last executing test programs: 12.468133997s ago: executing program 3 (id=250): lsm_list_modules(0x0, &(0x7f00000009c0)=0x300, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x77359400}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x8, 0x0, 0x1, 0x0, 0xc337, 0x2, 0x83, 0x206, 0x9, 0x8, 0x7, 0x6, 0x400, 0x3, 0x6, 0x5, {0x6, 0x64a76cac}, 0x14, 0x40}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000200)={0x9, 0x1, 0x7, 0x43, 0xff, 0x0, 0x4}) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000bb76921b000000000300000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000000aaaaaabbefd0a772a34a000761ee643bd1"], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x3, 0x7}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) syz_genetlink_get_family_id$devlink(0x0, r6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 12.306063063s ago: executing program 0 (id=251): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x10, 0x27, 0x0, 0xa7d, {{0x21, 0x4, 0x1, 0x1, 0x84, 0x64, 0x0, 0x2, 0x29, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x7, 0x8e, [@local]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x37, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @lsrr={0x83, 0x1b, 0x62, [@loopback, @rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x1a, 0x1, 0x4, [{@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0xfff}, {@rand_addr=0x64010102, 0xb}, {@initdev={0xac, 0x1e, 0x2, 0x0}, 0x100}, {@multicast1, 0x1}]}, @rr={0x7, 0xf, 0x3, [@remote, @local, @multicast1]}]}}}}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) 12.211940879s ago: executing program 2 (id=252): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x144, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x144}}, 0x804) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/275, 0x113}], 0x1}, 0x1008}], 0x1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xfffffff2}, 0x8) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a"], 0x0) msgctl$IPC_RMID(r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xfe, 0xa, 0xf4, 0x8, 0x4bb, 0x950, 0x6833, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x6, 0x50, 0x0, [{{0x9, 0x4, 0xe1, 0x7, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2}, {0x97, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0]}]}) 12.122011251s ago: executing program 3 (id=253): socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xd, r3}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r5, 0x0) (async) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="120075ee983b0e9a010902120001000010000904b8070096d1ca00fc209377633a59a4280dcaafbc6217015f3dff0100000000000083192ec15f49a6bc5cec905d1ad956f069e25f3668d69d4849"], 0x0) read$FUSE(r8, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r7, 0xff08, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000800)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000300)="cbf11d2f59a76cd62f91a572798672dfc9e433cf697397cd632a1ee1e0c9544e579a07315c136ee589d6001d26f9daf8c189eda6eb1fbedeaf8186fd03268805e97a5e2190a69d82b58599d359bb2007a94139564eb36f39a4c44302c143853aa671f8bbaece2dbbc41c26e04673757c6eda93520817e3f53fb0", 0x7a}, {&(0x7f00000004c0)="59067e6b8a182aa7bf383b92c7b097ffe9d52c9dc40c063967702c9486b8e99622029a52e11b4b70d5bef269d72fdd4366411a891d1f8908035d5fcfc00921ea0da416be3b0c6bbf45b5bdfe52e221877cc375d4d44f9221e3a2", 0x5a}, {&(0x7f0000000540)="1ffd493bffd176997737c71bd54f632a7cb04bd068da974066a9311e381ca4ac2ad8f09c9c1aa9fcfa8d812a785165b2d4fc080ed34b36e003ef8468a926feb243c5632da1cd45d2cb99d770abba58537eb584ac7730f8f890539a084ffe64a8", 0x60}, {&(0x7f00000005c0)="d90e0fce37c156f173bd064b932ca1ffe6a1d31f1286505d8ce48c55957b2a2623218d28e21eaedd3c548aac53156d1349834147aa9a21154a1ce0aba067cf4737cf2056d1cb42b986e90ab0d17a05ddb5e062891a989eaa2adba772db59e28702c6bf7246b680b59082f67b8fb1da21cf7b001615b2942425b1be4040ae5df4f5616ab51f3d178573", 0x89}, {&(0x7f00000003c0)="910a2c90acc62a6257fdb1c4e400b0", 0xf}, {&(0x7f0000000440)}, {&(0x7f0000000680)="2ceab05bdd9aee11b58c9d40a917948431371376ee73e8c9f3156180d67314d6dfc43fac60d240e87ad983b78404652b1deab0119ed40d6168e9a2fd72ddb9b4c4adbbbe8f644e616e8167c18eb0bfdd86971fbb266cf4f60136fd903f763a063a9938df96801ed8f5220644375090ff338576af1283cc86c8824efdff88c450616cc43d41dff7ca63141efa08f4b09902eb725bb287227509b8b4ca34f6376797dbdc4edcf734842fa6b6abbe8ec8222f91aa4378b6617864998c37cf7e2b65bacadce83c284447ad902d0caeb29ea70a6f01ab9c043324ca27bbbe92731ea60a", 0xe1}, {&(0x7f0000000780)="d1606352e176db6620f4d06a71cf45", 0xf}], 0x8}, 0x20000008) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000000080), 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (rerun: 64) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) (async) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "0a766976d5b3080c", "3a7d5da9a45c579e3d7fffb4108001ee", "04000001", "539057fa3b2cae06"}, 0x28) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) (rerun: 64) 11.60168337s ago: executing program 0 (id=256): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r0, r0, 0x0, 0x40008) 11.266766926s ago: executing program 1 (id=258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x210, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x1e8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x198, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc54}, @WGPEER_A_ALLOWEDIPS={0xc, 0x9, 0x0, 0x1, [{0x4}, {0x4}]}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x210}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 11.101655998s ago: executing program 4 (id=259): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0xf6a4028f3f6a2a4) socket(0x10, 0x80003, 0x0) socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x39f2, 0x1000, 0xfffffffd, 0xbfe02000}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x200, 0x3d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x200, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1000}], 0x3) 11.040547475s ago: executing program 1 (id=260): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x52, 0x10, {0xffffffffffffffff}, {0xee01}, 0x7, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005"], 0x118}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000880)={[&(0x7f0000000080)='\\\xa6\xd9\x8f\x9f-[\xd6\x16\xdc\x19 ']}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x340, 0x0) 10.95696774s ago: executing program 3 (id=261): getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0xa, 0x401, 0x9]}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xc, @empty, 'ip6tnl0\x00'}}, 0x1e) r3 = dup(r2) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fcdbdf252c00000008000300521cfd186797cec900435d509ae5e730011c1445179ed78c227233833da0fc5ca8d3eeb84a0cb12800f4dccbba5a54b0fc97876e4798a2eb471e6acc0a9776212ce53c2a8bae3ec69ff8e1905b68519ba8b8d467f4edec7028139505e64325dd00ad01b62c6525db6a6bf1d68e065b3d81e40302e25f39c059f7e3a3f20f9a0cb34398c2afbbff4cb7393398f6e2c3bee6ada5085c45a3d9ef555496fe0f878a6ce29750372037f93089ebd786603a2a4f29028de067f6ef6b3f9cea1e4d72e1aba34855", @ANYRES32=0x0, @ANYBLOB="0c0099000200000028000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r3) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70726500000006"], 0x20}}, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) close(r0) r8 = socket$kcm(0x11, 0x2, 0x0) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0)=r8, 0x8) r10 = socket(0x28, 0x805, 0x0) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppoe(r10, 0x0, 0x0) 10.802093003s ago: executing program 4 (id=262): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) (async) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114600000320600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06464ce, &(0x7f00000000c0)={r5, 0x800, 0x8, 0xfffffffb, 0x1, [], [0x40000000, 0xd386, 0x401, 0xfff], [0x8, 0x5], [0xffffffffffff7fff, 0x200000000003, 0x5, 0x9]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r6 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x400, 0x0, 0x6, 0xfd}) r7 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r8 = accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x81800) bind$packet(r8, &(0x7f0000000340)={0x11, 0xf6, r2, 0x1, 0x3}, 0x14) (async) r9 = dup2(r6, r7) read$FUSE(r9, &(0x7f0000004380)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000080)=r5) (async) r10 = socket$inet6(0x10, 0x3, 0x0) (async) r11 = syz_open_dev$audion(&(0x7f00000001c0), 0xffffffff, 0x90480) ioctl$LOOP_SET_BLOCK_SIZE(r11, 0x4c09, 0x101) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) (async) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 10.801303485s ago: executing program 1 (id=263): r0 = socket(0x6, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1e}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10040010}, 0x2000c000) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x2f) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000029c0)=@assoc_value={r5, 0x100}, &(0x7f0000002a00)=0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x28}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r6, 0x0, 0x80) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x82100) 10.541602943s ago: executing program 0 (id=264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x240, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0xb8, 0x1, [@m_ipt={0xb4, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x8, 'mangle\x00', 0x80, 0x100, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a387605ebd024be5895e6659813581fe54a8998e1ca"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x174, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x78, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7b9f1648e75347ab9c4c22c5a146387bd1cec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x240}}, 0x4000) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x4002}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) 10.541268582s ago: executing program 4 (id=265): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x1, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfd2106a00"}]}}}}}}}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000000000000010000d5010100000100000007000000d80e00000000000000000080ffffff7f0500000000080000982ebc400000009874163aa207ea2900f3ffffff020000000400000000000000"]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 10.475611534s ago: executing program 3 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xfc}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0xb02, &(0x7f0000000340)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000840a0500"], 0x118}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0xa00000000000000, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$packet(0x11, 0x2, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r6], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x64, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5d0b}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}]}}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x3d6, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "fbcebc", 0x3a0, 0x21, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x61d55207}, @jumbo={0xc2, 0x4, 0x9}]}, @dstopts={0x30, 0xf, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5926}, @pad1, @ra={0x5, 0x2, 0x200}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x4}, @generic={0xc1, 0x45, "60cf50894cd7aa75d2a3c5eafd9d8686303eab39716c95121f5ed7982d748130c21f805b3a794326f448e96a1e641e35d387b59358c79cc7c7ed4b1bd99b2357bfa8ab605a"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x2c, 0xd, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0xb, 0x5, [0x7fff, 0x7fffffffffffffff, 0xffffffff, 0x2, 0x0, 0x80, 0x7a, 0x3, 0x400]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @routing={0x6c, 0x2, 0x2, 0x73, 0x0, [@local]}, @hopopts={0x6, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}]}, @srh={0x16, 0x6, 0x4, 0x3, 0x3, 0x70, 0x2, [@loopback, @local, @remote]}, @hopopts={0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x3a, 0x2e, '\x00', [@generic={0x2, 0xc9, "fa0dd92e22f673698472118c88436a2058b5a6d75b60a16c120dc321b76b63dbc5f0d37a475f02caffcec891b422bf5e74d080ca7b3a3be55b42d5c069d83d506a77a0b3f4fa36451a732fd47da0278743eeaa9a5072d95e5dc9959b9392b028b0696c4c560626e33b3a126ede90166d85dddcf3f6d12da324447525ae3ea7dacc6a52c97bd73a69475fae69b78c84704bc67ead15ae56e90f9632d261f6794b8773e5a8955e5c83e3dfe816911283d06529213573f2f9644faef8f2a862cd5a5cdf3a724e8ddb68c4"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x6, 0xa, [0x10001, 0x7, 0xd]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x8, [0xd6, 0x0, 0x5, 0x7ff]}}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x51141aca}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x28, {0x1, 0x8, 0x5, 0xec, [0x9, 0x3b5, 0xffffffffffffd159, 0x5]}}, @ra={0x5, 0x2, 0xaaa6}]}, @fragment={0x4, 0x0, 0x5, 0x1, 0x0, 0x10, 0x68}, @hopopts={0x33, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @calipso={0x7, 0x20, {0x1, 0x6, 0xf9, 0x4, [0x8, 0x3ff, 0x7]}}, @generic={0x80, 0x2b, "0caa88a03510381aa3d4b06b35481bfd76f621c20fee95149744cdccefb6ddd7655ab575d11503b3c088d3"}]}], {{0x4e20, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x5, "4f75e5", 0x4, "5d36db"}}}}}}}, 0x0) 10.393527727s ago: executing program 0 (id=267): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x8000) write(r0, &(0x7f0000000300)="cea34239d347fbb92610608bee39e23d2cae2e2d01c5fa315c99ed7ad1eb381dd364d282adfe847e42af86fdf0ab54fb1bcb282abb34d135d8c5cce59969b5bae644b0f090d8dd98fafd7428d7216fbba82dd96eefefea3b6b4c6d66072d62066dc262a117c49145d4614ec8cc2b6c6910182c2ec6c8c3b6a01cc6d74322fcf3b8de4e2805fa5378bb830d9b5cdaa670fa9a12af86651ccb11a73f09df36e12d7656b886cdae2d3fd5b5eef66b234317ce88a6484e798d49aae1786c84a66e2c9b22f23387100d08d870e7ef577fa038b950118125cc4828422a0969a01fed6b9588f9e33791", 0xe6) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001380), &(0x7f00000013c0)=0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, r6, 0x1, 0x0, 0x4, 0x8, {0x6, 0xb, 0xe, 0x30b4, 0x6, 0x2025, 0xfffe, 0x3, 0x3e40, 0x4, 0x0, 0x9, 0x2, 0xfffffffc, "12d56163d7287bd287881d942450c7153a3243937ca9a58f1c702a4ccc476b15"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x9, &(0x7f0000000140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2810e8, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) 10.143750407s ago: executing program 2 (id=268): r0 = openat$vcsa(0xffffff9c, &(0x7f0000000cc0), 0x200, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) fanotify_init(0x200, 0x0) syz_io_uring_setup(0x1f90, &(0x7f0000000140)={0x0, 0x4162, 0x840, 0x1, 0x35b}, 0x0, 0x0) shutdown(r1, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10.133023354s ago: executing program 4 (id=269): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc020000, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 9.045812361s ago: executing program 1 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x210, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x1e8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x198, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc54}, @WGPEER_A_ALLOWEDIPS={0xc, 0x9, 0x0, 0x1, [{0x4}, {0x4}]}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x210}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 7.555668774s ago: executing program 4 (id=271): syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC], 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)=0x1) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x8051) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, 0x0, 0xff00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) capget(&(0x7f00000001c0)={0x20080522}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000}) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000003400000000004001e8040000000", 0x24) close_range(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 7.537885944s ago: executing program 2 (id=272): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0xf6a4028f3f6a2a4) socket(0x10, 0x80003, 0x0) socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x39f2, 0x1000, 0xfffffffd, 0xbfe02000}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x200, 0x3d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x200, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1000}], 0x3) 7.390727662s ago: executing program 1 (id=273): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010450c0b7600000000000109022400010000a0000904000005030003000921ffff0901224500090581030002030217"], 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00043f0000003f2161e6fdf498d49b949d1ef5b4a8aaa1639c545d2c7653deab26552618690800000051939e10aab1b0057d682e7925ba09f4d51227cd909bceb4851bb9ba7aa9e2f8e0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.99028531s ago: executing program 0 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f00000000c0)={{0x0, @name="7112911a83a30f73163f83c22c17332d0377ac872d43ca4c990cec590cbf7ed7"}, 0x8, 0x8000000000000001, 0x9}) eventfd2(0xe, 0x180802) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1e, 0x5, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008402"]) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x9, 0xc9}}}, 0x6) 6.669259106s ago: executing program 3 (id=275): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x503, 0x2, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x800}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) pipe2$watch_queue(0x0, 0x80) pipe2$watch_queue(&(0x7f0000000380), 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xb2) socket$kcm(0x29, 0x7, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = mq_open(&(0x7f0000000040)='\x00\x00\x01\x00\x00\xd1\xce\xf4\x96\xb1g\xfd', 0x42, 0x0, 0x0) mq_notify(r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x49, 0x39cc191b, 0x5f, 0x9, 0x209, 0xffff2d33, 0xffffff01, 0x6, 0x3, 0x20000, 0x5, 0x4, 0xe4a1, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x2, 0x242, 0x0, 0xe, 0x0, 0x71, 0x6, 0x7, 0x1, 0x7, 0x9, 0x3e, 0x8f, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x7, 0x8000, 0x10, 0x1, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x15a, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8c2, 0xea4, 0x0, 0x4, 0x2, 0x8004, 0x2009, 0x3fc, 0x401, 0x6, 0x10001, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x81, 0x223], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4005, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x9, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x4, 0x6d02, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x9, 0xac8, 0xbf, 0x59, 0x3, 0x80000000, 0xfffffff9, 0x0, 0x9, 0xffff, 0xb0, 0x6, 0x1c, 0x120000, 0x3, 0x8, 0xa2ed, 0x10000004, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x0, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x10, 0x7a, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x5, 0x80010084, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xfffffffe, 0x200, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x100, 0x0, 0x0) 6.594117473s ago: executing program 2 (id=276): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$packet(0x11, 0x3, 0x300) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x6, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect(r8, &(0x7f0000000940)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80) unshare(0x2c020400) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, 0x0, 0x1000f) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) recvfrom$inet6(r9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @private1, 0x8000}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x21, 0x0, @fd_index=0x3, 0x0, 0x0}) 2.804422187s ago: executing program 0 (id=277): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800850000000e00000095000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r6, 0x5459, 0x0) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) 2.325665111s ago: executing program 2 (id=278): r0 = openat$vim2m(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000380)={0x5, 0x1, 0x1, {0x2, @vbi={0xfff, 0x0, 0x4, 0x4932315a, [0x10, 0x400000], [0x81, 0xce1], 0x1}}, 0x4}) (fail_nth: 11) 2.325312143s ago: executing program 4 (id=279): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x144, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x144}}, 0x804) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/275, 0x113}], 0x1}, 0x1008}], 0x1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xfffffff2}, 0x8) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a"], 0x0) msgctl$IPC_RMID(r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xfe, 0xa, 0xf4, 0x8, 0x4bb, 0x950, 0x6833, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x6, 0x50, 0x0, [{{0x9, 0x4, 0xe1, 0x7, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=ANY=[@ANYBLOB]}, {0x97, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0]}]}) 2.156443449s ago: executing program 1 (id=280): r0 = socket(0x6, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1e}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10040010}, 0x2000c000) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x2f) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000029c0)=@assoc_value={r5, 0x100}, &(0x7f0000002a00)=0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x28}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r6, 0x0, 0x80) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x82100) 1.693742455s ago: executing program 3 (id=281): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800850000000e00000095000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r6, 0x5459, 0x0) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) 0s ago: executing program 2 (id=282): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800850000000e00000095000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r6, 0x5459, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 86.656056][ T977] cfg80211: failed to load regulatory.db [ 87.587583][ T5825] cgroup: Unknown subsys name 'net' [ 87.707006][ T5825] cgroup: Unknown subsys name 'cpuset' [ 87.715376][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.177584][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.609180][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.620586][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.629616][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.637173][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.645238][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.654626][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.662187][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.670257][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.679057][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.686893][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.695703][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.703231][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.706488][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.740585][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.744463][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.765342][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.782786][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.790459][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.797595][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.797621][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.807566][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.819974][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.827616][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.828156][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.857741][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.453885][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 92.563757][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 92.604622][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 92.710963][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 92.727455][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 92.796555][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.804009][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.811438][ T5853] bridge_slave_0: entered allmulticast mode [ 92.819347][ T5853] bridge_slave_0: entered promiscuous mode [ 92.852730][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.860024][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.867399][ T5853] bridge_slave_1: entered allmulticast mode [ 92.874543][ T5853] bridge_slave_1: entered promiscuous mode [ 93.005747][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.012933][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.020909][ T5851] bridge_slave_0: entered allmulticast mode [ 93.028238][ T5851] bridge_slave_0: entered promiscuous mode [ 93.055325][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.062465][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.069778][ T5854] bridge_slave_0: entered allmulticast mode [ 93.076853][ T5854] bridge_slave_0: entered promiscuous mode [ 93.088294][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.110550][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.117774][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.127086][ T5851] bridge_slave_1: entered allmulticast mode [ 93.134685][ T5851] bridge_slave_1: entered promiscuous mode [ 93.141709][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.149249][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.156718][ T5856] bridge_slave_0: entered allmulticast mode [ 93.163668][ T5856] bridge_slave_0: entered promiscuous mode [ 93.171737][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.178891][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.186178][ T5856] bridge_slave_1: entered allmulticast mode [ 93.193876][ T5856] bridge_slave_1: entered promiscuous mode [ 93.200319][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.207630][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.214970][ T5854] bridge_slave_1: entered allmulticast mode [ 93.221871][ T5854] bridge_slave_1: entered promiscuous mode [ 93.230528][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.310722][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.318148][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.325379][ T5855] bridge_slave_0: entered allmulticast mode [ 93.332333][ T5855] bridge_slave_0: entered promiscuous mode [ 93.355432][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.392106][ T5853] team0: Port device team_slave_0 added [ 93.398406][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.408363][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.415625][ T5855] bridge_slave_1: entered allmulticast mode [ 93.422515][ T5855] bridge_slave_1: entered promiscuous mode [ 93.443457][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.469607][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.482664][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.493454][ T5853] team0: Port device team_slave_1 added [ 93.513742][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.537099][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.548189][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.584605][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.595046][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.602017][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.628437][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.642840][ T5851] team0: Port device team_slave_0 added [ 93.652318][ T5851] team0: Port device team_slave_1 added [ 93.717662][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.724749][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.751180][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.783732][ T5856] team0: Port device team_slave_0 added [ 93.784804][ T51] Bluetooth: hci1: command tx timeout [ 93.795920][ T5856] team0: Port device team_slave_1 added [ 93.803906][ T5854] team0: Port device team_slave_0 added [ 93.813103][ T5854] team0: Port device team_slave_1 added [ 93.834637][ T5855] team0: Port device team_slave_0 added [ 93.843277][ T5855] team0: Port device team_slave_1 added [ 93.854600][ T51] Bluetooth: hci2: command tx timeout [ 93.860197][ T51] Bluetooth: hci4: command tx timeout [ 93.903715][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.912290][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.935413][ T51] Bluetooth: hci3: command tx timeout [ 93.938806][ T5848] Bluetooth: hci0: command tx timeout [ 93.943763][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.009523][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.016772][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.043641][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.057222][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.064223][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.090499][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.102572][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.109642][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.136008][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.147619][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.154896][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.181129][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.205027][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.211965][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.238033][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.258407][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.265393][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.291647][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.303145][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.310575][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.336757][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.360740][ T5853] hsr_slave_0: entered promiscuous mode [ 94.367074][ T5853] hsr_slave_1: entered promiscuous mode [ 94.439004][ T5851] hsr_slave_0: entered promiscuous mode [ 94.445481][ T5851] hsr_slave_1: entered promiscuous mode [ 94.451454][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.459655][ T5851] Cannot create hsr debugfs directory [ 94.546542][ T5855] hsr_slave_0: entered promiscuous mode [ 94.552922][ T5855] hsr_slave_1: entered promiscuous mode [ 94.559670][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.567581][ T5855] Cannot create hsr debugfs directory [ 94.585282][ T5854] hsr_slave_0: entered promiscuous mode [ 94.591394][ T5854] hsr_slave_1: entered promiscuous mode [ 94.598087][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.605721][ T5854] Cannot create hsr debugfs directory [ 94.678682][ T5856] hsr_slave_0: entered promiscuous mode [ 94.685663][ T5856] hsr_slave_1: entered promiscuous mode [ 94.691588][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.700110][ T5856] Cannot create hsr debugfs directory [ 95.186751][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.205352][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.216725][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.237386][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.290654][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.309389][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.331306][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.351296][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.397039][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.433590][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.456815][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.478589][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.555441][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.572932][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.590330][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.626732][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.707855][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.748453][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.760890][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.772434][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.792963][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.803476][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.825997][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.841414][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.854810][ T5848] Bluetooth: hci1: command tx timeout [ 95.904449][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.911693][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.922151][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.929243][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.937527][ T5848] Bluetooth: hci4: command tx timeout [ 95.939389][ T51] Bluetooth: hci2: command tx timeout [ 95.944842][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.955396][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.981401][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.988492][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.005484][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.014709][ T51] Bluetooth: hci3: command tx timeout [ 96.014733][ T5848] Bluetooth: hci0: command tx timeout [ 96.103528][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.139788][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.169343][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.176451][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.210515][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.217618][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.241945][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.311316][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.328945][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.340890][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.397726][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.404885][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.429118][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.485732][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.492825][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.516469][ T5851] veth0_vlan: entered promiscuous mode [ 96.522340][ T5853] veth0_vlan: entered promiscuous mode [ 96.549524][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.565486][ T5853] veth1_vlan: entered promiscuous mode [ 96.591542][ T5851] veth1_vlan: entered promiscuous mode [ 96.605494][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.612805][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.652449][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.659554][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.680437][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.770477][ T5851] veth0_macvtap: entered promiscuous mode [ 96.793495][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.805222][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.842243][ T5853] veth0_macvtap: entered promiscuous mode [ 96.850698][ T5851] veth1_macvtap: entered promiscuous mode [ 96.862144][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.886805][ T5855] veth0_vlan: entered promiscuous mode [ 96.903006][ T5853] veth1_macvtap: entered promiscuous mode [ 96.926558][ T5855] veth1_vlan: entered promiscuous mode [ 96.947705][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.978566][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.999978][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.022605][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.032539][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.042058][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.051989][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.076217][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.089085][ T5855] veth0_macvtap: entered promiscuous mode [ 97.131165][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.141387][ T5855] veth1_macvtap: entered promiscuous mode [ 97.179856][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.189535][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.199096][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.208647][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.277466][ T5856] veth0_vlan: entered promiscuous mode [ 97.307743][ T5856] veth1_vlan: entered promiscuous mode [ 97.318465][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.325319][ T5854] veth0_vlan: entered promiscuous mode [ 97.337597][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.367782][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.380984][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.429000][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.439808][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.449262][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.458742][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.475315][ T5854] veth1_vlan: entered promiscuous mode [ 97.493613][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.503088][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.523778][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.551095][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.619833][ T5856] veth0_macvtap: entered promiscuous mode [ 97.638760][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.650323][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.651295][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.680782][ T5856] veth1_macvtap: entered promiscuous mode [ 97.746531][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.763135][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.792543][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.819836][ T5854] veth0_macvtap: entered promiscuous mode [ 97.865682][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.876727][ T5854] veth1_macvtap: entered promiscuous mode [ 97.934375][ T5848] Bluetooth: hci1: command tx timeout [ 97.938033][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.967438][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.999803][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.014600][ T5848] Bluetooth: hci4: command tx timeout [ 98.017950][ T51] Bluetooth: hci2: command tx timeout [ 98.033875][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.063422][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.064263][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.088166][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.096835][ T51] Bluetooth: hci3: command tx timeout [ 98.105188][ T51] Bluetooth: hci0: command tx timeout [ 98.129879][ T5925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.145567][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.163749][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.297626][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.314723][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.323826][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.335667][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.357089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.446728][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.510769][ T5931] Cannot find add_set index 0 as target [ 98.521975][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.560800][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.664200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 98.677082][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.708674][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.721122][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.755621][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.847439][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.880221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.914545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.138179][ T5940] FAULT_INJECTION: forcing a failure. [ 99.138179][ T5940] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.152913][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.207395][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.0.7 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 99.207421][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.207439][ T5940] Call Trace: [ 99.207449][ T5940] [ 99.207458][ T5940] dump_stack_lvl+0x189/0x250 [ 99.207496][ T5940] ? __pfx____ratelimit+0x10/0x10 [ 99.207530][ T5940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.207559][ T5940] ? __pfx__printk+0x10/0x10 [ 99.207591][ T5940] should_fail_ex+0x414/0x560 [ 99.207619][ T5940] _copy_to_user+0x31/0xb0 [ 99.207641][ T5940] ucma_create_id+0x2b6/0x360 [ 99.207663][ T5940] ? __pfx_ucma_create_id+0x10/0x10 [ 99.207697][ T5940] ucma_write+0x246/0x2e0 [ 99.207712][ T5940] ? common_file_perm+0x199/0x200 [ 99.207738][ T5940] ? __pfx_ucma_write+0x10/0x10 [ 99.207755][ T5940] ? security_file_permission+0x75/0x290 [ 99.207776][ T5940] ? rw_verify_area+0x258/0x650 [ 99.207808][ T5940] vfs_writev+0x4b3/0x960 [ 99.207833][ T5940] ? __pfx_ucma_write+0x10/0x10 [ 99.207859][ T5940] ? __pfx_vfs_writev+0x10/0x10 [ 99.207894][ T5940] ? __fget_files+0x2a/0x420 [ 99.207913][ T5940] ? __fget_files+0x3a0/0x420 [ 99.207929][ T5940] ? __fget_files+0x2a/0x420 [ 99.207953][ T5940] do_writev+0x14d/0x2d0 [ 99.207972][ T5940] ? __pfx_do_writev+0x10/0x10 [ 99.207994][ T5940] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 99.208020][ T5940] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.208045][ T5940] __do_fast_syscall_32+0xb6/0x2b0 [ 99.208061][ T5940] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.208089][ T5940] do_fast_syscall_32+0x34/0x80 [ 99.208105][ T5940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.208126][ T5940] RIP: 0023:0xf706e539 [ 99.208146][ T5940] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 99.208161][ T5940] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 99.208180][ T5940] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 99.208193][ T5940] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.208203][ T5940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.208214][ T5940] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 99.208224][ T5940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.208248][ T5940] [ 99.523989][ T5944] Zero length message leads to an empty skb [ 99.914608][ T5958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12'. [ 100.029874][ T51] Bluetooth: hci1: command tx timeout [ 100.095516][ T51] Bluetooth: hci2: command tx timeout [ 100.102532][ T5848] Bluetooth: hci4: command tx timeout [ 100.234599][ T5962] loop6: detected capacity change from 0 to 63 [ 100.244367][ T51] Bluetooth: hci0: command tx timeout [ 100.249770][ T51] Bluetooth: hci3: command tx timeout [ 100.302850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.443910][ T5838] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.478672][ T5838] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.524852][ T5838] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.556973][ T5961] raw_sendmsg: syz.3.12 forgot to set AF_INET. Fix it! [ 100.587111][ T5838] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.612812][ T5838] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.622545][ T5961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'. [ 100.784426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.892294][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 100.965744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.253560][ T5971] bridge_slave_1: left allmulticast mode [ 101.330197][ T5971] bridge_slave_1: left promiscuous mode [ 101.341110][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.384736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.423612][ T5971] bridge_slave_0: left allmulticast mode [ 101.431110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.537568][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.557602][ T5971] bridge_slave_0: left promiscuous mode [ 101.563684][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.694594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.744341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.806978][ T5992] netlink: 5188 bytes leftover after parsing attributes in process `syz.3.17'. [ 102.849895][ T5993] process 'syz.0.19' launched './file1' with NULL argv: empty string added [ 103.186880][ T5843] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 103.295467][ T5899] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.412695][ T5843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.425636][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.439542][ T5843] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 103.458174][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.488642][ T5899] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.502897][ T5843] usb 4-1: config 0 descriptor?? [ 103.532402][ T5843] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.543425][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 103.554874][ T5899] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.621508][ T6000] netlink: 'syz.0.21': attribute type 3 has an invalid length. [ 103.691244][ T5899] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.796577][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.797753][ T5992] dvb-usb: bulk message failed: -22 (2/0) [ 103.822675][ T6000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.856546][ T5843] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 104.274929][ T5843] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 104.288414][ T5996] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 104.312067][ T5843] usb 4-1: media controller created [ 104.328800][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.329173][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.470484][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 104.489195][ T5843] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.499456][ T2152] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.552409][ T5843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 104.636185][ T5843] dvb-usb: schedule remote query interval to 150 msecs. [ 104.664757][ T5843] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.666138][ T5899] usb 2-1: USB disconnect, device number 2 [ 104.738163][ T2152] usb 1-1: Using ep0 maxpacket: 16 [ 104.746576][ T2152] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 104.761887][ T2152] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 104.803080][ T2152] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 104.812900][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.833678][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 104.850360][ T5843] dvb-usb: error while querying for an remote control event. [ 104.884289][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.924550][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.971023][ T2152] usb 1-1: Product: syz [ 104.996793][ T2152] usb 1-1: Manufacturer: syz [ 105.022575][ T2152] usb 1-1: SerialNumber: syz [ 105.044839][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 105.055081][ T5843] dvb-usb: error while querying for an remote control event. [ 105.125561][ T2152] usb 1-1: config 0 descriptor?? [ 105.131345][ T6001] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 105.147122][ T6001] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 105.244370][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 105.250376][ T5843] dvb-usb: error while querying for an remote control event. [ 105.424169][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 105.430037][ T5936] dvb-usb: error while querying for an remote control event. [ 105.604542][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 105.612984][ T5936] dvb-usb: error while querying for an remote control event. [ 105.684855][ T5936] usb 4-1: USB disconnect, device number 2 [ 105.841847][ T5936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 106.294167][ T5899] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 106.435048][ T5899] usb 2-1: device descriptor read/64, error -71 [ 106.634388][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.674410][ T5899] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 106.814327][ T5899] usb 2-1: device descriptor read/64, error -71 [ 106.822245][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 106.834519][ T2152] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.853512][ T5936] usb 5-1: config 7 has an invalid interface number: 76 but max is 0 [ 106.871383][ T2152] asix 1-1:0.0: probe with driver asix failed with error -71 [ 106.879239][ T5936] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 106.901717][ T2152] usb 1-1: USB disconnect, device number 2 [ 106.907845][ T5936] usb 5-1: config 7 has no interface number 0 [ 106.945396][ T5936] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 106.957088][ T5899] usb usb2-port1: attempt power cycle [ 106.968496][ T5936] usb 5-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 107.009211][ T5936] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 107.042064][ T5936] usb 5-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 107.069075][ T5936] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 107.095468][ T5936] usb 5-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 107.110751][ T5936] usb 5-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 107.121938][ T5936] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 107.133605][ T5936] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 107.190722][ T5936] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 107.263472][ T5936] usb 5-1: config 7 interface 76 has no altsetting 0 [ 107.283613][ T5936] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 107.292829][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.301808][ T5936] usb 5-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 107.322157][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.905557][ T5827] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.948169][ T5936] usb 5-1: Manufacturer: 茍掞僓ﱶ [ 108.049016][ T5936] usb 5-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 108.245397][ T5827] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 108.311559][ T5827] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.384055][ T5827] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.535447][ T5827] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.697307][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.792525][ T5827] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.858641][ T5827] usb 4-1: invalid MIDI out EP 0 [ 108.928613][ T6036] netlink: 'syz.4.26': attribute type 3 has an invalid length. [ 109.287584][ T6045] delete_channel: no stack [ 109.494405][ T5827] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 109.501484][ T5936] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.562262][ T5936] usb 5-1: invalid MIDI in EP 0 [ 109.583485][ T5827] usb 4-1: USB disconnect, device number 3 [ 110.044996][ T6071] netlink: 'syz.2.32': attribute type 2 has an invalid length. [ 110.092058][ T6071] netlink: 1 bytes leftover after parsing attributes in process `syz.2.32'. [ 110.296552][ T5936] snd-usb-audio 5-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 110.372403][ T30] audit: type=1326 audit(1750611949.792:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.428015][ T30] audit: type=1326 audit(1750611949.792:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.488078][ T30] audit: type=1326 audit(1750611949.842:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.541365][ T30] audit: type=1326 audit(1750611949.842:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.568701][ T5936] usb 5-1: USB disconnect, device number 2 [ 110.572362][ T30] audit: type=1326 audit(1750611949.842:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.577494][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.622488][ T30] audit: type=1326 audit(1750611949.842:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.650642][ T30] audit: type=1326 audit(1750611949.842:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.785178][ T30] audit: type=1326 audit(1750611949.842:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.819395][ T30] audit: type=1326 audit(1750611949.842:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.846212][ T30] audit: type=1326 audit(1750611949.842:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 110.953839][ T6084] vlan0: entered promiscuous mode [ 111.026773][ T6084] team0: Port device vlan0 added [ 111.204463][ T5936] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.324666][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 111.384166][ T5827] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.394827][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 111.411431][ T5936] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 111.433402][ T6092] ======================================================= [ 111.433402][ T6092] WARNING: The mand mount option has been deprecated and [ 111.433402][ T6092] and is ignored by this kernel. Remove the mand [ 111.433402][ T6092] option from the mount to silence this warning. [ 111.433402][ T6092] ======================================================= [ 111.443024][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.502203][ T5936] usb 5-1: Product: syz [ 111.508180][ T5936] usb 5-1: Manufacturer: syz [ 111.513107][ T5936] usb 5-1: SerialNumber: syz [ 111.542350][ T5936] r8152-cfgselector 5-1: Unknown version 0x0000 [ 111.549461][ T2152] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.559397][ T5936] r8152-cfgselector 5-1: config 0 descriptor?? [ 111.596287][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 111.611343][ T5827] usb 4-1: config 0 has no interfaces? [ 111.636376][ T5827] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 111.645590][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.653598][ T5827] usb 4-1: Product: syz [ 111.661219][ T5827] usb 4-1: Manufacturer: syz [ 111.666123][ T5827] usb 4-1: SerialNumber: syz [ 111.676237][ T5827] usb 4-1: config 0 descriptor?? [ 111.714170][ T2152] usb 3-1: Using ep0 maxpacket: 32 [ 111.722763][ T2152] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 111.733336][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.757932][ T2152] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.770726][ T2152] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 111.790132][ T2152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.809568][ T2152] usb 3-1: config 0 descriptor?? [ 111.892101][ T2152] usb 4-1: USB disconnect, device number 4 [ 111.899746][ T43] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 111.911430][ T43] usb 1-1: config 0 has no interface number 1 [ 111.933672][ T43] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 111.949143][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.961691][ T43] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 111.974886][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.984514][ T43] usb 1-1: SerialNumber: syz [ 111.994695][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.007487][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.020886][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.040873][ T43] usb 1-1: config 0 descriptor?? [ 112.046717][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.069720][ T43] usb 1-1: Found UVC 0.00 device (0002:0000) [ 112.086047][ T43] usb 1-1: No valid video chain found. [ 112.131263][ T5936] r8152-cfgselector 5-1: Unknown version 0x0000 [ 112.137901][ T5936] r8152-cfgselector 5-1: bad CDC descriptors [ 112.179798][ T5936] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 112.371436][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.387874][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.399900][ T5936] usb 1-1: USB disconnect, device number 3 [ 112.878885][ T6130] mmap: syz.3.43 (6130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.901596][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 112.913201][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 113.263601][ T6139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.277754][ T6139] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.600746][ T6139] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.634993][ T6139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.651615][ T6139] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.862766][ T6139] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.014947][ T6139] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.024497][ T6139] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.132628][ T6139] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.165149][ T6139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.172400][ T6139] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.225865][ T6139] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.306533][ T6139] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.330375][ T6139] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.391779][ T6139] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.425091][ T5936] usb 3-1: USB disconnect, device number 3 [ 114.484714][ T6153] fuse: Bad value for 'fd' [ 114.572189][ T6155] FAULT_INJECTION: forcing a failure. [ 114.572189][ T6155] name failslab, interval 1, probability 0, space 0, times 1 [ 114.615319][ T6132] syz.4.44 (6132): drop_caches: 2 [ 114.617947][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.3.50 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 114.617972][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.617983][ T6155] Call Trace: [ 114.617990][ T6155] [ 114.617998][ T6155] dump_stack_lvl+0x189/0x250 [ 114.618032][ T6155] ? __pfx____ratelimit+0x10/0x10 [ 114.618061][ T6155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.618089][ T6155] ? __pfx__printk+0x10/0x10 [ 114.618111][ T6155] ? __pfx___might_resched+0x10/0x10 [ 114.618139][ T6155] ? fs_reclaim_acquire+0x7d/0x100 [ 114.618165][ T6155] should_fail_ex+0x414/0x560 [ 114.618193][ T6155] should_failslab+0xa8/0x100 [ 114.618214][ T6155] __kmalloc_noprof+0xcb/0x4f0 [ 114.618231][ T6155] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 114.618257][ T6155] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 114.618294][ T6155] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 114.618329][ T6155] genl_family_rcv_msg_doit+0xb8/0x300 [ 114.618362][ T6155] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 114.618391][ T6155] ? rcu_is_watching+0x15/0xb0 [ 114.618422][ T6155] ? apparmor_capable+0x137/0x1b0 [ 114.618451][ T6155] ? bpf_lsm_capable+0x9/0x20 [ 114.618529][ T6155] ? security_capable+0x7e/0x2e0 [ 114.618558][ T6155] genl_rcv_msg+0x60e/0x790 [ 114.618591][ T6155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.618614][ T6155] ? ref_tracker_free+0x63a/0x7d0 [ 114.618637][ T6155] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 114.618663][ T6155] ? __pfx_ref_tracker_free+0x10/0x10 [ 114.618698][ T6155] netlink_rcv_skb+0x208/0x470 [ 114.618719][ T6155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.618744][ T6155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.618830][ T6155] ? down_read+0x1ad/0x2e0 [ 114.618853][ T6155] genl_rcv+0x28/0x40 [ 114.618877][ T6155] netlink_unicast+0x75b/0x8d0 [ 114.618907][ T6155] netlink_sendmsg+0x805/0xb30 [ 114.618937][ T6155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.618961][ T6155] ? __import_iovec+0x5d4/0x7f0 [ 114.618978][ T6155] ? aa_sock_msg_perm+0x94/0x160 [ 114.619003][ T6155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.619026][ T6155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.619048][ T6155] __sock_sendmsg+0x21c/0x270 [ 114.619080][ T6155] ____sys_sendmsg+0x505/0x830 [ 114.619108][ T6155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.619147][ T6155] ___sys_sendmsg+0x21f/0x2a0 [ 114.619172][ T6155] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.619230][ T6155] ? __fget_files+0x2a/0x420 [ 114.619249][ T6155] ? __fget_files+0x3a0/0x420 [ 114.619280][ T6155] __sys_sendmsg+0x164/0x220 [ 114.619304][ T6155] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.619341][ T6155] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 114.619371][ T6155] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.619399][ T6155] __do_fast_syscall_32+0xb6/0x2b0 [ 114.619417][ T6155] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.619447][ T6155] do_fast_syscall_32+0x34/0x80 [ 114.619464][ T6155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.619499][ T6155] RIP: 0023:0xf710e539 [ 114.619514][ T6155] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 114.619529][ T6155] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 114.619548][ T6155] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 114.619561][ T6155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.619571][ T6155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.619582][ T6155] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.619592][ T6155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.619618][ T6155] [ 115.302802][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.354166][ T5936] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.735269][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.833495][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.846276][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 115.857520][ T5936] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 115.883354][ T5936] usb 4-1: config 179 has no interface number 0 [ 115.890494][ T5936] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 115.909475][ T5936] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 115.921149][ T5936] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 115.939492][ T5936] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 115.992858][ T5936] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.021736][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 116.079814][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.095311][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.112260][ T43] usb 2-1: config 7 has an invalid interface number: 76 but max is 0 [ 116.121942][ T43] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 116.154499][ T43] usb 2-1: config 7 has no interface number 0 [ 116.175257][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.190423][ T6161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.209066][ T6174] bridge1: entered promiscuous mode [ 116.228907][ T43] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 116.278383][ T43] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 116.302791][ T43] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 116.334173][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 116.343345][ T43] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 116.374153][ T43] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 116.404142][ T43] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 116.442987][ T5936] usb 4-1: USB disconnect, device number 5 [ 116.452944][ T6170] syz.4.53 (6170): drop_caches: 2 [ 116.486902][ T43] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 116.520362][ T43] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 116.575618][ T43] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 116.635558][ T43] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 116.657446][ T43] usb 2-1: config 7 interface 76 has no altsetting 0 [ 116.672292][ T43] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 116.682204][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.699058][ T43] usb 2-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 116.719381][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.726039][ T43] usb 2-1: Manufacturer: 茍掞僓ﱶ [ 116.732451][ T43] usb 2-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 116.774498][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 116.934304][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.960579][ T6166] netlink: 'syz.1.54': attribute type 3 has an invalid length. [ 116.978997][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.990114][ T43] usb 2-1: invalid MIDI in EP 0 [ 117.061968][ T43] snd-usb-audio 2-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 117.086857][ T5899] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 117.103921][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.114014][ T43] usb 2-1: USB disconnect, device number 6 [ 117.154171][ T977] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.179449][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.199588][ T5899] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.221791][ T5899] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.237883][ T5899] usb 3-1: Manufacturer: syz [ 117.249624][ T5899] usb 3-1: config 0 descriptor?? [ 117.335396][ T5899] rc_core: IR keymap rc-hauppauge not found [ 117.344199][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 117.351610][ T5899] Registered IR keymap rc-empty [ 117.367001][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.378559][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.389820][ T5899] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 117.400286][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.412120][ T5899] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 117.424346][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.440146][ T977] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.472812][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.499307][ T977] usb 5-1: config 0 descriptor?? [ 117.571697][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 117.582892][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.599432][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.690759][ T5899] usb 3-1: USB disconnect, device number 4 [ 117.776165][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.994041][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.137090][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.174331][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.264193][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.281888][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 118.287953][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 118.299092][ T977] usb 5-1: USB disconnect, device number 4 [ 118.414296][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 119.457030][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.498971][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 119.517619][ T6217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.838024][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.856249][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.009091][ T5899] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 120.023111][ T5899] usb 1-1: config 0 has no interface number 1 [ 120.040282][ T5899] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 120.063816][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.092017][ T5899] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 120.107588][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.117691][ T5899] usb 1-1: SerialNumber: syz [ 120.215372][ T5899] usb 1-1: config 0 descriptor?? [ 120.268469][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.317288][ T5899] usb 1-1: Found UVC 0.00 device (0002:0000) [ 120.334317][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.356060][ T5899] usb 1-1: No valid video chain found. [ 120.399950][ T6245] FAULT_INJECTION: forcing a failure. [ 120.399950][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 120.485512][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.494755][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.505814][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 120.511953][ T6245] CPU: 1 UID: 0 PID: 6245 Comm: syz.3.77 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 120.511974][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.511985][ T6245] Call Trace: [ 120.511992][ T6245] [ 120.511999][ T6245] dump_stack_lvl+0x189/0x250 [ 120.512032][ T6245] ? __pfx____ratelimit+0x10/0x10 [ 120.512065][ T6245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.512093][ T6245] ? __pfx__printk+0x10/0x10 [ 120.512118][ T6245] ? __pfx___might_resched+0x10/0x10 [ 120.512145][ T6245] ? fs_reclaim_acquire+0x7d/0x100 [ 120.512171][ T6245] should_fail_ex+0x414/0x560 [ 120.512198][ T6245] should_failslab+0xa8/0x100 [ 120.512221][ T6245] __kmalloc_noprof+0xcb/0x4f0 [ 120.512237][ T6245] ? kfree+0x4d/0x440 [ 120.512262][ T6245] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 120.512292][ T6245] tomoyo_realpath_from_path+0xe3/0x5d0 [ 120.512318][ T6245] ? tomoyo_domain+0xd9/0x130 [ 120.512350][ T6245] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 120.512372][ T6245] tomoyo_path_number_perm+0x1e8/0x5a0 [ 120.512396][ T6245] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.512435][ T6245] ? __lock_acquire+0xab9/0xd20 [ 120.512481][ T6245] ? __fget_files+0x2a/0x420 [ 120.512506][ T6245] ? __fget_files+0x3a0/0x420 [ 120.512526][ T6245] ? __fget_files+0x2a/0x420 [ 120.512551][ T6245] security_file_ioctl_compat+0xcb/0x2d0 [ 120.512574][ T6245] __ia32_compat_sys_ioctl+0x128/0x840 [ 120.512606][ T6245] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 120.512634][ T6245] ? __fget_files+0x3a0/0x420 [ 120.512661][ T6245] ? fput+0xa0/0xd0 [ 120.512685][ T6245] ? ksys_write+0x22a/0x250 [ 120.512709][ T6245] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 120.512739][ T6245] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.512768][ T6245] __do_fast_syscall_32+0xb6/0x2b0 [ 120.512786][ T6245] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.512817][ T6245] do_fast_syscall_32+0x34/0x80 [ 120.512835][ T6245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.512857][ T6245] RIP: 0023:0xf710e539 [ 120.512873][ T6245] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 120.512893][ T6245] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 120.512912][ T6245] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 120.512928][ T6245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.512939][ T6245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.512950][ T6245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.512961][ T6245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.512987][ T6245] [ 120.513381][ T6245] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.549041][ T5899] usb 1-1: USB disconnect, device number 4 [ 121.114235][ T5936] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.296690][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 121.340623][ T5936] usb 2-1: config 7 has an invalid interface number: 76 but max is 0 [ 121.362257][ T5936] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 121.384529][ T5936] usb 2-1: config 7 has no interface number 0 [ 121.403127][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 121.442260][ T5936] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 121.453483][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 121.474496][ T5936] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 121.493432][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 121.543551][ T5936] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 121.589796][ T5936] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 121.618218][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 121.722841][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 121.759686][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 121.772714][ T5936] usb 2-1: config 7 interface 76 has no altsetting 0 [ 121.783729][ T5936] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 121.794146][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.795306][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.811884][ T5936] usb 2-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 121.833113][ T5936] usb 2-1: Manufacturer: 茍掞僓ﱶ [ 121.838673][ T5936] usb 2-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 121.996331][ T5899] usb 4-1: config 0 has no interfaces? [ 122.006686][ T5899] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 122.017512][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.037345][ T5899] usb 4-1: Product: syz [ 122.050962][ T5899] usb 4-1: Manufacturer: syz [ 122.064000][ T5899] usb 4-1: SerialNumber: syz [ 122.091051][ T5899] usb 4-1: config 0 descriptor?? [ 122.253360][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 122.286754][ T6244] netlink: 'syz.1.76': attribute type 3 has an invalid length. [ 122.347152][ T5936] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.376422][ T5936] usb 2-1: invalid MIDI in EP 0 [ 122.468450][ T5936] snd-usb-audio 2-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 122.488184][ T5936] usb 2-1: USB disconnect, device number 7 [ 122.518944][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.182484][ T6289] usb usb8: check_ctrlrecip: process 6289 (syz.4.90) requesting ep 01 but needs 81 [ 123.193975][ T6289] usb usb8: usbfs: process 6289 (syz.4.90) did not claim interface 0 before use [ 123.286616][ T6285] netlink: 210968 bytes leftover after parsing attributes in process `syz.4.90'. [ 123.722129][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 124.175259][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.234232][ T5936] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.349006][ T43] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 124.364412][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.390202][ T43] usb 5-1: Product: syz [ 124.398175][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 124.403978][ T43] usb 5-1: Manufacturer: syz [ 124.410228][ T43] usb 5-1: SerialNumber: syz [ 124.417560][ T5936] usb 1-1: config 7 has an invalid interface number: 76 but max is 0 [ 124.427921][ T5936] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 124.436943][ T5936] usb 1-1: config 7 has no interface number 0 [ 124.460844][ T43] usb 5-1: config 0 descriptor?? [ 124.466605][ T5936] usb 1-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 124.495975][ T5843] usb 4-1: USB disconnect, device number 6 [ 124.508066][ T5936] usb 1-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 124.527223][ T5936] usb 1-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 124.538921][ T5936] usb 1-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 124.593373][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 124.593386][ T30] audit: type=1326 audit(1750611964.012:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 124.655230][ T5936] usb 1-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 124.671338][ T5936] usb 1-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 124.684302][ T5936] usb 1-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 124.705208][ T5936] usb 1-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 124.734045][ T30] audit: type=1326 audit(1750611964.012:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 124.741359][ T5936] usb 1-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 124.857334][ T30] audit: type=1326 audit(1750611964.052:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 124.880102][ T5936] usb 1-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 124.919337][ T5936] usb 1-1: config 7 interface 76 has no altsetting 0 [ 124.933179][ T5936] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 124.948397][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.956966][ T5936] usb 1-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 125.021581][ T6322] bridge_slave_0: left allmulticast mode [ 125.030289][ T6322] bridge_slave_0: left promiscuous mode [ 125.037250][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.055796][ T30] audit: type=1326 audit(1750611964.052:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 125.079942][ T5936] usb 1-1: Manufacturer: 茍掞僓ﱶ [ 125.112849][ T6322] bridge_slave_1: left allmulticast mode [ 125.120269][ T6322] bridge_slave_1: left promiscuous mode [ 125.127177][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.146678][ T30] audit: type=1326 audit(1750611964.052:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 125.175784][ T43] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 125.184699][ T30] audit: type=1326 audit(1750611964.052:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 125.209930][ T30] audit: type=1326 audit(1750611964.052:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 125.232618][ T30] audit: type=1326 audit(1750611964.052:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 125.262482][ T43] asix 5-1:0.0: probe with driver asix failed with error -71 [ 125.270109][ T30] audit: type=1326 audit(1750611964.052:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 125.353613][ T43] usb 5-1: USB disconnect, device number 5 [ 125.398415][ T30] audit: type=1326 audit(1750611964.052:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 125.432031][ T5936] usb 1-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 125.449590][ T6322] bond0: (slave bond_slave_0): Releasing backup interface [ 125.486688][ T6322] bond0: (slave bond_slave_1): Releasing backup interface [ 125.518411][ T6322] team0: Port device team_slave_0 removed [ 125.540702][ T6322] team0: Port device team_slave_1 removed [ 125.552101][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.566770][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.653106][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.663475][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.793363][ T6309] netlink: 'syz.0.96': attribute type 3 has an invalid length. [ 125.843600][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.857153][ T5936] usb 1-1: invalid MIDI in EP 0 [ 125.958702][ T5936] snd-usb-audio 1-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 126.272037][ T6345] netlink: 'syz.4.109': attribute type 10 has an invalid length. [ 126.320759][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 126.341042][ T6345] netlink: 2 bytes leftover after parsing attributes in process `syz.4.109'. [ 126.355281][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 126.396427][ T6345] team0: entered promiscuous mode [ 126.401481][ T6345] team_slave_0: entered promiscuous mode [ 126.438436][ T5936] usb 1-1: USB disconnect, device number 5 [ 126.507199][ T6345] team_slave_1: entered promiscuous mode [ 126.516200][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.529137][ T5843] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.966572][ T5843] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 126.980383][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.042734][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.093992][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.173818][ T5843] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.193955][ T5843] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.264118][ T5843] usb 4-1: Manufacturer: syz [ 127.291145][ T5843] usb 4-1: config 0 descriptor?? [ 128.039641][ T5843] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 128.064826][ T5843] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 128.127903][ T5843] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 128.507233][ T6373] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 128.678149][ T6373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.760245][ T6376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.794942][ T6376] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 128.855270][ T6376] bond1: (slave vti0): Error -95 calling set_mac_address [ 128.949074][ T5843] usb 4-1: USB disconnect, device number 7 [ 129.524284][ T5843] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.644677][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 129.644693][ T30] audit: type=1326 audit(1750611969.072:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.3.124" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 129.688043][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 129.706349][ T5843] usb 2-1: config 7 has an invalid interface number: 76 but max is 0 [ 129.730183][ T5843] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 129.754239][ T5843] usb 2-1: config 7 has no interface number 0 [ 129.775998][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 129.813006][ T5843] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 129.870446][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 129.916687][ T5843] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 129.954649][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 129.966568][ T5843] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 130.040630][ T5843] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 130.126880][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 130.288587][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 130.395130][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 130.433047][ T5843] usb 2-1: config 7 interface 76 has no altsetting 0 [ 130.450750][ T5843] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 130.462525][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.514265][ T5843] usb 2-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 130.534598][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.572818][ T5843] usb 2-1: Manufacturer: 茍掞僓ﱶ [ 130.764135][ T5843] usb 2-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 131.081652][ T6390] netlink: 'syz.1.121': attribute type 3 has an invalid length. [ 131.144306][ T5936] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.160088][ T5843] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.172271][ T6418] syz.3.129 (6418): drop_caches: 2 [ 131.203941][ T5843] usb 2-1: invalid MIDI in EP 0 [ 131.246123][ T6426] sctp: [Deprecated]: syz.2.131 (pid 6426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.246123][ T6426] Use struct sctp_sack_info instead [ 131.309544][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 131.320196][ T5936] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 131.367197][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.384465][ T5936] usb 1-1: Product: syz [ 131.388899][ T5936] usb 1-1: Manufacturer: syz [ 131.393983][ T5936] usb 1-1: SerialNumber: syz [ 131.415949][ T5936] usb 1-1: config 0 descriptor?? [ 131.460642][ T5936] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 131.495999][ T5843] snd-usb-audio 2-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 131.539338][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.555861][ T5843] usb 2-1: USB disconnect, device number 8 [ 131.714394][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 131.849175][ T6437] netlink: 'syz.1.135': attribute type 4 has an invalid length. [ 131.868244][ T5936] gspca_sonixj: reg_r err -32 [ 131.874461][ T5936] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 131.899639][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 131.917034][ T6439] netlink: 'syz.1.135': attribute type 4 has an invalid length. [ 131.941145][ T5843] usb 1-1: USB disconnect, device number 6 [ 131.963006][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.003559][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 132.033227][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 6400, setting to 64 [ 132.063637][ T10] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 132.106359][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.120917][ T10] usb 5-1: Product: syz [ 132.127517][ T10] usb 5-1: Manufacturer: syz [ 132.135805][ T10] usb 5-1: SerialNumber: syz [ 132.157893][ T10] usb 5-1: config 0 descriptor?? [ 132.190624][ T6432] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.204879][ T10] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 132.227747][ T10] cyphidcom ttyUSB0: required endpoint is missing [ 132.431239][ T10] usb 5-1: USB disconnect, device number 6 [ 132.453154][ T10] cypress_m8 5-1:0.0: device disconnected [ 132.737980][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.744790][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.269680][ T6461] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 133.310879][ T6461] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 133.368116][ T6461] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 133.420701][ T6467] FAULT_INJECTION: forcing a failure. [ 133.420701][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.462854][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.3.145 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 133.462879][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.462890][ T6467] Call Trace: [ 133.462898][ T6467] [ 133.462905][ T6467] dump_stack_lvl+0x189/0x250 [ 133.462939][ T6467] ? __pfx____ratelimit+0x10/0x10 [ 133.462968][ T6467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.462996][ T6467] ? __pfx__printk+0x10/0x10 [ 133.463017][ T6467] ? __might_fault+0xb0/0x130 [ 133.463046][ T6467] should_fail_ex+0x414/0x560 [ 133.463074][ T6467] _copy_from_user+0x2d/0xb0 [ 133.463094][ T6467] get_compat_msghdr+0xad/0x4a0 [ 133.463133][ T6467] ? __pfx_get_compat_msghdr+0x10/0x10 [ 133.463170][ T6467] ___sys_sendmsg+0x193/0x2a0 [ 133.463196][ T6467] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.463254][ T6467] ? __fget_files+0x2a/0x420 [ 133.463274][ T6467] ? __fget_files+0x3a0/0x420 [ 133.463304][ T6467] __sys_sendmsg+0x164/0x220 [ 133.463330][ T6467] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.463366][ T6467] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 133.463395][ T6467] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.463425][ T6467] __do_fast_syscall_32+0xb6/0x2b0 [ 133.463443][ T6467] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.463474][ T6467] do_fast_syscall_32+0x34/0x80 [ 133.463491][ T6467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.463514][ T6467] RIP: 0023:0xf710e539 [ 133.463530][ T6467] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 133.463545][ T6467] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 133.463565][ T6467] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 133.463578][ T6467] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.463589][ T6467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.463599][ T6467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.463609][ T6467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.463635][ T6467] [ 133.706215][ T6468] sctp: [Deprecated]: syz.1.146 (pid 6468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.706215][ T6468] Use struct sctp_sack_info instead [ 133.800436][ T6470] syz.4.147(6470): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 133.897256][ T6470] syz.4.147 uses obsolete (PF_INET,SOCK_PACKET) [ 134.167595][ T2152] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 134.377376][ T2152] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.401112][ T2152] usb 4-1: config 0 has no interface number 0 [ 134.409120][ T2152] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 134.466373][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.547940][ T6490] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 134.554665][ T6490] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 134.563588][ T2152] usb 4-1: config 0 descriptor?? [ 134.628026][ T6490] vhci_hcd vhci_hcd.0: Device attached [ 134.647159][ T2152] usb 4-1: selecting invalid altsetting 1 [ 134.671533][ T2152] dvb_ttusb_budget: ttusb_init_controller: error [ 134.684214][ T2152] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 134.716619][ T6496] syz.0.155 (6496): drop_caches: 2 [ 134.777585][ T6491] vhci_hcd: connection closed [ 134.778903][ T2980] vhci_hcd: stop threads [ 134.831897][ T2980] vhci_hcd: release socket [ 134.844544][ T5936] vhci_hcd: vhci_device speed not set [ 134.877909][ T2980] vhci_hcd: disconnect device [ 134.944549][ T5936] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 135.104462][ T2152] DVB: Unable to find symbol cx22700_attach() [ 135.181485][ T2152] DVB: Unable to find symbol tda10046_attach() [ 135.196422][ T2152] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 135.266804][ T2152] usb 4-1: USB disconnect, device number 8 [ 135.998786][ T6523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.010043][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.203800][ T43] usb 1-1: config 0 has no interfaces? [ 136.289540][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 136.308020][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.322032][ T43] usb 1-1: Product: syz [ 136.334174][ T43] usb 1-1: Manufacturer: syz [ 136.346606][ T43] usb 1-1: SerialNumber: syz [ 136.596245][ T43] usb 1-1: config 0 descriptor?? [ 136.963442][ T6540] sctp: [Deprecated]: syz.4.166 (pid 6540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.963442][ T6540] Use struct sctp_sack_info instead [ 137.173781][ T6543] syz.3.167 (6543): drop_caches: 2 [ 138.222090][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 138.919322][ T2152] usb 1-1: USB disconnect, device number 7 [ 139.143030][ T6581] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 139.149675][ T6581] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.169694][ T6581] vhci_hcd vhci_hcd.0: Device attached [ 139.734284][ T6582] vhci_hcd: connection reset by peer [ 139.751443][ T36] vhci_hcd: stop threads [ 139.756413][ T36] vhci_hcd: release socket [ 139.762599][ T36] vhci_hcd: disconnect device [ 139.859549][ T6592] syz.3.178 (6592): drop_caches: 2 [ 140.134188][ T5936] vhci_hcd: vhci_device speed not set [ 140.430325][ T6602] blktrace: Concurrent blktraces are not allowed on sg0 [ 141.421338][ T6614] FAULT_INJECTION: forcing a failure. [ 141.421338][ T6614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.459616][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.1.184 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 141.459633][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.459639][ T6614] Call Trace: [ 141.459643][ T6614] [ 141.459648][ T6614] dump_stack_lvl+0x189/0x250 [ 141.459668][ T6614] ? __pfx____ratelimit+0x10/0x10 [ 141.459683][ T6614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.459698][ T6614] ? __pfx__printk+0x10/0x10 [ 141.459710][ T6614] ? __might_fault+0xb0/0x130 [ 141.459725][ T6614] should_fail_ex+0x414/0x560 [ 141.459740][ T6614] _copy_from_iter+0x1db/0x16f0 [ 141.459756][ T6614] ? rcu_is_watching+0x15/0xb0 [ 141.459778][ T6614] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 141.459789][ T6614] ? __pfx__copy_from_iter+0x10/0x10 [ 141.459804][ T6614] ? __build_skb_around+0x257/0x3e0 [ 141.459817][ T6614] ? netlink_sendmsg+0x642/0xb30 [ 141.459828][ T6614] ? skb_put+0x11b/0x210 [ 141.459841][ T6614] netlink_sendmsg+0x6b2/0xb30 [ 141.459857][ T6614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.459870][ T6614] ? __import_iovec+0x5d4/0x7f0 [ 141.459878][ T6614] ? aa_sock_msg_perm+0x94/0x160 [ 141.459891][ T6614] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.459904][ T6614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.459916][ T6614] __sock_sendmsg+0x21c/0x270 [ 141.459933][ T6614] ____sys_sendmsg+0x505/0x830 [ 141.459948][ T6614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.459968][ T6614] ___sys_sendmsg+0x21f/0x2a0 [ 141.459981][ T6614] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.460010][ T6614] ? __fget_files+0x2a/0x420 [ 141.460021][ T6614] ? __fget_files+0x3a0/0x420 [ 141.460036][ T6614] __sys_sendmsg+0x164/0x220 [ 141.460049][ T6614] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.460068][ T6614] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 141.460084][ T6614] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.460099][ T6614] __do_fast_syscall_32+0xb6/0x2b0 [ 141.460108][ T6614] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.460124][ T6614] do_fast_syscall_32+0x34/0x80 [ 141.460133][ T6614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.460146][ T6614] RIP: 0023:0xf7fc4539 [ 141.460155][ T6614] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 141.460163][ T6614] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 141.460174][ T6614] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080004640 [ 141.460181][ T6614] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.460187][ T6614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.460192][ T6614] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 141.460198][ T6614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.460211][ T6614] [ 141.737622][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.096150][ T30] audit: type=1326 audit(1750611981.502:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.134848][ T6619] netlink: '+}[@': attribute type 6 has an invalid length. [ 142.189874][ T30] audit: type=1326 audit(1750611981.502:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.211166][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.302453][ T30] audit: type=1326 audit(1750611981.552:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.421572][ T30] audit: type=1326 audit(1750611981.552:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.442887][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.501984][ T30] audit: type=1326 audit(1750611981.552:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.555510][ T30] audit: type=1326 audit(1750611981.552:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.576812][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.666779][ T6637] sctp: [Deprecated]: syz.0.192 (pid 6637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.666779][ T6637] Use struct sctp_sack_info instead [ 142.683176][ T30] audit: type=1326 audit(1750611981.552:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.724224][ T30] audit: type=1326 audit(1750611981.552:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.745502][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.794336][ T30] audit: type=1326 audit(1750611981.552:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.794339][ T5899] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.794381][ T30] audit: type=1326 audit(1750611981.552:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 142.845742][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.936698][ T6633] openvswitch: netlink: Tunnel attr 4104 out of range max 16 [ 143.104712][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 143.132137][ T5899] usb 5-1: config 7 has an invalid interface number: 76 but max is 0 [ 143.171205][ T5899] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 143.197632][ T6644] pim6reg: entered allmulticast mode [ 143.210676][ T5899] usb 5-1: config 7 has no interface number 0 [ 143.221916][ T6644] pim6reg: left allmulticast mode [ 143.227132][ T5899] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 143.248145][ T5899] usb 5-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 143.261508][ T5899] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 143.279605][ T5899] usb 5-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 143.290864][ T5899] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 143.316379][ T5899] usb 5-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 143.328876][ T5899] usb 5-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 143.342970][ T5899] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 143.357057][ T5899] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 143.369169][ T5899] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 143.463950][ T5899] usb 5-1: config 7 interface 76 has no altsetting 0 [ 143.477248][ T5899] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 143.486589][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.502852][ T5899] usb 5-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 143.653277][ T5899] usb 5-1: Manufacturer: 茍掞僓ﱶ [ 143.684210][ T5899] usb 5-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 143.735294][ T6657] xt_TCPMSS: Only works on TCP SYN packets [ 144.001693][ T6630] netlink: 'syz.4.191': attribute type 3 has an invalid length. [ 144.026542][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 144.049658][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'. [ 144.062528][ T5899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.087478][ T5899] usb 5-1: invalid MIDI in EP 0 [ 144.087517][ T6665] fuse: Unknown parameter '' [ 144.323359][ T5899] snd-usb-audio 5-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 144.373873][ T5899] usb 5-1: USB disconnect, device number 7 [ 144.462715][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.554355][ T2152] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.728365][ T2152] usb 3-1: Using ep0 maxpacket: 32 [ 144.764265][ T2152] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 144.772547][ T2152] usb 3-1: config 0 has no interface number 0 [ 144.790825][ T2152] usb 3-1: config 0 interface 184 has no altsetting 0 [ 144.824009][ T2152] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 144.840311][ T2152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.874113][ T2152] usb 3-1: Product: syz [ 144.878327][ T2152] usb 3-1: Manufacturer: syz [ 144.909415][ T2152] usb 3-1: SerialNumber: syz [ 144.946196][ T2152] usb 3-1: config 0 descriptor?? [ 144.990017][ T2152] smsc75xx v1.0.0 [ 145.003871][ T2152] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 145.018214][ T6685] sctp: [Deprecated]: syz.0.207 (pid 6685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.018214][ T6685] Use struct sctp_sack_info instead [ 145.084589][ T2152] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 145.097042][ T10] IPVS: starting estimator thread 0... [ 145.204776][ T6687] IPVS: using max 26 ests per chain, 62400 per kthread [ 145.561083][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 146.093278][ T6711] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 146.117130][ T6715] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 146.136710][ T6711] netlink: 600 bytes leftover after parsing attributes in process `syz.0.217'. [ 146.211709][ T6711] unsupported nla_type 58 [ 146.365063][ T5936] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.408485][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.220'. [ 146.466877][ T2152] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.564475][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 146.568478][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 146.591473][ T5936] usb 2-1: config 7 has an invalid interface number: 76 but max is 0 [ 146.634272][ T5936] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 146.661824][ T5936] usb 2-1: config 7 has no interface number 0 [ 146.670939][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 146.686058][ T5936] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 146.700309][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 146.713507][ T5936] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 146.727120][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 146.754022][ T2152] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.767702][ T5936] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 146.779892][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.796082][ T2152] usb 1-1: Product: syz [ 146.800894][ T5936] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 146.814903][ T2152] usb 1-1: Manufacturer: syz [ 146.819695][ T2152] usb 1-1: SerialNumber: syz [ 146.826529][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 146.839174][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 146.853865][ T5936] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 146.866583][ T2152] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.875740][ T5899] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.904365][ T5941] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.917869][ T5936] usb 2-1: config 7 interface 76 has no altsetting 0 [ 146.937645][ T5936] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 146.949930][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.958304][ T5936] usb 2-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 146.978676][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.985380][ T5936] usb 2-1: Manufacturer: 茍掞僓ﱶ [ 146.990930][ T5936] usb 2-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 147.034570][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 147.050412][ T5899] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 147.071735][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.089094][ T5899] usb 5-1: Product: syz [ 147.097413][ T5899] usb 5-1: Manufacturer: syz [ 147.111935][ T5899] usb 5-1: SerialNumber: syz [ 147.130606][ T5899] usb 5-1: config 0 descriptor?? [ 147.239610][ T977] usb 3-1: USB disconnect, device number 5 [ 147.298973][ T6709] netlink: 'syz.1.216': attribute type 3 has an invalid length. [ 147.346218][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.355199][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.393654][ T5936] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.437597][ T5936] usb 2-1: invalid MIDI in EP 0 [ 147.554925][ T5843] usb 1-1: USB disconnect, device number 8 [ 147.577698][ T5899] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 147.625257][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.629232][ T5936] snd-usb-audio 2-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 147.658513][ T5899] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 147.666226][ T5936] usb 2-1: USB disconnect, device number 9 [ 147.674630][ T5899] usb 5-1: media controller created [ 147.743420][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.764802][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.824282][ T5899] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 147.832268][ T5899] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 147.944177][ T977] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.027408][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.059180][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.114177][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 148.141907][ T5936] usb 5-1: USB disconnect, device number 8 [ 148.151829][ T977] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.174508][ T5941] usb 1-1: Service connection timeout for: 256 [ 148.191461][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.217673][ T977] usb 4-1: Product: syz [ 148.219260][ T5941] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 148.232056][ T977] usb 4-1: Manufacturer: syz [ 148.257939][ T977] usb 4-1: SerialNumber: syz [ 148.262670][ T5941] ath9k_htc: Failed to initialize the device [ 148.282925][ T977] r8152-cfgselector 4-1: Unknown version 0x0000 [ 148.292991][ T5936] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 148.302275][ T977] r8152-cfgselector 4-1: config 0 descriptor?? [ 148.322191][ T6747] sctp: [Deprecated]: syz.1.227 (pid 6747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.322191][ T6747] Use struct sctp_sack_info instead [ 148.342678][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 148.344149][ T5843] usb 1-1: ath9k_htc: USB layer deinitialized [ 148.399928][ T6749] netlink: 44 bytes leftover after parsing attributes in process `syz.2.228'. [ 148.507764][ T977] r8152-cfgselector 4-1: Unknown version 0x0000 [ 148.519343][ T977] r8152-cfgselector 4-1: bad CDC descriptors [ 148.733138][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 148.756914][ T5843] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 148.794371][ T6757] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 149.412217][ T5843] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 149.524160][ T977] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.584133][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 149.595449][ T5843] usb 2-1: config 7 has an invalid interface number: 76 but max is 0 [ 149.630682][ T5843] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 149.663996][ T5843] usb 2-1: config 7 has no interface number 0 [ 149.684230][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 149.698138][ T5843] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 149.709587][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 149.715834][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 149.720953][ T5843] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 149.738068][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 149.749566][ T5843] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 149.758041][ T977] usb 5-1: config 7 has an invalid interface number: 76 but max is 0 [ 149.767314][ T5843] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 149.780837][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 149.795777][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 149.805073][ T977] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 149.827061][ T977] usb 5-1: config 7 has no interface number 0 [ 149.833420][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.243'. [ 149.834158][ T5843] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 149.855019][ T977] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 149.858305][ T6788] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.884634][ T6792] netlink: 204 bytes leftover after parsing attributes in process `syz.2.243'. [ 149.888502][ T5843] usb 2-1: config 7 interface 76 has no altsetting 0 [ 149.895660][ T977] usb 5-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 149.919065][ T6796] netlink: 48 bytes leftover after parsing attributes in process `syz.0.245'. [ 149.919085][ T5843] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 149.928074][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 149.930025][ T977] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 149.968525][ T977] usb 5-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 149.971300][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.000497][ T5843] usb 2-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 150.019259][ T977] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 150.035958][ T977] usb 5-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 150.048067][ T977] usb 5-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 150.060818][ T977] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 150.078129][ T977] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 150.109875][ T977] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 150.141426][ T977] usb 5-1: config 7 interface 76 has no altsetting 0 [ 150.157987][ T977] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 150.170107][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.211556][ T977] usb 5-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 150.317985][ T977] usb 5-1: Manufacturer: 茍掞僓ﱶ [ 150.346332][ T977] usb 5-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 150.457765][ T6803] sctp: [Deprecated]: syz.2.247 (pid 6803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.457765][ T6803] Use struct sctp_sack_info instead [ 150.509230][ T5843] usb 2-1: Manufacturer: 茍掞僓ﱶ [ 150.542708][ T5843] usb 2-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 150.670942][ T6773] netlink: 'syz.4.238': attribute type 3 has an invalid length. [ 150.702782][ T977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.788189][ T977] usb 5-1: invalid MIDI in EP 0 [ 150.858169][ T977] snd-usb-audio 5-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 150.907641][ T977] usb 5-1: USB disconnect, device number 9 [ 151.042555][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.081945][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 151.081982][ T30] audit: type=1326 audit(1750611990.502:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.137492][ T6812] netlink: '+}[@': attribute type 6 has an invalid length. [ 151.146115][ T6770] netlink: 'syz.1.237': attribute type 3 has an invalid length. [ 151.175451][ T30] audit: type=1326 audit(1750611990.502:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.236458][ T30] audit: type=1326 audit(1750611990.532:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.260395][ T5843] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.293888][ T30] audit: type=1326 audit(1750611990.532:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.300980][ T5843] usb 2-1: invalid MIDI in EP 0 [ 151.398821][ T30] audit: type=1326 audit(1750611990.532:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.463630][ T30] audit: type=1326 audit(1750611990.542:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.482340][ T5843] snd-usb-audio 2-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 151.495944][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 151.509992][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 151.515195][ T30] audit: type=1326 audit(1750611990.542:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.550602][ T30] audit: type=1326 audit(1750611990.542:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.570780][ T5843] usb 2-1: USB disconnect, device number 10 [ 151.604405][ T30] audit: type=1326 audit(1750611990.542:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.702046][ T30] audit: type=1326 audit(1750611990.552:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 151.708660][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.944160][ T5941] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 152.115939][ T5941] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 152.126812][ T5941] usb 3-1: config 0 has no interface number 1 [ 152.132952][ T5941] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 152.161727][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.254850][ T5941] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 152.266104][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.297231][ T5941] usb 3-1: SerialNumber: syz [ 152.367656][ T5941] usb 3-1: config 0 descriptor?? [ 152.377408][ T5941] usb 3-1: Found UVC 0.00 device (0002:0000) [ 152.417991][ T5941] usb 3-1: No valid video chain found. [ 152.604736][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.615268][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.648785][ T5941] usb 3-1: USB disconnect, device number 6 [ 152.690303][ T6841] netlink: 788 bytes leftover after parsing attributes in process `syz.3.261'. [ 152.884319][ T6851] sctp: [Deprecated]: syz.1.263 (pid 6851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.884319][ T6851] Use struct sctp_sack_info instead [ 153.119511][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 153.167253][ T6854] syz.4.265 (6854): drop_caches: 2 [ 153.522994][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.548919][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.562202][ T6863] fuse: Bad value for 'fd' [ 155.709583][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.770286][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.828418][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.900969][ T10] usb 4-1: SerialNumber: syz [ 156.662169][ T10] usb 4-1: 0:2 : does not exist [ 156.865177][ T10] usb 4-1: USB disconnect, device number 10 [ 156.954404][ T977] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.975058][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 156.975073][ T30] audit: type=1326 audit(1750611996.372:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 157.359748][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.404427][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 157.426076][ T30] audit: type=1326 audit(1750611996.372:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 157.447893][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.471199][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 157.525928][ T6881] netlink: 'syz.4.271': attribute type 30 has an invalid length. [ 160.502858][ T977] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 160.636437][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.734075][ C1] sched: DL replenish lagged too much [ 160.794235][ T30] audit: type=1326 audit(1750611996.372:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 160.816065][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.853054][ T977] usb 2-1: config 0 descriptor?? [ 161.154600][ T977] usb 2-1: can't set config #0, error -71 [ 161.213288][ T977] usb 2-1: USB disconnect, device number 11 [ 161.241159][ T30] audit: type=1326 audit(1750611996.372:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 161.634208][ T30] audit: type=1326 audit(1750611996.372:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 161.659667][ T6894] FAULT_INJECTION: forcing a failure. [ 161.659667][ T6894] name failslab, interval 1, probability 0, space 0, times 0 [ 161.829749][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.2.278 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 161.829776][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.829787][ T6894] Call Trace: [ 161.829795][ T6894] [ 161.829803][ T6894] dump_stack_lvl+0x189/0x250 [ 161.829837][ T6894] ? __pfx____ratelimit+0x10/0x10 [ 161.829866][ T6894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.829894][ T6894] ? __pfx__printk+0x10/0x10 [ 161.829917][ T6894] ? __pfx___might_resched+0x10/0x10 [ 161.829946][ T6894] ? fs_reclaim_acquire+0x7d/0x100 [ 161.829973][ T6894] should_fail_ex+0x414/0x560 [ 161.830001][ T6894] should_failslab+0xa8/0x100 [ 161.830023][ T6894] __kmalloc_cache_noprof+0x70/0x3d0 [ 161.830042][ T6894] ? vb2_vmalloc_alloc+0xb2/0x340 [ 161.830059][ T6894] ? rcu_is_watching+0x15/0xb0 [ 161.830091][ T6894] vb2_vmalloc_alloc+0xb2/0x340 [ 161.830110][ T6894] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 161.830131][ T6894] __vb2_queue_alloc+0x9bf/0x15a0 [ 161.830185][ T6894] vb2_core_create_bufs+0x765/0xde0 [ 161.830227][ T6894] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 161.830262][ T6894] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 161.830304][ T6894] vb2_create_bufs+0x5b9/0xae0 [ 161.830339][ T6894] ? __pfx_vb2_create_bufs+0x10/0x10 [ 161.830369][ T6894] ? v4l_sanitize_format+0x5d6/0x9f0 [ 161.830396][ T6894] ? v4l2_compat_get_user+0xaee/0x1380 [ 161.830427][ T6894] v4l_create_bufs+0x193/0x2a0 [ 161.830460][ T6894] __video_do_ioctl+0xc9b/0xdb0 [ 161.830489][ T6894] ? __pfx___video_do_ioctl+0x10/0x10 [ 161.830514][ T6894] ? trace_kmalloc+0x1f/0xd0 [ 161.830538][ T6894] video_usercopy+0x86e/0x14f0 [ 161.830568][ T6894] ? __pfx___video_do_ioctl+0x10/0x10 [ 161.830587][ T6894] ? __pfx_video_usercopy+0x10/0x10 [ 161.830625][ T6894] ? __fget_files+0x2a/0x420 [ 161.830649][ T6894] v4l2_ioctl+0x18a/0x1e0 [ 161.830672][ T6894] v4l2_compat_ioctl32+0x1d4/0x260 [ 161.830702][ T6894] __ia32_compat_sys_ioctl+0x543/0x840 [ 161.830734][ T6894] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 161.830763][ T6894] ? __fget_files+0x3a0/0x420 [ 161.830795][ T6894] ? fput+0xa0/0xd0 [ 161.830819][ T6894] ? ksys_write+0x22a/0x250 [ 161.830844][ T6894] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 161.830874][ T6894] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.830903][ T6894] __do_fast_syscall_32+0xb6/0x2b0 [ 161.830922][ T6894] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.830954][ T6894] do_fast_syscall_32+0x34/0x80 [ 161.830971][ T6894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.830994][ T6894] RIP: 0023:0xf7f94539 [ 161.831010][ T6894] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.831026][ T6894] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 161.831045][ T6894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 161.831058][ T6894] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.831069][ T6894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.831080][ T6894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.831090][ T6894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.831118][ T6894] [ 162.167890][ T30] audit: type=1326 audit(1750611996.372:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 162.767626][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 163.528428][ T30] audit: type=1326 audit(1750611996.372:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 163.869112][ T6907] sctp: [Deprecated]: syz.1.280 (pid 6907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.869112][ T6907] Use struct sctp_sack_info instead [ 165.260769][ T30] audit: type=1326 audit(1750611996.372:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 170.603762][ T30] audit: type=1326 audit(1750611996.372:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 171.130703][ T30] audit: type=1326 audit(1750611996.372:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 186.240779][ T30] audit: type=1326 audit(1750611996.732:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 197.095783][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.109293][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.437601][ T30] audit: type=1326 audit(1750611996.732:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 293.194083][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 293.201085][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6911/1:b..l [ 293.209350][ C0] rcu: (detected by 0, t=10502 jiffies, g=16737, q=232253 ncpus=2) [ 293.217339][ C0] task:syz.3.281 state:R running task stack:26888 pid:6911 tgid:6911 ppid:6906 task_flags:0x40044c flags:0x20004004 [ 293.231748][ C0] Call Trace: [ 293.235081][ C0] [ 293.238028][ C0] __schedule+0x16f5/0x4d00 [ 293.242579][ C0] ? preempt_schedule_common+0x83/0xd0 [ 293.248049][ C0] ? __pfx___schedule+0x10/0x10 [ 293.252884][ C0] ? do_raw_spin_lock+0x121/0x290 [ 293.257913][ C0] ? preempt_schedule+0xae/0xc0 [ 293.262785][ C0] preempt_schedule_common+0x83/0xd0 [ 293.268085][ C0] preempt_schedule+0xae/0xc0 [ 293.272780][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 293.278181][ C0] preempt_schedule_thunk+0x16/0x30 [ 293.283406][ C0] _raw_spin_unlock+0x3f/0x50 [ 293.288098][ C0] unmap_page_range+0x3842/0x41c0 [ 293.293180][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 293.298563][ C0] ? unmap_vmas+0x144/0x580 [ 293.303047][ C0] unmap_vmas+0x399/0x580 [ 293.307378][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 293.312264][ C0] exit_mmap+0x248/0xb50 [ 293.316515][ C0] ? uprobe_clear_state+0x20f/0x290 [ 293.321732][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 293.326505][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 293.332164][ C0] ? __pfx_exit_aio+0x10/0x10 [ 293.336861][ C0] ? uprobe_clear_state+0x274/0x290 [ 293.342077][ C0] __mmput+0x118/0x420 [ 293.346154][ C0] exit_mm+0x1da/0x2c0 [ 293.350205][ C0] ? __pfx_exit_mm+0x10/0x10 [ 293.354792][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 293.360270][ C0] ? rcu_is_watching+0x15/0xb0 [ 293.365056][ C0] do_exit+0x640/0x22e0 [ 293.369231][ C0] ? do_raw_spin_lock+0x121/0x290 [ 293.374269][ C0] ? __pfx_do_exit+0x10/0x10 [ 293.378884][ C0] do_group_exit+0x21c/0x2d0 [ 293.383484][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.388706][ C0] get_signal+0x1286/0x1340 [ 293.393246][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 293.398798][ C0] ? __pfx_get_old_timespec32+0x10/0x10 [ 293.404338][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 293.410525][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 293.416014][ C0] exit_to_user_mode_loop+0x75/0x110 [ 293.421320][ C0] __do_fast_syscall_32+0x1f4/0x2b0 [ 293.426533][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.431754][ C0] do_fast_syscall_32+0x34/0x80 [ 293.436618][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.442958][ C0] RIP: 0023:0xf710e539 [ 293.447034][ C0] RSP: 002b:00000000f50dd460 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 293.455437][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 293.463414][ C0] RDX: 00000000f50dd494 RSI: 00000000f50dd48c RDI: 00000000f50dd494 [ 293.471395][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.479372][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.487347][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.495341][ C0] [ 293.498358][ C0] rcu: rcu_preempt kthread starved for 8813 jiffies! g16737 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 293.509453][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 293.519428][ C0] rcu: RCU grace-period kthread stack dump: [ 293.525315][ C0] task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 293.538817][ C0] Call Trace: [ 293.542100][ C0] [ 293.545041][ C0] __schedule+0x16f5/0x4d00 [ 293.549559][ C0] ? schedule+0x165/0x360 [ 293.553870][ C0] ? __pfx___schedule+0x10/0x10 [ 293.558729][ C0] ? schedule+0x91/0x360 [ 293.562989][ C0] schedule+0x165/0x360 [ 293.567166][ C0] schedule_timeout+0x12b/0x270 [ 293.572032][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 293.577410][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 293.583320][ C0] ? __pfx_process_timeout+0x10/0x10 [ 293.588623][ C0] ? prepare_to_swait_event+0x341/0x380 [ 293.594183][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 293.599045][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 293.605192][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 293.610488][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 293.615720][ C0] rcu_gp_kthread+0x99/0x390 [ 293.620329][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.625548][ C0] ? __kthread_parkme+0x7b/0x200 [ 293.630496][ C0] ? __kthread_parkme+0x1a1/0x200 [ 293.635535][ C0] kthread+0x70e/0x8a0 [ 293.639620][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.644831][ C0] ? __pfx_kthread+0x10/0x10 [ 293.649425][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.654620][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.659830][ C0] ? __pfx_kthread+0x10/0x10 [ 293.664431][ C0] ret_from_fork+0x3f9/0x770 [ 293.669036][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 293.674171][ C0] ? __switch_to_asm+0x39/0x70 [ 293.678943][ C0] ? __switch_to_asm+0x33/0x70 [ 293.683714][ C0] ? __pfx_kthread+0x10/0x10 [ 293.688312][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.693101][ C0] [ 293.696121][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 293.702429][ C0] Sending NMI from CPU 0 to CPUs 1: [ 293.707633][ C1] NMI backtrace for cpu 1 [ 293.707653][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 293.707673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.707684][ C1] RIP: 0010:check_preemption_disabled+0x45/0x120 [ 293.707704][ C1] Code: 7e 36 07 65 8b 0d 7b 7e 36 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 5b 7e 36 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b <41> 5e 41 5f 5d e9 41 b7 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 [ 293.707719][ C1] RSP: 0018:ffffc90000a07af0 EFLAGS: 00000086 [ 293.707740][ C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 402ad4f98d850400 [ 293.707752][ C1] RDX: 0000000000000002 RSI: ffffffff8db6ec2e RDI: ffffffff8be28ac0 [ 293.707764][ C1] RBP: ffff88801d2c6540 R08: ffffc90000a07ca7 R09: 0000000000000000 [ 293.707775][ C1] R10: ffffc90000a07c98 R11: fffff52000140f95 R12: 0000000000000002 [ 293.707787][ C1] R13: 0000000000000002 R14: ffffffff8e13eda0 R15: ffff88801d2c5a00 [ 293.707800][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 293.707814][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.707826][ C1] CR2: 0000000056fda99c CR3: 0000000031abe000 CR4: 00000000003526f0 [ 293.707840][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.707850][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.707861][ C1] Call Trace: [ 293.707867][ C1] [ 293.707875][ C1] lock_release+0x27a/0x3e0 [ 293.707898][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.707924][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.707947][ C1] unwind_next_frame+0x19a9/0x2390 [ 293.707973][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.707997][ C1] ? default_idle+0x13/0x20 [ 293.708015][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.708034][ C1] arch_stack_walk+0x11c/0x150 [ 293.708052][ C1] ? default_idle_call+0x74/0xb0 [ 293.708070][ C1] stack_trace_save+0x9c/0xe0 [ 293.708088][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 293.708106][ C1] ? stack_trace_save+0x9c/0xe0 [ 293.708124][ C1] ? stack_depot_save_flags+0x40/0x900 [ 293.708147][ C1] kasan_save_track+0x3e/0x80 [ 293.708170][ C1] ? kasan_save_track+0x3e/0x80 [ 293.708193][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 293.708207][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 293.708223][ C1] ? kmalloc_reserve+0xbd/0x290 [ 293.708242][ C1] ? __alloc_skb+0x142/0x2d0 [ 293.708258][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 293.708277][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 293.708299][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 293.708321][ C1] ? nft_do_chain+0x40c/0x1920 [ 293.708340][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 293.708361][ C1] ? nf_hook_slow+0xc2/0x220 [ 293.708378][ C1] ? NF_HOOK+0x206/0x3a0 [ 293.708394][ C1] ? NF_HOOK+0x30c/0x3a0 [ 293.708410][ C1] ? __netif_receive_skb+0x143/0x380 [ 293.708435][ C1] ? process_backlog+0x60e/0x14f0 [ 293.708450][ C1] ? __napi_poll+0xc4/0x480 [ 293.708463][ C1] ? net_rx_action+0x707/0xe30 [ 293.708479][ C1] ? handle_softirqs+0x286/0x870 [ 293.708502][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 293.708525][ C1] ? irq_exit_rcu+0x9/0x30 [ 293.708547][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 293.708570][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.708587][ C1] ? pv_native_safe_halt+0x13/0x20 [ 293.708608][ C1] ? default_idle+0x13/0x20 [ 293.708637][ C1] __kasan_slab_alloc+0x6c/0x80 [ 293.708653][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 293.708670][ C1] ? kmalloc_reserve+0xbd/0x290 [ 293.708689][ C1] kmalloc_reserve+0xbd/0x290 [ 293.708708][ C1] __alloc_skb+0x142/0x2d0 [ 293.708727][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 293.708755][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 293.708774][ C1] ? nft_masq_eval+0x150/0x490 [ 293.708791][ C1] ? synproxy_pernet+0x45/0x270 [ 293.708816][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 293.708840][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 293.708864][ C1] ? nf_ip_checksum+0x13c/0x510 [ 293.708886][ C1] nft_synproxy_do_eval+0x345/0x570 [ 293.708910][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 293.708932][ C1] ? queue_work_on+0x115/0x270 [ 293.708946][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.708970][ C1] ? queue_work_on+0x1ed/0x270 [ 293.708988][ C1] nft_do_chain+0x40c/0x1920 [ 293.709009][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.709033][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 293.709056][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 293.709083][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 293.709116][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 293.709140][ C1] nft_do_chain_inet+0x25d/0x340 [ 293.709161][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 293.709183][ C1] ? ipt_do_table+0x2a3/0x1640 [ 293.709201][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 293.709229][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 293.709251][ C1] nf_hook_slow+0xc2/0x220 [ 293.709270][ C1] NF_HOOK+0x206/0x3a0 [ 293.709287][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 293.709305][ C1] ? NF_HOOK+0x9a/0x3a0 [ 293.709321][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 293.709337][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 293.709356][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 293.709375][ C1] ? skb_dst+0x4f/0xd0 [ 293.709392][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 293.709411][ C1] NF_HOOK+0x30c/0x3a0 [ 293.709428][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 293.709445][ C1] ? NF_HOOK+0x9a/0x3a0 [ 293.709462][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 293.709477][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 293.709495][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 293.709516][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 293.709532][ C1] __netif_receive_skb+0x143/0x380 [ 293.709558][ C1] ? process_backlog+0x2d5/0x14f0 [ 293.709574][ C1] process_backlog+0x60e/0x14f0 [ 293.709597][ C1] ? __pfx_process_backlog+0x10/0x10 [ 293.709614][ C1] ? do_raw_spin_lock+0x121/0x290 [ 293.709635][ C1] __napi_poll+0xc4/0x480 [ 293.709648][ C1] ? net_rx_action+0x46d/0xe30 [ 293.709665][ C1] net_rx_action+0x707/0xe30 [ 293.709688][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 293.709718][ C1] handle_softirqs+0x286/0x870 [ 293.709747][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 293.709773][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 293.709799][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 293.709820][ C1] __irq_exit_rcu+0xca/0x1f0 [ 293.709843][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 293.709870][ C1] irq_exit_rcu+0x9/0x30 [ 293.709893][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 293.709915][ C1] [ 293.709920][ C1] [ 293.709926][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.709944][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 293.709967][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 d6 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 293.709980][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 293.709994][ C1] RAX: 402ad4f98d850400 RBX: ffffffff81975d58 RCX: 402ad4f98d850400 [ 293.710008][ C1] RDX: 0000000000000001 RSI: ffffffff8d981f7e RDI: ffffffff8be28ac0 [ 293.710020][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 293.710033][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa108f0 [ 293.710046][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 293.710058][ C1] ? do_idle+0x1e8/0x510 [ 293.710076][ C1] default_idle+0x13/0x20 [ 293.710091][ C1] default_idle_call+0x74/0xb0 [ 293.710108][ C1] do_idle+0x1e8/0x510 [ 293.710124][ C1] ? __pfx_do_idle+0x10/0x10 [ 293.710142][ C1] ? do_idle+0xa/0x510 [ 293.710157][ C1] cpu_startup_entry+0x44/0x60 [ 293.710172][ C1] start_secondary+0x101/0x110 [ 293.710192][ C1] common_startup_64+0x13e/0x147 [ 293.710216][ C1]