002b:00007ffdcc70f738 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 255.358041][ C0] RAX: ffffffffffffffda RBX: 00007f6b9b982da0 RCX: 00007f6b9b96f2c7 [ 255.366388][ C0] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007f6b9b980000 [ 255.374645][ C0] RBP: 00007ffdcc70fa00 R08: 000000003de00ec7 R09: 0000000000000000 [ 255.383101][ C0] R10: 00007f6b9b6b3c58 R11: 0000000000000206 R12: fffffffffffffff8 [ 255.391212][ C0] R13: 0000004f9a47aaf0 R14: 0000000000000000 R15: 00007f6b9b983310 [ 255.399237][ C0] [ 255.402294][ C0] task:udevd state:R running task stack:26232 pid:6189 tgid:6189 ppid:5216 task_flags:0x400140 flags:0x00004002 [ 255.416169][ C0] Call Trace: [ 255.419475][ C0] [ 255.422542][ C0] __schedule+0x16fd/0x4cf0 [ 255.427190][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 255.432605][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 255.438281][ C0] ? __pfx___schedule+0x10/0x10 [ 255.443295][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 255.449089][ C0] preempt_schedule_irq+0xb5/0x150 [ 255.454358][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 255.460333][ C0] ? __lock_acquire+0xab9/0xd20 [ 255.465256][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 255.471366][ C0] irqentry_exit+0x6f/0x90 [ 255.475811][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.481996][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 255.487315][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 94 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 255.507129][ C0] RSP: 0018:ffffc9000bac7778 EFLAGS: 00000206 [ 255.513609][ C0] RAX: 852a502db8a59a00 RBX: 0000000000000000 RCX: 852a502db8a59a00 [ 255.522018][ C0] RDX: 0000000000000000 RSI: ffffffff8db8406b RDI: ffffffff8be28d00 [ 255.530119][ C0] RBP: ffffffff8242ac1b R08: 0000000000000000 R09: ffffffff8242ac1b [ 255.538404][ C0] R10: dffffc0000000000 R11: fffffbfff1f43b9f R12: 0000000000000002 [ 255.546592][ C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 255.554707][ C0] ? prepend_path+0x4b/0x970 [ 255.559390][ C0] ? prepend_path+0x4b/0x970 [ 255.564228][ C0] prepend_path+0x1c3/0x970 [ 255.568856][ C0] ? prepend_path+0x4b/0x970 [ 255.573478][ C0] ? prepend_path+0x4b/0x970 [ 255.578111][ C0] d_absolute_path+0xa1/0x140 [ 255.582920][ C0] tomoyo_realpath_from_path+0x2c8/0x5d0 [ 255.588690][ C0] tomoyo_path_perm+0x213/0x4b0 [ 255.593575][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 255.598635][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 255.604077][ C0] ? __might_fault+0xb0/0x130 [ 255.608799][ C0] security_inode_getattr+0x12f/0x330 [ 255.614215][ C0] vfs_statx+0x18e/0x550 [ 255.618580][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 255.623369][ C0] ? strncpy_from_user+0x150/0x290 [ 255.628695][ C0] ? getname_flags+0x1e5/0x540 [ 255.633519][ C0] ? dput+0x37/0x2b0 [ 255.637463][ C0] vfs_fstatat+0x118/0x170 [ 255.641927][ C0] __x64_sys_newfstatat+0x116/0x190 [ 255.647260][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 255.653040][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 255.658461][ C0] ? do_syscall_64+0xbe/0x3b0 [ 255.663229][ C0] do_syscall_64+0xfa/0x3b0 [ 255.667866][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.673184][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.679368][ C0] ? clear_bhb_loop+0x60/0xb0 [ 255.684078][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.690646][ C0] RIP: 0033:0x7f14ca911b0a [ 255.695219][ C0] RSP: 002b:00007ffd730a5668 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 255.703675][ C0] RAX: ffffffffffffffda RBX: 00007ffd730a6040 RCX: 00007f14ca911b0a [ 255.711776][ C0] RDX: 00007ffd730a5690 RSI: 00007ffd730a6040 RDI: 00000000ffffff9c [ 255.719881][ C0] RBP: 00007ffd730a6052 R08: 0000000000000075 R09: 0000000000000000 [ 255.727953][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 0000565263ced145 [ 255.736317][ C0] R13: 00007ffd730a5720 R14: 00005652593e36d7 R15: 0000565263ced140 [ 255.744799][ C0] [ 255.747894][ C0] task:kworker/0:0 state:R running task stack:21528 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 255.761861][ C0] Workqueue: events_power_efficient gc_worker [ 255.768291][ C0] Call Trace: [ 255.771696][ C0] [ 255.774658][ C0] __schedule+0x16fd/0x4cf0 [ 255.779218][ C0] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 255.784981][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 255.790315][ C0] ? __pfx___schedule+0x10/0x10 [ 255.795315][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 255.800635][ C0] preempt_schedule_irq+0xb5/0x150 [ 255.805784][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 255.811635][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 255.817476][ C0] irqentry_exit+0x6f/0x90 [ 255.822017][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.828030][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 255.835183][ C0] Code: f8 4d 85 e4 75 16 e8 c1 f2 21 f8 eb 15 e8 ba f2 21 f8 e8 05 65 cf 01 4d 85 e4 74 ea e8 ab f2 21 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 255.855000][ C0] RSP: 0018:ffffc900000e7860 EFLAGS: 00000293 [ 255.861116][ C0] RAX: ffffffff899e3425 RBX: 0000000000000000 RCX: ffff88801ce88000 [ 255.869118][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.877304][ C0] RBP: ffffc900000e7910 R08: ffffffff8fa1dcf7 R09: 1ffffffff1f43b9e [ 255.885325][ C0] R10: dffffc0000000000 R11: fffffbfff1f43b9f R12: 0000000000000200 [ 255.893428][ C0] R13: ffff88801cae7918 R14: 1ffff9200001cf0c R15: dffffc0000000000 [ 255.901705][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 255.908233][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 255.914886][ C0] gc_worker+0x308/0x1380 [ 255.919429][ C0] ? gc_worker+0x264/0x1380 [ 255.923978][ C0] ? __pfx_gc_worker+0x10/0x10 [ 255.928873][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.934208][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 255.940050][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 255.945892][ C0] process_scheduled_works+0xae1/0x17b0 [ 255.951856][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.957905][ C0] worker_thread+0x8a0/0xda0 [ 255.962705][ C0] kthread+0x70e/0x8a0 [ 255.966957][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.972392][ C0] ? __pfx_kthread+0x10/0x10 [ 255.977208][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.982439][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.988091][ C0] ? __pfx_kthread+0x10/0x10 [ 255.993396][ C0] ret_from_fork+0x3fc/0x770 [ 255.998675][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 256.004306][ C0] ? __switch_to_asm+0x39/0x70 [ 256.009471][ C0] ? __switch_to_asm+0x33/0x70 [ 256.014631][ C0] ? __pfx_kthread+0x10/0x10 [ 256.019597][ C0] ret_from_fork_asm+0x1a/0x30 [ 256.025027][ C0] [ 256.028778][ C0] task:syz-executor state:R running task stack:21768 pid:5865 tgid:5865 ppid:5840 task_flags:0x400140 flags:0x00004002 [ 256.042670][ C0] Call Trace: [ 256.046065][ C0] [ 256.049148][ C0] __schedule+0x16fd/0x4cf0 [ 256.053891][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 256.059214][ C0] ? __pfx___schedule+0x10/0x10 [ 256.064107][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 256.069605][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 256.074955][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 256.080385][ C0] preempt_schedule_irq+0xb5/0x150 [ 256.085650][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 256.091443][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 256.097590][ C0] irqentry_exit+0x6f/0x90 [ 256.102153][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.108195][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 256.113702][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 94 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 256.133872][ C0] RSP: 0018:ffffc9000428eef8 EFLAGS: 00000206 [ 256.140177][ C0] RAX: 9ab8de9484729800 RBX: 0000000000000000 RCX: 9ab8de9484729800 [ 256.148453][ C0] RDX: 0000000000000000 RSI: ffffffff8db8406b RDI: ffffffff8be28d00 [ 256.156467][ C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 256.164586][ C0] R10: ffffc9000428f0b8 R11: ffffffff81acfe40 R12: 0000000000000002 [ 256.172791][ C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 256.181332][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.186539][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 256.192841][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.198096][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.203342][ C0] ? save_stack+0xf5/0x1f0 [ 256.207886][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.213029][ C0] unwind_next_frame+0xc2/0x2390 [ 256.218002][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.223174][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.228412][ C0] ? stack_trace_save+0x9c/0xe0 [ 256.233393][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 256.239933][ C0] arch_stack_walk+0x11c/0x150 [ 256.244738][ C0] ? save_stack+0xf5/0x1f0 [ 256.249382][ C0] stack_trace_save+0x9c/0xe0 [ 256.254092][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 256.259600][ C0] save_stack+0xf5/0x1f0 [ 256.263883][ C0] ? __pfx_save_stack+0x10/0x10 [ 256.268882][ C0] ? page_ext_put+0x97/0xc0 [ 256.273433][ C0] __reset_page_owner+0x71/0x1f0 [ 256.278420][ C0] __free_frozen_pages+0xc71/0xe70 [ 256.283582][ C0] __put_partials+0x161/0x1c0 [ 256.288299][ C0] put_cpu_partial+0x17c/0x250 [ 256.293093][ C0] ? put_cpu_partial+0x6d/0x250 [ 256.297993][ C0] __slab_free+0x2f7/0x400 [ 256.302444][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.308458][ C0] ? __phys_addr+0xd3/0x180 [ 256.313015][ C0] qlist_free_all+0x97/0x140 [ 256.317682][ C0] kasan_quarantine_reduce+0x148/0x160 [ 256.323189][ C0] __kasan_slab_alloc+0x22/0x80 [ 256.328172][ C0] __kmalloc_noprof+0x224/0x4f0 [ 256.333061][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 256.338908][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 256.344547][ C0] tomoyo_check_open_permission+0x1c1/0x3b0 [ 256.350601][ C0] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 256.356799][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 256.363342][ C0] ? tomoyo_file_open+0x165/0x220 [ 256.368413][ C0] security_file_open+0xb1/0x270 [ 256.373393][ C0] do_dentry_open+0x35e/0x1970 [ 256.378319][ C0] vfs_open+0x3b/0x340 [ 256.382445][ C0] ? path_openat+0x2ecd/0x3830 [ 256.387460][ C0] path_openat+0x2ee5/0x3830 [ 256.392212][ C0] ? arch_stack_walk+0xfc/0x150 [ 256.397621][ C0] ? __pfx_path_openat+0x10/0x10 [ 256.402611][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.408854][ C0] do_filp_open+0x1fa/0x410 [ 256.413506][ C0] ? __lock_acquire+0xab9/0xd20 [ 256.418416][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 256.423523][ C0] ? _raw_spin_unlock+0x28/0x50 [ 256.428600][ C0] ? alloc_fd+0x64c/0x6c0 [ 256.433004][ C0] do_sys_openat2+0x121/0x1c0 [ 256.437809][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.443051][ C0] ? do_mkdirat+0x54e/0x590 [ 256.447602][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 256.452689][ C0] __x64_sys_openat+0x138/0x170 [ 256.457629][ C0] do_syscall_64+0xfa/0x3b0 [ 256.462264][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.467496][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.473683][ C0] ? clear_bhb_loop+0x60/0xb0 [ 256.478487][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.484418][ C0] RIP: 0033:0x7f0cadd8d310 [ 256.489217][ C0] RSP: 002b:00007f0cae0dfd30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 256.497668][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0cadd8d310 [ 256.505839][ C0] RDX: 0000000000000002 RSI: 00007f0cae0dfe40 RDI: 00000000ffffff9c [ 256.513926][ C0] RBP: 00007f0cae0dfe40 R08: 0000000000000000 R09: 00007f0cae0dfaf7 [ 256.522017][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000025 [ 256.530015][ C0] R13: 00000000000927c0 R14: 0000000000023af1 R15: 00007f0cae0dfe40 [ 256.539020][ C0] [ 256.542083][ C0] rcu: rcu_preempt kthread starved for 8173 jiffies! g17425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 256.553237][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 256.563347][ C0] rcu: RCU grace-period kthread stack dump: [ 256.569346][ C0] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 256.583079][ C0] Call Trace: [ 256.586392][ C0] [ 256.589359][ C0] __schedule+0x16fd/0x4cf0 [ 256.594010][ C0] ? schedule+0x165/0x360 [ 256.598382][ C0] ? __pfx___schedule+0x10/0x10 [ 256.603287][ C0] ? schedule+0x91/0x360 [ 256.607612][ C0] schedule+0x165/0x360 [ 256.611801][ C0] schedule_timeout+0x12b/0x270 [ 256.616684][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 256.622352][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 256.628451][ C0] ? __pfx_process_timeout+0x10/0x10 [ 256.633895][ C0] ? prepare_to_swait_event+0x341/0x380 [ 256.639688][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 256.644995][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 256.651294][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 256.656705][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 256.662162][ C0] ? finish_swait+0xcd/0x1f0 [ 256.666808][ C0] rcu_gp_kthread+0x99/0x390 [ 256.671690][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 256.677010][ C0] ? __kthread_parkme+0x7b/0x200 [ 256.681991][ C0] ? __kthread_parkme+0x1a1/0x200 [ 256.687067][ C0] kthread+0x70e/0x8a0 [ 256.691179][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 256.696427][ C0] ? __pfx_kthread+0x10/0x10 [ 256.701083][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.706401][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.711634][ C0] ? __pfx_kthread+0x10/0x10 [ 256.716260][ C0] ret_from_fork+0x3fc/0x770 [ 256.720888][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 256.726050][ C0] ? __switch_to_asm+0x39/0x70 [ 256.730866][ C0] ? __switch_to_asm+0x33/0x70 [ 256.735779][ C0] ? __pfx_kthread+0x10/0x10 [ 256.740421][ C0] ret_from_fork_asm+0x1a/0x30 [ 256.745373][ C0] [ 256.748419][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 256.754798][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 256.765002][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.775265][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 256.781026][ C0] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9d 1a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 256.801120][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 256.807397][ C0] RAX: 4d5b3f4c4dc5e500 RBX: ffffffff81976a18 RCX: 4d5b3f4c4dc5e500 [ 256.815553][ C0] RDX: 0000000000000001 RSI: ffffffff8d996411 RDI: ffffffff8be28d00 [ 256.823558][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 256.831562][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1dcf0 [ 256.839563][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 256.847876][ C0] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 256.856920][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.863626][ C0] CR2: 00007fc30dc2deda CR3: 000000002f160000 CR4: 00000000003526f0 [ 256.871643][ C0] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 256.879651][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 256.887656][ C0] Call Trace: [ 256.891134][ C0] [ 256.894086][ C0] default_idle+0x13/0x20 [ 256.898625][ C0] default_idle_call+0x74/0xb0 [ 256.903418][ C0] do_idle+0x1e8/0x510 [ 256.907531][ C0] ? __pfx_do_idle+0x10/0x10 [ 256.912175][ C0] cpu_startup_entry+0x44/0x60 [ 256.917071][ C0] rest_init+0x2de/0x300 [ 256.921355][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 256.927024][ C0] start_kernel+0x47d/0x500 [ 256.931579][ C0] x86_64_start_reservations+0x24/0x30 [ 256.937069][ C0] x86_64_start_kernel+0x143/0x1c0 [ 256.942491][ C0] common_startup_64+0x13e/0x147 [ 256.947571][ C0] [ 256.951019][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.297736][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.457614][ T1301] ieee802154 phy1 wpan1: encryption failed: -22