last executing test programs: 11.679661155s ago: executing program 1 (id=606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0xfff1, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x4, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}]}, 0x5c}}, 0xfff2) 11.57460395s ago: executing program 0 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000140000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 10.996371207s ago: executing program 1 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x80404531, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000040)={0x20}) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x2}}, 0x10, 0x0}, 0x20000001) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000000c0)=0x200000, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) 9.235923234s ago: executing program 1 (id=614): unshare(0x22020600) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-aLwL\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) tee(r0, r0, 0x1, 0x1) modify_ldt$write2(0x11, 0x0, 0x20) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x11) r3 = socket$key(0xf, 0x3, 0x2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000008c0)={{r3}, 0x44, 0x3, 0x4}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000b79e6908402000d3b3160102030109021b00010000000009046580ca0009050600fb0cabab9c028b67402f708ad00800000000000000"], 0x0) fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 9.051533569s ago: executing program 0 (id=615): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200000, 0x21) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9468, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000240)=""/81) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) r2 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000101020d0000052406000105240000000d240f0100000000000000200006241a000000090581"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x2000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0xa, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.959837099s ago: executing program 0 (id=621): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0xba01}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) (async) r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0)="4d0012286670", 0x0, 0x7, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000069f83a20530a854bdef5010222010902240001000020000904d5d7020103fd000905020200000905820200020000000000"], 0x0) 7.73154227s ago: executing program 1 (id=622): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x1}) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f00000000c0), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xa, 0xe}) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 7.499725468s ago: executing program 4 (id=623): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c001d45e9bd351f16ab000000c6b7d4a4e38bce86000006000000006d1c02677a0ca164164d447175ad2bd3eccd564fa83a4454e069e13a24c1"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x4, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400000000, 0xb, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x3bcc9942, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x7, 0x0, 0x0, 0x2000, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3be5, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc]}) r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc203800"], 0xfebe) r7 = fanotify_init(0x200, 0x0) r8 = dup(r6) fanotify_mark(r7, 0x201, 0x48001003, r8, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.275923126s ago: executing program 2 (id=624): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4100, 0xc8, 0x0, 0x7e}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0xb0}}, 0x40400d0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x8, 0x0, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x0, 0x3, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x301, 0x3, 0x2, 0x6, 0x33, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0x2, 0x81}}}}}}}]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b25090947f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002140), 0x0, 0x12100, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='svcrdma_wc_read\x00', r5, 0x0, 0x8}, 0x18) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mremap(&(0x7f00007f8000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) munlockall() mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/media#\x00'}}]}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000180)={0x1, 0xfffffa70, 0x9, 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.091531768s ago: executing program 4 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000140000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 5.208575943s ago: executing program 0 (id=628): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 5.083908306s ago: executing program 2 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0xf06}}}, 0x108) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x80001) 5.083445843s ago: executing program 3 (id=630): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) listen(r0, 0x0) r4 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x80002011}) shutdown(r0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r5, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)="792259a57e96ed4295d90aa50e9afcd1e1164156cc7b179783a3dceaa00281d38d0bcab1a498ec31fe1e5e79ccf5", 0x2e}], 0x1}}], 0x1, 0x2604002c) 4.009137456s ago: executing program 4 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x875, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0xfffff001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x80000001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x2, 0x200, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x2b7, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8000000, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x10000002, 0x7e222293, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0xc0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2514000000180007800c000300ba0000000000000008000200"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='scalable\x00', 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002141, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4', @ANYRES16, @ANYBLOB, @ANYRESHEX, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) 3.967185903s ago: executing program 0 (id=632): unshare(0x22020600) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-aLwL\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) tee(r0, r0, 0x1, 0x1) modify_ldt$write2(0x11, 0x0, 0x20) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x11) r3 = socket$key(0xf, 0x3, 0x2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000008c0)={{r3}, 0x44, 0x3, 0x4}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000b79e6908402000d3b3160102030109021b00010000000009046580ca0009050600fb0cabab9c028b67402f708ad00800000000000000"], 0x0) fanotify_init(0x200, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3.953495849s ago: executing program 3 (id=633): mkdir(&(0x7f0000000300)='./file0\x00', 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="55c68a16f06fc9c0c5763f4c5e47a757a2ec530127bac0e7df3dff0d7a426ffc9598fe7118c597993f7b77c7ac5b3c31305134444483eab50ebff1316a4c55e9ec5bbbaf103f24f213038a06e15bf80c5337f93361fdf31de8a3d8ca00b1c01738caa8e43386315f9e0c31baeffb7d7815e2aa9bf549c54fbbd544eb2d07176f5fa0e38391db8127e8f8e97e0cd9235c8b1fb11cc83739f97f4d616e46f22dc83cc7c235cec938b1bde7ff7b8ecd18b56867bc215a9042de9756d1831fd1cac5b6d2b66732e1af0a4dcba6c673c38bebf7c597038df02f81730087"]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x7e2150a9d5984583}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}}, 0x24008080) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) creat(&(0x7f0000000040)='./bus\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b00), 0x101, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 3.855706102s ago: executing program 2 (id=634): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/26, 0x8d}], 0x1, 0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x9800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2b, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000680)={{0x2, 0x2, 0x2, 0x0, '\x00', 0x2984}, 0x0, [0x3ff, 0x3a, 0x4, 0x7fffffff, 0x10001, 0x151, 0xb, 0x2, 0x6, 0x0, 0x101, 0xd848, 0x2, 0x9, 0x5, 0x5, 0x2, 0x3, 0x3, 0xffffffffffffffff, 0x8, 0xf4, 0x9, 0xec, 0x5, 0x6, 0xe3, 0x81, 0x2, 0x7f, 0x0, 0x10001, 0x618c579f, 0x6, 0x0, 0x8, 0x4, 0x6c, 0x2, 0x6, 0x32a000000, 0xffffffffffffffff, 0x7, 0x5, 0xfffffffffffffe01, 0xf, 0x3, 0x323b, 0xffffffff00000001, 0xb72, 0x7, 0x8, 0x10, 0xa, 0x7, 0x1, 0xfffffffffffffff9, 0xab41, 0xfffffffffffffffc, 0x80, 0x6, 0x6, 0x4, 0xe49f, 0xffffffffffffffff, 0x9, 0x0, 0x7, 0x5, 0xffffffffffffffff, 0x4192, 0x5, 0x8, 0x78, 0x3, 0x6, 0x10000, 0x0, 0x100, 0xb82, 0x8, 0xffffffffffffffc0, 0x10, 0x9, 0x86, 0x7fffffffffffffff, 0x1, 0x8, 0x8000000000000000, 0x6, 0x4, 0xe, 0x86, 0xa, 0x81, 0x9, 0x1, 0xb, 0x6, 0xc, 0x6, 0xb, 0x228, 0x1, 0x0, 0x8, 0xffffffff, 0x400000000000, 0x7fffffffffffffff, 0x331, 0x532f, 0x2, 0xb, 0xdf, 0x1, 0x3ff, 0x5, 0x3, 0x4, 0x4a, 0x1, 0x5, 0x4, 0x3, 0x2, 0x4, 0xc, 0x6]}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 3.47432651s ago: executing program 4 (id=635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa4000021) read(r0, 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 3.470030287s ago: executing program 3 (id=636): mkdir(&(0x7f0000000300)='./file0\x00', 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="55c68a16f06fc9c0c5763f4c5e47a757a2ec530127bac0e7df3dff0d7a426ffc9598fe7118c597993f7b77c7ac5b3c31305134444483eab50ebff1316a4c55e9ec5bbbaf103f24f213038a06e15bf80c5337f93361fdf31de8a3d8ca00b1c01738caa8e43386315f9e0c31baeffb7d7815e2aa9bf549c54fbbd544eb2d07176f5fa0e38391db8127e8f8e97e0cd9235c8b1fb11cc83739f97f4d616e46f22dc83cc7c235cec938b1bde7ff7b8ecd18b56867bc215a9042de9756d1831fd1cac5b6d2b66732e1af0a4dcba6c673c38bebf7c597038df02f81730087"]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x7e2150a9d5984583}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}}, 0x24008080) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) creat(&(0x7f0000000040)='./bus\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b00), 0x101, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) socket$igmp6(0xa, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 3.41816136s ago: executing program 2 (id=637): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast1, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@multicast2, 0x4e20, 0x2, 0xa, 0x80032d58, 0x12d5c}}, 0x44) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r8}, 0x10) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="080000000000000000a4800f", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380), &(0x7f0000000340)) 3.289542239s ago: executing program 3 (id=638): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="020320000500000000360003400000f1020017000000000002"], 0x28}}, 0x0) 3.067926468s ago: executing program 3 (id=639): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x400}}, 0x4c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x640, 0x12, 0x200, 0x70bd2b, 0x25dfdbfb, {0x26, 0x2, 0x5, 0x53, {0x4e23, 0x4e23, [0x101, 0x80000001, 0xffffffff, 0x10], [0x0, 0x6, 0x0, 0xd35], r1, [0x80000000, 0x6]}, 0x4, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x43, 0x1, "3d2d46af32169facf8d676e9b675943bbb8f63c56acc41e103dc0cd85ebd53ed564d5bea650c9924e15edcedf60d73e219d8c1cb21cd8238fe65f747c9a813"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "a8db42790363a3b783248f7c708246a34a95b2aac313e039bcdf60bee95f559481d768c817b209566e7eacfeb3ded5c0087a1288f8fcae71322a6b3a3aedef4cfa55ee6c4327553ccb150cfe3cb04c4a1ffe5bef499baa4e5678af2cbc11c20b000000f62fb14856"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "64334268382ceca7a6a7b7c62214e0ac2b1e55432bbebaa8981cd85552f21a2a4467dd0c789921dc9110920eb8711d1c10aa2cee912b7dc3756a09723595f8765761c0b4596a6dcb3cf0d96e15bf8cb8ef716fbe09b4f0c0c86835a4f729e9f2179efc463dcfae22e6e8f72f266ca3aa643305471419cfe49321b92fbbf9e66c1e34a6feb97cfeb2b66484b39c77a8ad70b18496a26dc39864135ded7f65280bb4face8a064b03a5baa47490264cd8df0027a52d1e3029e85959997209a3194bdcb7a19586b36c4d9764d6a69c141a7c4ac466c8f13dc89b5dcf9140e52749d250"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "d273a103b6effed672c1841cfa14e4dc0d51b309ab5b2a900571c929d18bbb5aab24e01f3f2fdd40aed0f937e50678252da74948e26058879cc80ef6bdd2690d966f349c2126bf8e50f19ae7411fc114b72ca4fe00e5f71a9830e6c1a1d6f9998635f5fa6b60c2ca5b926b4dcc38e08afd9095057957ff3edb985f2500c22a3c3e50bb02633cbb0188e2349035f8b610223c8a7bf625404bc6146b33b475afc18ffd17aefe3482594293203c4ecb9125da62d15794e6c50d398cfa7920da9a115b79"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "d73eca997b82dcc1ed5c2f38b04bb6af9d4acc688631fa3d024616ad86c956ff04b0e850c676e5905944a5d8b8c075d6e69d17469ec65734106405e3d26b913c3e3bf900ed45ce96658af6c5933260801c150b19cea4d3ce3c62e534e1142442420fc738a87d8a6f3880e4e99951b8d53d5c412b625040b3131df3449dd1cc9baff104da0bc9d0a6bde2b9549b7c150829fb3ff060f14b7d26794e760178db26cbe086d69880b430f227cf"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "8ed4d485f9258730a4485c278d38ab6af9eda350bf7dd3d55a2810545657e545f0bf4008ce1992a232ce98336843"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "e0f37337f9078ae3942cf8b0a453d496b9395c62ca3b3f6c54727dfcabfbb883d4ca5ad9c4ae4887c7149fc3763a11d64a31ffa8d5535f5e1def6114d14f137c9f00ded12300466880afc21d3857e70a42759846bdc858752f6823469722aee80c8af09823c2f26337939df0380983063849735009fe87ece00b3f8143ba3838ffcdbb2895fc583e852e6f1efab05cbe5bead8079d578b86ae6c341f01c2091d9f19dc10e2af3329c41a9eecd39cd1a43e8ca31a5fe670439a5288c9ad173a0545cd59ced9"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "97950a586254db6054d3460ec450e4317427c6b9dafe1e532f79ec2abc7f15d47379efab75bacc13420af74a3614e4a7d6dfd8015fc9e3d0bf4730cf7d2a82db8d4232e331be7979a92df473eaa65e888b1cf1200d764336edf8cfb5966b934d165bd0fc7bae1108ab94c6128442c89c82f7066f098d5b533c335149849e68b576800403892c618fdce8d2ff7aebd9f2553d75a6b39b684ffa18145d3e3a3ca2af40114288821ee5693cb4601d10e36bdbbbd28406e2f936cf8042aed2a390a88a4dab4069323ccf023f43832194843220064b77d3a4ec431cac760f4bfb8452d2"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "8af6fc5e92c74c1d0da316cf38f2ab47094a0ebd324759514ebc1418ca64e5ee6ba178c167176e4a8d1660f0771933fe73db3554f743ce17fd4704fe21bbf981e663d4a41b68dc270d8d41370f3e221ffd850acb85b2c7fbc326b7dbc9e37ca0"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "a7e48a96a9120b5fecf8cb1a365781b2b1b7384eabf9941653ddf7a917853b2731b0a6e115cca9cf37e2a20c22dfa0ccc204a47ad96128e069110df30385ac03d157a26a78ee55b9483c3200e505eb3eb41ecaeaf4e6306e5a646d4d030828b93258f292e369dac161e625fb2c981159aee39cb2580dffe6ac943c9fb80d4ceb3d658c45a1bb8c0ec0c5cbb138c5438eccb046"}]}, 0x640}, 0x1, 0x0, 0x0, 0x1}, 0x48000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x4, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6}}, {0x4}}]}]}, 0x5c}}, 0x0) 3.067373546s ago: executing program 1 (id=640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000181100", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r7, 0x0, 0x0, 0x200000000}) setreuid(0x0, 0xee01) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r7, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000}) close_range(r5, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r9, r8}}, 0x18) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00@\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=0x0, @ANYBLOB="10005a800c0000800500070000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 2.429166133s ago: executing program 4 (id=641): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) dup(r0) keyctl$join(0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000080)={0x0, 0x30}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="7c000000f861479557c996c8d4a58a28ad744ec62fc2b93cd5226605e43a71b1a03f76d1588533ef49a69be8211e56176af9c6ce744bd4a363c89d2056b1cf37e4b878a49d162166449954f22cf1bc3b8d4512d85896c344544fcb154699c40fb0b9fb4a9b903805842be8283cc03162e45b525eb726dffa54067aa25de1ebc873c3a4f5133416821ada03016816762c86970424c14bfcbb63fc4048c7ee4f6f3d58cb441ae59036d232", @ANYRES16=0x0, @ANYBLOB="00002bbd7000ffdbdf25070000000500010000000000080005000000000014000200fe8000000000000000000000000000aa08000500e0000001140006006e657470636930000000000000000000140006006261746164765f736c6176655f3000001400060076657468315f746f5f7465616d000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40081}, 0x4000804) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2000}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/crypto\x00', 0x0, 0x0) 1.089831971s ago: executing program 1 (id=642): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @remote, 0x1}, 0xffffffffffffff60) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$notify(r0, 0x402, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x60, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="3663ff3ac7333d1d", 0x8}, {&(0x7f0000000280)="e02584eeb69ae6b3", 0x8}], 0x2}], 0x1, 0x2004050) io_setup(0xff, &(0x7f0000000380)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r8, 0x0, 0x0, 0x4}, 0x20) io_submit(r7, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000540)="3a3a3b261596279f6723a1792cc4f2c13c8213ffba60044ac773dafe7c491ab3bd2f417b16dd6473fe69ce9b1254556d0b3baf34386027498c718accfaf8e80cc4c00447044cb317ad9736f395b0e2eba32e", 0x52, 0x0, 0x0, 0x2}]) 1.08790977s ago: executing program 3 (id=643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000600)={'#! ', './file0', [{0x20, ')+'}, {0x20, '[k'}, {0x20, 'no&\x80\x85\x88\xc0\xc4\xdbLe\xbaB\xf1\x1c\xff15n\x85\xfe\x19\x17y\xb2\x82\x81AR\x86lo-\xc5hX\xbbt\b\x86x\x97\x7fo\x02\x18\xda\xa1\xb2\xad;\xfc\xd6\xb3V\xbbookie\x83\x9d\"\xf8\xc4\xcd3\xa2\xb7 \xf5Pa0\xc3q~\xf0\xe3\xea8_\xecY\x7f'}, {0x20, 'B-+'}, {0x20, 'hostdata'}, {0x20, '*'}], 0xa, '\vT'}, 0x79) fstat(r2, &(0x7f0000004f80)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @netrom={'nr', 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000100)=0x7cd, &(0x7f0000000180)=0x1) unshare(0x20000400) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{}, {@in6=@loopback, 0x0, 0x33}, @in=@local, {}, {0x400000000000000}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r7, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) 472.070845ms ago: executing program 2 (id=644): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x200000c0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 165.228281ms ago: executing program 4 (id=645): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x468241, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$802154_raw(r4, &(0x7f0000000940)={&(0x7f0000000780)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000880)={&(0x7f00000007c0)="155e9fbb5043c381c0d6326387b9b3b360c1ecfc67d19f25e2f80a735a6fb072892260669d7db67c2e6c5d7ff846359529ace6cf20030928efc7bb812034b3c7abaa16fe75c2e281700c15310e263dbf8c72e3aab461210fa6cfffa42e91475ababa716e4e2f564dcd704fed40cb52d30427cbbfb17313d9a573ec842d1ce32848f0467f8e0e896c4027f3de489ef48cb6d63e1f420eef3bf7d112234967c4dfe84bbf3d", 0xa4}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r6, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000003f00)="11500df908f76b5ddb0a53570797b35a86a4b744", 0x14}], 0x1, &(0x7f00000009c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30, 0x940}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000003800)=[@rights={{0x10}}], 0x10, 0x2004c000}}], 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000140)={0x400, 0x18, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000002000000dbe711186bbcd14408000100647570000c0002800800014000000000020073797a320000000005000740d2000000140000001100010000000000000000000000000a00"/120], 0x78}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}], 0x1, 0x8800) r8 = open(&(0x7f0000000180)='./file0\x00', 0x2c8802, 0xb775770121b53854) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6a0b}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) r11 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) cachestat(r11, 0x0, 0x0, 0x0) r12 = dup2(r1, r0) write$9p(r12, 0x0, 0x0) 131.296137ms ago: executing program 2 (id=646): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}}, &(0x7f0000000080)=0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071107a00000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dae5ec10720c14008d140102030109021b0001400740020904b009017e790950ffa0a4cb72a9dc7ebabb54eac836c107982e2870541dd02bee5cad5acd32816933ddb01e4a4e2dd83d75766b107249dff5f0e6fd095c64ba1364e9ed8397c0c82cddf76060"], 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='efs\x00', 0x4100010, &(0x7f0000000180)='[{\x00') 0s ago: executing program 0 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000064010000000000000000000000711216000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 80.037145][ T5815] cgroup: Unknown subsys name 'net' [ 80.168226][ T5815] cgroup: Unknown subsys name 'cpuset' [ 80.177102][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.822891][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.580486][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.590653][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.596258][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.598271][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.605591][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.614831][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.619256][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.626211][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.633701][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.640460][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.655149][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.665007][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.677064][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.685401][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.700521][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.702140][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.707908][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.734622][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.743254][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.776005][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.796519][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.805085][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.818154][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.826619][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.834445][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.443516][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 85.465189][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 85.592634][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 85.723298][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 85.798441][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 85.811856][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.820462][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.828021][ T5825] bridge_slave_0: entered allmulticast mode [ 85.836573][ T5825] bridge_slave_0: entered promiscuous mode [ 85.900685][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.908376][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.915897][ T5825] bridge_slave_1: entered allmulticast mode [ 85.922952][ T5825] bridge_slave_1: entered promiscuous mode [ 85.942741][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.949933][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.957370][ T5826] bridge_slave_0: entered allmulticast mode [ 85.965239][ T5826] bridge_slave_0: entered promiscuous mode [ 85.973097][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.980799][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.988265][ T5826] bridge_slave_1: entered allmulticast mode [ 85.996518][ T5826] bridge_slave_1: entered promiscuous mode [ 86.088284][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.097734][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.105056][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.112273][ T5827] bridge_slave_0: entered allmulticast mode [ 86.120417][ T5827] bridge_slave_0: entered promiscuous mode [ 86.129072][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.136544][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.143677][ T5827] bridge_slave_1: entered allmulticast mode [ 86.150972][ T5827] bridge_slave_1: entered promiscuous mode [ 86.179386][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.212134][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.259079][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.300235][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.313895][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.368776][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.376390][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.383557][ T5834] bridge_slave_0: entered allmulticast mode [ 86.391112][ T5834] bridge_slave_0: entered promiscuous mode [ 86.401125][ T5826] team0: Port device team_slave_0 added [ 86.436201][ T5825] team0: Port device team_slave_0 added [ 86.442301][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.449519][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.457315][ T5834] bridge_slave_1: entered allmulticast mode [ 86.464363][ T5834] bridge_slave_1: entered promiscuous mode [ 86.473828][ T5826] team0: Port device team_slave_1 added [ 86.505579][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.512729][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.520790][ T5839] bridge_slave_0: entered allmulticast mode [ 86.528255][ T5839] bridge_slave_0: entered promiscuous mode [ 86.537521][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.544850][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.551991][ T5839] bridge_slave_1: entered allmulticast mode [ 86.559741][ T5839] bridge_slave_1: entered promiscuous mode [ 86.569144][ T5825] team0: Port device team_slave_1 added [ 86.632146][ T5827] team0: Port device team_slave_0 added [ 86.641997][ T5827] team0: Port device team_slave_1 added [ 86.692003][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.701906][ T5835] Bluetooth: hci0: command tx timeout [ 86.707110][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.714316][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.740807][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.768651][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.775065][ T5835] Bluetooth: hci2: command tx timeout [ 86.780464][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.807285][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.814256][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.842545][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.854367][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.854907][ T5835] Bluetooth: hci3: command tx timeout [ 86.866906][ T5145] Bluetooth: hci4: command tx timeout [ 86.872554][ T5145] Bluetooth: hci1: command tx timeout [ 86.875990][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.904672][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.944563][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.972987][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.981339][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.008197][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.023062][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.030317][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.056883][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.089617][ T5834] team0: Port device team_slave_0 added [ 87.123931][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.131727][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.158158][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.196038][ T5834] team0: Port device team_slave_1 added [ 87.206839][ T5839] team0: Port device team_slave_0 added [ 87.294926][ T5839] team0: Port device team_slave_1 added [ 87.309937][ T5826] hsr_slave_0: entered promiscuous mode [ 87.316863][ T5826] hsr_slave_1: entered promiscuous mode [ 87.439784][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.447724][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.473844][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.487224][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.494198][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.520197][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.538256][ T5825] hsr_slave_0: entered promiscuous mode [ 87.545299][ T5825] hsr_slave_1: entered promiscuous mode [ 87.551316][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.559183][ T5825] Cannot create hsr debugfs directory [ 87.581680][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.588799][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.615440][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.632194][ T5827] hsr_slave_0: entered promiscuous mode [ 87.639763][ T5827] hsr_slave_1: entered promiscuous mode [ 87.645811][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.653388][ T5827] Cannot create hsr debugfs directory [ 87.689839][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.697222][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.724135][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.854162][ T5834] hsr_slave_0: entered promiscuous mode [ 87.860986][ T5834] hsr_slave_1: entered promiscuous mode [ 87.868283][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.876401][ T5834] Cannot create hsr debugfs directory [ 87.968478][ T5839] hsr_slave_0: entered promiscuous mode [ 87.983251][ T5839] hsr_slave_1: entered promiscuous mode [ 87.989827][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.997712][ T5839] Cannot create hsr debugfs directory [ 88.473295][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.488787][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.511223][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.522250][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.577325][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.595913][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.613409][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.639763][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.749124][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.761967][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.773178][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.780501][ T5835] Bluetooth: hci0: command tx timeout [ 88.809026][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.855164][ T5835] Bluetooth: hci2: command tx timeout [ 88.882001][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.919133][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.932109][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.939869][ T5835] Bluetooth: hci3: command tx timeout [ 88.939908][ T5145] Bluetooth: hci1: command tx timeout [ 88.946253][ T5835] Bluetooth: hci4: command tx timeout [ 88.962692][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.087918][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.105324][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.115860][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.152017][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.163236][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.228412][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.238683][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.276810][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.283997][ T4535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.300876][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.313846][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.361948][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.369104][ T4535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.379867][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.386972][ T4535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.431033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.438256][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.449541][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.480246][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.487365][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.521211][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.528341][ T4535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.547594][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.619262][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.648500][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.655638][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.690053][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.697224][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.822047][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.870529][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.915948][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.962256][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.969504][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.062168][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.069408][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.374177][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.570763][ T5826] veth0_vlan: entered promiscuous mode [ 90.623918][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.639456][ T5826] veth1_vlan: entered promiscuous mode [ 90.679402][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.712876][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.807039][ T5826] veth0_macvtap: entered promiscuous mode [ 90.855211][ T5835] Bluetooth: hci0: command tx timeout [ 90.873443][ T5826] veth1_macvtap: entered promiscuous mode [ 90.929713][ T5825] veth0_vlan: entered promiscuous mode [ 90.935586][ T5835] Bluetooth: hci2: command tx timeout [ 90.973173][ T5825] veth1_vlan: entered promiscuous mode [ 90.999138][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.016983][ T5835] Bluetooth: hci1: command tx timeout [ 91.018779][ T5145] Bluetooth: hci4: command tx timeout [ 91.022422][ T5835] Bluetooth: hci3: command tx timeout [ 91.047212][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.094337][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.139932][ T5827] veth0_vlan: entered promiscuous mode [ 91.167571][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.178622][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.187951][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.197186][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.230968][ T5825] veth0_macvtap: entered promiscuous mode [ 91.244112][ T5827] veth1_vlan: entered promiscuous mode [ 91.269158][ T5825] veth1_macvtap: entered promiscuous mode [ 91.377951][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.396086][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.446134][ T5839] veth0_vlan: entered promiscuous mode [ 91.466014][ T5827] veth0_macvtap: entered promiscuous mode [ 91.480078][ T5834] veth0_vlan: entered promiscuous mode [ 91.488459][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.510781][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.519738][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.529571][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.540235][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.552034][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.592456][ T5827] veth1_macvtap: entered promiscuous mode [ 91.603988][ T5839] veth1_vlan: entered promiscuous mode [ 91.618329][ T5834] veth1_vlan: entered promiscuous mode [ 91.637727][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.653124][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.718735][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.797110][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.822314][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.841714][ T5834] veth0_macvtap: entered promiscuous mode [ 91.867736][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.877684][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.886601][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.896056][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.932452][ T5839] veth0_macvtap: entered promiscuous mode [ 91.941994][ T5834] veth1_macvtap: entered promiscuous mode [ 91.952901][ T4535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.982482][ T5839] veth1_macvtap: entered promiscuous mode [ 91.992994][ T43] cfg80211: failed to load regulatory.db [ 92.003171][ T4535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.150380][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.187947][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.279334][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.310066][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.322927][ T4535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.338186][ T4535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.350532][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.372662][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.394785][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.403586][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.434672][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.470781][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.502772][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.511753][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.520745][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.524506][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.540219][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.568109][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.577616][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.675763][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 92.694783][ T5879] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.700429][ T5882] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 92.720323][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.745252][ T5882] usb 4-1: Product: syz [ 92.749477][ T5882] usb 4-1: Manufacturer: syz [ 92.770903][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.775814][ T5882] usb 4-1: SerialNumber: syz [ 92.805707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.818044][ T5882] usb 4-1: config 0 descriptor?? [ 92.840168][ T5882] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 92.944951][ T5835] Bluetooth: hci0: command tx timeout [ 93.015535][ T5835] Bluetooth: hci2: command tx timeout [ 93.044864][ T5882] gspca_sn9c2028: read1 error -32 [ 93.052018][ T5882] gspca_sn9c2028: read1 error -32 [ 93.064582][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 93.083307][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 93.083542][ T5882] gspca_sn9c2028: read1 error 0 [ 93.100530][ T5835] Bluetooth: hci4: command tx timeout [ 93.106321][ T5835] Bluetooth: hci1: command tx timeout [ 93.111943][ T5835] Bluetooth: hci3: command tx timeout [ 93.138830][ T5882] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 93.157401][ T5929] FAULT_INJECTION: forcing a failure. [ 93.157401][ T5929] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.170663][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.0.1 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 93.170689][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.170700][ T5929] Call Trace: [ 93.170708][ T5929] [ 93.170716][ T5929] dump_stack_lvl+0x189/0x250 [ 93.170748][ T5929] ? __pfx____ratelimit+0x10/0x10 [ 93.170778][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.170806][ T5929] ? __pfx__printk+0x10/0x10 [ 93.170826][ T5929] ? __might_fault+0xb0/0x130 [ 93.170864][ T5929] should_fail_ex+0x414/0x560 [ 93.170901][ T5929] _copy_from_user+0x2d/0xb0 [ 93.170927][ T5929] do_sys_poll+0x242/0x1070 [ 93.170959][ T5929] ? __switch_to+0xd74/0x1600 [ 93.170991][ T5929] ? __pfx_do_sys_poll+0x10/0x10 [ 93.171020][ T5929] ? finish_task_switch+0x18b/0x950 [ 93.171131][ T5929] ? rcu_is_watching+0x15/0xb0 [ 93.171191][ T5929] ? __pfx_timespec64_add_safe+0x10/0x10 [ 93.171215][ T5929] ? __pfx_read_tsc+0x10/0x10 [ 93.171248][ T5929] __se_sys_poll+0x128/0x320 [ 93.171277][ T5929] ? __pfx___se_sys_poll+0x10/0x10 [ 93.171309][ T5929] ? do_syscall_64+0xbe/0x3b0 [ 93.171343][ T5929] do_syscall_64+0xfa/0x3b0 [ 93.171373][ T5929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.171391][ T5929] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 93.171410][ T5929] ? clear_bhb_loop+0x60/0xb0 [ 93.171435][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.171454][ T5929] RIP: 0033:0x7fad3098e969 [ 93.171472][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.171497][ T5929] RSP: 002b:00007fad317b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 93.171519][ T5929] RAX: ffffffffffffffda RBX: 00007fad30bb6160 RCX: 00007fad3098e969 [ 93.171533][ T5929] RDX: 0000000002000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 93.171546][ T5929] RBP: 00007fad317b1090 R08: 0000000000000000 R09: 0000000000000000 [ 93.171558][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.171569][ T5929] R13: 0000000000000000 R14: 00007fad30bb6160 R15: 00007ffcaadf1428 [ 93.171600][ T5929] [ 93.505244][ T5879] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 93.517279][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.525179][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.536099][ T5879] usb 3-1: config 0 descriptor?? [ 93.537717][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.579711][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.598350][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.741005][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.801734][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.845549][ T5882] usb 4-1: USB disconnect, device number 2 [ 94.176940][ T5924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.324931][ T5924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.387272][ T5879] uclogic 0003:28BD:0042.0001: interface is invalid, ignoring [ 94.485973][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 94.520317][ T5946] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 94.590887][ T10] usb 3-1: USB disconnect, device number 2 [ 94.956374][ T5958] Zero length message leads to an empty skb [ 94.985250][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.025233][ T5958] batadv_slave_0: entered promiscuous mode [ 95.422883][ T5966] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11'. [ 96.808203][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.008934][ T5977] Cannot find add_set index 0 as target [ 97.106307][ T5981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.549068][ T5983] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 98.040829][ T5986] overlayfs: failed to resolve './file1/file0': -2 [ 98.110452][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 98.122719][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 98.201821][ T5984] syz.4.17 (5984) used greatest stack depth: 19000 bytes left [ 98.264492][ T5881] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.426877][ T5881] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 98.463752][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.515371][ T5881] usb 4-1: config 0 has no interface number 0 [ 98.538448][ T5881] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 98.548088][ T5996] tipc: Started in network mode [ 98.553353][ T5996] tipc: Node identity , cluster identity 4711 [ 98.565048][ T5881] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.593304][ T5996] tipc: Failed to set node id, please configure manually [ 98.603236][ T5881] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 98.612629][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.621498][ T5881] usb 4-1: Product: syz [ 98.628542][ T5996] tipc: Enabling of bearer rejected, failed to enable media [ 99.143973][ T5881] usb 4-1: Manufacturer: syz [ 99.187735][ T5881] usb 4-1: SerialNumber: syz [ 99.221674][ T5881] usb 4-1: config 0 descriptor?? [ 99.330016][ T6001] netlink: 'syz.4.23': attribute type 6 has an invalid length. [ 99.359922][ T6001] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.23'. [ 99.500971][ T5988] netlink: 'syz.3.19': attribute type 25 has an invalid length. [ 99.554718][ T5988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19'. [ 99.590435][ T6014] FAULT_INJECTION: forcing a failure. [ 99.590435][ T6014] name failslab, interval 1, probability 0, space 0, times 1 [ 99.616279][ T6004] can0: slcan on ttyprintk. [ 99.639344][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz.0.27 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 99.639371][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.639382][ T6014] Call Trace: [ 99.639390][ T6014] [ 99.639399][ T6014] dump_stack_lvl+0x189/0x250 [ 99.639433][ T6014] ? __pfx____ratelimit+0x10/0x10 [ 99.639462][ T6014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.639489][ T6014] ? __pfx__printk+0x10/0x10 [ 99.639512][ T6014] ? __pfx___might_resched+0x10/0x10 [ 99.639540][ T6014] ? fs_reclaim_acquire+0x7d/0x100 [ 99.639576][ T6014] should_fail_ex+0x414/0x560 [ 99.639624][ T6014] ? nf_hook_entries_grow+0x27c/0x710 [ 99.639645][ T6014] should_failslab+0xa8/0x100 [ 99.639673][ T6014] __kvmalloc_node_noprof+0x168/0x600 [ 99.639696][ T6014] ? nf_hook_entries_grow+0x27c/0x710 [ 99.639715][ T6014] ? __pfx___mutex_lock+0x10/0x10 [ 99.639747][ T6014] nf_hook_entries_grow+0x27c/0x710 [ 99.639787][ T6014] __nf_register_net_hook+0x2c9/0x930 [ 99.639822][ T6014] nf_register_net_hook+0xb2/0x190 [ 99.639846][ T6014] nf_register_net_hooks+0x44/0x1b0 [ 99.639872][ T6014] nf_defrag_ipv4_enable+0x87/0x120 [ 99.639906][ T6014] nf_ct_netns_do_get+0x18c/0x5a0 [ 99.639932][ T6014] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 99.639952][ T6014] ? rcu_is_watching+0x15/0xb0 [ 99.639997][ T6014] connbytes_mt_check+0xdb/0x2a0 [ 99.640026][ T6014] xt_check_match+0x3d1/0xab0 [ 99.640051][ T6014] ? __pfx___mutex_lock+0x10/0x10 [ 99.640085][ T6014] ? __pfx_xt_check_match+0x10/0x10 [ 99.640113][ T6014] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 99.640152][ T6014] ? xt_find_match+0x1f7/0x250 [ 99.640186][ T6014] translate_table+0x150b/0x2000 [ 99.640236][ T6014] ? __pfx_translate_table+0x10/0x10 [ 99.640261][ T6014] ? __might_fault+0xb0/0x130 [ 99.640307][ T6014] ? _copy_from_user+0x94/0xb0 [ 99.640340][ T6014] do_ipt_set_ctl+0x967/0xcd0 [ 99.640370][ T6014] ? rcu_is_watching+0x15/0xb0 [ 99.640398][ T6014] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 99.640445][ T6014] ? __pfx___mutex_lock+0x10/0x10 [ 99.640475][ T6014] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.640529][ T6014] nf_setsockopt+0x26c/0x290 [ 99.640556][ T6014] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 99.640580][ T6014] do_sock_setsockopt+0x257/0x3e0 [ 99.640607][ T6014] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 99.640645][ T6014] ? __fget_files+0x2a/0x420 [ 99.640684][ T6014] __x64_sys_setsockopt+0x18b/0x220 [ 99.640715][ T6014] do_syscall_64+0xfa/0x3b0 [ 99.640743][ T6014] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.640769][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.640787][ T6014] ? clear_bhb_loop+0x60/0xb0 [ 99.640812][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.640830][ T6014] RIP: 0033:0x7fad3098e969 [ 99.640849][ T6014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.640864][ T6014] RSP: 002b:00007fad317f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.640884][ T6014] RAX: ffffffffffffffda RBX: 00007fad30bb5fa0 RCX: 00007fad3098e969 [ 99.640898][ T6014] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 99.640909][ T6014] RBP: 00007fad317f3090 R08: 0000000000000330 R09: 0000000000000000 [ 99.640922][ T6014] R10: 0000200000000cc0 R11: 0000000000000246 R12: 0000000000000001 [ 99.640934][ T6014] R13: 0000000000000000 R14: 00007fad30bb5fa0 R15: 00007ffcaadf1428 [ 99.640970][ T6014] [ 99.641086][ T6014] xt_connbytes: cannot load conntrack support for proto=2 [ 100.008630][ T5882] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.215719][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 100.329997][ T6018] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 100.354645][ T5882] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 100.375168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.442528][ T6018] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19'. [ 100.455750][ T5882] usb 2-1: config 1 interface 0 has no altsetting 0 [ 100.476569][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.509443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.535826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 100.714233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.919172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.958742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 101.021528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.245052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.255077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.315828][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.327329][ T5882] usb 2-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.40 [ 101.480743][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 101.604973][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.613670][ T5882] usb 2-1: Product: syz [ 101.618605][ T5882] usb 2-1: Manufacturer: â ‰ [ 101.623238][ T5882] usb 2-1: SerialNumber: syz [ 101.664873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.677114][ T5883] usb 4-1: USB disconnect, device number 3 [ 101.789000][ T5995] can0 (unregistered): slcan off ttyprintk. [ 102.831103][ T5882] usbhid 2-1:1.0: can't add hid device: -71 [ 102.868601][ T5882] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 102.880200][ T6035] syz.2.31 uses obsolete (PF_INET,SOCK_PACKET) [ 102.911060][ T5882] usb 2-1: USB disconnect, device number 2 [ 103.094073][ T6047] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.857735][ T6067] evm: overlay not supported [ 105.475701][ T6069] ======================================================= [ 105.475701][ T6069] WARNING: The mand mount option has been deprecated and [ 105.475701][ T6069] and is ignored by this kernel. Remove the mand [ 105.475701][ T6069] option from the mount to silence this warning. [ 105.475701][ T6069] ======================================================= [ 105.542487][ T6069] fuse: Unknown parameter '00000000000000000004' [ 105.716126][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.765458][ T6074] batadv_slave_0: entered promiscuous mode [ 105.799802][ T6076] netlink: 'syz.2.42': attribute type 13 has an invalid length. [ 106.575623][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 106.750700][ T1107] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:01 with invalid nss 2 [ 108.000760][ T6109] mmap: syz.1.47 (6109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.247883][ T6112] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 108.313873][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 109.147529][ T30] audit: type=1400 audit(1749003520.195:2): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=6124 comm="syz.2.55" path="socket:[8555]" dev="sockfs" ino=8555 [ 109.819282][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.885198][ T6142] batadv_slave_0: entered promiscuous mode [ 110.165120][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 110.554370][ T6154] program syz.2.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.984680][ T5931] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.189600][ T5931] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 111.214751][ T5931] usb 3-1: config 0 has no interface number 0 [ 111.223780][ T6167] process 'syz.1.66' launched './file0' with NULL argv: empty string added [ 111.231430][ T5931] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.248490][ T5931] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.281214][ T5931] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 111.300834][ T5931] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 111.311033][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.493790][ T6170] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 111.592354][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 112.298710][ T5931] usb 3-1: Product: syz [ 112.302949][ T5931] usb 3-1: Manufacturer: syz [ 112.352404][ T5931] usb 3-1: SerialNumber: syz [ 112.775865][ T5931] usb 3-1: config 0 descriptor?? [ 112.831440][ T6155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.195128][ T6178] syz.0.69: attempt to access beyond end of device [ 113.195128][ T6178] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 113.240906][ T6178] syz.0.69: attempt to access beyond end of device [ 113.240906][ T6178] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 113.269890][ T6178] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 113.288649][ T6178] syz.0.69: attempt to access beyond end of device [ 113.288649][ T6178] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 113.313349][ T6178] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 113.333128][ T6178] syz.0.69: attempt to access beyond end of device [ 113.333128][ T6178] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 113.392030][ T5931] usb 3-1: probing VID:PID(2201:012C) [ 113.522467][ T6187] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 113.530374][ T6187] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 113.538072][ T6187] netlink: 'syz.0.69': attribute type 2 has an invalid length. [ 113.545823][ T6187] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 113.553452][ T6187] netlink: 'syz.0.69': attribute type 2 has an invalid length. [ 113.561140][ T6187] netlink: 'syz.0.69': attribute type 2 has an invalid length. [ 113.757723][ T6178] syz.0.69: attempt to access beyond end of device [ 113.757723][ T6178] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 113.791324][ T5931] usb 3-1: vub300 testing BULK OUT EndPoint(0) 02 [ 114.280101][ T5931] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 114.285030][ T6178] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 114.342564][ T5931] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 114.392186][ T6178] syz.0.69: attempt to access beyond end of device [ 114.392186][ T6178] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 114.400609][ T5931] vub300 3-1:0.239: probe with driver vub300 failed with error -22 [ 114.469004][ T6178] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 114.502519][ T6178] syz.0.69: attempt to access beyond end of device [ 114.502519][ T6178] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 114.526776][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.568366][ T6191] netlink: 76 bytes leftover after parsing attributes in process `syz.1.72'. [ 114.601982][ T5931] usb 3-1: USB disconnect, device number 3 [ 114.616671][ T6178] syz.0.69: attempt to access beyond end of device [ 114.616671][ T6178] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 114.704661][ T6178] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 114.718087][ T6178] syz.0.69: attempt to access beyond end of device [ 114.718087][ T6178] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 114.734242][ T6178] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 114.734629][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 115.266354][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.278113][ T6178] syz.0.69: attempt to access beyond end of device [ 115.278113][ T6178] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 115.311231][ T6178] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 115.321058][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.324342][ T6178] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 115.371091][ T5882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 231 [ 115.399046][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.400481][ T6178] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 115.451387][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 115.475482][ T5882] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 115.501763][ T5882] usb 1-1: Manufacturer: syz [ 115.589440][ T5882] usb 1-1: config 0 descriptor?? [ 115.874558][ T5883] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.991528][ T6214] netlink: 212 bytes leftover after parsing attributes in process `syz.1.77'. [ 116.048098][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 116.065588][ T5882] rc_core: IR keymap rc-hauppauge not found [ 116.071544][ T5882] Registered IR keymap rc-empty [ 116.105384][ T5883] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 116.115613][ T5883] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 116.127737][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.154310][ T5883] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 116.174624][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.210008][ T5883] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 116.226301][ T5882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 116.257607][ T5883] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 116.269911][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.281965][ T5882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 116.305665][ T5883] usb 3-1: Product: syz [ 116.309879][ T5883] usb 3-1: Manufacturer: syz [ 116.348493][ T5883] usb 3-1: SerialNumber: syz [ 116.353232][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.394328][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.435112][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.448422][ T5883] hso 3-1:6.0: Can't find BULK IN endpoint [ 116.458512][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.508767][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.570231][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.660206][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.696108][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.784709][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 116.943057][ T5882] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 117.244758][ T5882] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 117.276898][ T5882] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.356996][ T5883] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 118.395239][ T5931] usb 3-1: USB disconnect, device number 4 [ 118.481978][ T5882] usb 1-1: USB disconnect, device number 2 [ 118.786804][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.801607][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 118.935483][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8199, setting to 64 [ 119.793041][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.913790][ T5883] usb 5-1: string descriptor 0 read error: -71 [ 120.053989][ T5883] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 120.063199][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.096169][ T5883] usb 5-1: config 0 descriptor?? [ 120.116232][ T5883] usb 5-1: can't set config #0, error -71 [ 120.131600][ T5883] usb 5-1: USB disconnect, device number 2 [ 120.744390][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 120.974757][ T6255] warning: `syz.0.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.517725][ T5883] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 121.715005][ T5883] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 121.752127][ T5883] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 121.770535][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.798743][ T6267] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 121.821103][ T5883] usb 3-1: Product: syz [ 121.832071][ T5883] usb 3-1: Manufacturer: syz [ 121.839934][ T5883] usb 3-1: SerialNumber: syz [ 121.859642][ T5883] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 123.181924][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.197651][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.277973][ T6258] ip6erspan0: entered promiscuous mode [ 125.348191][ T5883] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 125.370138][ T6289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.532951][ T5883] usb 3-1: USB disconnect, device number 5 [ 125.921411][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.929677][ T6304] batadv_slave_0: entered promiscuous mode [ 131.950458][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 131.989432][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.034245][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.075168][ T6356] netlink: 'syz.0.115': attribute type 10 has an invalid length. [ 132.095643][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.106361][ T6356] netlink: 156 bytes leftover after parsing attributes in process `syz.0.115'. [ 132.138593][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.960246][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.974043][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.337498][ T6372] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 133.337523][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.118'. [ 133.337724][ T6372] dummy0: entered promiscuous mode [ 133.339539][ T6372] bridge0: port 3(dummy0) entered blocking state [ 133.339796][ T6372] bridge0: port 3(dummy0) entered disabled state [ 133.339948][ T6372] dummy0: entered allmulticast mode [ 133.377801][ T6372] bridge0: port 3(dummy0) entered blocking state [ 133.377960][ T6372] bridge0: port 3(dummy0) entered forwarding state [ 133.847922][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.946527][ T30] audit: type=1326 audit(1749003545.035:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.946835][ T30] audit: type=1326 audit(1749003545.035:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.946897][ T6386] syz.1.123 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.947037][ T30] audit: type=1326 audit(1749003545.035:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.947369][ T30] audit: type=1326 audit(1749003545.035:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.947622][ T30] audit: type=1326 audit(1749003545.035:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.948012][ T30] audit: type=1326 audit(1749003545.035:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.948186][ T30] audit: type=1326 audit(1749003545.035:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.948400][ T30] audit: type=1326 audit(1749003545.035:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.948632][ T30] audit: type=1326 audit(1749003545.035:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 133.949108][ T30] audit: type=1326 audit(1749003545.035:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.1.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 134.004646][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 134.100650][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.187416][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.231799][ T5879] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 134.234307][ T5879] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 134.234334][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.234354][ T5879] usb 5-1: Product: syz [ 134.234369][ T5879] usb 5-1: Manufacturer: syz [ 134.234452][ T5879] usb 5-1: SerialNumber: syz [ 134.477487][ T5879] usb 5-1: USB disconnect, device number 3 [ 134.694561][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.902384][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'. [ 134.962609][ T6400] netlink: 52 bytes leftover after parsing attributes in process `syz.0.127'. [ 135.035331][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 135.045374][ T10] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 135.077247][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 135.077280][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.077302][ T10] usb 2-1: Product: syz [ 135.077319][ T10] usb 2-1: Manufacturer: syz [ 135.081786][ T10] usb 2-1: config 0 descriptor?? [ 135.103707][ T10] gspca_main: 2770:9120 too many config [ 135.492744][ T43] usb 2-1: USB disconnect, device number 3 [ 135.913193][ T6409] PKCS7: Unknown OID: [4] 0.38.35.34.956032.117(bad) [ 135.931777][ T6409] PKCS7: Only support pkcs7_signedData type [ 135.953280][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 136.423553][ T6416] bio_check_eod: 2 callbacks suppressed [ 136.423572][ T6416] syz.0.129: attempt to access beyond end of device [ 136.423572][ T6416] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 136.442168][ T6416] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 140.864609][ T6448] input: syz0 as /devices/virtual/input/input7 [ 141.185388][ T6452] 9pnet_fd: Insufficient options for proto=fd [ 146.167737][ T6490] sctp: failed to load transform for md5: -2 [ 150.446617][ T6549] overlayfs: failed to clone upperpath [ 151.207664][ T6552] fuse: Unknown parameter 'fd00000000000000000004' [ 151.442259][ T6554] fuse: Bad value for 'fd' [ 152.500676][ T6563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.550186][ T6564] can0: slcan on ttyS3. [ 152.624735][ T6564] can0 (unregistered): slcan off ttyS3. [ 152.630766][ T6564] Falling back ldisc for ttyS3. [ 154.374985][ T6592] Bluetooth: MGMT ver 1.23 [ 155.874507][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.063312][ T5913] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 156.064609][ T5878] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.094505][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.132681][ T5913] usb 4-1: Product: syz [ 156.144618][ T5913] usb 4-1: Manufacturer: syz [ 156.163009][ T5913] usb 4-1: SerialNumber: syz [ 156.185189][ T5913] usb 4-1: config 0 descriptor?? [ 156.209862][ T5913] gspca_main: touptek-2.14.0 probing 0547:6801 [ 156.495295][ T6605] binder_alloc: 6603: binder_alloc_buf, no vma [ 156.516106][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 156.529536][ T5878] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.541603][ T6605] binder: 6603:6605 ioctl c0306201 200000000280 returned -14 [ 156.568633][ T5145] Bluetooth: Wrong link type (-57) [ 156.570903][ T5883] usb 4-1: USB disconnect, device number 4 [ 156.583229][ T5878] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.673959][ T5878] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 156.699441][ T5878] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 156.736709][ T5878] usb 5-1: Product: syz [ 156.740940][ T5878] usb 5-1: Manufacturer: syz [ 156.769733][ T5878] hub 5-1:4.0: USB hub found [ 156.969101][ T5878] hub 5-1:4.0: 2 ports detected [ 157.294849][ T6617] block nbd4: NBD_DISCONNECT [ 157.359107][ T6617] block nbd4: Send disconnect failed -4 [ 157.543509][ T5878] hub 5-1:4.0: set hub depth failed [ 157.557991][ T6657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 157.580094][ T6617] block nbd4: Disconnected due to user request. [ 157.591789][ T6617] block nbd4: shutting down sockets [ 157.651060][ T5878] usb 5-1: USB disconnect, device number 4 [ 157.732275][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 157.788713][ T6664] nbd: couldn't find device at index 131080 [ 157.896267][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.124666][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 158.221226][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.316773][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.414681][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.493367][ T43] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 158.554215][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.605830][ T43] usb 4-1: config 0 descriptor?? [ 159.472690][ T6690] capability: warning: `syz.4.192' uses deprecated v2 capabilities in a way that may be insecure [ 159.647596][ T6688] netlink: 104 bytes leftover after parsing attributes in process `syz.1.193'. [ 159.962452][ T43] hid (null): invalid report_count 40908 [ 159.971344][ T43] hid (null): global environment stack underflow [ 159.977994][ T43] hid (null): report_id 0 is invalid [ 159.986560][ T43] hid (null): unknown global tag 0xc [ 160.000281][ T43] hid (null): unknown global tag 0xc [ 160.114307][ T43] usb 4-1: USB disconnect, device number 5 [ 161.753745][ T6730] tipc: Enabling of bearer rejected, failed to enable media [ 162.048411][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.126316][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 162.235015][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 162.245950][ T5913] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 162.259743][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.314709][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 162.352963][ T5882] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 162.371363][ T5882] usb 1-1: config 0 has no interface number 0 [ 162.391830][ T5913] usb 4-1: Product: syz [ 162.398105][ T5913] usb 4-1: Manufacturer: syz [ 162.402743][ T5913] usb 4-1: SerialNumber: syz [ 162.411930][ T5913] usb 4-1: config 0 descriptor?? [ 162.414608][ T5882] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.423364][ T5913] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 162.479689][ T5882] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 162.521383][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 162.561196][ T5882] usb 1-1: Product: syz [ 162.567829][ T5913] IPVS: starting estimator thread 0... [ 162.576844][ T6748] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 162.589266][ T5882] usb 1-1: SerialNumber: syz [ 162.621537][ T5882] usb 1-1: config 0 descriptor?? [ 162.651502][ T5882] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 162.659504][ T6749] IPVS: using max 24 ests per chain, 57600 per kthread [ 162.797023][ T5882] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9 [ 163.301008][ T5878] usb 4-1: USB disconnect, device number 6 [ 163.379544][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 163.383228][ T5913] usb 1-1: USB disconnect, device number 3 [ 163.386593][ C0] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 163.468824][ T5913] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 163.521857][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 165.588224][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 166.559588][ T6799] tc_dump_action: action bad kind [ 166.654564][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 167.234669][ T5883] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.416619][ T5883] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 167.437417][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.447562][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 167.484549][ T5883] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 167.514180][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.595269][ T5883] usb 5-1: config 0 descriptor?? [ 167.620324][ T5883] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 167.676421][ T6823] input: syz1 as /devices/virtual/input/input10 [ 167.724125][ T6823] capability: warning: `syz.1.221' uses 32-bit capabilities (legacy support in use) [ 168.212807][ T6841] bridge0: entered allmulticast mode [ 168.922046][ T6855] loop7: detected capacity change from 0 to 16384 [ 169.223636][ T5883] usb 5-1: USB disconnect, device number 5 [ 169.689151][ T6854] sctp: [Deprecated]: syz.3.226 (pid 6854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.689151][ T6854] Use struct sctp_sack_info instead [ 169.917160][ T6861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.980258][ T6854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.586851][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.449685][ T5881] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 171.458977][ T5883] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.494842][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.526967][ T5881] usb 2-1: config 0 descriptor?? [ 171.549380][ T5913] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.648677][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 171.673419][ T5883] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 171.899152][ T5878] IPVS: starting estimator thread 0... [ 171.904828][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 171.915843][ T5883] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 171.926055][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 171.935747][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.961406][ T5883] usb 5-1: config 0 descriptor?? [ 171.968166][ T5913] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 171.981374][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.993420][ T5913] usb 1-1: Product: syz [ 171.997952][ T5913] usb 1-1: Manufacturer: syz [ 172.002930][ T5913] usb 1-1: SerialNumber: syz [ 172.014250][ T5913] usb 1-1: config 0 descriptor?? [ 172.022138][ T6881] IPVS: using max 26 ests per chain, 62400 per kthread [ 172.024186][ T5913] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 004 [ 172.175320][ T5881] usb 2-1: Cannot set MAC address [ 172.195659][ T5883] hdpvr 5-1:0.0: firmware version 0x69 dated Ì [ 172.229537][ T5881] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 172.892345][ T5883] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 172.927140][ T5881] usb 2-1: USB disconnect, device number 4 [ 173.161153][ T5913] (null): failure reading functionality [ 173.184012][ T5913] i2c i2c-1: failure reading functionality [ 173.216986][ T5913] i2c i2c-1: connected i2c-tiny-usb device [ 173.236893][ T6887] netlink: 324 bytes leftover after parsing attributes in process `syz.3.238'. [ 173.247874][ T5913] usb 1-1: USB disconnect, device number 4 [ 173.377985][ T5883] hdpvr 5-1:0.0: Could not setup controls [ 173.422672][ T5883] hdpvr 5-1:0.0: registering videodev failed [ 173.481509][ T5883] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 173.985380][ T5883] usb 5-1: USB disconnect, device number 6 [ 174.097138][ T6894] dlm: no local IP address has been set [ 174.103064][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.113216][ T6894] dlm: cannot start dlm midcomms -107 [ 174.301285][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 174.544937][ T6907] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 174.551695][ T6907] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 174.583990][ T6907] vhci_hcd vhci_hcd.0: Device attached [ 174.810514][ T6908] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 175.591909][ T5913] vhci_hcd: vhci_device speed not set [ 175.600710][ T6824] vhci_hcd: stop threads [ 175.613640][ T6824] vhci_hcd: release socket [ 175.634735][ T6824] vhci_hcd: disconnect device [ 175.920891][ T5913] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 175.935957][ T5913] usb 41-1: enqueue for inactive port 0 [ 176.014518][ T5913] vhci_hcd: vhci_device speed not set [ 176.376050][ T5879] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.496416][ T6949] kvm: pic: non byte write [ 176.756150][ T5879] usb 5-1: no configurations [ 176.760857][ T5879] usb 5-1: can't read configurations, error -22 [ 176.895073][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.800547][ T5879] usb 5-1: no configurations [ 177.805422][ T5879] usb 5-1: can't read configurations, error -22 [ 177.812373][ T5879] usb usb5-port1: attempt power cycle [ 178.454601][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 179.254332][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 179.304842][ T5913] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.273920][ T5879] usb 5-1: device descriptor read/8, error -71 [ 180.569451][ T5913] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 180.590292][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.617307][ T5913] usb 2-1: Product: syz [ 180.630218][ T5913] usb 2-1: Manufacturer: syz [ 180.681384][ T5913] usb 2-1: SerialNumber: syz [ 180.732463][ T5913] r8152-cfgselector 2-1: Unknown version 0x0000 [ 180.752487][ T5913] r8152-cfgselector 2-1: config 0 descriptor?? [ 181.512234][ T5913] r8152-cfgselector 2-1: Unknown version 0x0000 [ 181.528124][ T5913] r8152-cfgselector 2-1: bad CDC descriptors [ 181.541965][ T5913] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 184.616084][ T5145] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 184.624775][ T5145] Bluetooth: hci0: Injecting HCI hardware error event [ 184.632910][ T5145] Bluetooth: hci0: hardware error 0x00 [ 185.275304][ T5913] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 185.674606][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 185.718590][ T5913] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 185.751454][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.774659][ T5913] usb 1-1: config 0 has no interface number 0 [ 185.780810][ T5913] usb 1-1: too many endpoints for config 0 interface 101 altsetting 128: 202, using maximum allowed: 30 [ 185.824689][ T5913] usb 1-1: config 0 interface 101 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 185.854467][ T5913] usb 1-1: config 0 interface 101 has no altsetting 0 [ 185.875278][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 185.899032][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.914604][ T5913] usb 1-1: Product: syz [ 185.922332][ T5913] usb 1-1: Manufacturer: syz [ 185.932897][ T5913] usb 1-1: SerialNumber: syz [ 185.961080][ T5913] usb 1-1: config 0 descriptor?? [ 186.694711][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.814580][ T5145] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 186.841203][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.294530][ T5879] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 187.334604][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.625434][ T5879] usb 2-1: no configurations [ 187.630149][ T5879] usb 2-1: can't read configurations, error -22 [ 188.013244][ T5879] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.329044][ T5879] usb 2-1: no configurations [ 188.423293][ T5913] msi2500 1-1:0.101: Registered as swradio24 [ 188.558548][ T5879] usb 2-1: can't read configurations, error -22 [ 188.595885][ T5913] msi2500 1-1:0.101: SDR API is still slightly experimental and functionality changes may follow [ 188.618334][ T5879] usb usb2-port1: attempt power cycle [ 188.684852][ T5913] usb 1-1: USB disconnect, device number 5 [ 189.129245][ T7061] netlink: 132 bytes leftover after parsing attributes in process `syz.4.291'. [ 189.396374][ T5913] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 190.147745][ T5913] usb 1-1: Invalid ep0 maxpacket: 64 [ 190.175307][ T7070] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 191.152742][ T5881] IPVS: starting estimator thread 0... [ 191.235044][ T5930] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 191.247056][ T5913] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 191.278495][ T7076] IPVS: using max 26 ests per chain, 62400 per kthread [ 191.435144][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 191.465537][ T5930] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 191.539465][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.555818][ T5930] usb 4-1: Product: syz [ 191.560037][ T5930] usb 4-1: Manufacturer: syz [ 191.589856][ T7084] 9p: Unknown Cache mode or invalid value fscache0 [ 192.275708][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 192.275728][ T30] audit: type=1804 audit(1749003603.345:36): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.300" name="/newroot/66/bus/bus" dev="overlay" ino=377 res=1 errno=0 [ 192.382484][ T5930] usb 4-1: SerialNumber: syz [ 192.390542][ T5930] usb 4-1: config 0 descriptor?? [ 192.511310][ T7097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.538782][ T7097] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 192.647123][ T5930] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 192.864359][ T7107] netlink: 52 bytes leftover after parsing attributes in process `syz.2.306'. [ 192.876674][ T7107] netlink: 52 bytes leftover after parsing attributes in process `syz.2.306'. [ 194.678078][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.693790][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.616227][ T5930] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 195.660434][ T5930] usb 4-1: USB disconnect, device number 7 [ 195.730697][ T7125] netlink: 'syz.1.312': attribute type 49 has an invalid length. [ 195.843509][ T7131] binder: 7130:7131 ioctl c0046209 0 returned -22 [ 196.484568][ T7139] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.493606][ T7139] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.502569][ T7139] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.511456][ T7139] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.522985][ T7139] geneve2: entered promiscuous mode [ 196.528334][ T7139] geneve2: entered allmulticast mode [ 197.453660][ T7143] netlink: 'syz.3.318': attribute type 2 has an invalid length. [ 197.614473][ T5930] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.649454][ T7143] kvm: pic: non byte read [ 197.654279][ T7143] kvm: pic: level sensitive irq not supported [ 197.654765][ T7143] kvm: pic: non byte read [ 197.665672][ T7143] kvm: pic: level sensitive irq not supported [ 197.665736][ T7143] kvm: pic: non byte read [ 197.778775][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 197.788550][ T5930] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 197.803268][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.814291][ T5930] usb 5-1: config 0 has no interface number 0 [ 197.834033][ T5930] usb 5-1: too many endpoints for config 0 interface 101 altsetting 128: 202, using maximum allowed: 30 [ 197.860049][ T5930] usb 5-1: config 0 interface 101 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 197.883826][ T5930] usb 5-1: config 0 interface 101 has no altsetting 0 [ 197.902626][ T5930] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 197.922546][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.942797][ T5930] usb 5-1: Product: syz [ 197.963697][ T5930] usb 5-1: Manufacturer: syz [ 197.973839][ T5930] usb 5-1: SerialNumber: syz [ 198.008303][ T5930] usb 5-1: config 0 descriptor?? [ 198.330192][ T7158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.322'. [ 199.414931][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 199.442246][ T5930] msi2500 5-1:0.101: Registered as swradio24 [ 199.450294][ T5930] msi2500 5-1:0.101: SDR API is still slightly experimental and functionality changes may follow [ 199.471624][ T5930] usb 5-1: USB disconnect, device number 11 [ 199.597426][ T5195] udevd[5195]: worker [5953] terminated by signal 33 (Unknown signal 33) [ 199.614523][ T5883] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.624679][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 199.640101][ T5195] udevd[5195]: worker [5953] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.101/video4linux/swradio24' [ 199.659949][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.671595][ T7176] bridge0: entered promiscuous mode [ 199.678137][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 199.702329][ T7176] macvlan2: entered promiscuous mode [ 199.703118][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 199.710334][ T7176] bridge0: port 3(macvlan2) entered blocking state [ 199.729551][ T7176] bridge0: port 3(macvlan2) entered disabled state [ 199.738564][ T7176] macvlan2: entered allmulticast mode [ 199.744971][ T7176] bridge0: entered allmulticast mode [ 199.751797][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.763540][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.773269][ T7176] macvlan2: left allmulticast mode [ 199.777854][ T10] usb 1-1: Product: syz [ 199.783356][ T7176] bridge0: left allmulticast mode [ 199.787283][ T10] usb 1-1: Manufacturer: syz [ 199.789785][ T7176] bridge0: left promiscuous mode [ 199.799158][ T10] usb 1-1: SerialNumber: syz [ 199.816734][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 199.832839][ T5883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 199.853521][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 199.871961][ T5883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 199.882870][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 199.906135][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.928090][ T5883] usb 4-1: config 0 descriptor?? [ 200.033111][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.042366][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.064900][ T10] cdc_ncm 1-1:1.0: bind() failure [ 200.096952][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 200.121817][ T10] cdc_ncm 1-1:1.1: bind() failure [ 200.142336][ T5883] hdpvr 4-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 200.142336][ T5883] 4(r¥ý [ 200.142336][ T5883] d×Å2}±dæ~ýýŠÙ­^r¤ [ 200.180499][ T10] usb 1-1: USB disconnect, device number 8 [ 200.318049][ T7183] futex_wake_op: syz.2.332 tries to shift op by 32; fix this program [ 200.365314][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 200.374978][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.330'. [ 200.387664][ T7184] tipc: Started in network mode [ 200.392580][ T7184] tipc: Node identity 0662c33cc611, cluster identity 4711 [ 200.400009][ T7184] tipc: Enabled bearer , priority 0 [ 200.450723][ T7184] syzkaller0: entered promiscuous mode [ 200.456354][ T7184] syzkaller0: entered allmulticast mode [ 200.463133][ T7184] tipc: Resetting bearer [ 200.721336][ T5883] hdpvr 4-1:0.0: Could not setup controls [ 200.733331][ T5883] hdpvr 4-1:0.0: registering videodev failed [ 200.770198][ T5883] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 200.784830][ T5883] usb 4-1: USB disconnect, device number 8 [ 200.933926][ T7177] tipc: Resetting bearer [ 201.517241][ T43] tipc: Node number set to 3228812092 [ 203.055959][ T7177] tipc: Disabling bearer [ 203.544061][ T7207] loop6: detected capacity change from 0 to 524287999 [ 203.572382][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.615249][ T7208] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 203.632688][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.656821][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.684668][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.714884][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.722933][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.761754][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.789810][ T7211] netlink: 'syz.1.341': attribute type 2 has an invalid length. [ 203.794979][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.812193][ T7211] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 203.824658][ T7207] ldm_validate_partition_table(): Disk read failed. [ 203.833217][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.870515][ T7207] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.890118][ T7207] Dev loop6: unable to read RDB block 0 [ 203.911029][ T7207] loop6: unable to read partition table [ 203.928037][ T7207] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 203.984601][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 204.062826][ T5195] udevd[5195]: worker [5950] terminated by signal 33 (Unknown signal 33) [ 204.080317][ T5195] udevd[5195]: worker [5950] failed while handling '/devices/virtual/block/loop6' [ 205.244858][ T7226] x_tables: duplicate underflow at hook 1 [ 207.229417][ T7237] hub 8-0:1.0: USB hub found [ 207.236700][ T7237] hub 8-0:1.0: 1 port detected [ 209.158076][ T7251] IPv6: Can't replace route, no match found [ 211.137541][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.789614][ T30] audit: type=1326 audit(2000000016.020:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.093882][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 212.111235][ T30] audit: type=1326 audit(2000000016.020:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.227372][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 212.233478][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 212.272699][ T30] audit: type=1326 audit(2000000016.020:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.362867][ T30] audit: type=1326 audit(2000000016.020:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.419921][ T30] audit: type=1326 audit(2000000016.020:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.441533][ T30] audit: type=1326 audit(2000000016.030:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.477139][ T30] audit: type=1326 audit(2000000016.030:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.558134][ T7275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.571886][ T30] audit: type=1326 audit(2000000016.030:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.633634][ T7282] netlink: 452 bytes leftover after parsing attributes in process `syz.3.363'. [ 212.642787][ T7275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.674448][ T30] audit: type=1326 audit(2000000016.030:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 212.763425][ T30] audit: type=1326 audit(2000000016.030:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4bd8e969 code=0x7ffc0000 [ 214.867134][ T7275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.908791][ T7275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.545011][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 216.312468][ T7275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.325100][ T7275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.463323][ T7275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.473967][ T7275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.485305][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 216.505352][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 216.603892][ T7275] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.633346][ T7275] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 216.660603][ T7275] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.669170][ T7275] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 216.691279][ T7275] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.729995][ T7275] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 216.784231][ T7275] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.798824][ T7275] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.698970][ T7320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.374'. [ 217.709980][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.718672][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.759987][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 219.935980][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 219.963248][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 223.216045][ T7371] Device name cannot be null; rc = [-22] [ 224.804555][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 224.996509][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 225.028721][ T10] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 225.056364][ T10] usb 5-1: config 0 has no interface number 0 [ 225.246547][ T10] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 225.266159][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.288726][ T10] usb 5-1: Product: syz [ 225.306241][ T10] usb 5-1: Manufacturer: syz [ 225.310937][ T10] usb 5-1: SerialNumber: syz [ 225.366749][ T10] usb 5-1: config 0 descriptor?? [ 225.636569][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 225.649092][ T10] ath6kl: Failed to submit usb control message: -71 [ 225.669407][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 225.692282][ T10] ath6kl: Unable to send get target info: -71 [ 225.714180][ T10] ath6kl: Failed to init ath6kl core: -71 [ 225.729488][ T10] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 225.781189][ T10] usb 5-1: USB disconnect, device number 12 [ 227.222035][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.964486][ T5879] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 228.115267][ T5879] usb 5-1: device descriptor read/64, error -71 [ 228.373260][ T7434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.406'. [ 228.392158][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 228.414475][ T5879] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 228.704449][ T5879] usb 5-1: device descriptor read/64, error -71 [ 228.815109][ T5879] usb usb5-port1: attempt power cycle [ 229.184957][ T5879] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 229.225483][ T5879] usb 5-1: device descriptor read/8, error -71 [ 229.515069][ T5879] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.719243][ T5879] usb 5-1: device descriptor read/8, error -71 [ 229.835041][ T7462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.417267][ T5879] usb usb5-port1: unable to enumerate USB device [ 231.184832][ T5882] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 231.375140][ T7476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.441037][ T5882] usb 4-1: device descriptor read/64, error -71 [ 231.934643][ T5882] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 232.136170][ T7480] input: syz0 as /devices/virtual/input/input11 [ 232.184836][ T5882] usb 4-1: device descriptor read/64, error -71 [ 232.211225][ T7480] sctp: [Deprecated]: syz.1.418 (pid 7480) Use of int in maxseg socket option. [ 232.211225][ T7480] Use struct sctp_assoc_value instead [ 232.404978][ T5882] usb usb4-port1: attempt power cycle [ 232.693871][ T7485] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 232.717583][ T7485] macvtap1: entered promiscuous mode [ 232.726930][ T7485] macvtap1: entered allmulticast mode [ 232.737875][ T7485] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 232.884449][ T5913] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 232.904502][ T5882] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 232.935395][ T5882] usb 4-1: device descriptor read/8, error -71 [ 233.024480][ T5913] usb 1-1: device descriptor read/64, error -71 [ 233.184850][ T5882] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 233.215996][ T5882] usb 4-1: device descriptor read/8, error -71 [ 233.264553][ T5913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 233.347232][ T5882] usb usb4-port1: unable to enumerate USB device [ 233.554544][ T5913] usb 1-1: device descriptor read/64, error -71 [ 233.668585][ T5913] usb usb1-port1: attempt power cycle [ 233.996055][ T7508] netlink: 48 bytes leftover after parsing attributes in process `syz.3.428'. [ 234.005356][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 234.014683][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 234.053038][ T5913] usb 1-1: device descriptor read/8, error -71 [ 234.326525][ T5913] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 234.385428][ T5913] usb 1-1: device descriptor read/8, error -71 [ 234.531928][ T5913] usb usb1-port1: unable to enumerate USB device [ 234.954501][ T5878] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 235.074469][ T5882] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 235.107109][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.118328][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.128206][ T5878] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 235.137347][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.155778][ T5878] usb 4-1: config 0 descriptor?? [ 235.244532][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 235.252147][ T5882] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 235.265137][ T5882] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 235.274759][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=8, SerialNumber=0 [ 235.282823][ T5882] usb 5-1: Product: syz [ 235.287189][ T5882] usb 5-1: Manufacturer: syz [ 235.305401][ T5882] usb 5-1: config 0 descriptor?? [ 235.312826][ T7524] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 235.530022][ T5882] usb 5-1: USB disconnect, device number 17 [ 235.596986][ T5878] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 235.627998][ T5878] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 235.652350][ T7531] netlink: 156 bytes leftover after parsing attributes in process `syz.1.435'. [ 235.787973][ T5878] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 236.214584][ T5882] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.298207][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 236.331221][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 236.349430][ T7543] netlink: 116 bytes leftover after parsing attributes in process `syz.4.440'. [ 236.368500][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 236.395508][ T7523] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 236.426015][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 236.463064][ T5882] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 236.508431][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.593101][ T5882] usb 2-1: config 0 has no interface number 0 [ 236.648199][ T5882] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 236.752395][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.977133][ T5882] usb 2-1: Product: syz [ 237.254629][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.303810][ T5882] usb 2-1: Manufacturer: syz [ 237.309508][ T5882] usb 2-1: SerialNumber: syz [ 237.326928][ T5882] usb 2-1: config 0 descriptor?? [ 237.340686][ T5882] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 237.357170][ T5882] usb 2-1: No valid video chain found. [ 237.580947][ T9] usb 2-1: USB disconnect, device number 9 [ 237.754573][ T5882] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 237.917041][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 237.964512][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 238.010863][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 238.051344][ T5882] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 238.065278][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.075173][ T5882] usb 5-1: Product: syz [ 238.079571][ T5882] usb 5-1: Manufacturer: syz [ 238.084826][ T5882] usb 5-1: SerialNumber: syz [ 238.122218][ T5882] usb 5-1: config 0 descriptor?? [ 238.138625][ T7551] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 238.149575][ T7551] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 238.176664][ T5882] usb 5-1: ucan: probing device on interface #0 [ 238.195148][ T7556] macvtap1: entered promiscuous mode [ 238.208414][ T7556] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 238.244913][ T7556] macvtap1: entered allmulticast mode [ 238.264512][ T7556] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 238.384659][ T5878] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 238.409166][ T5878] usb 4-1: USB disconnect, device number 13 [ 238.594597][ T5930] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 238.607655][ T5882] usb 5-1: ucan: device reported invalid device info [ 238.635128][ T5882] usb 5-1: ucan: probe failed; try to update the device firmware [ 238.661316][ T7564] netlink: 'syz.0.446': attribute type 2 has an invalid length. [ 238.764609][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 238.772144][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 238.799157][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 238.812142][ T7566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.446'. [ 238.847705][ T5879] usb 5-1: USB disconnect, device number 18 [ 238.883745][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 238.924413][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 238.958920][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 238.992420][ T5930] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 239.003139][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.023424][ T5930] usb 2-1: Product: syz [ 239.028175][ T5930] usb 2-1: Manufacturer: syz [ 239.032815][ T5930] usb 2-1: SerialNumber: syz [ 239.050574][ T5930] usb 2-1: config 0 descriptor?? [ 239.746608][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.757724][ T5930] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 239.883346][ T5930] input input12: Device does not respond to id packet M [ 239.891775][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.091708][ T5930] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 240.146987][ T5930] input input12: Device does not respond to id packet P [ 240.313040][ T5930] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 240.474570][ T5930] input input12: Device does not respond to id packet B [ 240.513114][ T5930] input input12: Limiting number of effects to 32 (device reports 141) [ 240.872129][ T5930] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 240.886215][ T5930] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 240.893353][ T5930] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 241.065209][ T7594] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 241.117484][ T5930] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 241.133713][ T7594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 241.172584][ T5930] usb 2-1: USB disconnect, device number 10 [ 241.185042][ T5180] iforce 2-1:0.0: usb_submit_urb failed -19 [ 241.266655][ T5180] iforce 2-1:0.0: usb_submit_urb failed -19 [ 241.459660][ T5180] iforce 2-1:0.0: usb_submit_urb failed -19 [ 241.836566][ T7594] team0: Port device geneve0 added [ 242.085308][ T5878] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 242.244431][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 242.264833][ T5878] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 242.283281][ T5878] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 242.305083][ T5878] usb 5-1: config 0 has no interface number 0 [ 242.311247][ T5878] usb 5-1: too many endpoints for config 0 interface 64 altsetting 0: 60, using maximum allowed: 30 [ 242.334412][ T5878] usb 5-1: config 0 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 242.353958][ T5878] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 242.411141][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.452131][ T5878] usb 5-1: config 0 descriptor?? [ 242.528785][ T7612] batadv_slave_0: entered promiscuous mode [ 244.700019][ T7638] ceph: separator ':' missing in source [ 244.707024][ T7638] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 244.947125][ T7639] FAULT_INJECTION: forcing a failure. [ 244.947125][ T7639] name failslab, interval 1, probability 0, space 0, times 0 [ 244.960075][ T7639] CPU: 0 UID: 0 PID: 7639 Comm: syz.0.469 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 244.960102][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.960113][ T7639] Call Trace: [ 244.960122][ T7639] [ 244.960130][ T7639] dump_stack_lvl+0x189/0x250 [ 244.960165][ T7639] ? __pfx____ratelimit+0x10/0x10 [ 244.960194][ T7639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.960222][ T7639] ? __pfx__printk+0x10/0x10 [ 244.960250][ T7639] ? __pfx___might_resched+0x10/0x10 [ 244.960278][ T7639] ? fs_reclaim_acquire+0x7d/0x100 [ 244.960314][ T7639] should_fail_ex+0x414/0x560 [ 244.960352][ T7639] should_failslab+0xa8/0x100 [ 244.960381][ T7639] __kmalloc_noprof+0xcb/0x4f0 [ 244.960405][ T7639] ? kfree+0x4d/0x440 [ 244.960424][ T7639] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 244.960453][ T7639] tomoyo_realpath_from_path+0xe3/0x5d0 [ 244.960489][ T7639] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 244.960519][ T7639] tomoyo_path_number_perm+0x1e8/0x5a0 [ 244.960554][ T7639] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.960643][ T7639] ? __fget_files+0x2a/0x420 [ 244.960673][ T7639] ? __fget_files+0x2a/0x420 [ 244.960699][ T7639] ? __fget_files+0x3a0/0x420 [ 244.960725][ T7639] ? __fget_files+0x2a/0x420 [ 244.960757][ T7639] security_file_ioctl+0xcb/0x2d0 [ 244.960781][ T7639] __se_sys_ioctl+0x47/0x170 [ 244.960809][ T7639] do_syscall_64+0xfa/0x3b0 [ 244.960839][ T7639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.960857][ T7639] ? asm_sysvec_call_function_single+0x1a/0x20 [ 244.960875][ T7639] ? clear_bhb_loop+0x60/0xb0 [ 244.960898][ T7639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.960916][ T7639] RIP: 0033:0x7fad3098e969 [ 244.960933][ T7639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.960949][ T7639] RSP: 002b:00007fad317d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.960970][ T7639] RAX: ffffffffffffffda RBX: 00007fad30bb6080 RCX: 00007fad3098e969 [ 244.960983][ T7639] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000006 [ 244.960994][ T7639] RBP: 00007fad317d2090 R08: 0000000000000000 R09: 0000000000000000 [ 244.961005][ T7639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.961015][ T7639] R13: 0000000000000000 R14: 00007fad30bb6080 R15: 00007ffcaadf1428 [ 244.961054][ T7639] [ 245.222079][ T7639] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.480963][ T7639] Cannot find del_set index 2 as target [ 245.877276][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.885131][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.934166][ T5882] usb 5-1: USB disconnect, device number 19 [ 247.852764][ T7653] tty tty1: ldisc open failed (-12), clearing slot 0 [ 249.086314][ T7671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.740614][ T7659] xt_CT: No such helper "snmp" [ 251.879229][ T7705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.898487][ T7705] program syz.3.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.544807][ T7713] netlink: 76 bytes leftover after parsing attributes in process `syz.0.488'. [ 252.597122][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 252.685068][ T7713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 252.769706][ T7715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.787522][ T7713] bpf: Bad value for 'mode' [ 252.794816][ T7694] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 253.101821][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 253.128765][ T7694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.215337][ T5879] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 253.432057][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 253.446710][ T5879] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 253.469979][ T5879] usb 4-1: config 0 has no interface number 0 [ 253.481167][ T5879] usb 4-1: config 0 interface 184 has no altsetting 0 [ 253.834438][ T5879] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 253.860691][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.923180][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 254.091969][ T5879] usb 4-1: Product: syz [ 254.100303][ T5879] usb 4-1: Manufacturer: syz [ 254.108103][ T5879] usb 4-1: SerialNumber: syz [ 254.120047][ T5879] usb 4-1: config 0 descriptor?? [ 254.129949][ T5879] smsc75xx v1.0.0 [ 254.860193][ T5879] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 254.871596][ T5879] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 254.887015][ T5879] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 254.908847][ T5879] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 254.940925][ T7735] vlan0: entered promiscuous mode [ 254.948895][ T7735] vlan0: entered allmulticast mode [ 254.954810][ T7735] hsr_slave_1: entered allmulticast mode [ 255.060040][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 255.867734][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.886148][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.897564][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.467673][ T9] usb 4-1: USB disconnect, device number 14 [ 256.927150][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 257.368121][ T7755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.419618][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 257.712221][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 257.986234][ T7767] tipc: Enabling of bearer rejected, failed to enable media [ 258.005970][ T7762] gre0: entered allmulticast mode [ 258.193739][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 258.683469][ T7779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 259.559433][ T7784] netlink: 164 bytes leftover after parsing attributes in process `syz.2.506'. [ 259.594772][ T7784] netlink: 428 bytes leftover after parsing attributes in process `syz.2.506'. [ 259.638079][ T7784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.506'. [ 261.398327][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.507'. [ 261.461747][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 261.468891][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 261.492761][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 261.500904][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 261.610004][ T7790] ceph: No mds server is up or the cluster is laggy [ 261.704644][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 261.874577][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 261.883736][ T9] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 261.893574][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.934653][ T9] usb 4-1: config 0 has no interface number 0 [ 261.940908][ T9] usb 4-1: too many endpoints for config 0 interface 101 altsetting 128: 202, using maximum allowed: 30 [ 261.964421][ T9] usb 4-1: config 0 interface 101 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 261.984396][ T9] usb 4-1: config 0 interface 101 has no altsetting 0 [ 261.999530][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 262.008948][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.030347][ T9] usb 4-1: Product: syz [ 262.048811][ T9] usb 4-1: Manufacturer: syz [ 262.053481][ T9] usb 4-1: SerialNumber: syz [ 262.074071][ T9] usb 4-1: config 0 descriptor?? [ 262.078887][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 262.121576][ T7811] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 262.541494][ T7828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.490837][ T9] msi2500 4-1:0.101: Registered as swradio24 [ 264.528015][ T9] msi2500 4-1:0.101: SDR API is still slightly experimental and functionality changes may follow [ 264.624575][ T9] usb 4-1: USB disconnect, device number 15 [ 264.742922][ T7849] fuse: Unknown parameter '' [ 267.091394][ T7884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.826857][ T7903] block nbd0: shutting down sockets [ 271.860681][ T7941] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 272.008412][ T7947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.772704][ T7949] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 272.935342][ T5913] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 272.940856][ T7956] netlink: 212 bytes leftover after parsing attributes in process `syz.1.556'. [ 273.234536][ T5882] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 273.247323][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.278946][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.324619][ T5913] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 273.356308][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.385106][ T5913] usb 4-1: config 0 descriptor?? [ 273.414747][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 273.430797][ T5882] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 273.656178][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.673575][ T5882] usb 1-1: config 0 has no interface number 0 [ 273.679855][ T5882] usb 1-1: too many endpoints for config 0 interface 101 altsetting 128: 202, using maximum allowed: 30 [ 273.696873][ T5882] usb 1-1: config 0 interface 101 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 273.710452][ T5882] usb 1-1: config 0 interface 101 has no altsetting 0 [ 273.719947][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 273.729416][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.738073][ T5882] usb 1-1: Product: syz [ 273.742434][ T5882] usb 1-1: Manufacturer: syz [ 273.776043][ T5882] usb 1-1: SerialNumber: syz [ 273.804248][ T5882] usb 1-1: config 0 descriptor?? [ 274.090299][ T7948] ip6tnl2: entered allmulticast mode [ 274.128320][ T5913] usbhid 4-1:0.0: can't add hid device: -71 [ 274.139013][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 274.175367][ T5913] usb 4-1: USB disconnect, device number 16 [ 275.211496][ T5882] msi2500 1-1:0.101: Registered as swradio24 [ 275.224645][ T7989] trusted_key: syz.3.567 sent an empty control message without MSG_MORE. [ 275.245842][ T5882] msi2500 1-1:0.101: SDR API is still slightly experimental and functionality changes may follow [ 275.294515][ T5882] usb 1-1: USB disconnect, device number 13 [ 275.825931][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.559471][ T8010] binder: 8008:8010 ioctl c018620c 200000000100 returned -1 [ 278.020489][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.579'. [ 278.044938][ T5881] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 279.099110][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 279.129552][ T5881] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 279.228817][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.262304][ T5881] usb 4-1: config 0 has no interface number 0 [ 279.264545][ T5879] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 279.284193][ T5881] usb 4-1: too many endpoints for config 0 interface 101 altsetting 128: 202, using maximum allowed: 30 [ 279.313736][ T5881] usb 4-1: config 0 interface 101 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 279.357469][ T5881] usb 4-1: config 0 interface 101 has no altsetting 0 [ 279.463982][ T5881] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 279.481882][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.492382][ T5881] usb 4-1: Product: syz [ 279.497661][ T5881] usb 4-1: Manufacturer: syz [ 279.502411][ T5881] usb 4-1: SerialNumber: syz [ 279.619586][ T5881] usb 4-1: config 0 descriptor?? [ 280.304306][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.317917][ T5879] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.327533][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.339446][ T5879] usb 2-1: config 0 descriptor?? [ 280.349089][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 280.575338][ T8041] binder: 8038:8041 ioctl c0046209 0 returned -22 [ 281.316405][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 285.214076][ T5879] pwc: recv_control_msg error -71 req 02 val 2c00 [ 285.324805][ T5879] pwc: recv_control_msg error -71 req 04 val 1000 [ 285.463101][ T5881] msi2500 4-1:0.101: Registered as swradio24 [ 285.469229][ T5881] msi2500 4-1:0.101: SDR API is still slightly experimental and functionality changes may follow [ 285.498714][ T5881] usb 4-1: USB disconnect, device number 17 [ 285.505251][ T5879] pwc: recv_control_msg error -71 req 04 val 1300 [ 285.673138][ T5879] pwc: recv_control_msg error -71 req 04 val 1400 [ 285.688037][ T5879] pwc: recv_control_msg error -71 req 02 val 2000 [ 285.714450][ T5879] pwc: recv_control_msg error -71 req 02 val 2100 [ 285.725048][ T5879] pwc: recv_control_msg error -71 req 04 val 1500 [ 285.747153][ T5879] pwc: recv_control_msg error -71 req 02 val 2500 [ 285.819658][ T5879] pwc: recv_control_msg error -71 req 02 val 2400 [ 285.854526][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 286.054552][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 286.092166][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 286.134451][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 286.157277][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 286.191726][ T5879] pwc: Registered as video103. [ 286.231653][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 286.266733][ T5879] usb 2-1: USB disconnect, device number 11 [ 286.694517][ T5879] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 286.872029][ T5879] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 286.894452][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.916436][ T5879] usb 2-1: config 0 descriptor?? [ 286.945634][ T5879] cp210x 2-1:0.0: cp210x converter detected [ 287.358516][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.390013][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.417842][ T5879] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 287.450987][ T5879] usb 2-1: cp210x converter now attached to ttyUSB0 [ 287.502524][ T5878] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 287.635196][ T5879] usb 2-1: USB disconnect, device number 12 [ 287.660458][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 287.664533][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 287.707762][ T5878] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 287.738697][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.749642][ T5879] cp210x 2-1:0.0: device disconnected [ 287.768508][ T5878] usb 4-1: config 0 has no interface number 0 [ 287.794586][ T5878] usb 4-1: too many endpoints for config 0 interface 101 altsetting 128: 202, using maximum allowed: 30 [ 287.809975][ T5878] usb 4-1: config 0 interface 101 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 287.831360][ T5878] usb 4-1: config 0 interface 101 has no altsetting 0 [ 287.853478][ T5878] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 287.863083][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.877225][ T5878] usb 4-1: Product: syz [ 287.881625][ T5878] usb 4-1: Manufacturer: syz [ 287.888384][ T5878] usb 4-1: SerialNumber: syz [ 287.906586][ T5878] usb 4-1: config 0 descriptor?? [ 288.346157][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 288.418683][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.443236][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.458942][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.506558][ T8092] program syz.1.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.903048][ T5878] msi2500 4-1:0.101: Registered as swradio24 [ 289.943031][ T5878] msi2500 4-1:0.101: SDR API is still slightly experimental and functionality changes may follow [ 290.043355][ T5878] usb 4-1: USB disconnect, device number 18 [ 290.068921][ T8107] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 292.424223][ T8134] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 292.504990][ T5878] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 292.540486][ T8139] geneve2: entered allmulticast mode [ 292.665723][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 292.684434][ T5882] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 292.699403][ T5878] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 292.714190][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.728437][ T5878] usb 2-1: config 0 has no interface number 0 [ 292.734816][ T5878] usb 2-1: too many endpoints for config 0 interface 101 altsetting 128: 202, using maximum allowed: 30 [ 292.754498][ T5878] usb 2-1: config 0 interface 101 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 292.773266][ T5878] usb 2-1: config 0 interface 101 has no altsetting 0 [ 292.800290][ T5878] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 292.813150][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.821460][ T5878] usb 2-1: Product: syz [ 292.829195][ T5878] usb 2-1: Manufacturer: syz [ 292.844100][ T5878] usb 2-1: SerialNumber: syz [ 292.854410][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 292.863907][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 292.877332][ T5878] usb 2-1: config 0 descriptor?? [ 292.886747][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.912302][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.951261][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.004465][ T5882] usb 1-1: Product: syz [ 293.014770][ T5882] usb 1-1: Manufacturer: syz [ 293.058297][ T5882] usb 1-1: SerialNumber: syz [ 293.098913][ T5882] usb 1-1: config 0 descriptor?? [ 293.128366][ T5882] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 293.181292][ T5882] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 293.321858][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.331029][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.486133][ T5882] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 293.496462][ T5882] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 293.539935][ T5882] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 293.561228][ T5882] em28xx 1-1:0.0: No AC97 audio processor [ 293.612525][ T5882] usb 1-1: USB disconnect, device number 14 [ 293.658043][ T5882] em28xx 1-1:0.0: Disconnecting em28xx [ 293.695973][ T5882] em28xx 1-1:0.0: Freeing device [ 293.814455][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 293.868579][ T5878] msi2500 2-1:0.101: Registered as swradio24 [ 293.884998][ T5878] msi2500 2-1:0.101: SDR API is still slightly experimental and functionality changes may follow [ 293.917826][ T5878] usb 2-1: USB disconnect, device number 13 [ 294.035250][ T5882] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 294.296942][ T5882] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 295.112052][ T5878] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 295.120270][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.165062][ T5882] usb 1-1: config 0 descriptor?? [ 295.298286][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.370224][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.396410][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.436969][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.454398][ T5882] kaweth 1-1:0.0: Firmware present in device. [ 295.460988][ T5878] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.474212][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 295.474231][ T30] audit: type=1400 audit(2000000099.720:66): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=8171 comm="syz.3.626" name="114" dev="tmpfs" ino=612 [ 295.505101][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.522542][ T5878] usb 2-1: config 0 descriptor?? [ 295.628236][ T5882] kaweth 1-1:0.0: Statistics collection: 0 [ 295.644690][ T5882] kaweth 1-1:0.0: Multicast filter limit: 0 [ 295.659436][ T5882] kaweth 1-1:0.0: MTU: 0 [ 295.673239][ T5882] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 296.065112][ T5882] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 296.251525][ T5882] usb 1-1: USB disconnect, device number 15 [ 296.419292][ T8187] netlink: 3 bytes leftover after parsing attributes in process `syz.3.630'. [ 296.427268][ T5878] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 296.440896][ T8187] 0ªX¹¦À: renamed from caif0 [ 296.680057][ T8187] 0ªX¹¦À: entered allmulticast mode [ 296.683855][ T5878] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 296.707594][ T8187] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 297.669797][ T8203] fuse: Bad value for 'group_id' [ 297.678722][ T8203] fuse: Bad value for 'group_id' [ 297.716162][ T5878] usb 2-1: USB disconnect, device number 14 [ 298.044500][ T5879] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 298.078244][ T8210] fuse: Bad value for 'group_id' [ 298.083292][ T8210] fuse: Bad value for 'group_id' [ 298.214431][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 298.232978][ T5879] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 298.250503][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.317255][ T5879] usb 1-1: config 0 has no interface number 0 [ 298.337131][ T5879] usb 1-1: too many endpoints for config 0 interface 101 altsetting 128: 202, using maximum allowed: 30 [ 298.660921][ T5879] usb 1-1: config 0 interface 101 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 298.680671][ T5879] usb 1-1: config 0 interface 101 has no altsetting 0 [ 298.703267][ T5879] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 298.758033][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.802048][ T8222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.821328][ T5879] usb 1-1: Product: syz [ 298.846554][ T5879] usb 1-1: Manufacturer: syz [ 298.890715][ T5879] usb 1-1: SerialNumber: syz [ 298.996835][ T5879] usb 1-1: config 0 descriptor?? [ 301.685146][ T8235] ------------[ cut here ]------------ [ 301.685237][ T8235] WARNING: CPU: 1 PID: 8235 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 301.685282][ T8235] Modules linked in: [ 301.685342][ T8235] CPU: 1 UID: 0 PID: 8235 Comm: syz.3.643 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 301.685370][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.685385][ T8235] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 301.685414][ T8235] Code: 42 80 3c 28 00 74 08 48 89 df e8 c4 95 3a fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c0 2f 79 05 cc e8 da 42 d9 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 301.685434][ T8235] RSP: 0000:ffffc9000df3ed28 EFLAGS: 00010287 [ 301.685457][ T8235] RAX: ffffffff85e709a6 RBX: ffffc9000df3eea0 RCX: 0000000000080000 [ 301.685505][ T8235] RDX: ffffc9000c60b000 RSI: 000000000000571a RDI: 000000000000571b [ 301.685522][ T8235] RBP: 1ffff92001be7dd4 R08: ffffc90003569000 R09: 0000000000000000 [ 301.685540][ T8235] R10: ffffc90003569000 R11: ffffffff85e70870 R12: 000000463b16634a [ 301.685557][ T8235] R13: dffffc0000000000 R14: ffff888141f78028 R15: 000000463b16634a [ 301.685576][ T8235] FS: 00007f3e9dc6e6c0(0000) GS:ffff888125d93000(0000) knlGS:0000000000000000 [ 301.685597][ T8235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.685614][ T8235] CR2: 000000110c396b29 CR3: 000000006f800000 CR4: 00000000003526f0 [ 301.685636][ T8235] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.685652][ T8235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.685668][ T8235] Call Trace: [ 301.685679][ T8235] [ 301.685690][ T8235] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 301.685724][ T8235] drm_crtc_next_vblank_start+0x226/0x470 [ 301.685764][ T8235] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 301.685799][ T8235] ? drm_gem_fb_vmap+0x230/0x8d0 [ 301.685839][ T8235] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 301.685881][ T8235] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 301.685912][ T8235] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 301.685960][ T8235] drm_atomic_helper_commit+0x5c7/0xb10 [ 301.686001][ T8235] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 301.686032][ T8235] drm_atomic_commit+0x25f/0x2c0 [ 301.686059][ T8235] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.686095][ T8235] ? __pfx_drm_atomic_commit+0x10/0x10 [ 301.686133][ T8235] ? __pfx___drm_printfn_info+0x10/0x10 [ 301.686179][ T8235] ? drm_client_rotation+0x47c/0x5b0 [ 301.686212][ T8235] drm_client_modeset_commit_atomic+0x620/0x760 [ 301.686237][ T8235] ? preempt_schedule_thunk+0x16/0x30 [ 301.686281][ T8235] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 301.686337][ T8235] ? __pfx___mutex_lock+0x10/0x10 [ 301.686373][ T8235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.686423][ T8235] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 301.686458][ T8235] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 301.686511][ T8235] fb_pan_display+0x39e/0x680 [ 301.686541][ T8235] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 301.686581][ T8235] fb_set_var+0x84a/0xf80 [ 301.686625][ T8235] ? __pfx_fb_set_var+0x10/0x10 [ 301.686668][ T8235] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 301.686707][ T8235] ? soft_cursor+0xb1e/0xd80 [ 301.686772][ T8235] ? fbcon_switch+0x8bf/0x2040 [ 301.686807][ T8235] fbcon_switch+0x95b/0x2040 [ 301.686851][ T8235] ? __pfx_fbcon_switch+0x10/0x10 [ 301.686899][ T8235] ? __pfx_hide_cursor+0x10/0x10 [ 301.686923][ T8235] ? __free_frozen_pages+0x79d/0xe60 [ 301.686958][ T8235] ? is_console_locked+0x9/0x20 [ 301.686980][ T8235] ? set_origin+0x346/0x480 [ 301.687007][ T8235] redraw_screen+0x56d/0xe90 [ 301.687044][ T8235] ? __pfx_redraw_screen+0x10/0x10 [ 301.687066][ T8235] ? free_large_kmalloc+0xeb/0x200 [ 301.687107][ T8235] ? vc_do_resize+0x104c/0x1770 [ 301.687139][ T8235] vc_do_resize+0x122d/0x1770 [ 301.687187][ T8235] ? trace_contention_end+0x39/0x120 [ 301.687224][ T8235] ? __pfx_vc_do_resize+0x10/0x10 [ 301.687250][ T8235] ? do_fb_ioctl+0x598/0x750 [ 301.687283][ T8235] ? fb_match_mode+0x5f9/0x730 [ 301.687324][ T8235] fbcon_modechanged+0x852/0x13a0 [ 301.687368][ T8235] do_fb_ioctl+0x6fd/0x750 [ 301.687406][ T8235] ? __pfx_do_fb_ioctl+0x10/0x10 [ 301.687466][ T8235] ? __asan_memset+0x22/0x50 [ 301.687500][ T8235] ? __pfx_smack_file_ioctl+0x10/0x10 [ 301.687550][ T8235] ? __fget_files+0x3a0/0x420 [ 301.687580][ T8235] ? __fget_files+0x2a/0x420 [ 301.687616][ T8235] ? bpf_lsm_file_ioctl+0x9/0x20 [ 301.687649][ T8235] ? __pfx_fb_ioctl+0x10/0x10 [ 301.687682][ T8235] __se_sys_ioctl+0xfc/0x170 [ 301.687714][ T8235] do_syscall_64+0xfa/0x3b0 [ 301.687746][ T8235] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.687778][ T8235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.687801][ T8235] ? clear_bhb_loop+0x60/0xb0 [ 301.687831][ T8235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.687852][ T8235] RIP: 0033:0x7f3e9cd8e969 [ 301.687883][ T8235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.687903][ T8235] RSP: 002b:00007f3e9dc6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.687931][ T8235] RAX: ffffffffffffffda RBX: 00007f3e9cfb5fa0 RCX: 00007f3e9cd8e969 [ 301.687949][ T8235] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000004 [ 301.687964][ T8235] RBP: 00007f3e9ce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 301.687980][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.687996][ T8235] R13: 0000000000000000 R14: 00007f3e9cfb5fa0 R15: 00007ffff26b01a8 [ 301.688037][ T8235] [ 301.688051][ T8235] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.688067][ T8235] CPU: 1 UID: 0 PID: 8235 Comm: syz.3.643 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 301.688092][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.688118][ T8235] Call Trace: [ 301.688128][ T8235] [ 301.688138][ T8235] dump_stack_lvl+0x99/0x250 [ 301.688171][ T8235] ? __asan_memcpy+0x40/0x70 [ 301.688196][ T8235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.688228][ T8235] ? __pfx__printk+0x10/0x10 [ 301.688270][ T8235] panic+0x2db/0x790 [ 301.688309][ T8235] ? __pfx_panic+0x10/0x10 [ 301.688336][ T8235] ? show_trace_log_lvl+0x4fb/0x550 [ 301.688395][ T8235] __warn+0x31b/0x4b0 [ 301.688424][ T8235] ? vkms_get_vblank_timestamp+0x137/0x160 [ 301.688455][ T8235] ? vkms_get_vblank_timestamp+0x137/0x160 [ 301.688481][ T8235] report_bug+0x2be/0x4f0 [ 301.688510][ T8235] ? vkms_get_vblank_timestamp+0x137/0x160 [ 301.688536][ T8235] ? vkms_get_vblank_timestamp+0x137/0x160 [ 301.688563][ T8235] ? vkms_get_vblank_timestamp+0x139/0x160 [ 301.688589][ T8235] handle_bug+0x84/0x160 [ 301.688612][ T8235] exc_invalid_op+0x1a/0x50 [ 301.688634][ T8235] asm_exc_invalid_op+0x1a/0x20 [ 301.688655][ T8235] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 301.688682][ T8235] Code: 42 80 3c 28 00 74 08 48 89 df e8 c4 95 3a fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c0 2f 79 05 cc e8 da 42 d9 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 301.688699][ T8235] RSP: 0000:ffffc9000df3ed28 EFLAGS: 00010287 [ 301.688719][ T8235] RAX: ffffffff85e709a6 RBX: ffffc9000df3eea0 RCX: 0000000000080000 [ 301.688735][ T8235] RDX: ffffc9000c60b000 RSI: 000000000000571a RDI: 000000000000571b [ 301.688749][ T8235] RBP: 1ffff92001be7dd4 R08: ffffc90003569000 R09: 0000000000000000 [ 301.688764][ T8235] R10: ffffc90003569000 R11: ffffffff85e70870 R12: 000000463b16634a [ 301.688780][ T8235] R13: dffffc0000000000 R14: ffff888141f78028 R15: 000000463b16634a [ 301.688803][ T8235] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 301.688831][ T8235] ? vkms_get_vblank_timestamp+0x136/0x160 [ 301.688864][ T8235] ? vkms_get_vblank_timestamp+0x136/0x160 [ 301.688888][ T8235] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 301.688917][ T8235] drm_crtc_next_vblank_start+0x226/0x470 [ 301.688955][ T8235] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 301.688989][ T8235] ? drm_gem_fb_vmap+0x230/0x8d0 [ 301.689029][ T8235] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 301.689070][ T8235] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 301.689109][ T8235] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 301.689155][ T8235] drm_atomic_helper_commit+0x5c7/0xb10 [ 301.689194][ T8235] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 301.689224][ T8235] drm_atomic_commit+0x25f/0x2c0 [ 301.689250][ T8235] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.689283][ T8235] ? __pfx_drm_atomic_commit+0x10/0x10 [ 301.689309][ T8235] ? __pfx___drm_printfn_info+0x10/0x10 [ 301.689352][ T8235] ? drm_client_rotation+0x47c/0x5b0 [ 301.689383][ T8235] drm_client_modeset_commit_atomic+0x620/0x760 [ 301.689407][ T8235] ? preempt_schedule_thunk+0x16/0x30 [ 301.689452][ T8235] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 301.689504][ T8235] ? __pfx___mutex_lock+0x10/0x10 [ 301.689537][ T8235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.689583][ T8235] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 301.689616][ T8235] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 301.689666][ T8235] fb_pan_display+0x39e/0x680 [ 301.689694][ T8235] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 301.689732][ T8235] fb_set_var+0x84a/0xf80 [ 301.689775][ T8235] ? __pfx_fb_set_var+0x10/0x10 [ 301.689816][ T8235] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 301.689851][ T8235] ? soft_cursor+0xb1e/0xd80 [ 301.689915][ T8235] ? fbcon_switch+0x8bf/0x2040 [ 301.689948][ T8235] fbcon_switch+0x95b/0x2040 [ 301.689991][ T8235] ? __pfx_fbcon_switch+0x10/0x10 [ 301.690039][ T8235] ? __pfx_hide_cursor+0x10/0x10 [ 301.690060][ T8235] ? __free_frozen_pages+0x79d/0xe60 [ 301.690094][ T8235] ? is_console_locked+0x9/0x20 [ 301.690122][ T8235] ? set_origin+0x346/0x480 [ 301.690148][ T8235] redraw_screen+0x56d/0xe90 [ 301.690183][ T8235] ? __pfx_redraw_screen+0x10/0x10 [ 301.690204][ T8235] ? free_large_kmalloc+0xeb/0x200 [ 301.690234][ T8235] ? vc_do_resize+0x104c/0x1770 [ 301.690264][ T8235] vc_do_resize+0x122d/0x1770 [ 301.690311][ T8235] ? trace_contention_end+0x39/0x120 [ 301.690346][ T8235] ? __pfx_vc_do_resize+0x10/0x10 [ 301.690371][ T8235] ? do_fb_ioctl+0x598/0x750 [ 301.690403][ T8235] ? fb_match_mode+0x5f9/0x730 [ 301.690442][ T8235] fbcon_modechanged+0x852/0x13a0 [ 301.690483][ T8235] do_fb_ioctl+0x6fd/0x750 [ 301.690520][ T8235] ? __pfx_do_fb_ioctl+0x10/0x10 [ 301.690579][ T8235] ? __asan_memset+0x22/0x50 [ 301.690612][ T8235] ? __pfx_smack_file_ioctl+0x10/0x10 [ 301.690661][ T8235] ? __fget_files+0x3a0/0x420 [ 301.690690][ T8235] ? __fget_files+0x2a/0x420 [ 301.690747][ T8235] ? bpf_lsm_file_ioctl+0x9/0x20 [ 301.690778][ T8235] ? __pfx_fb_ioctl+0x10/0x10 [ 301.690809][ T8235] __se_sys_ioctl+0xfc/0x170 [ 301.690839][ T8235] do_syscall_64+0xfa/0x3b0 [ 301.690867][ T8235] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.690899][ T8235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.690921][ T8235] ? clear_bhb_loop+0x60/0xb0 [ 301.690949][ T8235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.690971][ T8235] RIP: 0033:0x7f3e9cd8e969 [ 301.690989][ T8235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.691006][ T8235] RSP: 002b:00007f3e9dc6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.691027][ T8235] RAX: ffffffffffffffda RBX: 00007f3e9cfb5fa0 RCX: 00007f3e9cd8e969 [ 301.691043][ T8235] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000004 [ 301.691056][ T8235] RBP: 00007f3e9ce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 301.691070][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.691084][ T8235] R13: 0000000000000000 R14: 00007f3e9cfb5fa0 R15: 00007ffff26b01a8 [ 301.691129][ T8235] [ 301.691294][ T8235] Kernel Offset: disabled