last executing test programs: 7.581704669s ago: executing program 3 (id=195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063010b00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000000000000000000fcffffff00000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r4, 0x890b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRES16, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000006c0), &(0x7f0000000900)=0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000480)={0x9, &(0x7f0000000940)=[{0x4, 0x9, 0x93, 0x6}, {0x7, 0x5, 0x5, 0x2}, {0x8, 0x5, 0x6, 0x9}, {0x1, 0x10, 0x2, 0x8}, {0x1, 0x87, 0x5, 0x2}, {0x9, 0xa, 0x8f, 0x5}, {0xff, 0x5, 0xa0, 0x5}, {0x7, 0x7, 0xc4, 0x4}, {0x2, 0x1, 0xa, 0x100}]}, 0x10) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000180)=""/23, &(0x7f0000000280)=0x17) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @fwd={0x8}]}, {0x0, [0x61, 0x30, 0x2e]}}, &(0x7f0000000400)=""/5, 0x41, 0x5, 0x1, 0x1, 0x10000, @value=r8}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000000)={0x6, 0xb86, 0x2}) ioctl$SIOCGIFMTU(r7, 0x8921, &(0x7f0000000080)={'vlan0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r5, @ANYBLOB="591da6b7f31864c120c44465d5c084a214ce96662835d566a56979877dad2ffc7381b5050765244f94adcacd4c61024d9856c52d4af31f35cf081e51f82c82389d73f34615ae7ad5ea756da90bbe762176fc0b28868d4dcfa8b13f7b6d653c0b41785b0d47ce969ff677311a347e2473dccd9953f201d80ebde602fe276039316de781db2b35c8f13904306ea8a4844909bb5159c9ec410acb2125abe9485a76c9467745506ddb486e51f7b47a", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff00000000000000000000000000000000000000000000030000000000000000004087b4ee749af07cf285"], 0xb8}}, 0x0) 6.505796184s ago: executing program 3 (id=201): syz_usb_connect$cdc_ecm(0x3, 0x156, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090244010101000000090400fd0302060000052406000005240004080d240f0100000000000000000007241400350000052415010407240a09fc0707f1241306a4e15080a81548b14968ab4ed7485bcfaaf6d51f6aecd974c12d3267e8147f0e2dffacf4408b63798e6f9f40002b4ad1dd77e5317fe1b636cda6168a45bc487b20a081ed7afe6414fa05a8550ad1327d57e4b7536c69dbbc626b93274ff9d58c6ce9020cd0967c97962201698130ca1007c250ef282eb10e23dcb5505358d27c8602d1eeec23baadb0743fe52481417cf0a1c8fde3e99ad9965dcffaeefe9760ba8d47a1cf3fb41e6597fe1c12faa2063dfc7647fa1872aa2fc7cd3a439d74e4b43ea5e12391989eea7bfb506a50e7d49b78b88882fcfca69db6ed96353c6e70aa36bc052415ff01090582020002"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x8, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "b2"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x9, 0x10}, {0x6, 0x24, 0x1a, 0x828, 0x40}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7b, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x50, 0x0, 0x10, 0x2}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x5, 0x9d, 0x1, 0x40, 0x2}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "66ce7175289f341fdd703e97897ee93f"}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1801}}]}) 4.87973647s ago: executing program 1 (id=206): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) process_vm_readv(0x0, &(0x7f0000001540)=[{0x0}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000009c0)={0x80000000, 0x0, 0x0}) 4.763115812s ago: executing program 1 (id=207): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4004040) 4.449983242s ago: executing program 3 (id=210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0x80010, r0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) fsopen(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xfffffffc, 0xfffffffc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) io_setup(0x81, &(0x7f0000000180)=0x0) r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x7, 0x2, r9, 0x0, 0x0, 0xeffdffffffffffff}]) r10 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x32, &(0x7f0000000000)="f30f0600000000010049eb6667650aee6c83dc2a", 0x14) recvmmsg(r7, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/177, 0xb1}], 0x1}, 0x2}], 0x4000000000001a9, 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="e000000013000100000000000000000063626328626c6f77666973602900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0xe0}}, 0x0) 3.985401373s ago: executing program 3 (id=213): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x18, 0x0, 0x44, {[@timestamp={0x7, 0x8, 0x8, 0x0, 0x0, [0x0]}]}}}], 0x18}, 0x0) 3.781934775s ago: executing program 3 (id=215): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x79, 0x5d, 0x6c, 0x8, 0xc45, 0x6128, 0xc46d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x1, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.779319312s ago: executing program 4 (id=216): r0 = socket$kcm(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x790, &(0x7f0000000000)={0x0, 0x3b14, 0x40, 0x3, 0x1000084, 0x0, r2}, &(0x7f0000000180), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) eventfd(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r3, 0x40045431, 0x0) r6 = syz_open_pts(r3, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x17) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x23b) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, 0x0, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r11, r9, &(0x7f0000002080)=0x64, 0x23b) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000006900)={&(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x3}, 0x4800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.332709209s ago: executing program 1 (id=218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) socket$inet6(0xa, 0x800, 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r1, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r1) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b) 2.854329913s ago: executing program 0 (id=221): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) (fail_nth: 6) 2.757369173s ago: executing program 1 (id=222): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x2c0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x7}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'pim6reg\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @dev={0xac, 0x14, 0x14, 0xd}}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x214, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x1000}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1f8, 0x6, [@m_connmark={0xe0, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0xad, 0x6, "42f92e0e012e40ff937006f7f138ec2182948bdcd42c959e2aa466bc5059a5b1ceb4cc46b9743c401b8bb220ddd937b25751dd5f1a14b8513809384a913670a0958d8026f77b77b1e10381f82fc0b2140b8040952cb8477ceefcac23008d058146317f5fffa5e043108dad542daa2928eb313b368b291910fc25ed7c9721af5acce335350d4efc79228514c195705fdc4e4a7d91a1d6ef777a402e04705890e89a727025eb6ae2769b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x6c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2c0}}, 0x0) unshare(0x20000400) r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) socket(0x10, 0x803, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) 2.425926154s ago: executing program 2 (id=223): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000080)="0c4ecf73cbaa587ce440dc339e0236cc307fed22a5e40b36f5e7dba2309687874478d500e24fda", 0x27) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x7) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @end, @timestamp_addr={0x44, 0x24, 0x81, 0x1, 0x1, [{@multicast2, 0xe}, {@remote}, {@multicast2, 0x2}, {@loopback, 0x3}]}, @noop]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) 2.2853528s ago: executing program 0 (id=224): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) waitid(0x2, 0x0, &(0x7f0000000480), 0x1, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f00000001c0)={0x0, 0x37, &(0x7f0000000180)=""/55}) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000000", 0x6}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg(r5, &(0x7f0000009600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/102, 0x66}, 0x10001}, {{0x0, 0x0, &(0x7f0000002e80)=[{0x0}, {&(0x7f0000002cc0)=""/200, 0xc8}, {&(0x7f0000002dc0)=""/157, 0x9d}], 0x3, &(0x7f0000000400)=""/97, 0x61}, 0x3}, {{&(0x7f0000002f40)=@sco, 0x80, &(0x7f00000052c0)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000004000)}, {0x0}, {0x0}], 0x4}, 0x101}, {{&(0x7f0000005340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f0000007540)=[{&(0x7f00000053c0)=""/175, 0xaf}, {&(0x7f0000005480)=""/191, 0xbf}, {&(0x7f0000005540)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000007580)=""/77, 0x4d}}, {{&(0x7f0000007600)=@l2tp, 0x80, &(0x7f0000008a80)=[{0x0}, {&(0x7f00000086c0)=""/48, 0x30}, {0x0}, {&(0x7f0000008780)=""/202, 0xca}, {0x0}, {0x0}], 0x6, &(0x7f0000008b00)=""/188, 0xbc}}, {{&(0x7f0000008bc0)=@ax25={{}, [@rose, @null, @rose, @rose, @remote, @rose, @netrom]}, 0x80, &(0x7f0000008e00)=[{&(0x7f0000008d00)=""/92, 0x5c}, {&(0x7f0000008d80)=""/1, 0x1}, {&(0x7f0000000140)=""/29, 0x1d}], 0x3, &(0x7f0000008e40)=""/61, 0x3d}}], 0x6, 0x10021, 0x0) write$binfmt_misc(r2, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYBLOB="dba67995eef3749a787598fe15a543f38e68c9a91927f0c91e8b"], 0xff79) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000043c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) r7 = socket$inet6(0xa, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 2.206230675s ago: executing program 1 (id=225): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2068c0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102379, 0x18feb}, {&(0x7f00000006c0)=""/246, 0xf6}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x1f}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0100"/12, @ANYRES32, @ANYBLOB="e20000010000000051afbd603630ea8b3b9cc9b462f96cee949c127746d6afdb091114289ed82718b99c0c9937a87e59daec19dfc21f81dfea1a3a82a415816b529a52b84157ed5f769c524c57338b532ecee521eef72516da902c649814a43b9b80f7c6c89d15e0ba068a384d292aa136069f93936ddc8e378bff551778b4f1fa2fea19e0ed348937145f1080c08da467ba0a3103419b", @ANYRES64=0x0], 0x10) r2 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, r3, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x0, @private1}]}, &(0x7f0000000180)=0x10) fchmod(r5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$qrtr(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)="2beecbd8f4d3432fffffffff648721858a092ca55966f9d370e24b9cbcd29e9f880e7697b6615359b3f98d6f90e268bc88968278ab855ce04ed9dbc01aebcbe4bb481c255377a188f39999eb9ca36ee49f213d26ab9907fbb067d9a261543e057ebb8e38ebf9e853e0eed9643ee8cd4748ab9a04786617cab424d5e261616bc4c74e2fe5550f73632d8ee37e30b5c8ebe0e416d4e78c8490f15e449e198f040000000000000014edb33ac85a0000000000000000", 0xaf}, {&(0x7f00000005c0)='u', 0x1}], 0x2, 0x0, 0x0, 0x4041}, 0xffffffffffffffe7) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r7], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000002c0)={0x7, 0x8000, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2, r11}, &(0x7f0000000300)=0x20) 2.097904264s ago: executing program 2 (id=226): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_macvtap\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=r5, @ANYRES64=r2], 0x28}}, 0x0) 2.097589321s ago: executing program 4 (id=227): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0xfffffffe}], 0x1c) listen(r1, 0xfffffffc) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x1, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r4, 0x5420, &(0x7f0000001d40)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000440)={0x0, 0x0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x5, 0x0, [], 0x0, 0x0, 0x0}, 0x1be) syz_usb_control_io(r7, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x2, 0x3, &(0x7f0000000540)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) fsmount(r0, 0x0, 0x0) 1.950661458s ago: executing program 2 (id=228): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4004040) 1.855723236s ago: executing program 3 (id=229): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$alg(0x26, 0x5, 0x0) getpeername(r2, 0x0, 0x0) fchmod(r1, 0x63) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) 1.403270236s ago: executing program 1 (id=230): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8994, &(0x7f00000006c0)={'lo\x00', @ifru_addrs=@sco={0x1f, @none}}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) recvfrom$l2tp(r2, &(0x7f00000000c0)=""/112, 0x70, 0x2, &(0x7f0000000140), 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x10001, 0x20001, 0x6, 0x91, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0100030109021b000100000000090400000190f19c00090584"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x40000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000001b40)=""/4087, 0xff7}, {&(0x7f00000002c0)=""/38, 0x26}], 0x3}, 0x0) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r6, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r10, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.227713121s ago: executing program 0 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) 1.109895408s ago: executing program 0 (id=232): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x40000000, 0x0, 0x0, 0x0) 1.052364452s ago: executing program 0 (id=233): ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000380)={0x1, [{}, {}, {0x0}], 0x8d, "1cf029e12852d7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001380)={0x0, r0, "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", "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"}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x5, 0xe1, {0xe1, 0x30, "d79d74e603a81e37af08e95b68b3fcf0b4f05c41e4b0f78e8e0e7b135692a93b5771c833710618987e9da1d17392921c9741b43f59a581e2f601c56a4e7ecc9f62241a65713386ee18c3b2f5dfcee0dd6d65f6eea8865e176c4857731dc1927efc47c2773871ee57fd90954f63beef79a445735d42e5db924bcecbd19c93e7cd08fec4e50d241e99e306090337355238c222783d5628a08bbc65fc9ffef2f1f6ba071014b11eabb6b7d38f1385a46839942046f1700013c0651e913449b508cf895da5a0bdf52629357934a7e59aa45f90c9e0e693b71afd076410b7e65bd7"}}, &(0x7f0000002380)={0x0, 0x3, 0xbd, @string={0xbd, 0x3, "cce4c1be905b15e587b2afb8eceeded6cb6c13619524baea84a636608e6c070b4fefb867ce5cc76cb9d710dda10d949d7b849dcdf572090625d62c00ab3f924d1ca65b9028e59273cdabb9ce0e63c734428b6d1d5ed9876c07ce6997f4c142fcd7d1edda22cd6185e3aa4774f0be49d37b0e66dd266eeb86b2f311cea074f6d8ddd49108b0ca63ebc38f50dda76d80651a204846d71c5f1e9a8b24b2acf34a0bae571283d406e17aa60be73d119f0591e345861cc85784d191e491"}}}, &(0x7f00000025c0)={0x44, &(0x7f00000000c0)={0x40, 0x31, 0x33, "62103aeab7a7dd86f6901017e9b50ea9f92462494492644faece3ffad6ba9a844f14713f83cd0f7d4107856d6536e18e0a3c3f"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000002480)={0x20, 0x81, 0x3, "a9d8b6"}, &(0x7f00000024c0)={0x20, 0x82, 0x1, '9'}, &(0x7f0000002500)={0x20, 0x83, 0x1, "b5"}, &(0x7f0000002540)={0x20, 0x84, 0x4, "2b5eaf53"}, &(0x7f0000002580)={0x20, 0x85, 0x3, "cf65bb"}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 563.505091ms ago: executing program 2 (id=234): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x3, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0x5, 0x5c}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc0045543, &(0x7f0000000b80)=ANY=[]) process_madvise(r2, &(0x7f0000001440)=[{&(0x7f0000000340)="9f510efe", 0x4}, {0x0}], 0x2, 0x19, 0x0) 409.773456ms ago: executing program 0 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 407.151397ms ago: executing program 4 (id=236): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000001980)=ANY=[], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x542f, 0x0) memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r1, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000017c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYRESOCT], 0x30}}], 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) 273.730903ms ago: executing program 2 (id=237): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}}}, 0x1c}}, 0x20c0) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f0000000700)=@nl=@unspec, 0x80, &(0x7f0000000480)=[{&(0x7f0000000980)="7e53dc3578002a41000fd6880b571d3c", 0x10}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x8, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) 218.656416ms ago: executing program 4 (id=238): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000040)={&(0x7f0000000740)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x0, {@in6_addr=@loopback={0xeaffffff00000000}, 0x800}}}]}, 0x38}, 0x1, 0xf00}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000580)={@mcast2}, &(0x7f00000005c0)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000580)={@mcast2, 0x0}, &(0x7f00000005c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000600)={@multicast1, @empty}, &(0x7f0000000640)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000600)={@multicast1, @empty, 0x0}, &(0x7f0000000640)=0xc) socket(0x1f, 0x3, 0x0) (async) r8 = socket(0x1f, 0x3, 0x0) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000100)={0x1d, r14}, 0x18) (async) bind$can_j1939(r13, &(0x7f0000000100)={0x1d, r14}, 0x18) r15 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r15, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r17}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r18, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r19, @ANYBLOB="010b00000000000000000c00000008000300", @ANYRES32=r20], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r19, @ANYBLOB="010b00000000000000000c00000008000300", @ANYRES32=r20], 0x1c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x25c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000012}, 0x801) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYBLOB="0ba235a2d20068b2f05e6bcddba8d1a94fe8cd875d938260b0053a13aba11650c4c217b0db08e4c424a8f3f357cb088bd64c37aba2eaa63506af9d3f67a859f7e17af8bb5392078010179ec4f3d6bc399df036ff3c20dba67e74f4d441279590316fad9941", @ANYRESOCT=r2, @ANYRESOCT=r22], 0x30}}, 0x20040004) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYBLOB="0ba235a2d20068b2f05e6bcddba8d1a94fe8cd875d938260b0053a13aba11650c4c217b0db08e4c424a8f3f357cb088bd64c37aba2eaa63506af9d3f67a859f7e17af8bb5392078010179ec4f3d6bc399df036ff3c20dba67e74f4d441279590316fad9941", @ANYRESOCT=r2, @ANYRESOCT=r22], 0x30}}, 0x20040004) 178.161511ms ago: executing program 2 (id=239): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000220900"/26, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000340)={0x1, 0xb26, 0x8, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5b843c57d0d4fcebda569fd8fea6a7b7ef976c09cf8d2aa4052321896dc15fb693fccb55de57aaaaf6ee76096b4c8b0e182deac6221008dee32436028328ef00"}}, 0x80}}, 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x549c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xc0, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_io_uring_setup(0x678d, &(0x7f0000000480)={0x0, 0x876, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r10, 0x9) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r12 = accept(r10, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r11, &(0x7f0000000180)=""/60, 0x13e58, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r9, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 41.867482ms ago: executing program 4 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0ff, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f0020"], 0xe8}}, 0x0) 0s ago: executing program 4 (id=241): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905040310000607030905"], 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c000004000000140001800600060080350000060020"], 0x2c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x3, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfe, 0x1, 0x2}}]}}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7f, 0x8, 0xf, 0x8, 0x8}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc01}}, {0xa2, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]}, {0x59, &(0x7f0000000380)=@string={0x59, 0x3, "b6d764880207ec5526952ea6eb1077cc3f5c800ceeb4e3ec54c6e4daf01282215b2eb270fa474bb639d63e8fd3a9b4f90f7c5ec7ebd1735cf0fa23d94e6190a54af743b80b316d8db3117474b84df0957638b1425a94fc"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x420}}, {0xe5, &(0x7f00000014c0)=@string={0xe5, 0x3, "a5e5ac7b3ace997c8fe2be79c76dbd1c3cb21557a15c1b82ecf22fa09ead8281c3a27f9f2f53a3590a84ae1e9bc66e100541a32bee6f0997547af6286f2560e134f3ef503ea66c7ee85cc8c287e8feeb72b0319a9ab52ee6fd6150b9fc4c1e06e8cb2efb9e7592c265d12cf692f9190f7da0aab12f47d14898d7dbb1fbcc538dc8628aad7d3fc117826660e7a3f8ded778c9a1e1393f1840628940a81f0b1c2a99c0eb33f481e871e1ac9ebfdd0f5662f5e47e20cdb10e2afbeefee158bb0fd438c91a8ccc2329defc7e11b0532eaee8b1ed6ebfa52b0d87f4332e757692ab1cf9ba4a"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x441}}, {0xec, &(0x7f0000001600)=@string={0xec, 0x3, "fd21300d600b4e1fe940137a4a1c995b80d1bd9585a2ef668068bea7b0679049da9aa5064ba467bfa5accdb8aec9b1217cf14a1848fc34e9ef8acff2655327f64c2e6be8de0afda852fdf0ae3d66b897cc4e8663785d25d93ebeec10bbd49b22bdcec102657e3bec469b3185f09d8f1812cd3a467a304b890db74431089b4ca8101be2a0e47028899613f826a90e4be0a37005f9e9b5a8890c382768ff100f9eefdc0fd4ea998af73b506ad7f9ba58a35fb3184fba3d7afb2732de5df81a35be880657f506ef7a5e1227870c00d39c81c1ac94cbccbd2b2779a695afed2afbb2de5ef4466c4ce74bb475"}}, {0xc0, &(0x7f0000001700)=@string={0xc0, 0x3, "47e1abfc647659cc8fc591e84430ff7923998189fe6b20dfefde4c3fe31338d60dda61aa33154c6075b518e7ff8ac2e9d9b800deac49698e442c6543aeb93388eb788c0aa04d975aa195e43ba16262c2c09edbb936e9bb5925e312631d53f6f971ed8fe677194b97b0bac671a9fb2efc2ecf7e91e0f77460a1ba42267f3420af703962b36e7ea04cd569d67ef0feb80b4c354e7f509e1b8c670bfaaa73d2a649cf2ad3be623f14c3cce3a198a74544d5b9f0a9b2a825d725b12061b31d90"}}]}) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x8, 0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x5) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000000c0)={&(0x7f0000000480)=[0x417d, 0x10000, 0x9, 0xfffffffe, 0xa4, 0x7, 0x90000, 0x800, 0x8, 0xf04, 0x5, 0x7, 0xb, 0x80, 0xe, 0x5, 0x73, 0x6, 0x1ff, 0x7be, 0x5d6, 0x7f0, 0x8, 0x7, 0x104, 0x4, 0x7fff, 0xc, 0x7, 0x7, 0x5, 0x30, 0x36, 0x7fff, 0x5, 0x800, 0xed, 0x3c, 0xd, 0x3, 0x0, 0x8, 0xffffffff, 0xb0c, 0x7f, 0x9, 0xfff, 0x40, 0x1, 0x9, 0x200, 0x40, 0xb, 0x10, 0x6, 0x51, 0x1, 0x8, 0x8, 0x1, 0x3, 0x800, 0x9, 0x920, 0x3, 0xb3c5, 0x200, 0x5, 0x7, 0xf6a3, 0xd4f, 0x1ff, 0x0, 0xff, 0x8, 0x3, 0x9, 0xe, 0x7, 0x4, 0xcc, 0x3, 0x4, 0x2, 0x261c, 0x400, 0xe90e, 0x1, 0xff, 0x8, 0x200, 0x80, 0x8000000, 0x81, 0x2, 0xe87, 0x100, 0x7, 0x5, 0x4, 0x7, 0x7, 0x2, 0x10000, 0x6, 0x9, 0x8, 0xa, 0x3, 0x0, 0x3, 0xfffffffd, 0x0, 0x5, 0xa32, 0x0, 0x5, 0x4, 0x7fffffff, 0x4, 0xad72, 0xb, 0x2, 0x6, 0x68000000, 0x4, 0x8b, 0x6, 0xffff2d37, 0x6, 0x2, 0x0, 0x6, 0x123, 0x0, 0x1f8, 0x2, 0x966e, 0x9, 0x40, 0x7b5, 0x8000, 0x10, 0xb08, 0x21e, 0x200, 0x9, 0x8000, 0x2, 0x3, 0x2, 0x7, 0x9, 0x0, 0x7ff, 0x56dc0, 0x8, 0x6, 0x101, 0x101, 0x0, 0xe8, 0x9, 0x967e, 0x101, 0x9, 0xffff, 0x0, 0x7, 0x7, 0x400, 0x9, 0x6968, 0x42, 0xfffffffe, 0x7, 0x1ff, 0x7fff, 0x2, 0x9, 0x7fffffff, 0x1, 0x9, 0x3, 0xfffffffd, 0x1, 0x5, 0x40, 0x4, 0x8, 0x1000, 0x7fffffff, 0x7ff, 0xfffffff7, 0x4, 0x8, 0x6, 0x2, 0x0, 0x9, 0x1, 0x4, 0x1, 0x3ff, 0x10, 0x3, 0x9, 0x5, 0x28626352, 0x1, 0x5, 0x2, 0xf, 0x3, 0x3, 0x4, 0xf, 0xffffca2b, 0x5, 0x40, 0x200, 0xfc1, 0x5, 0x913, 0x7, 0x1, 0x7, 0x8, 0x2507, 0x5, 0x6, 0x0, 0x5, 0x2cb, 0xc, 0x7, 0x6, 0x7, 0x8001, 0x1000, 0x7, 0x40, 0x8ff8, 0x1, 0x9, 0x1, 0x3, 0x10, 0x6, 0x24e5, 0x6, 0x3, 0x5, 0xb84, 0xd0, 0x400, 0x4, 0x6, 0x3, 0x0, 0x3, 0x2, 0xffffffff, 0x6, 0x2, 0x0, 0xc, 0x8, 0xb, 0xffff2455, 0x8, 0x6, 0xc, 0x8, 0xfffffe11, 0x7, 0x7, 0x4, 0x9, 0xffff, 0x2, 0x6ceb, 0x4, 0x63, 0xfffff302, 0x6, 0x1, 0x8, 0x6, 0x8, 0x9, 0xe31c, 0x5, 0x2, 0x8001, 0x8, 0x180000, 0x4, 0x4e, 0x8, 0xf, 0x7fff, 0x100000, 0x6, 0x0, 0xbebc, 0x0, 0x4, 0x6, 0x0, 0xfffffffd, 0x1, 0x1000, 0x7, 0x3, 0xd5, 0x2, 0x5, 0x1ad8, 0xfffffffd, 0x400, 0x7, 0x8, 0x6, 0x9, 0x0, 0x0, 0x965, 0x4, 0x2, 0x5, 0xfffffff7, 0x40, 0x3d5c, 0x4, 0x8, 0x848, 0x1, 0x0, 0xa8b, 0x5, 0x6, 0x401, 0x9, 0x8, 0x5, 0x8b8, 0x9, 0x8, 0x3, 0x5, 0x0, 0x7fffffff, 0x1, 0x4, 0x80000000, 0x1, 0x80000000, 0x7, 0x6, 0xf, 0x800, 0x60c, 0x5, 0x6, 0x9, 0x4, 0x7fff, 0x4, 0x1, 0x2, 0x64d, 0xc6, 0x800, 0xf1fb, 0x82c, 0x0, 0xffffffda, 0x7, 0x8, 0x8000000, 0x9, 0x7, 0x800, 0x8, 0xa, 0x7, 0x1, 0x7, 0x400, 0x400, 0xa, 0x9, 0xf7, 0x8, 0x8, 0x2, 0x6, 0x10001, 0x10, 0xfffffffe, 0x4, 0x78, 0x8, 0x3, 0x4, 0xa, 0x8000, 0x80000000, 0x7f, 0x5, 0xc4, 0x55a, 0x7ca3e142, 0x5, 0x2, 0x7e5f257, 0x4, 0x5, 0x6, 0x401, 0x8001, 0xf, 0x5, 0x8001, 0x7, 0xe94c, 0x0, 0x3d, 0x7ff, 0xfffffff9, 0x6, 0x3, 0x7, 0x6, 0x6, 0x4, 0x7, 0x4, 0x9, 0xffffffe5, 0x7, 0x1000, 0x0, 0x6, 0x6, 0x81, 0x400, 0x8, 0x7, 0xd, 0xe, 0x8, 0x5, 0x8bb0, 0x5, 0x6, 0x8000, 0x1, 0x8, 0x3, 0x2, 0x4, 0xd, 0x80000001, 0x2, 0x3d3, 0xff, 0x4, 0x7, 0x0, 0x3, 0x7, 0x8, 0x8, 0x10000, 0x4, 0x5, 0x1c, 0x8, 0xffffffff, 0x7498, 0x101, 0x6, 0xe, 0xb, 0xff, 0x0, 0x7ff, 0xe417, 0x2, 0xd, 0x6, 0x2, 0x8, 0x7, 0xfffffffd, 0x0, 0x8b6, 0xffff8001, 0x7, 0x7, 0x7a46ed1d, 0x8db, 0x2800, 0x80, 0x92, 0x4, 0xffff3460, 0xfffffff9, 0x0, 0x7, 0x4ce8, 0x2, 0x8, 0x10000, 0xfffffff9, 0xfffffff9, 0x1, 0x2, 0x6, 0x81, 0x81, 0xc1, 0xa, 0x80, 0x7, 0x8, 0x9a, 0x7, 0x10000, 0x8, 0x8, 0x5, 0x2, 0x3, 0x890f, 0x10001, 0xfffff800, 0x3, 0x8001, 0x7, 0x9, 0x80000001, 0x1, 0x8, 0x6, 0x0, 0x5, 0x1, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x5, 0x457c, 0x80000000, 0xe5ca, 0x3ff, 0x800000, 0x5, 0x4, 0x0, 0x9, 0x7, 0x5, 0xfffffff8, 0x6, 0x80000000, 0x8, 0xfffff771, 0x6, 0x20001, 0x4, 0x9, 0x2, 0x6cf3, 0x0, 0x80000000, 0x2, 0x6, 0x5, 0x2, 0x3, 0x6, 0x10000, 0x6, 0x7, 0x7, 0x2, 0x8, 0xa77, 0x7, 0x200, 0x1, 0x5, 0x4, 0x7, 0x34b, 0x5193, 0x14, 0x4, 0x7fffffff, 0x2, 0xc, 0x3, 0x1, 0x81, 0x9, 0xa, 0x10000, 0x9, 0x7fffffff, 0x8000, 0xfffffffb, 0x7, 0x23, 0x8, 0x2912, 0x8, 0x3, 0x0, 0x4, 0x7ff, 0xcdc, 0x7, 0x9, 0x0, 0x5, 0x8, 0x2, 0x0, 0x7, 0x200, 0x9, 0x8, 0x8, 0xfffffffe, 0x6, 0xffff9538, 0xe3, 0x2, 0x80, 0x2, 0x4, 0x6, 0x7, 0x8dc1, 0x81, 0xfffffffe, 0xffff49b0, 0xfffffffa, 0x1, 0xffffff3e, 0x3, 0x200, 0x3, 0x100000, 0x8, 0x4, 0x4000000, 0xfffffffb, 0x3, 0x4, 0x9, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1, 0x8, 0x3, 0x1, 0x3, 0x2, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x2, 0xc, 0x1, 0x8, 0x8, 0x3, 0x3, 0x3, 0x5, 0x10001, 0x7, 0x2, 0x6, 0x200, 0x2, 0x1, 0x9, 0x8, 0x4, 0xabc, 0x2, 0x967, 0x8, 0x6, 0x0, 0x7f, 0x4, 0x7fffffff, 0x2, 0x4, 0x80000000, 0x7, 0x8, 0x3, 0x0, 0x1, 0x2, 0xffff8001, 0x63, 0x7, 0xfffffffe, 0xf, 0x7, 0x9, 0x2, 0xc8, 0x6, 0x2, 0x7879, 0x4, 0x1, 0xff, 0x3ff, 0x2, 0x8bf, 0xc, 0x36e8, 0x9c39, 0x3, 0x209, 0x3, 0x8, 0x3, 0x22, 0x0, 0xfffffffd, 0x3, 0x2, 0x80000001, 0x0, 0x711f, 0x7, 0x3, 0x4, 0x5, 0x401, 0x15e, 0xe603, 0x0, 0x2, 0xe, 0x1ff, 0x5, 0x5, 0xfffffff7, 0x5, 0x3, 0x9, 0x1, 0xff, 0xde, 0x4, 0x2d, 0x6, 0xfffffffa, 0x9, 0x1f, 0x5, 0x4, 0x1, 0x55b, 0xfffffff3, 0x81, 0x7fff, 0x0, 0x5, 0x3ff, 0x0, 0x15b, 0x10001, 0x1, 0x10000, 0x9, 0x79d6, 0x9, 0x8, 0xf, 0xffffffff, 0x8, 0x7, 0x3ff, 0xffff, 0x8, 0xf, 0x1, 0x6, 0x42d, 0x400, 0x5d7a, 0xff, 0x200, 0xffffffff, 0x8, 0x1000, 0x9, 0xe9, 0xa, 0x2, 0x88, 0x7, 0x8, 0x8, 0x3, 0x4, 0xb5f, 0x7, 0xfffffffe, 0x4, 0x5, 0x1, 0xf580, 0x6, 0x7, 0x939, 0xf2, 0x4, 0xeb9, 0x8000000, 0x5, 0x48, 0x3, 0xfff, 0x7, 0xffff, 0xffff, 0x3, 0x0, 0x8, 0x5, 0x9, 0xfff, 0x1, 0x2d, 0x0, 0x105, 0x8, 0x6, 0x8, 0x8, 0x1, 0x5406, 0x80, 0x2, 0x3, 0x1ce8, 0x4, 0x52, 0x9, 0x2, 0xff, 0x80, 0x2, 0x8001, 0x4, 0x6, 0x2, 0x8, 0x2, 0x5, 0x5, 0x800, 0x0, 0x9, 0x3, 0x8000, 0x401, 0x2, 0x3, 0x1ff, 0x3, 0xe, 0x7, 0xd686, 0x2, 0x2, 0x1, 0x9, 0x0, 0xaf34, 0x7, 0x6, 0x3, 0x1000, 0xa069, 0x10001, 0x7, 0x7, 0x6, 0x0, 0xe, 0x3ff, 0x5, 0x4, 0x496, 0x8, 0x8311, 0x401, 0x9, 0x4, 0x4, 0x3a1, 0xeec, 0x3, 0xa2, 0x9, 0x4, 0x1, 0x8, 0x9, 0x8, 0x28e, 0x8001, 0x1000000, 0xfffffff9, 0x8000, 0x81, 0x2, 0xbed, 0xd6, 0x3, 0x6, 0x4, 0x9, 0x6, 0x80, 0x79, 0xb530, 0x0, 0x2, 0x638c0, 0x8, 0xe, 0x4, 0x4, 0x8, 0x2, 0x8, 0x100, 0x7, 0x10000, 0xe5, 0x9278, 0xfffffff8, 0xa796, 0x4, 0x8, 0xc8d8, 0x7, 0x45a28b01, 0x6bf, 0x2, 0x4, 0x2, 0x8, 0x3a, 0xa, 0x8000, 0x9, 0x7f, 0xc078, 0xf, 0x5, 0x80000001, 0x80, 0x2, 0x8000, 0x9, 0x4000005, 0x5, 0x1, 0x10000, 0x9, 0xd7, 0xff, 0xd80, 0xfffffffd, 0x8, 0x2, 0x47, 0x0, 0x1, 0xfffffff7, 0x6, 0x786, 0x5, 0x4, 0x9, 0x4, 0x3, 0x3, 0x5, 0x8, 0x7, 0x5, 0x5, 0x222c, 0xf0, 0x5, 0x0, 0x6, 0x3, 0x449dbd84], 0x3, 0x400, 0x43}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc058565d, &(0x7f0000000000)={0x0, 0x1, 0x0, "e47fbe3b898330e7014de9e7c29ee67dea4dfd1563e7ee944e41c38b555c6ac2"}) r5 = socket(0x200000100000011, 0x803, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)="c4", 0x1}], 0x1}}], 0x2, 0x4008001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x2, 0x1, [0x0]}, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e3000000000080003000000fdff07000b"], 0x50}}, 0x0) socketpair(0x15, 0x5, 0x5, &(0x7f0000001840)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000400)=@multiplanar_mmap={0x8, 0x8, 0x4, 0x0, 0xb, {}, {0x3, 0x3, 0x4, 0x6, 0x3, 0x3, "6335155c"}, 0x2, 0x1, {0x0}, 0x8}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 57.887418][ T5213] cgroup: Unknown subsys name 'net' [ 58.017904][ T5213] cgroup: Unknown subsys name 'cpuset' [ 58.026622][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.568480][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.746387][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.755283][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.763546][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.771699][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.780808][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.788832][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.796522][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.803763][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.821184][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.834801][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.837440][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.850649][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.851247][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.860583][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.865339][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.873005][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.878950][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.894291][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.894458][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.902343][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.909547][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.916038][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.923425][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.929658][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.937381][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.944383][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.958853][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.966271][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.973765][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.986042][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.378486][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 62.451244][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 62.557290][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.565304][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.572717][ T5239] bridge_slave_0: entered allmulticast mode [ 62.579986][ T5239] bridge_slave_0: entered promiscuous mode [ 62.616907][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 62.631958][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.639290][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.646991][ T5239] bridge_slave_1: entered allmulticast mode [ 62.653624][ T5239] bridge_slave_1: entered promiscuous mode [ 62.705333][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 62.755306][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.762445][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.769793][ T5245] bridge_slave_0: entered allmulticast mode [ 62.777664][ T5245] bridge_slave_0: entered promiscuous mode [ 62.787763][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.799198][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.812133][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 62.828107][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.835798][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.842936][ T5245] bridge_slave_1: entered allmulticast mode [ 62.849970][ T5245] bridge_slave_1: entered promiscuous mode [ 62.889756][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.897210][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.905468][ T5243] bridge_slave_0: entered allmulticast mode [ 62.912270][ T5243] bridge_slave_0: entered promiscuous mode [ 62.930393][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.952521][ T5239] team0: Port device team_slave_0 added [ 62.989939][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.997432][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.005078][ T5243] bridge_slave_1: entered allmulticast mode [ 63.011774][ T5243] bridge_slave_1: entered promiscuous mode [ 63.029287][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.047589][ T5239] team0: Port device team_slave_1 added [ 63.107766][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.121282][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.132888][ T5245] team0: Port device team_slave_0 added [ 63.141159][ T5245] team0: Port device team_slave_1 added [ 63.165922][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.173110][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.180654][ T5242] bridge_slave_0: entered allmulticast mode [ 63.187322][ T5242] bridge_slave_0: entered promiscuous mode [ 63.219331][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.226378][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.252991][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.298632][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.306020][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.313160][ T5242] bridge_slave_1: entered allmulticast mode [ 63.320282][ T5242] bridge_slave_1: entered promiscuous mode [ 63.333242][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.340469][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.366591][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.379060][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.386192][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.412162][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.424778][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.431750][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.458212][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.494063][ T5243] team0: Port device team_slave_0 added [ 63.508980][ T5243] team0: Port device team_slave_1 added [ 63.525180][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.532323][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.539526][ T5241] bridge_slave_0: entered allmulticast mode [ 63.546334][ T5241] bridge_slave_0: entered promiscuous mode [ 63.555299][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.577739][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.585147][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.592275][ T5241] bridge_slave_1: entered allmulticast mode [ 63.600037][ T5241] bridge_slave_1: entered promiscuous mode [ 63.608219][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.633665][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.640767][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.666896][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.707288][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.714278][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.743896][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.766629][ T5245] hsr_slave_0: entered promiscuous mode [ 63.773162][ T5245] hsr_slave_1: entered promiscuous mode [ 63.791043][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.803035][ T5242] team0: Port device team_slave_0 added [ 63.814794][ T5242] team0: Port device team_slave_1 added [ 63.823392][ T5239] hsr_slave_0: entered promiscuous mode [ 63.830270][ T5239] hsr_slave_1: entered promiscuous mode [ 63.836710][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.845000][ T5239] Cannot create hsr debugfs directory [ 63.863372][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.918136][ T5241] team0: Port device team_slave_0 added [ 63.925055][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.932071][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.958697][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.971384][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.979411][ T5233] Bluetooth: hci0: command tx timeout [ 63.980370][ T5235] Bluetooth: hci2: command tx timeout [ 63.985255][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.985306][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.051417][ T5241] team0: Port device team_slave_1 added [ 64.064680][ T5235] Bluetooth: hci3: command tx timeout [ 64.064701][ T5233] Bluetooth: hci1: command tx timeout [ 64.064945][ T5233] Bluetooth: hci4: command tx timeout [ 64.098025][ T5243] hsr_slave_0: entered promiscuous mode [ 64.104208][ T5243] hsr_slave_1: entered promiscuous mode [ 64.110613][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.118447][ T5243] Cannot create hsr debugfs directory [ 64.157630][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.165129][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.191403][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.203313][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.210471][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.236459][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.269346][ T5242] hsr_slave_0: entered promiscuous mode [ 64.277741][ T5242] hsr_slave_1: entered promiscuous mode [ 64.283800][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.291810][ T5242] Cannot create hsr debugfs directory [ 64.416982][ T5241] hsr_slave_0: entered promiscuous mode [ 64.423168][ T5241] hsr_slave_1: entered promiscuous mode [ 64.430189][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.438176][ T5241] Cannot create hsr debugfs directory [ 64.628727][ T5245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.641143][ T5245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.668152][ T5245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.681466][ T5245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.731445][ T5243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.771867][ T5243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.789269][ T5243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.805964][ T5239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.816621][ T5243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.830407][ T5239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.840917][ T5239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.852361][ T5239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.929472][ T5242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.957997][ T5242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.970091][ T5242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.998571][ T5242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.054152][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.069788][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.090262][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.108606][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.121992][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.202712][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.251465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.258779][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.282345][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.296141][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.303228][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.315971][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.332611][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.359906][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.386173][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.402013][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.409140][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.431515][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.452081][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.459301][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.469115][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.476371][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.490409][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.517144][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.524255][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.538775][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.545925][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.558392][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.565520][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.618865][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.633697][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.671807][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.678960][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.719720][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.726911][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.791358][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.821760][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.846884][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.890461][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.902428][ T5245] veth0_vlan: entered promiscuous mode [ 65.922093][ T5245] veth1_vlan: entered promiscuous mode [ 65.933814][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.003392][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.041245][ T5245] veth0_macvtap: entered promiscuous mode [ 66.052632][ T5242] veth0_vlan: entered promiscuous mode [ 66.058739][ T5233] Bluetooth: hci2: command tx timeout [ 66.058747][ T5236] Bluetooth: hci0: command tx timeout [ 66.082932][ T5243] veth0_vlan: entered promiscuous mode [ 66.108123][ T5245] veth1_macvtap: entered promiscuous mode [ 66.125834][ T5242] veth1_vlan: entered promiscuous mode [ 66.135154][ T5236] Bluetooth: hci3: command tx timeout [ 66.139187][ T5233] Bluetooth: hci1: command tx timeout [ 66.140603][ T5235] Bluetooth: hci4: command tx timeout [ 66.158071][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.166630][ T5243] veth1_vlan: entered promiscuous mode [ 66.193703][ T5239] veth0_vlan: entered promiscuous mode [ 66.215263][ T5242] veth0_macvtap: entered promiscuous mode [ 66.223129][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.246448][ T5239] veth1_vlan: entered promiscuous mode [ 66.257983][ T5245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.272147][ T5245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.282425][ T5245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.291483][ T5245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.314014][ T5242] veth1_macvtap: entered promiscuous mode [ 66.327571][ T5241] veth0_vlan: entered promiscuous mode [ 66.370301][ T5243] veth0_macvtap: entered promiscuous mode [ 66.381830][ T5241] veth1_vlan: entered promiscuous mode [ 66.397840][ T5243] veth1_macvtap: entered promiscuous mode [ 66.415828][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.426922][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.438544][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.468820][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.479406][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.490829][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.502144][ T5243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.511761][ T5243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.521170][ T5243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.530110][ T5243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.541589][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.554543][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.565112][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.575675][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.587596][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.630714][ T5241] veth0_macvtap: entered promiscuous mode [ 66.655939][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.667948][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.678167][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.692146][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.703518][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.713425][ T5241] veth1_macvtap: entered promiscuous mode [ 66.722130][ T5239] veth0_macvtap: entered promiscuous mode [ 66.743855][ T5239] veth1_macvtap: entered promiscuous mode [ 66.750306][ T765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.760843][ T765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.763736][ T5242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.780958][ T5242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.790820][ T5242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.799889][ T5242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.828571][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.840426][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.850374][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.861880][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.872055][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.882621][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.893890][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.932840][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.944249][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.955499][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.966097][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.976954][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.987435][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.998700][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.037502][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.046795][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.056046][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.066941][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.083685][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.092732][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.103425][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.112891][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.123210][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.133984][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.144004][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.154986][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.165224][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.176846][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.188362][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.198056][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.213532][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.235038][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.246182][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.256519][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.269098][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.279395][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.289999][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.300343][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.310928][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.322241][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.357075][ T5239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.366679][ T5239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.376157][ T5239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.384926][ T5239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.456838][ T765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.469351][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.476100][ T765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.498294][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.572978][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.590803][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.700622][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.726816][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.747461][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.764191][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.823010][ T2524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.840261][ T2524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.868290][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.890512][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.121248][ T5298] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.135694][ T5236] Bluetooth: hci0: command tx timeout [ 68.141435][ T5235] Bluetooth: hci2: command tx timeout [ 68.215035][ T5235] Bluetooth: hci4: command tx timeout [ 68.215560][ T5236] Bluetooth: hci3: command tx timeout [ 68.220871][ T5235] Bluetooth: hci1: command tx timeout [ 68.721702][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'. [ 68.767223][ T5317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'. [ 68.917039][ T5330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.145688][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.286237][ T8] usb 3-1: device descriptor read/64, error -71 [ 69.318625][ T5340] FAULT_INJECTION: forcing a failure. [ 69.318625][ T5340] name failslab, interval 1, probability 0, space 0, times 0 [ 69.356141][ T5304] openvswitch: netlink: Actions may not be safe on all matching packets [ 69.365492][ T5340] CPU: 1 UID: 0 PID: 5340 Comm: syz.0.18 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 69.375703][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.385810][ T5340] Call Trace: [ 69.389125][ T5340] [ 69.392075][ T5340] dump_stack_lvl+0x241/0x360 [ 69.396804][ T5340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.402051][ T5340] ? __pfx__printk+0x10/0x10 [ 69.406678][ T5340] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 69.412177][ T5340] ? __pfx___might_resched+0x10/0x10 [ 69.417496][ T5340] should_fail_ex+0x3b0/0x4e0 [ 69.422202][ T5340] should_failslab+0xac/0x100 [ 69.426911][ T5340] ? snd_mixer_oss_put_volume1_vol+0xf0/0x4f0 [ 69.433013][ T5340] __kmalloc_cache_noprof+0x6c/0x2c0 [ 69.438333][ T5340] snd_mixer_oss_put_volume1_vol+0xf0/0x4f0 [ 69.444279][ T5340] snd_mixer_oss_put_volume1+0x188/0x870 [ 69.449958][ T5340] snd_mixer_oss_ioctl1+0x734/0x19f0 [ 69.455292][ T5340] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 69.461059][ T5340] ? __fget_files+0x29/0x470 [ 69.465682][ T5340] ? __fget_files+0x3f3/0x470 [ 69.470413][ T5340] snd_mixer_oss_ioctl+0x45/0x50 [ 69.475401][ T5340] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 69.481071][ T5340] __se_sys_ioctl+0xf9/0x170 [ 69.485687][ T5340] do_syscall_64+0xf3/0x230 [ 69.490227][ T5340] ? clear_bhb_loop+0x35/0x90 [ 69.494941][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.500885][ T5340] RIP: 0033:0x7fe87517def9 [ 69.505335][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.524978][ T5340] RSP: 002b:00007fe875f99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.533454][ T5340] RAX: ffffffffffffffda RBX: 00007fe875335f80 RCX: 00007fe87517def9 [ 69.541454][ T5340] RDX: 0000000020000040 RSI: 0000000040086603 RDI: 0000000000000003 [ 69.544525][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.549431][ T5340] RBP: 00007fe875f99090 R08: 0000000000000000 R09: 0000000000000000 [ 69.549469][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.549485][ T5340] R13: 0000000000000000 R14: 00007fe875335f80 R15: 00007fe87545fa28 [ 69.580921][ T5340] [ 69.728369][ T8] usb 3-1: device descriptor read/64, error -71 [ 69.861465][ T8] usb usb3-port1: attempt power cycle [ 69.883463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.905074][ T5352] warning: `syz.4.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.054115][ T5353] dccp_invalid_packet: P.Data Offset(0) too small [ 70.215343][ T5235] Bluetooth: hci2: command tx timeout [ 70.215355][ T5236] Bluetooth: hci0: command tx timeout [ 70.215763][ T5280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.244406][ T57] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.244527][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 70.285071][ T8] usb 3-1: device descriptor read/8, error -71 [ 70.295292][ T5235] Bluetooth: hci1: command tx timeout [ 70.295671][ T5236] Bluetooth: hci3: command tx timeout [ 70.300707][ T5235] Bluetooth: hci4: command tx timeout [ 70.429843][ T5280] usb 5-1: config index 0 descriptor too short (expected 4096, got 27) [ 70.448723][ T5355] futex_wake_op: syz.1.22 tries to shift op by -1; fix this program [ 70.457993][ T5280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.473046][ T5280] usb 5-1: config 0 has no interfaces? [ 70.486664][ T5280] usb 5-1: New USB device found, idVendor=8086, idProduct=ed7c, bcdDevice=ec.b6 [ 70.495976][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.505854][ T5280] usb 5-1: Product: syz [ 70.510128][ T5280] usb 5-1: Manufacturer: syz [ 70.514949][ T5280] usb 5-1: SerialNumber: syz [ 70.524081][ T57] usb 2-1: unable to get BOS descriptor or descriptor too short [ 70.535403][ T57] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 70.551216][ T5280] usb 5-1: config 0 descriptor?? [ 70.558785][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.564362][ T57] usb 2-1: can't read configurations, error -71 [ 70.624691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.638065][ T8] usb 3-1: device descriptor read/8, error -71 [ 70.767240][ T8] usb usb3-port1: unable to enumerate USB device [ 70.795097][ T5281] usb 5-1: USB disconnect, device number 2 [ 70.875088][ T5369] input: syz1 as /devices/virtual/input/input5 [ 71.434566][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.498061][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.514237][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.606198][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.619266][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.639082][ T8] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 71.649168][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.655163][ T57] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.675588][ T8] usb 1-1: config 0 descriptor?? [ 71.773565][ T5384] block device autoloading is deprecated and will be removed. [ 71.788533][ T5384] syz.3.30: attempt to access beyond end of device [ 71.788533][ T5384] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 71.824508][ T5281] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.835060][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 71.847115][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.858421][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.904133][ T57] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 71.943834][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.990854][ T57] usb 2-1: config 0 descriptor?? [ 72.016875][ T5281] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.043234][ T5281] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.075552][ T5281] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.086360][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.099741][ T5388] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 72.104087][ T5383] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 72.108258][ T5388] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.32'. [ 72.141631][ T5281] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.157475][ T8] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 72.412775][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.503317][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.522660][ T5383] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 72.524093][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.552679][ T5383] veth1_macvtap: left promiscuous mode [ 72.562772][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.598046][ T57] usbhid 2-1:0.0: can't add hid device: -71 [ 72.604554][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 72.610283][ T57] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 72.652810][ T57] usb 2-1: USB disconnect, device number 3 [ 72.657237][ T5281] usb 5-1: USB disconnect, device number 3 [ 72.794975][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 72.813448][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.834911][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.845074][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.857110][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.874719][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.895657][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.009075][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.060931][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.071435][ T5392] futex_wake_op: syz.0.27 tries to shift op by -1; fix this program [ 73.130069][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 73.135701][ T8] usbtmc 3-1:16.0: can't read capabilities [ 73.355593][ T29] audit: type=1800 audit(1726816665.963:2): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.33" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 73.419594][ T5278] usb 3-1: USB disconnect, device number 6 [ 73.644566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.754882][ T5412] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.854600][ T5281] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.863030][ T5280] usb 1-1: USB disconnect, device number 2 [ 74.024598][ T5278] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.030660][ T5281] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.053149][ T5281] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.071213][ T5281] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.092018][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.104166][ T5281] usb 5-1: SerialNumber: syz [ 74.204626][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 74.228375][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.247355][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.287784][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 74.291433][ T5422] pimreg: entered allmulticast mode [ 74.334352][ T5278] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 74.345954][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.382923][ T5278] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 74.393994][ T5278] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 74.408640][ T5278] usb 2-1: Manufacturer: syz [ 74.463449][ T5278] usb 2-1: config 0 descriptor?? [ 74.522107][ T5422] pimreg: left allmulticast mode [ 74.610669][ T5424] capability: warning: `syz.0.42' uses 32-bit capabilities (legacy support in use) [ 74.723307][ T5428] kAFS: unable to lookup cell '' [ 74.773149][ T5424] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 74.796578][ T5278] rc_core: IR keymap rc-hauppauge not found [ 74.814729][ T5278] Registered IR keymap rc-empty [ 74.820018][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 74.848226][ T5281] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 74.878548][ T5431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.43'. [ 74.914252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.939817][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 74.950177][ T5431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 74.977383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 74.992216][ T5431] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.001238][ T5431] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.014891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.025868][ T5278] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 75.039884][ T5278] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 75.082757][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.084609][ T5409] futex_wake_op: syz.4.37 tries to shift op by -1; fix this program [ 75.104772][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.150186][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.213768][ T5293] usb 5-1: USB disconnect, device number 4 [ 75.214439][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.224509][ T5270] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.235932][ T5293] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 75.264537][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.325173][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.387393][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.430004][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.432899][ T5270] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 75.450412][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.474515][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.484574][ T5270] usb 1-1: Product: syz [ 75.488803][ T5270] usb 1-1: Manufacturer: syz [ 75.505312][ T5278] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 75.512801][ T5270] usb 1-1: SerialNumber: syz [ 75.524479][ T5281] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.546839][ T5278] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 75.547944][ T5270] r8152-cfgselector 1-1: Unknown version 0x0000 [ 75.564997][ T5270] r8152-cfgselector 1-1: config 0 descriptor?? [ 75.578644][ T5278] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 75.597652][ T5278] usb 2-1: USB disconnect, device number 4 [ 75.691036][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 75.709291][ T5281] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.719319][ T5281] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.739188][ T5281] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.751199][ T5281] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.790597][ T5281] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.812974][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.816319][ T5280] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 75.899302][ T5454] Zero length message leads to an empty skb [ 76.003684][ T5280] usb 3-1: device descriptor read/64, error -71 [ 76.080816][ T5270] r8152-cfgselector 1-1: Unknown version 0x0000 [ 76.087443][ T5270] r8152-cfgselector 1-1: bad CDC descriptors [ 76.105578][ T5270] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 76.234614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.244600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.254580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.264598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.284652][ T5280] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 76.366341][ T57] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.432713][ T5463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.446938][ T5463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.455030][ T5280] usb 3-1: device descriptor read/64, error -71 [ 76.535350][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 76.557779][ T29] audit: type=1800 audit(1726816669.193:3): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.51" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 76.559142][ T57] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 76.594667][ T5280] usb usb3-port1: attempt power cycle [ 76.674444][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.682514][ T57] usb 5-1: Product: syz [ 76.711248][ T57] usb 5-1: Manufacturer: syz [ 76.724080][ T57] usb 5-1: SerialNumber: syz [ 76.759331][ T57] usb 5-1: config 0 descriptor?? [ 76.991585][ T57] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 77.000244][ T5280] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 77.025196][ T5280] usb 3-1: device descriptor read/8, error -71 [ 77.204834][ T5278] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.297705][ T5280] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 77.368264][ T5280] usb 3-1: device descriptor read/8, error -71 [ 77.407006][ T5278] usb 1-1: Using ep0 maxpacket: 8 [ 77.436651][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.484189][ T5278] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.506211][ T5280] usb usb3-port1: unable to enumerate USB device [ 77.525632][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.536848][ T57] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 77.570626][ T5278] usb 1-1: config 0 descriptor?? [ 77.580290][ T57] usb 5-1: USB disconnect, device number 5 [ 77.805898][ T5278] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.625008][ T5502] fuse: Bad value for 'user_id' [ 78.642191][ T5502] fuse: Bad value for 'user_id' [ 78.876537][ T5293] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 78.994568][ T5278] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 79.034570][ T5293] usb 2-1: Using ep0 maxpacket: 16 [ 79.066577][ T5293] usb 2-1: config 0 has an invalid interface number: 56 but max is 1 [ 79.083481][ T5281] usb 4-1: usb_control_msg returned -71 [ 79.094538][ T5293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.109401][ T5281] usbtmc 4-1:16.0: can't read capabilities [ 79.118581][ T5293] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 79.130116][ T5293] usb 2-1: config 0 has no interface number 0 [ 79.136350][ T5293] usb 2-1: config 0 interface 56 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.187204][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 79.202072][ T5278] usb 3-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 79.221488][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.232999][ T5281] usb 4-1: USB disconnect, device number 2 [ 79.255896][ T5293] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=11.1d [ 79.267481][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.275647][ T5293] usb 2-1: Product: syz [ 79.281071][ T5293] usb 2-1: Manufacturer: syz [ 79.285913][ T5293] usb 2-1: SerialNumber: syz [ 79.292930][ T5278] usb 3-1: Product: syz [ 79.301078][ T5293] usb 2-1: config 0 descriptor?? [ 79.321199][ T5278] usb 3-1: Manufacturer: syz [ 79.327015][ T5293] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.56/input/input7 [ 79.361118][ T5278] usb 3-1: SerialNumber: syz [ 79.421843][ T5278] usb 3-1: config 0 descriptor?? [ 79.448890][ T5278] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 79.651660][ T5505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.676553][ T5505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.730474][ T4666] bcm5974 2-1:0.56: could not read from device [ 79.747044][ T5505] usb 1-1: USB disconnect, device number 4 [ 79.760406][ T5293] usb 2-1: USB disconnect, device number 5 [ 79.773096][ T5505] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 79.799877][ T5510] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.58' resets device [ 79.863718][ T5513] netlink: 68 bytes leftover after parsing attributes in process `syz.3.60'. [ 79.902518][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.938219][ T5514] fuse: Unknown parameter 'é' [ 79.974965][ T5278] gspca_sn9c20x: Write register 1000 failed -110 [ 79.977518][ T5513] Êü: entered promiscuous mode [ 79.981625][ T5278] gspca_sn9c20x: Device initialization failed [ 80.019132][ T5278] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 80.029057][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.048996][ T5517] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 80.111139][ T5505] futex_wake_op: syz.2.57 tries to shift op by -1; fix this program [ 80.131235][ T5279] usb 3-1: USB disconnect, device number 11 [ 80.272409][ T5523] veth1_macvtap: left promiscuous mode [ 80.285859][ T5523] FAULT_INJECTION: forcing a failure. [ 80.285859][ T5523] name failslab, interval 1, probability 0, space 0, times 0 [ 80.298820][ T5523] CPU: 1 UID: 0 PID: 5523 Comm: syz.3.63 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 80.309010][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.319081][ T5523] Call Trace: [ 80.322370][ T5523] [ 80.325311][ T5523] dump_stack_lvl+0x241/0x360 [ 80.330021][ T5523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.335248][ T5523] ? __pfx__printk+0x10/0x10 [ 80.339871][ T5523] should_fail_ex+0x3b0/0x4e0 [ 80.344565][ T5523] ? skb_clone+0x20c/0x390 [ 80.349002][ T5523] should_failslab+0xac/0x100 [ 80.353693][ T5523] ? skb_clone+0x20c/0x390 [ 80.358125][ T5523] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 80.363525][ T5523] skb_clone+0x20c/0x390 [ 80.367777][ T5523] ? dev_queue_xmit_nit+0x220/0xc10 [ 80.372984][ T5523] dev_queue_xmit_nit+0x419/0xc10 [ 80.378022][ T5523] ? dev_queue_xmit_nit+0x2b/0xc10 [ 80.383147][ T5523] ? validate_xmit_skb+0x9f9/0x1120 [ 80.388353][ T5523] dev_hard_start_xmit+0x15f/0x7e0 [ 80.393487][ T5523] ? __pfx_validate_xmit_skb+0x10/0x10 [ 80.398977][ T5523] __dev_queue_xmit+0x1b58/0x3e80 [ 80.404026][ T5523] ? kasan_save_track+0x51/0x80 [ 80.408893][ T5523] ? do_syscall_64+0xf3/0x230 [ 80.413583][ T5523] ? __dev_queue_xmit+0x2da/0x3e80 [ 80.418707][ T5523] ? __pfx___dev_queue_xmit+0x10/0x10 [ 80.424099][ T5523] ? __copy_skb_header+0x437/0x5b0 [ 80.429222][ T5523] ? __asan_memcpy+0x40/0x70 [ 80.433819][ T5523] ? __copy_skb_header+0x437/0x5b0 [ 80.438948][ T5523] ? __skb_clone+0x454/0x6c0 [ 80.443553][ T5523] ? skb_clone+0x240/0x390 [ 80.447985][ T5523] __netlink_deliver_tap+0x54d/0x7c0 [ 80.453294][ T5523] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.458514][ T5523] netlink_deliver_tap+0x19d/0x1b0 [ 80.463646][ T5523] netlink_unicast+0x7c4/0x990 [ 80.468431][ T5523] ? __pfx_netlink_unicast+0x10/0x10 [ 80.473728][ T5523] ? __virt_addr_valid+0x183/0x530 [ 80.478851][ T5523] ? __check_object_size+0x49c/0x900 [ 80.484156][ T5523] netlink_sendmsg+0x8e4/0xcb0 [ 80.488964][ T5523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.494287][ T5523] ? aa_sock_msg_perm+0x91/0x160 [ 80.499266][ T5523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.504661][ T5523] __sock_sendmsg+0x221/0x270 [ 80.509380][ T5523] ____sys_sendmsg+0x52a/0x7e0 [ 80.514177][ T5523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.519504][ T5523] __sys_sendmsg+0x2aa/0x390 [ 80.524126][ T5523] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.529255][ T5523] ? vfs_write+0x7bf/0xc90 [ 80.533715][ T5523] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.540073][ T5523] ? do_syscall_64+0x100/0x230 [ 80.544870][ T5523] ? do_syscall_64+0xb6/0x230 [ 80.549565][ T5523] do_syscall_64+0xf3/0x230 [ 80.554119][ T5523] ? clear_bhb_loop+0x35/0x90 [ 80.558829][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.564750][ T5523] RIP: 0033:0x7f3ef5d7def9 [ 80.569187][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.588817][ T5523] RSP: 002b:00007f3ef5bf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.597241][ T5523] RAX: ffffffffffffffda RBX: 00007f3ef5f35f80 RCX: 00007f3ef5d7def9 [ 80.605230][ T5523] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000009 [ 80.613232][ T5523] RBP: 00007f3ef5bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 80.621213][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.629190][ T5523] R13: 0000000000000000 R14: 00007f3ef5f35f80 R15: 00007f3ef605fa28 [ 80.637179][ T5523] [ 80.652711][ T5293] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.669332][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 80.816280][ T5293] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 80.826815][ T5293] usb 5-1: config 16 has no interfaces? [ 80.853435][ T5293] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 80.893412][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.964808][ T5529] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 81.367890][ T5548] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.447920][ T5539] kvm: pic: level sensitive irq not supported [ 81.451471][ T5539] kvm: pic: non byte read [ 81.497888][ T5539] kvm: pic: level sensitive irq not supported [ 81.497962][ T5539] kvm: pic: non byte read [ 81.511422][ T5539] kvm: pic: level sensitive irq not supported [ 81.511723][ T5539] kvm: pic: non byte read [ 81.529283][ T5539] kvm: pic: level sensitive irq not supported [ 81.529713][ T5539] kvm: pic: non byte read [ 81.542350][ T5539] kvm: pic: level sensitive irq not supported [ 81.542514][ T5539] kvm: pic: non byte read [ 81.555119][ T5539] kvm: pic: level sensitive irq not supported [ 81.555301][ T5539] kvm: pic: non byte read [ 81.569069][ T5539] kvm: pic: level sensitive irq not supported [ 81.569124][ T5539] kvm: pic: non byte read [ 81.715440][ T5280] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 81.739700][ T941] cfg80211: failed to load regulatory.db [ 81.904450][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 81.922074][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.960504][ T5280] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.020130][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.079262][ T5280] usb 3-1: config 0 descriptor?? [ 82.356491][ T5280] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 82.561066][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 82.874665][ T5279] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.901500][ T29] audit: type=1800 audit(1726816675.533:4): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.75" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 83.044464][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 83.060361][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.086060][ T5279] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.120234][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.162619][ T5279] usb 4-1: config 0 descriptor?? [ 83.425201][ T5283] usb 5-1: USB disconnect, device number 6 [ 83.466007][ T5279] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 83.718606][ T5563] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 83.777841][ T5279] IPVS: starting estimator thread 0... [ 83.944786][ T5565] IPVS: using max 24 ests per chain, 57600 per kthread [ 84.438751][ T5280] usb 3-1: USB disconnect, device number 12 [ 84.444685][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 84.470929][ T5280] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 84.642764][ T5571] FAULT_INJECTION: forcing a failure. [ 84.642764][ T5571] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.686992][ T5571] CPU: 0 UID: 0 PID: 5571 Comm: syz.2.79 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 84.697222][ T5571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 84.707294][ T5571] Call Trace: [ 84.710566][ T5571] [ 84.713490][ T5571] dump_stack_lvl+0x241/0x360 [ 84.718186][ T5571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.723410][ T5571] ? __pfx__printk+0x10/0x10 [ 84.728011][ T5571] ? kasan_save_track+0x51/0x80 [ 84.732878][ T5571] ? __pfx_lock_release+0x10/0x10 [ 84.737939][ T5571] ? kfree+0x1a1/0x440 [ 84.742049][ T5571] ? security_file_ioctl+0xc6/0x2a0 [ 84.747261][ T5571] ? do_syscall_64+0xf3/0x230 [ 84.751944][ T5571] should_fail_ex+0x3b0/0x4e0 [ 84.756626][ T5571] _copy_from_user+0x2f/0xe0 [ 84.761213][ T5571] kvm_vm_ioctl+0x338/0xd30 [ 84.765713][ T5571] ? mark_lock+0x9a/0x360 [ 84.770047][ T5571] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 84.775085][ T5571] ? tomoyo_path_number_perm+0x208/0x880 [ 84.780721][ T5571] ? __pfx_lock_release+0x10/0x10 [ 84.785744][ T5571] ? lockdep_hardirqs_on+0x99/0x150 [ 84.790946][ T5571] ? kfree+0x1a1/0x440 [ 84.795049][ T5571] ? tomoyo_path_number_perm+0x68d/0x880 [ 84.800689][ T5571] ? tomoyo_path_number_perm+0x71a/0x880 [ 84.806326][ T5571] ? tomoyo_path_number_perm+0x208/0x880 [ 84.811974][ T5571] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 84.817991][ T5571] ? __fget_files+0x29/0x470 [ 84.823088][ T5571] ? __fget_files+0x3f3/0x470 [ 84.827861][ T5571] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 84.832902][ T5571] __se_sys_ioctl+0xf9/0x170 [ 84.837493][ T5571] do_syscall_64+0xf3/0x230 [ 84.842000][ T5571] ? clear_bhb_loop+0x35/0x90 [ 84.846699][ T5571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.852603][ T5571] RIP: 0033:0x7f4b2857def9 [ 84.857033][ T5571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.876634][ T5571] RSP: 002b:00007f4b293af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.885047][ T5571] RAX: ffffffffffffffda RBX: 00007f4b28735f80 RCX: 00007f4b2857def9 [ 84.893032][ T5571] RDX: 00000000200000c0 RSI: 000000004008ae6a RDI: 0000000000000004 [ 84.900997][ T5571] RBP: 00007f4b293af090 R08: 0000000000000000 R09: 0000000000000000 [ 84.908960][ T5571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.916940][ T5571] R13: 0000000000000000 R14: 00007f4b28735f80 R15: 00007f4b2885fa28 [ 84.924939][ T5571] [ 85.306795][ T5582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.82'. [ 85.370903][ T5586] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 85.582759][ T5589] fuse: Bad value for 'fd' [ 85.602291][ T5277] usb 4-1: USB disconnect, device number 3 [ 85.628609][ T5277] iowarrior 4-1:0.0: I/O-Warror #1 now disconnected [ 85.915881][ T5283] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.108598][ T5602] capability: warning: `syz.3.89' uses deprecated v2 capabilities in a way that may be insecure [ 86.203829][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 86.291032][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.308892][ T5604] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.88'. [ 86.330950][ T5283] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.363021][ T5606] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 86.425409][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.460721][ T5283] usb 2-1: config 0 descriptor?? [ 86.658332][ T5609] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.700386][ T5609] kvm: pic: non byte read [ 86.716341][ T5609] kvm: pic: level sensitive irq not supported [ 86.716435][ T5609] kvm: pic: non byte read [ 86.759521][ T5283] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 86.785165][ T5609] kvm: pic: level sensitive irq not supported [ 86.785265][ T5609] kvm: pic: non byte read [ 86.804208][ T5612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.92'. [ 86.816982][ T5609] kvm: pic: level sensitive irq not supported [ 86.817284][ T5609] kvm: pic: non byte read [ 86.838194][ T5609] kvm: pic: level sensitive irq not supported [ 86.838346][ T5609] kvm: pic: non byte read [ 86.860163][ T5609] kvm: pic: level sensitive irq not supported [ 86.860299][ T5609] kvm: pic: non byte read [ 86.892157][ T5609] kvm: pic: level sensitive irq not supported [ 86.892990][ T5609] kvm: pic: non byte read [ 88.288152][ T5641] fuse: Bad value for 'fd' [ 88.298303][ T5640] netlink: 128 bytes leftover after parsing attributes in process `syz.4.102'. [ 88.341273][ T5640] fuse: Unknown parameter 'fd?01777777777777777777777' [ 88.618099][ T5283] usb 2-1: USB disconnect, device number 6 [ 88.635310][ T5283] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 88.924476][ T941] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 89.048503][ T5654] fuse: Unknown parameter 'groupid' [ 89.116079][ T941] usb 3-1: config 254 has an invalid interface number: 93 but max is 0 [ 89.124597][ T941] usb 3-1: config 254 has no interface number 0 [ 89.145087][ T941] usb 3-1: config 254 interface 93 has no altsetting 0 [ 89.169012][ T941] usb 3-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice= d.38 [ 89.185093][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.206360][ T941] usb 3-1: Product: syz [ 89.210577][ T941] usb 3-1: Manufacturer: syz [ 89.234459][ T941] usb 3-1: SerialNumber: syz [ 89.503514][ T941] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 89.531278][ T941] usb 3-1: USB disconnect, device number 13 [ 89.744451][ T5279] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.908000][ T5279] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 89.920345][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.940211][ T5279] usb 4-1: Product: syz [ 89.946895][ T5279] usb 4-1: Manufacturer: syz [ 89.951538][ T5279] usb 4-1: SerialNumber: syz [ 89.962918][ T5279] r8152-cfgselector 4-1: Unknown version 0x0000 [ 89.972944][ T5279] r8152-cfgselector 4-1: config 0 descriptor?? [ 90.234427][ T5283] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 90.402188][ T5279] r8152-cfgselector 4-1: Unknown version 0x0000 [ 90.416363][ T5283] usb 2-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 90.430747][ T5283] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 90.437641][ T5279] r8152-cfgselector 4-1: bad CDC descriptors [ 90.442346][ T5283] usb 2-1: config 16 has no interfaces? [ 90.454151][ T5283] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 90.468628][ T5277] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 90.470474][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.486361][ T5279] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 90.624633][ T5293] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.646115][ T5277] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 90.656750][ T5277] usb 3-1: config 16 has no interfaces? [ 90.662315][ T5277] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 90.673601][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.733593][ T5667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.748342][ T5667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.784474][ T5293] usb 5-1: Using ep0 maxpacket: 8 [ 90.800317][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.829302][ T5293] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.864550][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.885380][ T5293] usb 5-1: config 0 descriptor?? [ 90.952813][ T5681] veth1_macvtap: left promiscuous mode [ 91.047146][ T5677] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.059716][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 91.106869][ T5293] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 91.137052][ T5677] kvm: pic: level sensitive irq not supported [ 91.137120][ T5677] kvm: pic: non byte read [ 91.159528][ T5677] kvm: pic: level sensitive irq not supported [ 91.160470][ T5677] kvm: pic: non byte read [ 91.173036][ T5683] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.211752][ T5677] kvm: pic: level sensitive irq not supported [ 91.211955][ T5677] kvm: pic: non byte read [ 91.227357][ T5677] kvm: pic: level sensitive irq not supported [ 91.745745][ T5698] fuse: Bad value for 'fd' [ 92.052366][ T5701] bond0: entered promiscuous mode [ 92.078758][ T5701] bond_slave_0: entered promiscuous mode [ 92.102163][ T5701] bond_slave_1: entered promiscuous mode [ 92.148182][ T5701] bond0: left promiscuous mode [ 92.168716][ T5701] bond_slave_0: left promiscuous mode [ 92.190391][ T5701] bond_slave_1: left promiscuous mode [ 93.447945][ T5283] usb 5-1: USB disconnect, device number 7 [ 93.469739][ T5283] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 93.477974][ T57] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.486428][ T5277] usb 2-1: USB disconnect, device number 7 [ 93.558177][ T5707] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 93.604159][ T5293] usb 3-1: USB disconnect, device number 14 [ 93.666481][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 93.730904][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 93.801672][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.811638][ T57] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.823295][ T57] usb 4-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 93.832671][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.849443][ T57] usb 4-1: config 0 descriptor?? [ 93.859309][ T57] rndis_host 4-1:0.0: invalid descriptor buffer length [ 93.866326][ T57] usb 4-1: bad CDC descriptors [ 93.873754][ T57] cdc_acm 4-1:0.0: invalid descriptor buffer length [ 93.979499][ T5719] loop0: detected capacity change from 0 to 128 [ 94.075592][ T5293] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 94.137996][ T5235] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 94.147228][ T5235] Bluetooth: hci4: Injecting HCI hardware error event [ 94.156979][ T5236] Bluetooth: hci4: hardware error 0x00 [ 94.236236][ T5293] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 94.247470][ T5293] usb 3-1: config 0 has no interface number 0 [ 94.262421][ T5293] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.284061][ T5293] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.323467][ T5293] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 94.347237][ T5293] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 94.370018][ T5293] usb 3-1: Manufacturer: syz [ 94.399749][ T5293] usb 3-1: config 0 descriptor?? [ 94.882617][ T5293] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0002/input/input8 [ 94.991710][ T5293] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 95.119351][ T5711] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000000Ec)2”Þ–ó\&uVœÛE«bŠ•–˜øîÀv#…è #Á³þý˶ãÆ]Ù—@' [ 95.156918][ T5293] usb 3-1: USB disconnect, device number 15 [ 95.245595][ T57] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 95.423927][ T57] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 95.448981][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.461158][ T57] usb 2-1: Product: syz [ 95.467756][ T57] usb 2-1: Manufacturer: syz [ 95.478853][ T57] usb 2-1: SerialNumber: syz [ 95.490049][ T57] usb 2-1: config 0 descriptor?? [ 95.908186][ T57] usb 2-1: Firmware version (0.0) predates our first public release. [ 95.918651][ T57] usb 2-1: Please update to version 0.2 or newer [ 95.966554][ T5728] loop0: detected capacity change from 0 to 128 [ 95.980969][ T57] usb 2-1: USB disconnect, device number 8 [ 96.171822][ T5732] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20004 [ 96.214514][ T5236] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 96.313509][ T5278] usb 4-1: USB disconnect, device number 5 [ 96.825723][ T5739] FAULT_INJECTION: forcing a failure. [ 96.825723][ T5739] name failslab, interval 1, probability 0, space 0, times 0 [ 96.880786][ T5739] CPU: 0 UID: 0 PID: 5739 Comm: syz.1.135 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 96.891074][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 96.901131][ T5739] Call Trace: [ 96.904415][ T5739] [ 96.907344][ T5739] dump_stack_lvl+0x241/0x360 [ 96.912042][ T5739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.917266][ T5739] ? __pfx__printk+0x10/0x10 [ 96.921897][ T5739] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 96.927885][ T5739] ? __pfx___might_resched+0x10/0x10 [ 96.933178][ T5739] should_fail_ex+0x3b0/0x4e0 [ 96.934752][ T5278] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.937854][ T5739] should_failslab+0xac/0x100 [ 96.950018][ T5739] ? __alloc_skb+0x1c3/0x440 [ 96.954659][ T5739] kmem_cache_alloc_node_noprof+0x71/0x320 [ 96.960510][ T5739] __alloc_skb+0x1c3/0x440 [ 96.964981][ T5739] ? __pfx___alloc_skb+0x10/0x10 [ 96.969968][ T5739] ? __mutex_trylock_common+0x183/0x2e0 [ 96.975565][ T5739] netlink_dump+0x2cd/0xd80 [ 96.980112][ T5739] ? trace_contention_end+0x3c/0x120 [ 96.985414][ T5739] ? __pfx_netlink_dump+0x10/0x10 [ 96.990482][ T5739] ? __pfx_lock_acquire+0x10/0x10 [ 96.995537][ T5739] __netlink_dump_start+0x5a2/0x790 [ 97.000770][ T5739] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 97.006160][ T5739] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 97.011132][ T5739] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.016608][ T5739] ? __pfx_rtnl_dumpit+0x10/0x10 [ 97.021562][ T5739] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 97.026950][ T5739] ? ref_tracker_free+0x643/0x7e0 [ 97.031998][ T5739] netlink_rcv_skb+0x1e3/0x430 [ 97.036792][ T5739] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.042300][ T5739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.047632][ T5739] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.052849][ T5739] netlink_unicast+0x7f6/0x990 [ 97.057647][ T5739] ? __pfx_netlink_unicast+0x10/0x10 [ 97.062951][ T5739] ? __virt_addr_valid+0x183/0x530 [ 97.068072][ T5739] ? __check_object_size+0x49c/0x900 [ 97.073371][ T5739] netlink_sendmsg+0x8e4/0xcb0 [ 97.078166][ T5739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.083484][ T5739] ? aa_sock_msg_perm+0x91/0x160 [ 97.088442][ T5739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.093749][ T5739] __sock_sendmsg+0x221/0x270 [ 97.098456][ T5739] ____sys_sendmsg+0x52a/0x7e0 [ 97.103295][ T5739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.108610][ T5739] __sys_sendmsg+0x2aa/0x390 [ 97.113211][ T5739] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.118338][ T5739] ? vfs_write+0x7bf/0xc90 [ 97.122786][ T5739] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.129151][ T5739] ? do_syscall_64+0x100/0x230 [ 97.133928][ T5739] ? do_syscall_64+0xb6/0x230 [ 97.138639][ T5739] do_syscall_64+0xf3/0x230 [ 97.143154][ T5739] ? clear_bhb_loop+0x35/0x90 [ 97.147848][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.153755][ T5739] RIP: 0033:0x7fe2a837def9 [ 97.158180][ T5739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.177889][ T5739] RSP: 002b:00007fe2a9202038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.186318][ T5739] RAX: ffffffffffffffda RBX: 00007fe2a8535f80 RCX: 00007fe2a837def9 [ 97.194308][ T5739] RDX: 0000000020008000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 97.202287][ T5739] RBP: 00007fe2a9202090 R08: 0000000000000000 R09: 0000000000000000 [ 97.210260][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.218245][ T5739] R13: 0000000000000000 R14: 00007fe2a8535f80 R15: 00007fe2a865fa28 [ 97.226254][ T5739] [ 97.261847][ T5743] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 97.414479][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 97.425260][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.445087][ T5278] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.466081][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.489782][ T5278] usb 4-1: config 0 descriptor?? [ 97.544442][ T5281] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 97.579004][ T5236] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 97.588290][ T5236] Bluetooth: hci3: Injecting HCI hardware error event [ 97.606782][ T5235] Bluetooth: hci3: hardware error 0x00 [ 97.634516][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.696411][ T5281] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 97.720438][ T5281] usb 3-1: config 16 has no interfaces? [ 97.727408][ T5278] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 97.779134][ T5281] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 97.820243][ T57] usb 5-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 97.839942][ T57] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 97.845941][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.852179][ T57] usb 5-1: config 16 has no interfaces? [ 97.864553][ T57] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 97.880343][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.014658][ T5278] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.157989][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.178224][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.196224][ T5278] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 98.207687][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.221362][ T5278] usb 2-1: Product: syz [ 98.229315][ T5278] usb 2-1: Manufacturer: syz [ 98.235905][ T5757] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 98.238346][ T5278] usb 2-1: SerialNumber: syz [ 98.251228][ T5757] pic_ioport_write: 9 callbacks suppressed [ 98.251243][ T5757] kvm: pic: level sensitive irq not supported [ 98.258950][ T5757] picdev_read: 10 callbacks suppressed [ 98.258967][ T5757] kvm: pic: non byte read [ 98.281689][ T5278] usb 2-1: config 0 descriptor?? [ 98.303375][ T5278] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 98.359628][ T5757] kvm: pic: level sensitive irq not supported [ 98.361967][ T5757] kvm: pic: non byte read [ 98.426968][ T5757] kvm: pic: level sensitive irq not supported [ 98.427545][ T5757] kvm: pic: non byte read [ 98.486028][ T5757] kvm: pic: level sensitive irq not supported [ 98.486397][ T5757] kvm: pic: non byte read [ 98.493529][ T5761] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 98.522881][ T5757] kvm: pic: level sensitive irq not supported [ 98.523583][ T5757] kvm: pic: non byte read [ 98.547162][ T5757] kvm: pic: level sensitive irq not supported [ 98.547246][ T5757] kvm: pic: non byte read [ 98.590140][ T5757] kvm: pic: level sensitive irq not supported [ 98.590219][ T5757] kvm: pic: non byte read [ 98.632630][ T5761] kvm: pic: level sensitive irq not supported [ 98.641665][ T5761] kvm: pic: non byte read [ 98.653647][ T5761] kvm: pic: level sensitive irq not supported [ 98.655138][ T5761] kvm: pic: non byte read [ 98.678598][ T5761] kvm: pic: level sensitive irq not supported [ 98.686240][ T5761] kvm: pic: non byte read [ 98.710573][ T57] usb 2-1: USB disconnect, device number 9 [ 99.224352][ C1] hrtimer: interrupt took 90330 ns [ 99.536153][ T5278] usb 4-1: USB disconnect, device number 6 [ 99.571013][ T5278] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 99.578509][ T5236] Bluetooth: hci0: command tx timeout [ 99.734556][ T5235] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 100.201585][ T5293] usb 3-1: USB disconnect, device number 16 [ 100.378321][ T5783] loop0: detected capacity change from 0 to 128 [ 100.429499][ T5787] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 100.648217][ T5793] @: renamed from vlan0 (while UP) [ 100.921106][ T5293] usb 5-1: USB disconnect, device number 8 [ 101.044673][ T5278] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 101.244449][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 101.279209][ T5278] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 101.301324][ T5278] usb 3-1: config 0 has no interface number 0 [ 101.311482][ T5278] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 101.334476][ T5235] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 101.343959][ T5235] Bluetooth: hci0: Injecting HCI hardware error event [ 101.352349][ T5235] Bluetooth: hci0: hardware error 0x00 [ 101.385580][ T5278] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 101.414670][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.438041][ T5278] usb 3-1: Product: syz [ 101.442355][ T5278] usb 3-1: Manufacturer: syz [ 101.447326][ T5278] usb 3-1: SerialNumber: syz [ 101.462293][ T5278] usb 3-1: config 0 descriptor?? [ 101.484579][ T5293] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 101.671498][ T5293] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 101.712015][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.724435][ T5293] usb 2-1: Product: syz [ 101.731408][ T5293] usb 2-1: Manufacturer: syz [ 101.739648][ T5293] usb 2-1: SerialNumber: syz [ 101.767919][ T5293] usb 2-1: config 0 descriptor?? [ 101.789443][ T5293] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 101.986986][ T5280] usb 2-1: USB disconnect, device number 10 [ 102.093079][ T5793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.149'. [ 102.112506][ C1] Unknown status report in ack skb [ 102.123910][ T5278] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input9 [ 102.309137][ T5236] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 102.328716][ T5830] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 102.409804][ T5280] usb 3-1: USB disconnect, device number 17 [ 102.624809][ T5281] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.758846][ T5850] loop0: detected capacity change from 0 to 128 [ 102.814623][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 102.835758][ T5281] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 102.853567][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.879555][ T5281] usb 4-1: config 0 descriptor?? [ 102.917208][ T5281] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 103.044455][ T5280] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.114977][ T72] usb 4-1: Failed to submit usb control message: -71 [ 103.123160][ T5281] usb 4-1: USB disconnect, device number 7 [ 103.148173][ T72] usb 4-1: unable to send the bmi data to the device: -71 [ 103.184001][ T72] usb 4-1: unable to get target info from device [ 103.207460][ T72] usb 4-1: could not get target info (-71) [ 103.224544][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 103.235230][ T72] usb 4-1: could not probe fw (-71) [ 103.263546][ T5280] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.289327][ T5280] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 103.316067][ T5280] usb 5-1: config 8 has no interface number 0 [ 103.322717][ T5280] usb 5-1: config 8 interface 255 has no altsetting 0 [ 103.356868][ T5280] usb 5-1: string descriptor 0 read error: -22 [ 103.366836][ T5280] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 103.381745][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.426757][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 103.495768][ T5235] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 103.876408][ T5280] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 00:00:00:00:00:00. [ 103.947597][ T5280] usb 5-1: USB disconnect, device number 9 [ 103.954703][ T5293] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 104.154476][ T5293] usb 3-1: Using ep0 maxpacket: 32 [ 104.175082][ T5293] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 104.192666][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.224195][ T5293] usb 3-1: config 0 descriptor?? [ 104.247940][ T5293] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 104.345833][ T5278] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.394403][ T5235] Bluetooth: hci2: command tx timeout [ 104.543537][ T5278] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 104.559630][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.579993][ T5278] usb 4-1: Product: syz [ 104.606326][ T5278] usb 4-1: Manufacturer: syz [ 104.611192][ T5278] usb 4-1: SerialNumber: syz [ 104.641883][ T5278] usb 4-1: config 0 descriptor?? [ 105.061879][ T5890] loop0: detected capacity change from 0 to 128 [ 105.106437][ T5278] usb 4-1: Firmware version (0.0) predates our first public release. [ 105.150297][ T5278] usb 4-1: Please update to version 0.2 or newer [ 105.226415][ T5278] usb 4-1: USB disconnect, device number 8 [ 105.572773][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.595063][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.697614][ T5293] gspca_sunplus: reg_r err -71 [ 105.702559][ T5293] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 105.724125][ T5293] usb 3-1: USB disconnect, device number 18 [ 105.820325][ T5899] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.181'. [ 106.064258][ T5904] loop0: detected capacity change from 0 to 128 [ 106.852330][ T5924] FAULT_INJECTION: forcing a failure. [ 106.852330][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 106.872159][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.2.192 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 106.882434][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 106.892491][ T5924] Call Trace: [ 106.895775][ T5924] [ 106.898700][ T5924] dump_stack_lvl+0x241/0x360 [ 106.903398][ T5924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.908603][ T5924] ? __pfx__printk+0x10/0x10 [ 106.913197][ T5924] ? __kmalloc_noprof+0xb0/0x400 [ 106.918165][ T5924] ? __pfx___might_resched+0x10/0x10 [ 106.923471][ T5924] should_fail_ex+0x3b0/0x4e0 [ 106.928150][ T5924] ? io_alloc_async_data+0x7a/0x120 [ 106.933353][ T5924] should_failslab+0xac/0x100 [ 106.938041][ T5924] ? io_alloc_async_data+0x7a/0x120 [ 106.943242][ T5924] __kmalloc_noprof+0xd8/0x400 [ 106.948004][ T5924] io_alloc_async_data+0x7a/0x120 [ 106.953039][ T5924] io_prep_rw+0x4e8/0x8f0 [ 106.957374][ T5924] io_prep_writev+0xb3/0x360 [ 106.961965][ T5924] ? __pfx_io_prep_writev+0x10/0x10 [ 106.967256][ T5924] ? blk_start_plug_nr_ios+0x7d/0x1b0 [ 106.972645][ T5924] io_submit_sqes+0x9c4/0x1bf0 [ 106.977433][ T5924] __se_sys_io_uring_enter+0x2c3/0x2bf0 [ 106.983003][ T5924] ? __pfx_lock_release+0x10/0x10 [ 106.988124][ T5924] ? vfs_write+0x7bf/0xc90 [ 106.992560][ T5924] ? __mutex_unlock_slowpath+0x21d/0x750 [ 106.998205][ T5924] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 107.004204][ T5924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.010195][ T5924] ? __fget_files+0x3f3/0x470 [ 107.014888][ T5924] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.020881][ T5924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.027218][ T5924] ? do_syscall_64+0x100/0x230 [ 107.031995][ T5924] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 107.037549][ T5924] do_syscall_64+0xf3/0x230 [ 107.042056][ T5924] ? clear_bhb_loop+0x35/0x90 [ 107.046743][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.052642][ T5924] RIP: 0033:0x7f4b2857def9 [ 107.057061][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.076691][ T5924] RSP: 002b:00007f4b293af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 107.085146][ T5924] RAX: ffffffffffffffda RBX: 00007f4b28735f80 RCX: 00007f4b2857def9 [ 107.093117][ T5924] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000007 [ 107.101112][ T5924] RBP: 00007f4b293af090 R08: 0000000000000000 R09: 0000000000000000 [ 107.109080][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.117053][ T5924] R13: 0000000000000000 R14: 00007f4b28735f80 R15: 00007f4b2885fa28 [ 107.125038][ T5924] [ 107.140417][ T5281] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.374035][ T5281] usb 5-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 107.403294][ T5281] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 107.419837][ T5281] usb 5-1: config 16 has no interfaces? [ 107.461476][ T5281] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 107.472692][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.523535][ T5932] loop0: detected capacity change from 0 to 128 [ 107.604679][ T5938] netlink: 892 bytes leftover after parsing attributes in process `syz.0.197'. [ 107.766343][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.778508][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.993674][ T5944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 108.031225][ T5944] pic_ioport_write: 3 callbacks suppressed [ 108.031244][ T5944] kvm: pic: level sensitive irq not supported [ 108.037912][ T5944] picdev_read: 3 callbacks suppressed [ 108.038459][ T5944] kvm: pic: non byte read [ 108.064631][ T5944] kvm: pic: level sensitive irq not supported [ 108.066005][ T5944] kvm: pic: non byte read [ 108.081899][ T5944] kvm: pic: level sensitive irq not supported [ 108.082261][ T5944] kvm: pic: non byte read [ 108.094927][ T5944] kvm: pic: level sensitive irq not supported [ 108.094986][ T5944] kvm: pic: non byte read [ 108.108541][ T5944] kvm: pic: level sensitive irq not supported [ 108.108617][ T5944] kvm: pic: non byte read [ 108.134134][ T5944] kvm: pic: level sensitive irq not supported [ 108.134208][ T5944] kvm: pic: non byte read [ 108.684564][ T5281] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 108.734532][ T5293] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.867238][ T5281] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 108.891907][ T5281] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.904236][ T5293] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.915376][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.928609][ T5293] usb 4-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.943526][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.950770][ T5293] usb 4-1: config 1 interface 0 has no altsetting 0 [ 108.961979][ T5281] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.971875][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.984533][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.995784][ T5293] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.012057][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.022126][ T5293] usb 4-1: SerialNumber: syz [ 109.049125][ T5281] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.069002][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.084616][ T5293] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 109.094094][ T5293] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 109.103868][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.122993][ T5281] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.139563][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.153188][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.166898][ T5281] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.179027][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.191161][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.204100][ T5281] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.216567][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.246183][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.265789][ T5281] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.277394][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.334872][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.362453][ T5281] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.369070][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 109.380281][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.380316][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.383414][ T5281] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 109.428894][ T5281] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 109.440442][ T5281] usb 3-1: Product: syz [ 109.445152][ T5281] usb 3-1: Manufacturer: syz [ 109.450923][ T5281] usb 3-1: SerialNumber: syz [ 109.484717][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 109.486311][ T5281] usb 3-1: config 0 descriptor?? [ 109.532191][ T5281] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 109.565051][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 109.617608][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.660830][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.726154][ T5278] usb 3-1: USB disconnect, device number 19 [ 109.733779][ T5278] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 109.872758][ T5279] usb 4-1: USB disconnect, device number 9 [ 109.889231][ T5962] ip6tnl1: entered promiscuous mode [ 109.898722][ T5962] ip6tnl1: entered allmulticast mode [ 109.970057][ T941] usb 5-1: USB disconnect, device number 11 [ 110.173186][ T5972] loop0: detected capacity change from 0 to 128 [ 110.445778][ T941] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 110.634017][ T941] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 110.649369][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 110.663354][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.681401][ T941] usb 2-1: Product: syz [ 110.695936][ T941] usb 2-1: Manufacturer: syz [ 110.707861][ T29] audit: type=1326 audit(1726816703.343:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.2.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b2857def9 code=0x0 [ 110.729524][ T941] usb 2-1: SerialNumber: syz [ 110.737864][ T941] usb 2-1: config 0 descriptor?? [ 110.781250][ T941] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 110.972395][ T941] usb 2-1: USB disconnect, device number 11 [ 111.484582][ T5281] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 111.676488][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 111.687318][ T5281] usb 4-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 111.705695][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.717275][ T5281] usb 4-1: Product: syz [ 111.724718][ T5281] usb 4-1: Manufacturer: syz [ 111.732845][ T5281] usb 4-1: SerialNumber: syz [ 111.761499][ T5281] usb 4-1: config 0 descriptor?? [ 111.847919][ T5281] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 112.093589][ T6011] FAULT_INJECTION: forcing a failure. [ 112.093589][ T6011] name failslab, interval 1, probability 0, space 0, times 0 [ 112.147622][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.0.221 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 112.157956][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 112.168048][ T6011] Call Trace: [ 112.171354][ T6011] [ 112.174309][ T6011] dump_stack_lvl+0x241/0x360 [ 112.179030][ T6011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.184357][ T6011] ? __pfx__printk+0x10/0x10 [ 112.188982][ T6011] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 112.194475][ T6011] ? __pfx___might_resched+0x10/0x10 [ 112.199809][ T6011] should_fail_ex+0x3b0/0x4e0 [ 112.204530][ T6011] should_failslab+0xac/0x100 [ 112.209255][ T6011] ? snd_mixer_oss_put_volume1_sw+0xfd/0x3e0 [ 112.215283][ T6011] __kmalloc_cache_noprof+0x6c/0x2c0 [ 112.220695][ T6011] snd_mixer_oss_put_volume1_sw+0xfd/0x3e0 [ 112.226560][ T6011] snd_mixer_oss_put_volume1+0x587/0x870 [ 112.232231][ T6011] snd_mixer_oss_ioctl1+0x734/0x19f0 [ 112.237555][ T6011] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 112.243409][ T6011] ? __fget_files+0x29/0x470 [ 112.248035][ T6011] ? __fget_files+0x3f3/0x470 [ 112.252750][ T6011] snd_mixer_oss_ioctl+0x45/0x50 [ 112.257719][ T6011] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 112.263382][ T6011] __se_sys_ioctl+0xf9/0x170 [ 112.268000][ T6011] do_syscall_64+0xf3/0x230 [ 112.272538][ T6011] ? clear_bhb_loop+0x35/0x90 [ 112.277338][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.283268][ T6011] RIP: 0033:0x7fe87517def9 [ 112.287709][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.307433][ T6011] RSP: 002b:00007fe875f99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.315893][ T6011] RAX: ffffffffffffffda RBX: 00007fe875335f80 RCX: 00007fe87517def9 [ 112.323913][ T6011] RDX: 0000000020000040 RSI: 0000000040086603 RDI: 0000000000000003 [ 112.331963][ T6011] RBP: 00007fe875f99090 R08: 0000000000000000 R09: 0000000000000000 [ 112.339998][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.348000][ T6011] R13: 0000000000000000 R14: 00007fe875335f80 R15: 00007fe87545fa28 [ 112.352603][ T5996] syz.4.216 (5996): drop_caches: 2 [ 112.355999][ T6011] [ 112.395035][ T5281] gspca_sonixj: reg_r err -32 [ 112.399825][ T5281] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 112.470122][ T941] usb 4-1: USB disconnect, device number 10 [ 112.660220][ T5997] syz.4.216 (5997): drop_caches: 2 [ 112.847306][ T6023] veth1_macvtap: left promiscuous mode [ 112.892959][ T6022] autofs4:pid:6022:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 112.918920][ T6026] loop0: detected capacity change from 0 to 128 [ 113.154434][ T5281] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.234472][ T5279] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 113.324459][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 113.334113][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.348609][ T5281] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.370481][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.395977][ T5281] usb 5-1: config 0 descriptor?? [ 113.408570][ T5279] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 113.440788][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.512072][ T5279] usb 3-1: Product: syz [ 113.529218][ T5279] usb 3-1: Manufacturer: syz [ 113.539838][ T5279] usb 3-1: SerialNumber: syz [ 113.558045][ T5279] usb 3-1: config 0 descriptor?? [ 113.580200][ T5279] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 113.665678][ T5281] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 113.784173][ T5279] usb 3-1: USB disconnect, device number 20 [ 113.849932][ T5280] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.885809][ T5281] usb 5-1: USB disconnect, device number 12 [ 113.893674][ T5281] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 114.004539][ T5280] usb 2-1: Using ep0 maxpacket: 16 [ 114.015245][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 114.028767][ T5280] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 114.038275][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 114.048432][ T5280] usb 2-1: Manufacturer: syz [ 114.053043][ T5280] usb 2-1: SerialNumber: syz [ 114.059852][ T5280] usb 2-1: config 0 descriptor?? [ 114.069585][ T5280] em28xx 2-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.078987][ T5280] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 114.270763][ T6035] netlink: 'syz.1.230': attribute type 29 has an invalid length. [ 114.283628][ T6035] netlink: 'syz.1.230': attribute type 29 has an invalid length. [ 114.292245][ T6035] netlink: 'syz.1.230': attribute type 29 has an invalid length. [ 114.599144][ T6049] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 114.646135][ T6052] raw_sendmsg: syz.2.237 forgot to set AF_INET. Fix it! [ 114.759887][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.238'. [ 114.853393][ T6059] netlink: 'syz.4.240': attribute type 32 has an invalid length. [ 114.891280][ C0] ------------[ cut here ]------------ [ 114.897146][ C0] WARNING: CPU: 0 PID: 6060 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 114.908104][ C0] Modules linked in: [ 114.912050][ C0] CPU: 0 UID: 0 PID: 6060 Comm: syz.2.239 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 114.922448][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.932812][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 114.939943][ C0] Code: 0f b6 dc 31 ff 89 de e8 95 c6 ed f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 78 c3 ed f5 90 <0f> 0b 90 e9 47 ff ff ff e8 6a c3 ed f5 90 0f 0b 90 e9 99 e0 ff ff [ 114.959620][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00010246 [ 114.965765][ C0] RAX: ffffffff8ba6fba8 RBX: 000000000000bf68 RCX: ffff888020f2bc00 [ 114.973782][ C0] RDX: 0000000000000100 RSI: 000000000000c0d8 RDI: 000000000000bf68 [ 114.981823][ C0] RBP: 1ffff1100b79361e R08: ffffffff8ba6eba2 R09: 1ffff110048f826c [ 114.989873][ C0] R10: dffffc0000000000 R11: ffffed10048f826d R12: 0000000000000000 [ 114.997950][ C0] R13: dffffc0000000000 R14: 0000000034bd2ea6 R15: 000000000000c0d8 [ 115.006001][ C0] FS: 00007f4b27ede6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 115.015012][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.021640][ C0] CR2: 0000000020013000 CR3: 0000000011f1e000 CR4: 00000000003506f0 [ 115.029706][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.037752][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.045905][ C0] Call Trace: [ 115.049212][ C0] [ 115.052089][ C0] ? __warn+0x168/0x4e0 [ 115.056338][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 115.062810][ C0] ? report_bug+0x2b3/0x500 [ 115.067395][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 115.073869][ C0] ? handle_bug+0x60/0x90 [ 115.078286][ C0] ? exc_invalid_op+0x1a/0x50 [ 115.083016][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 115.088118][ C0] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 115.094617][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 115.101093][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 115.107622][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 115.114103][ C0] mptcp_data_ready+0x29c/0xa90 [ 115.119042][ C0] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 115.124918][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 115.130399][ C0] subflow_data_ready+0x34a/0x920 [ 115.135514][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 115.141092][ C0] ? tcp_grow_window+0x421/0xb00 [ 115.146100][ C0] ? tcp_data_ready+0x15b/0x4e0 [ 115.150992][ C0] tcp_data_queue+0x20fd/0x76c0 [ 115.155951][ C0] ? tcp_urg+0x100/0x450 [ 115.157995][ T5280] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 115.160232][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 115.168525][ T5279] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.171505][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 115.171550][ C0] ? ktime_get+0x9b/0xb0 [ 115.188042][ C0] tcp_rcv_established+0xfba/0x2020 [ 115.193270][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 115.198964][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 115.204038][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 115.208716][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 115.213315][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 115.218251][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 115.223147][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 115.228073][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 115.233618][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 115.239326][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 115.244871][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 115.250901][ C0] NF_HOOK+0x3a4/0x450 [ 115.255060][ C0] ? NF_HOOK+0x9a/0x450 [ 115.256938][ T5280] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 115.259232][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 115.259264][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 115.259298][ C0] ? ip_rcv_finish+0x406/0x560 [ 115.259341][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.281760][ T5280] em28xx 2-1:0.0: board has no eeprom [ 115.282801][ C0] NF_HOOK+0x3a4/0x450 [ 115.282830][ C0] ? __lock_acquire+0x1384/0x2050 [ 115.302510][ C0] ? NF_HOOK+0x9a/0x450 [ 115.306696][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 115.311310][ C0] ? ip_rcv_core+0x801/0xd10 [ 115.315939][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.321070][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 115.324447][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 115.325613][ C0] __netif_receive_skb+0x2bf/0x650 [ 115.333370][ T5279] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 115.335776][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 115.335820][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 115.335846][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.335881][ C0] ? __pfx_lock_release+0x10/0x10 [ 115.335914][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 115.335957][ C0] process_backlog+0x662/0x15b0 [ 115.335991][ C0] ? process_backlog+0x33b/0x15b0 [ 115.336030][ C0] ? __pfx_process_backlog+0x10/0x10 [ 115.344904][ T5279] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 115.349227][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.349268][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.349302][ C0] __napi_poll+0xcb/0x490 [ 115.349331][ C0] net_rx_action+0x89b/0x1240 [ 115.349380][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 115.349413][ C0] ? sched_clock+0x4a/0x70 [ 115.349456][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.349499][ C0] handle_softirqs+0x2c5/0x980 [ 115.349534][ C0] ? do_softirq+0x11b/0x1e0 [ 115.349566][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 115.349610][ C0] do_softirq+0x11b/0x1e0 [ 115.349638][ C0] [ 115.349647][ C0] [ 115.349658][ C0] ? __pfx_do_softirq+0x10/0x10 [ 115.349688][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 115.356762][ T5280] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 115.361303][ C0] ? rcu_is_watching+0x15/0xb0 [ 115.361338][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 115.366926][ T5280] em28xx 2-1:0.0: dvb set to bulk mode. [ 115.371677][ C0] ? mptcp_recvmsg+0x2453/0x2dd0 [ 115.371721][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 115.379765][ T5279] usb 5-1: config 8 has no interface number 0 [ 115.381631][ C0] ? __tcp_send_ack+0x17e/0x600 [ 115.381672][ C0] mptcp_recvmsg+0x2453/0x2dd0 [ 115.387715][ T5278] em28xx 2-1:0.0: Binding DVB extension [ 115.397067][ C0] ? inet_recvmsg+0x2b5/0x2d0 [ 115.397140][ C0] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 115.397188][ C0] ? aa_sk_perm+0x96d/0xab0 [ 115.404946][ T5279] usb 5-1: config 8 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.409737][ C0] ? sock_rps_record_flow+0x1a/0x400 [ 115.420435][ T5279] usb 5-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.423925][ C0] ? inet_recvmsg+0xde/0x2d0 [ 115.423985][ C0] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 115.438309][ T5279] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 115.439566][ C0] inet_recvmsg+0x2b5/0x2d0 [ 115.439610][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 115.439642][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 115.444587][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.449445][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 115.455381][ T5279] usb 5-1: Product: syz [ 115.456738][ C0] sock_recvmsg+0x1ae/0x280 [ 115.459804][ T5279] usb 5-1: Manufacturer: syz [ 115.464551][ C0] __sys_recvfrom+0x24a/0x3d0 [ 115.464598][ C0] ? __pfx___sys_recvfrom+0x10/0x10 [ 115.464662][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.470744][ T5279] usb 5-1: SerialNumber: syz [ 115.478250][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.478291][ C0] ? exc_page_fault+0x590/0x8c0 [ 115.661710][ C0] __x64_sys_recvfrom+0xde/0x100 [ 115.666765][ C0] do_syscall_64+0xf3/0x230 [ 115.671335][ C0] ? clear_bhb_loop+0x35/0x90 [ 115.676130][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.682094][ C0] RIP: 0033:0x7f4b2857def9 [ 115.686709][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.700923][ T5278] em28xx 2-1:0.0: Registering input extension [ 115.706364][ C0] RSP: 002b:00007f4b27ede038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 115.706401][ C0] RAX: ffffffffffffffda RBX: 00007f4b28736058 RCX: 00007f4b2857def9 [ 115.706422][ C0] RDX: 0000000000013e58 RSI: 0000000020000180 RDI: 000000000000000a [ 115.706441][ C0] RBP: 00007f4b285f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 115.706458][ C0] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.706476][ C0] R13: 0000000000000001 R14: 00007f4b28736058 R15: 00007f4b2885fa28 [ 115.706518][ C0] [ 115.706538][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.706552][ C0] CPU: 0 UID: 0 PID: 6060 Comm: syz.2.239 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 115.706579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 115.706593][ C0] Call Trace: [ 115.706602][ C0] [ 115.706611][ C0] dump_stack_lvl+0x241/0x360 [ 115.706655][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.706700][ C0] ? __pfx__printk+0x10/0x10 [ 115.706728][ C0] ? _printk+0xd5/0x120 [ 115.706761][ C0] ? __init_begin+0x41000/0x41000 [ 115.706793][ C0] ? vscnprintf+0x5d/0x90 [ 115.706820][ C0] panic+0x349/0x880 [ 115.706854][ C0] ? __warn+0x177/0x4e0 [ 115.706880][ C0] ? __pfx_panic+0x10/0x10 [ 115.706908][ C0] ? show_trace_log_lvl+0x3b2/0x410 [ 115.706964][ C0] __warn+0x34b/0x4e0 [ 115.706987][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 115.707024][ C0] report_bug+0x2b3/0x500 [ 115.707053][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 115.707090][ C0] handle_bug+0x60/0x90 [ 115.707111][ C0] exc_invalid_op+0x1a/0x50 [ 115.707133][ C0] asm_exc_invalid_op+0x1a/0x20 [ 115.707164][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 115.707196][ C0] Code: 0f b6 dc 31 ff 89 de e8 95 c6 ed f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 78 c3 ed f5 90 <0f> 0b 90 e9 47 ff ff ff e8 6a c3 ed f5 90 0f 0b 90 e9 99 e0 ff ff [ 115.707216][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00010246 [ 115.707237][ C0] RAX: ffffffff8ba6fba8 RBX: 000000000000bf68 RCX: ffff888020f2bc00 [ 115.707255][ C0] RDX: 0000000000000100 RSI: 000000000000c0d8 RDI: 000000000000bf68 [ 115.707270][ C0] RBP: 1ffff1100b79361e R08: ffffffff8ba6eba2 R09: 1ffff110048f826c [ 115.707287][ C0] R10: dffffc0000000000 R11: ffffed10048f826d R12: 0000000000000000 [ 115.707304][ C0] R13: dffffc0000000000 R14: 0000000034bd2ea6 R15: 000000000000c0d8 [ 115.707328][ C0] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 115.707358][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 115.707396][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 115.707464][ C0] mptcp_data_ready+0x29c/0xa90 [ 115.707488][ C0] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 115.707528][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 115.707564][ C0] subflow_data_ready+0x34a/0x920 [ 115.707593][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 115.707617][ C0] ? tcp_grow_window+0x421/0xb00 [ 115.707644][ C0] ? tcp_data_ready+0x15b/0x4e0 [ 115.707679][ C0] tcp_data_queue+0x20fd/0x76c0 [ 115.707729][ C0] ? tcp_urg+0x100/0x450 [ 115.707774][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 115.707808][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 115.707844][ C0] ? ktime_get+0x9b/0xb0 [ 115.707873][ C0] tcp_rcv_established+0xfba/0x2020 [ 115.707921][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 115.707951][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 115.707991][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 115.708022][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 115.708094][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 115.708127][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 115.708152][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 115.708176][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 115.708205][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 115.708231][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 115.708261][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 115.708286][ C0] NF_HOOK+0x3a4/0x450 [ 115.708313][ C0] ? NF_HOOK+0x9a/0x450 [ 115.708336][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 115.708362][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 115.708393][ C0] ? ip_rcv_finish+0x406/0x560 [ 115.708419][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.708442][ C0] NF_HOOK+0x3a4/0x450 [ 115.708464][ C0] ? __lock_acquire+0x1384/0x2050 [ 115.708499][ C0] ? NF_HOOK+0x9a/0x450 [ 115.708527][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 115.708548][ C0] ? ip_rcv_core+0x801/0xd10 [ 115.708574][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.708606][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 115.708630][ C0] __netif_receive_skb+0x2bf/0x650 [ 115.708660][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 115.708694][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 115.708718][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.708752][ C0] ? __pfx_lock_release+0x10/0x10 [ 115.708786][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 115.708829][ C0] process_backlog+0x662/0x15b0 [ 115.708863][ C0] ? process_backlog+0x33b/0x15b0 [ 115.708900][ C0] ? __pfx_process_backlog+0x10/0x10 [ 115.708926][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.708962][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.708999][ C0] __napi_poll+0xcb/0x490 [ 115.709029][ C0] net_rx_action+0x89b/0x1240 [ 115.709086][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 115.709119][ C0] ? sched_clock+0x4a/0x70 [ 115.709164][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.709209][ C0] handle_softirqs+0x2c5/0x980 [ 115.709245][ C0] ? do_softirq+0x11b/0x1e0 [ 115.709277][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 115.709318][ C0] do_softirq+0x11b/0x1e0 [ 115.709346][ C0] [ 115.709354][ C0] [ 115.709364][ C0] ? __pfx_do_softirq+0x10/0x10 [ 115.709395][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 115.709432][ C0] ? rcu_is_watching+0x15/0xb0 [ 115.709460][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 115.709491][ C0] ? mptcp_recvmsg+0x2453/0x2dd0 [ 115.709538][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 115.709570][ C0] ? __tcp_send_ack+0x17e/0x600 [ 115.709604][ C0] mptcp_recvmsg+0x2453/0x2dd0 [ 115.709642][ C0] ? inet_recvmsg+0x2b5/0x2d0 [ 115.709687][ C0] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 115.709727][ C0] ? aa_sk_perm+0x96d/0xab0 [ 115.709759][ C0] ? sock_rps_record_flow+0x1a/0x400 [ 115.709785][ C0] ? inet_recvmsg+0xde/0x2d0 [ 115.709813][ C0] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 115.709843][ C0] inet_recvmsg+0x2b5/0x2d0 [ 115.709880][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 115.709907][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 115.709939][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 115.709970][ C0] sock_recvmsg+0x1ae/0x280 [ 115.710001][ C0] __sys_recvfrom+0x24a/0x3d0 [ 115.710035][ C0] ? __pfx___sys_recvfrom+0x10/0x10 [ 115.710092][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.710126][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.710158][ C0] ? exc_page_fault+0x590/0x8c0 [ 115.710188][ C0] __x64_sys_recvfrom+0xde/0x100 [ 115.710223][ C0] do_syscall_64+0xf3/0x230 [ 115.710254][ C0] ? clear_bhb_loop+0x35/0x90 [ 115.710287][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.710315][ C0] RIP: 0033:0x7f4b2857def9 [ 115.710335][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.710353][ C0] RSP: 002b:00007f4b27ede038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 115.710375][ C0] RAX: ffffffffffffffda RBX: 00007f4b28736058 RCX: 00007f4b2857def9 [ 115.710391][ C0] RDX: 0000000000013e58 RSI: 0000000020000180 RDI: 000000000000000a [ 115.710406][ C0] RBP: 00007f4b285f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 115.710420][ C0] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.710434][ C0] R13: 0000000000000001 R14: 00007f4b28736058 R15: 00007f4b2885fa28 [ 115.710484][ C0] [ 115.713060][ C0] Kernel Offset: disabled