last executing test programs: 15.557375634s ago: executing program 2 (id=74): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x2125a0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x2c9ab000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00], 0x23d) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0xffffffffa003e459, 0x700000000000000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e7ff, 0x10300, 0xfffffffe, 0xfff}}) r9 = socket(0x6, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendto$inet6(r9, 0x0, 0xffffffffffffff4d, 0x44004, 0x0, 0x0) 9.655044174s ago: executing program 2 (id=86): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000280)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xffffffff, 0x100, 0xb49, 0x9, 0x4000000000008, 0x0, 0x400014b}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xf}}, 0xfffffff7, 0x200, 0x0, 0x126, 0xbc0}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={r2, 0x2, 0x2, 0x40, 0x4, 0x4}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r3, 0x9}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 9.225588731s ago: executing program 2 (id=88): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) recvmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000540)=""/255, 0xff}], 0x3, &(0x7f0000000440)=""/139, 0x8b}, 0x10002) 9.050599884s ago: executing program 1 (id=90): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), 0x0}, 0x20) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002000000e7900000000008000e00"], 0x30}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045503, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x40102, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04458508c800c806d5ac2dc19d6c8535cee6"], 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000040)={{@hyper}, @any, 0x1d, 0x0, 0x9}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e21, @private=0xa010102}}) io_uring_setup(0xabd, &(0x7f0000000040)={0x0, 0x35ac, 0x8470, 0x2, 0x1fa}) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.389915392s ago: executing program 0 (id=95): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback, 0xffffffffffffffff, 0x0, 0x8, 0x0, @void, @value}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) 7.124045095s ago: executing program 0 (id=96): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x102002, 0x0) read$FUSE(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0xe8, "3e2f0e1806038a8c3343d7d8005923ca96459bd86b16d843c63979d7afd694ad6f8da2d12be7427b7328a76edb67b08db76cfa069d7e97681150b4b168faf40cc331f1a746ca2cf16cdb7957042536f5e8a7824f39c47c5fda077858e2fd1d0361ec8cb4a0f7be293b2bb326604d1913e47209fc43a9b83b48af2e7be3be31e74ba6fb90d849d89aac6a568efbd3f5b3345895df4e275b52e90064e25bc11c6639676abb1c073ef789cfde708d3b0932bf58897086b4f0388fd16d5d8f5114ca835cc4c15dd2c5317ea26cf162a08e220af24b5a71a295f1980c431c7d81eb6d16500aabe03955d2"}, &(0x7f0000000040)=0xf0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2, 0x6}, 0x8) 6.707902231s ago: executing program 1 (id=97): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x4, 0x44, 0x1, 0x80000003}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000180)={0x921, 0x8001, 0x0, 0x5, 0x6bc486f0, 0x9, 0x80, 0x4}, &(0x7f00000001c0)={0x8000, 0x0, 0x6, 0xf, 0x7f, 0x21e5, 0x7, 0xfffffffffffffffc}, &(0x7f0000000200)={0xd, 0x57, 0x0, 0x2, 0x6, 0x1, 0x7, 0x8}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x7f]}, 0x8}) sendmsg$nl_generic(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x90}]}]}, 0x28}}, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r3, r4, 0x0, 0x80001d00c0d1) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card3/oss_mixer\x00', 0x262103, 0x0) 6.379913402s ago: executing program 0 (id=99): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4004) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r10 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.711571538s ago: executing program 4 (id=100): r0 = fsopen(&(0x7f0000000100)='gfs2meta\x00', 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x300) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 5.626357861s ago: executing program 2 (id=101): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xd00) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r2 = syz_io_uring_setup(0x4478, &(0x7f0000000280)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0x779ce5a2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.50418566s ago: executing program 3 (id=102): syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe1700052406"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x8000009, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r4 = syz_open_dev$video4linux(&(0x7f0000002d80), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0x80405600, &(0x7f0000002dc0)={0x0, 0x0, 0x4, 0x40, 0x0, {}, {0x4, 0x0, 0x0, 0x4, 0x10, 0x4, '0$ \x00'}, 0x4}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x0, 0x1a) getdents(r5, &(0x7f0000000140)=""/165, 0xa5) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000002c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={0x0, r7, 0x1, 0x0, 0x3a9e9908}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f00000000c0)={r7}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 4.940090771s ago: executing program 4 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f00000010c0)={&(0x7f0000001040)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xf93}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5278}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40850) 4.838932883s ago: executing program 4 (id=104): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea185000000000000", 0x38}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11", 0x17}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000d80)="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", 0x119}], 0x2}}], 0x2, 0xc0) close_range(r0, 0xffffffffffffffff, 0x0) 4.594108809s ago: executing program 4 (id=105): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x8f, 0x2, 0x53, 0x40, 0xc45, 0x8003, 0xd6bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6e, 0xe4, 0x4e}}]}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xb, 0x5, "211c2ea998"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) r2 = syz_usb_connect(0x0, 0xf2a, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0xb2, 0x8f, 0xb8, 0x8, 0x167b, 0x4001, 0x5da4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf18, 0x3, 0x56, 0x1, 0x80, 0xff, [{{0x9, 0x4, 0xfe, 0x7, 0xb, 0x52, 0x8b, 0xa6, 0xfb, [@hid_hid={0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xe29}}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0x3, 0x0, [@generic={0x96, 0x5, "12c3843e95b03980ccfd6912387c17e45b8967df359a2c56c16f9c12561001b65e4058ebdc194481b001f1aae37e744b61b93e70705e98f520644cefa3a72a52d103999079df371af4f937f670ae0de4f618c617603071ef013af572df4a95cac93c7f5717d0bcef039bf2aaba8d025be351fce49baf05ca291c82ca4e88356d7733762a25c20d6ee9c09f707df84d252ae207c8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x61}]}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0xff, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6ba}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0xff, 0x8, 0x7, [@generic={0xc8, 0x7, "ed3f121aa0524c17d107493504d821c21a49252d5ee5c4a21e62760282f5201f71bef4c8b278253a6de297b1fa71a014a225fe02b8f57516e9bcc49ebb5ba22175b6d768f969af034ef03249eb1680c13e4ab3670035a12f3ca18a50f7c3bc012562fd713be8308eac34263db73c4c5d499ec94fdeef21e4a24af89fca6964147093cc02d5133a588c3ecd14fdd0dde1d82a0158126ec5281cbabdfd87c114728be5cf84a8a34a0814c629c218409b4dc213f85ce239bd9d5ac474ccc013688ab046905741e4"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x80, 0x7, 0x2c, [@generic={0xc4, 0x22, "82bbcc65847d64524826f32107d9c95531094e695a65858bc099ec33205965cbbfb69667ab13d70843af1bb42a3ed6dfed58eccd6c79533f306d3f6dfe1d10d4cec27986a86f97da775f0caf839e2ddeb0bdb6a1eba5876e58900fdce6c910fdb5bbe50541bac0f621da565a75d7cda62c2ddba4b336c11613f8266dd252c3d0c3c126135dde14569671986ee2ce529479ace8709faecb053c3079d07f643d207b6a56be5411404e36cc78c8fd9c660a1d3429d17cd12baae3725fb89699f5187bba"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x10, 0x0, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xe}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x0, 0x7f, 0x3e, [@generic={0x1d, 0xc, "0513a854a4d12cb94f8da40716d96300eca8b69883f447d909c5a2"}, @generic={0xcc, 0xc, "63d2e60e2660b534fba21c97783eaf17776c1e4ddb900e7e33ae1e4e3d6f397e87e19e96d54e91878db111733894be8f4d2bb2157119df73251722a925175b5b134238ab5da3abdba6c8ef4824cae094a6dbb51688e3d4d4b9f1e232e40825918c7bd1df7a0593c9c4348d4e0e6ea267c07b531936941d2098c39ce00c96bc0baafe391b69fb47887d8adf737485e3d1614c12af0042e790b9d57de0ae656dcfc59a2d674546b2afd8ff78c42e89f13b7c48901887ed105e9a21d820ed016da8a7ee7dc30ec2d3d742d2"}]}}, {{0x9, 0x5, 0x7, 0x11, 0x400, 0x8, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5f}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9, 0x5, 0x6, [@generic={0x65, 0x1, "4a50e717e635ca7eaa32dcae8a5439ee649ec35decd69c7a8ac8feb4bdb59d1d20c5141a2215a5f4a9a37b6a69da549f0009ec8780621933717982ea2e39b3f511bf508b2fffffa51bd554a9a122c657b32c8454949140c8edb5aa668426aa46fae459"}, @generic={0x9c, 0xb, "fc903d8c7ac36637329b491398462884e7e864dd54f778acc16197eb2b31d905779774ff42bcdf736646c0ab28ddf477fc8f47af20d3db5f81cdd184ba7c7b6fbab511ab20fea44813c6907160b545d1763ab7f4588aa2584e379d855fd81367c9d5f47c24f70ed23b87d54cb929556d1ec48a2c1e0255b74cb88d3c00a78289c11abf59fd87c042d6db3effa5cda753734e8ae663273098db8f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0x5, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x7, 0xb8, 0x8, [@generic={0x4e, 0x22, "ceb97e216af56430b2373c1b6fb6a5f38a4e073eedd59a70fb635628bfa937ace199631e073f3716aca1dddd5d7bb5d3f65606441473cbc5f8f6b50bc4f476e6832d310aecba188fd0410734"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0xf, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x4}, @generic={0x46, 0x22, "faf9eb88b7d76225cbe58c954949a823fcfc1338fcb9b3230b246af2367ef13cb516cf9fd95e545e8a89665e50a0412bfcb322680b19eddd463972c4ccbd2c790b8f9e1c"}]}}]}}, {{0x9, 0x4, 0x2c, 0x3, 0x9, 0xe3, 0x9a, 0xca, 0x1, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "6fe7"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x40, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x1, 0xd7, 0x0, 0x4, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @country_functional={0xa, 0x24, 0x7, 0xc, 0x4b92, [0x8, 0x7]}, @ncm={0x6, 0x24, 0x1a, 0xfffa, 0x4}, @dmm={0x7, 0x24, 0x14, 0x9, 0x6}, @acm={0x4, 0x24, 0x2, 0x8}]}, @uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0xf5, 0xde, "a88094"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x1, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x2}]}], [{{0x9, 0x5, 0x9, 0x10, 0x400, 0x8, 0x0, 0x3, [@generic={0x70, 0x4, "8d735873101fb7a36ec259e831ecf24dc95342eaae39c4e7063bbba03ad09241b559c5ee54eb3f5247338fa81f502b0346778a22d183c7d4d032b047794b5f06d7ed51246c3a158f0fd9594546963481dc0f6de6c299f1fa1a46ffd89f932027f4c804985e0cdd01b5e765e671aa"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xb, 0x9, 0x10, [@generic={0x7a, 0x0, "d9156dd1876af0da9ba1c1e45c2c79ac8f4358a6185949fb004c8dd2e6fed51aa09a2f22f1149d8118337710d74a0205fd9092fd00c72c1473458c8abecb14d434e6f4b02dc106d91cce1d145e2817eeec5e6ab7ac2c5ba5ed7928477ccfacbfb07439a02f0064ead582f53933e139ac2e63cf20c9304549"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x21f2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x4, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x30}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}]}}, {{0x9, 0x5, 0x8, 0x1e, 0x10, 0x4, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x88, 0x8, 0x2, [@generic={0x88, 0x8, "ac3de426a0e26be29d3c4918ca91136e0b83268eac2c724cef3d3612f877e9c9ef2d1e531268bc436f8513d19237375b0afe5dec399a0e3a022f3772e181b4437c62dfbd2af649d45d52386ad8c5de48181c1ef0f41770fcf8c7649248c2d6ceae98a460276343800dea7de75c3ab1a9f1ad5799c56c2809a923cbfb4d9c78da82a14958ebf5"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x4, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x54, 0x3, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x83, 0xa0}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x7, 0x5, [@generic={0xe8, 0x2, "0a076d5818a47a9882b7f589a32ada6c3f5c0eb3afee8c928642df1d77a826ec9419abae4c5a9800a1ab15ea87de5ccc9284c42ef1fc3307d9343d5df343d4f3f9b52c5353ace2c22886dbd15e19647f4b0b6ad2d6e832c428fe64ad26886b6c6591f3e20cc1bc4e13c1ad37b917d98d4ab4d9f16d7d045975e061aad92330e6221f6e14b58382041a58afe5c9c5f27f94bcf1ba680439abcbdbfe348d59f1450421ab8b41f55f01b1fb28904211219ac2df18c1597143d3014290035bcbe359889429734981bf61f840b6896486f5094eca604b57a8fc0b95b833716b6d65c1c8900d6a7c09"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x6, 0x8, [@generic={0xd6, 0x2a, "fd9a75e3a95596e1d3441981c1bb44706a7f18939796fcc83ca9b85057f258d7c744361b55a2b8487e653cca6169387a4dc42e0a24181b77e4f592ba16eef865955f3775eea2e33881e3552f80200060d3240b5731324b8ba911c5a6bed74f5ab69e67b0e290e14b05b29b669bd1f472ad784deeb6021d339db85dddd50ed858f8511cc7d3c69920a2b41bd2cf432fa11dc2453209120e2a6e5c4b6bd1c519f336affb0becb4cf571880d26316cbbda16db442bd414b359968a19e3a232f6d03fadbfa7ed347df27772ec821f7f3da33de7f1cf9"}, @generic={0x75, 0x7, "92156b417e6bdc97e804a4f7672d18a3f66ed680563b61b8d4dcf4dd01e3d2e2f4802f3c7f16a4e8bd239f204307aa001ec1c64ee71c153f03aabc0a6545611f0dfdec0388436cc8e390f410be825b8a7fd4e50316205923d6110f72e5896caa227a0eb213d07b2393c743f5e32452a06ec6dc"}]}}]}}, {{0x9, 0x4, 0x6f, 0xff, 0x8, 0xcb, 0x19, 0x1e, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xbd, 0x1, 0x2, 0x5, "34d5"}]}, @hid_hid={0x9, 0x21, 0xab, 0x9, 0x1, {0x22, 0xfb1}}], [{{0x9, 0x5, 0xc, 0xc, 0x10, 0xe, 0x0, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xb8, 0x101}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x10, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x9, 0x0, 0xb7, [@generic={0x85, 0x6, "814e112fb8071e6080cc0b48eada7519413acc63a1b3ef8bf82f16702ea2da1f6dff4b6c2a471e4d3e96bebc223de518790867b63e814e51108dec7d2d879bc798ab2947c61e521b7bc9c931f369cc9b63df2442db8c007845a4dab7a8118c6b54973f235832cfe8e237c72fb63dd810fb88b526b54ed4f97d5ecffcac9af9bcb55d73"}, @generic={0x3e, 0x6, "116d3dfcb8f476c3f4c13eaedf77da339fcce32cf9cb8e8abf4d814286884e20b7dcda05fc7ac28457989f2a253dca3fe003e0be5e108a9a206b9be8"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x1, 0x1, 0x1, [@generic={0xf0, 0xb, "aa2e8fac45cea9569eeda0b63e219227e9143d27fb157e79ca0063f3f756844ef8da87319ed6f1fca43a22ed249609013362c08c7726598bbe2af7ef03c2f7f736f84ed8367c8af635ad03f52834ad63ae5ea4bba925c5298441ecf7ab4f3fd0ac9a0cc162309ebb21bb823a563903db8825ec433fa67c9c178773eb85d17024cae512a1942d09a80c6c2aa56d6158e5e5e31494aa4f9e4de01bca6e385da6108f08337fd02ffc898f5b6b49c24d4fdc1aa15c2a8f4372d1b81d36d80f43f198a33f89df96d8004e494c03840d520e4acc9703fcbcc8ca36816d2c47818057e33562277f22212e6aef6e4060f86b"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x7, 0xf8, 0x4, [@generic={0x26, 0x23, "841edac8947f0339d2e37715730713f09504ff29aeaa2afd27369ba7c37fa675103af2c7"}, @generic={0xa8, 0x4, "510e7d5aaf66900cb4a36e6d5b9684208108a4038fef64e9a30dfe7d654143ceebc11b990ec0ee79bbb7132fa373944a14cc2e76616f63625d2374200932eb3b42749a84a8946ed61db5bfbed6e3ea149f745d6854e15540436e4d77a858d955ed8cae977ca4a037d19068175647d208ef86afb69d7b8560066cf79535b9a231671569cba5e3d250945cdfd5b1dc6011650fbb363d7ef632f1224355e5896f5bb7dd3bf18193"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x3, 0x6, 0x66, [@generic={0x34, 0x24, "cd7c5b1b0a6f06228062a31cb54b40c33cc97849fa9385039246d3a4d5b7a29a7c7efb563a0fb49d2c50bbd5e4030a6c093b"}, @generic={0xe4, 0x8, "c9e947c6aa7d7fdc4c361ff52c1d9903e481c92c5bd8abb100fdb5bf71893d4e311e9baab74c649c6b06f881f07de805ae4be7e98e3931de2f06678ca0981a2750e9a002384f1f195a2b2010d14c76cde76920e6fd76407ee8ced3edd6966b9361a2b98bbdce658324ab4d018a9aef5cf521604a5d97b9ed59423f7e572e575b51aa3de891a5271851b8f4f96b6bf0f2f1922712f610f8f65c25c8e5e3d533861b4f1f8b60facb50c1102eddbc0fc220d596287209d7e2b9e189a5cc3f3c6608dd7583300416a66d3e33ab1e26c0b13954230d047e5329859a91f319b3f8bb23a12d"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x1, 0x7, 0x5, [@generic={0x38, 0x10, "38d7f8a9c9214f721dd12f2d978da3db3262d6f2fbff929517e6821963dd606f59c26aec460176cb2f0ec16d0ce62f2abb85367fe21b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xeb, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x60, 0x1, 0xc5, [@generic={0xf1, 0x21, "39c3a533fe1ce39a1b0271c65c61ee8d534a86a4b9cbb40c9a0b05c5314a3cf3376e05ef99865f6844c7b6cfcfda4739675a403e8767719063f9ad7273a89a651b696aa63ec476cef90271ef3800b4929553eef3048463d68a9cfbabdb26e1641333908c571d2774a2605d29db62faa358296e2ef8a2985fec6e6896f70f85d686e52085cff2a490da26583290357f09341208e1c36712b76f23011c9f5b06a1922591d09713a2d16efba9afbdf1fc6a05b5157a899fceae1e23ab223ab3e6d986795d75e16643c389caa639808dbaf1d009b5532a54edb07f029ef5c0196cd2f1d79311d815a9095b3fb5ccdbcff4"}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x5, 0x81, 0x40, 0x10}, 0x8, &(0x7f0000000040)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40b}}]}) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x22, 0xc5, {0xc5, 0x9, "ad3410fdc6d39f2a20fd4d315f31961ff69cefb659c79c5f25c02b91bb5e487b3f32eac4aa4a44afc14b6730c413fc941adbcf7f24827de944396ab2595485002ae0862e5df44a48c224bfe739b858073d629296a7415a661a169ab208111419da4c48707811be38eb42bc85c96e5bd30725c853d7ca25bb20a74fc2252e4a4fe5161efd71391cb69a1ad25f353137b581eebf1ac6bb53b807d543f69ba525a82c7680dc8a18060da9f4d4b8da969f893bbb440ea8c23e6fa24de58da18cbfd6ce8761"}}, &(0x7f00000002c0)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "845f13296f9f092a9b40f78febf537d8004e99fe2e35d899ec28726d262ab48fbf9961e28c8b64c111f38576fa900f37542ded3578c4f3f7e3dc6c152a09084e777bcfd29ea44a258c012b8b97c15665b57c97087d2af5ff99306095ea58e480f940c39c5718bf3609937c71696416f9bb5c576cf5f55e39885149d56fbe08dd5288002182292ecd3a913ac66ce55cbcd8261d6d59ad61f36d59ccfd3ce606d03413190ba24012c9ac709f37647d95210e75deb731a4953d371b5958e02fe84c2fc307acec019045f23e408c2c69dbb51586883bf62d40bd8b08d4e09f96aef749e1fb9c292bdaa5b1608889be4d7f"}}, &(0x7f00000004c0)={0x0, 0xf, 0xa9, {0x5, 0xf, 0xa9, 0x2, [@generic={0xa1, 0x10, 0x3, "cee1d5df40d5e04011498e3d5f7ebc41d43d7644feda3a9da383bf4ca952f00322ba5404cd5b7a9c89184037aec3928abd3128c0507fa13f3f9c00d84ca5d09302cb1888d2a5b841af6da3025493e8c3966b2467b6b006f2482804ef823e1551ecdf5f5563da75d5f925956134fbb2e803e80c40cca1e84d2295f6ec4d7b88b0377fe11e5e0782af0045828b1552c9874dd52da846c0af23b843085639c7"}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x6, 0x43, "2b9160a5", "bc52fb96"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x29, 0x80, 0x0, 0x0, 0xd, 0x3}}}, &(0x7f0000001980)={0x84, &(0x7f0000000580)={0x40, 0x12, 0xc0, "1e9e7c21fafdc80ee39403ae3d45b5f1fad1019a7c856a5a819ee044304df9cbf322b9a004fcf6878fd46fbc87ae63d25fd2aeb060b475557002b8f1835fd4dfc33c80105785624fdf7fb3e65c56ef090b9abb41c65d289514f7779677d6e18cd71174dbc6424806263d0f30c12b626f2560e160d3a43565067298a3f9acd955497bcb548c3bdac36ff753ca39cee7db5b700e37f45c6182af052282500f8d7b36ae7a722e965bb09d35be467e0c35a6f3620037b095382af28be2aca15e54dd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xb7}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001680)={0x20, 0x0, 0x8, {0x62, 0x4, [0x1e000]}}, &(0x7f00000016c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000001700)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000001740)={0x40, 0xb, 0x2, "06f1"}, &(0x7f0000001780)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000017c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001800)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001840)={0x40, 0x19, 0x2, "4c02"}, &(0x7f0000001880)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000018c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001900)={0x40, 0x1e, 0x1, 0x43}, &(0x7f0000001940)={0x40, 0x21, 0x1, 0x80}}) 4.455607934s ago: executing program 1 (id=106): socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x100022a6, &(0x7f0000001c40)={0x0, 0x0, 0x8000}, 0x0, &(0x7f0000000280)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000240)={0x0, 0x6, 0x91bd, 0x0, 0xff, "7f12ddb357f7adf97affffff8000e500"}) r11 = syz_open_pts(r10, 0x0) ioctl$TCGETA(r11, 0x5405, &(0x7f0000000180)) 4.385238171s ago: executing program 2 (id=107): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010100, 0x3505}}, 0xe8) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = epoll_create(0xf5) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r3, 0x53, "38b0120139f17adec84e2f6035c9db17ff3bbf6069d0e1357f41ee1c313d3109c3b9d0255deeb4ec6c47ef5bcd500d88eac0d59bd686232d3c7f2236e11d99342eb4e3ea9183303ded08b6319e1c4c25f96b81"}, &(0x7f0000000040)=0x5b) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x9a, 0x10, 0x3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001180)={0x60000016}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x1c6}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r7, &(0x7f00000001c0)=""/212, 0xd4) 3.616665739s ago: executing program 0 (id=108): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) dup2(r4, r3) flock(r4, 0x1) close(r2) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r8 = syz_open_procfs(0x0, 0x0) sendfile(r8, r8, &(0x7f0000000040)=0x2eb4, 0x2000007ff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) 2.441216277s ago: executing program 4 (id=109): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f00000000c0)="4db5266af2c61f854ed768e7c758e3c75b0071f3f8e75b88a3222c803220a10dea40259c0d4eb3ee36f6", 0x2a}], 0x2}, 0x400c884) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.180984599s ago: executing program 1 (id=110): r0 = socket(0x2, 0x3, 0xff) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x0, 0x0, 0xc8, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x46, 0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x18}, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'tunl0\x00', {0xff}, {}, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)="f9214360367a9225faca41f336c83fe3bf049ce37c58b464754594c1e96120d8b5a51321", 0xfdef}], 0x1}}], 0x1, 0x20044840) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x4048000000000000, 0x10f282) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) r5 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='#\xad]%&\x00', r5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)={0x1003, 0x0, 'client0\x00', 0x0, "92c18f5458d5f54f", "c3e64652ce2fc415a5b53ac6428c8b50af67d6c99cdfe5c1e40001df2c325f95"}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x50, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) 1.667393796s ago: executing program 3 (id=113): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg(r0, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x2, {0xa, 0x4e21, 0xcf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="a9cd44463d7538bc4198b579acf58de4d94a11aabf7e9add69579087896bdc02472a4fb4500df01f1c6914ad5edb1a159d4fc7e3a6e10caee7127114fe90e33eacbff6", 0x43}, {&(0x7f0000000200)="7e36007062076d1514d4f471edddcdb65953bf911c806d88d03e012608d821f918cae0d3f4acc3c763d5f94514e47e12942ac74147b5e28c8e9c21f98aa1790d9124dd7fdf500934e90dcce600c109f309de10cca3dcdc961a21bed8ac3693b508f80a6b004b8f0b01f3cd6744d30ed498b6a6291376488f95dcafd3f3c9a630c9c8", 0x82}, {&(0x7f00000002c0)="cc863550a50116c29f024dbb7492290bb1f0b29e4d3f6273b85b6d42f626b3d033126f4e7936ceef81970fed00faa6a04708d443809f6589fc20a66390e6f7637967d3357a5096d690caa65bb4efa881e5109468f415d453d7d815e817f6d24ce13ae76f77286f50b47a2e0fd9eb321a76884a473ffb9729b29476868ed6fac96da031e82c5adcf4934594c5288480e76f232c1f03693d90f1fc03585e2c89794e3c169d1bfd74c8296c6c5710bb55f63f94f7", 0xb3}, {&(0x7f0000000380)="823caffc09e9f1151d5ff6ef10847ecc1d4c6928306b677135b88ab9f3aac7551d0a4ee541b8d3dec20012e52f832d0aa966ac951d2ac1415f960a0679dcddf2f0e4636656e9edc5bab3790c0b5bc16e0b85138648af847e48f93fdcffac2ecb3c13b10069705240e4c5bcaa2d1a4e6d0ca0b018359917dcabe6127944b2443e0462ef3b3b81e11b4219a8f8bf3e76739dce0501e16184f2ba7026f5295d0f8f7921fee0e810fe77ead8e6b4733714c18907460a63adc986", 0xb8}, {&(0x7f0000000580)="0fc62d7e7649617d040bdc7f4b22298ade57974f1adba851b76ff3ce3954062f57fe7491fa9e2231097e5106c039fa9364b011f94d7ae8507096e1c2b5bd1102b91818e4464c2819375c8c7379cf03551aae0d16787f65e39009b7d00487325d87d24e303dc32b53eca6676bd8d43c25a0cec79e3842fbd7043f947865fb426e9bb66d8453138188a6ade80b95360b5ad2694fd62307d56375fb81b12e0d7096059aa77dbaf9adfe21176c8c045d980273c60d7814ccfe1da40947801fe3c0a252c44ed82619433366202da482ddf7761e7a387fac83d770c3d3f1270b2fb862388d9bed4966667436cba9c4a7a587f65c46cf5e255218244c9b5da328829bc89952c17777354262b34c5ad47c57640d655e40644c65caf98df20cd725ec69315f21d837b5a4d8c9f71a00d9c59ccd6e028d79c428d02fedd8653241af421e0a27cda527cea051c06558aed795019e4cea299041539601a347463677a593468b9f62ee09ada232fa5917988ecbcdf4d38f6ffea90d315771e7b1ceebebbf436052c0d131dcc934f7da5d9dc102de497f8538d16af91b3deef5fdbda3618b75a0524b93075860b6d26d5eec97ce8d045fa68a19749b0762d52f8c7fdec2bce852f51e8d63961e1ae35e5ddd26421ff6a6d1d5f159828dc6d95190e26f0318e8fdf0fa582a7091e63ec7adc0b7e2bea8c46d934f0af9ce7aedbce550280ca0e463f609759a9b3904198dbdee9d87ed3e45f5b3a12f8417e55a974d63377f6369dd5118a27f68ae5505340ed4271a3f9462f19d984bd583a9daaa589ef29436c3c397609c093e49cf0fd5e864a92b8728d27e5fe166b0d5e75b24122234088ff7ae1318a7078ab51405ae24c5819acf1e24e237b209e456f3e96a4ce5d1e3d1fd4cd20401f9472f6360ef39b88f24e553a81064b91fabc419a48ebb20537e13e103989d1c17b72135744b8171377364e0904f5f620c87be4447db252ef01e01eb8b31f5ba5638c75a4e7b96f758b2fee28920bdbcc6a691f61f23f3d54221858e915c3e5a456d04166d86399c77a50f73bb673fd07c3145f55c39485fefc45255ae5f15110a03a6cd9c0529725486a5a2582a04828a669956a823d53d0d80478f910a438cc849c74a4b7bc5f1e51577da885789984e03401f19d92536df57d2a1ccf08d8be1b23bf8dfa5541c46971b2c200a67bec25b576d1baa328c8c2cc74fc2253fd7589cf2379ba87ee69f8b6c9c5d0d547cf36c55aea2f8bafceb6d04017d46ba6f67adbc1fea046a26ab6db04000d94bc829c9761d3cc6217a67d143f07a75b68b87c0fd857efd3c93b6541d60cc2c28de70adb8c47cbb81f917cab9f080f23d680faeb9b89d5e73b4f9be12d47bfa2f9ec8888f3842004a81e318f65e3449f2ee9990da89d17dc0b5d8216b0413ca2da95461aaf30c6b44ddfd031bafc506fb4729dde81762ba26df2e7dc8b1fb38788aad11667cfd28850734116ef79876b76718a9817db50600fb802d76ed6167fc9d0f560fa09bdc5d34f5fefd75ca82b0b408e0ea7fe6c79adc199eff960f603f9784b02d29b4c5f67c29e67b7f2329800159fb6070fbd898cf137a6b0c4476c66e5b70824dcfe80bb56603f54aee75afd3e5a2c15be2b1cce2162a0166f21bdf0644eb5796c943a35cbbe13074d860765406729886f2252acba6eefa166eda571d3c5ca858a9911f719c454ccc73e4d42f6925c2be73a0810394e6e9ded3b7a5474c65a1a322ea444597cbbb5fa67ffc29e6f8ecef277bb8d9a6c96b9f6f9802129a5ea97e178c9d1434eb036e9cb1e6446175961f3e8ddc7b5062e4abfe246907cee72130f388e917fd2f6853e2f1f3cfc2746cb5f79420deba33f3f81856337e0daa9fa0a0a9dc431d06bb0849a0c2410a146c7c27d479d5da0472b8dc0a532ce64ed546b82f2689a16bf3aef525724a9b2b7ec92fdd384b02cf89d4a927ab0a68f2520893d016a6505a0afc1788038eb823bacec994daf1cadddd7da2770dfed726c2db3408e7ac39e8ccce5780a6c0b87fe3373c1d5fe9f3d60d507f3f1e38b05de0b43025b1b7f76d3dbd3baeb1b0b92e9443002878bffd09e2a9d9c760c89cbfd364b62e9d6c7098e867258e260cf509848ca88c11efb2480bbb39f24725f25d1528b549f61fabeab9e615252489d397e3287b54205468524bcf9bc59057f21a3a13dac087f4460a53649e3c8d78b6889fbe8f673ce3d51004e34e1290bb5851adaeb5421503f6b19228410a45cc0ee733701d615eb464880bced2774916a3b40778e86bb176d9f5b437bfd7527c09ce663701df0f54066a1defe76eaf1f5b02a87bf1b4e56d5c71c7214a618fc3b4e970070f94cc97d3c7486b64132513e4c7c456aa27c9cfefc852a700522b16dec1a5a9a2cfe5004a397fdb2e96182b70e5a998fd329a89d06f55317aff41783410cedb8dc9f5c431637a8233021d0c203b7c632b0cdddfc2f353d01f899b456a5e1ab6158311b39772ffdb8204946af84ca04ecf4be8ccd0e3bde31caf464e988be3084de0159d0ea60028c06c4260e57bf08dba9bc5bd99b51ebfb36ff4f97cb5d9aeb45bc31bdb2fe9261b4383dade582cc1a9d3acd3ae9170aa624a3b77b34441d42a6e1cbccd625002c0431ddf2ab8664bfdbb75929f68f7a77fb9bcab8c3ad34606c4e702d9bda1b35c28df21632bff59c0eaf60d836fbe00e0db3e7293c8b79f0f11929fa14f69df787ddf9c6e538a11b0ebd7e99e8ecf920b26552f275144eb2b23fca4d462812fb2547f1264b3085dd8c859866c3de87500a1e1b456eeaed875357d9d585a43fe58250aa96a861962aca470461f3b5f910b3791d52fdb0945f805fda8bc9f71f5472d88726c2d394fbefd2f4b9c6340565b28c54deadb84dc6c2f35dca3de343c233ae8f7ac783f142dff970d0b4c643bd6711dfc8f79bef1b5325bc3c77b5ff886143791b8501a8fdc51c833b3c3960fb4415078e363e4d44dbbc35f1bba4caa9daa6f2ed5c96df71e218dc8a787496528e5cdf0770ee0e29f1e0fdee4eb37926d0f10afc6c74dae068db92e0d2c2140efeaa195a903ea8ec1fccecb1d87530c13719796c440766de2251589513377abeabd49ed84a2c4a7730f9f3c72a95da209553df8e42ec92c57dd9ad59a8899410704d189e1caeb093de81c5ff08a2dcfe4b0c03cb6fe6aa08c5ba3da0e1f7c8d5fe8e9be93db8e28f6783b430d67a6c4a5314a759df331b46cc2d5ed700f4771487343673311d6db1ea3fe79851c3e6fed735336329373810f06b9064bf80fae3c64b21d077a54ccde23c3c97085cf973ef37d3e380bddeafe93111db61a4b7e82215aa2efd3073013ee055fa5b29e191348ac48c583b1b41f36879343d99e6959e3f808b9b9d1bad734be9c6ea7af09d26b45b36b689b9b7e65dba99303aaeb0262098d649f75010ac9a9945df6523d8473c47fedd6c493626ed07d5c8e32b6574fe84bda0515a0dbfee2e2eca13538ee079c74a5ebedc163e8a13fa46951dd5bc601c933b875d0f13fdf74933b3bf66ae62534b4e024abf433f5a0cfae8a0eab222254056d9e7ab11ffb442978fff40b3f8457121dec3e13ce62dad2ddf9b2ebfa6171c7e1df5cd86966a94ff13ffac6c785a71a3c6fafa3782a6bb76d913f10ce27aa25e16ce9b78da311608ff768d4470e1da420dc00704e69e204d017dacecfc8ad194151d6effb3bcebd271093ab0a93c6cf2823c62d4239a1c2e608f941d895962449601ee455122a727815c1a342dba581f8cdffb96f42c9e8d2e3857bf067d42d295951cdd928a224f2fc31ff3af3c2de7f2f5253d2fd5d58f405077ed5eba8e2d2aa124e25ceec37a938d060c77dbd1447fc34c169c6896935075d1dbcf8148386ce8de073c7862bdbfcbeec6c75c79081677b5eab6deda0b47c2be00b7ccf389e6fe5a8c3ff132822bb9d7f42b8e6957bdb819fc7a94c77a123eab1552c09f9d6c55f4db30ad583307f030728f345a0910e3639733f0032e93246fe975166720646ac97c0d81af5e43d75f0d10bdea98f81f9445a67b231dc1d5750bd06a1f93249d379ac92764aab94bd0b184565a14af6be98c5e9abde04985906ee71c7d7a60341692cbcbebe0156f66d940ec82a97cb6f249d5b5e23812752265660e21fd5c5ac227d38b24fb76a2178f82e9fe00a1357e4dff7debd70717e5259dce295e5af42405832a310f60d194f2b1eb12c9487ca48d6b911c5d61392b359cf3776e502d46980053530193edac8636f637c1e224cf3bc1c5b8ad6c7fe20f6fada6706827145073fcbe3f3f1009ea48b6aa5fc32d15379405ca15bd812ec688d93ecab1cb67f81aa95eeadda12f14ec9d2f4e7982848eff2af3ed40ddbc908f226fe1561007619e7d23c6edf9c2d24cc054796b23bdf8c61a7c97ff3e9971325104c47093318409f912a31d02896d51518bfe5715ca1db866554445d7fb76c8a0c4780a7ce27fe6f399d1dff5f208c968c044655a7ba9497732c4f4166c4953f33a9968183fcc8aebbee1aeafb9934740403fcd635fb8b603d83679139f041a648e131e003531fadb405ce031c88e61fac0ab8abdd857afaf58919f04ff2e5c142fa8cb26b1f5b012c8ada98b6d58efe502f44e4bc43ab49ee08139eb9ca30379c8dd56fef261b5f404e8607c63813b8d9599759d644426497c0e9fa70d58a4d6e3d4f0f81f722657806da2b39d96a26a2dae8dfde20460b14caf60bf8cee9624d59c375799b10761e8b3b93fa483fd082a76590bfabe3068887b89ac0a8aaf304a4b67b5afede9f89ca841d722b50f9ba8b27c9a9fac18c17324e1b817dc3de0fef8445be10acb00995d44865a8aab22a9d56b7e14167ffa123cf64fdf672f308934af2ed6892af8d586ac53137cf73e8c32b90c6dd637be0970b723ab99fd66d364cd04fe18e02aae918249d5235a74793d7ef79c93dcb8cb99e270a0bfaaef7530efa15094139b8f6df0f5de401adecdac6fbd7087aba25adb12dbe0d35711e26f4f107397c5d99a5733517b2f9d017a7a12d54cf1dfa1cb1bf055a1f15f64ebe08da9a2f77e5748ecd034a9bf43b7902c4195757b1342a4e196cdf92a9a19d88ddbc485e257b3b2d09d0d45b3e4dde6b7b0f6835b86b01f45239b3f0431937892ad7d6c7ebaeea7b79b9386533149900d688cfd33e3b41e5a3970adbb9e3e666a8de482aa5567bc40d600dcf4796d3f788ad8dae035befdea3af116d9ad0b03fff572dfb29393c10026c9222c2773a9e4585d279c939780c4b535d445ddfbf30cd5ea8067df4a5126834080fceb79553a7a9722a68f356ef4798db0adc42eec83aa61777387768aab8fd4896a187b23da9b6b4a9a1b565083746d3f3233557835b49f89fb736a84098adc6f28239751bfc2aec929ab9e10037ac25595941b14988a481737dd200ebb4dc8e403fc200076ae55f142a6c6f8d7e1df5305d363605b52f39b359ddbe05e6d0416e91f9d1e26d9a00f4a813844fccc39b0493dadab4db6b368494f8b987fc1872c7a91c72cfe2001b182c826ed476ea8fc3b2a152e8105780f239b6411b10dc7074015cbece4686fe8f36b92171cf052ef73294f0966c01499d2521e62a729df8503e1d7816d0bf021102b1c1f4aac3143d15c71bf11aa084b1195304fd2abe7ead3e186ae7f976596a939427f32de9b1cceedda71a9866b91edb72892a37ac4086bc07e0457f1ce87e77d99a380fb6f4ba8aaa1afc30961e47592e0ed0ce697ea2660bf8821322275b1b98ceb3b2d36665", 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="7a9445a3f925d5ff5b00a1d4", 0xc}, {&(0x7f0000000500)='m', 0x1}, {&(0x7f0000001580)="8b9f12bee788ef3715", 0x9}], 0x3}}, {{&(0x7f0000001600)=@l2tp6={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfccc, 0x4}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001680)="1fc5d374d47c5241b9f784e37694d4ab827be2303a547eb1a9798c563888bdf7db7ba97c3093fea0113cd7c18683ff2ba4160268af322664055a88f06f19169ee49b8b8fe4230a71e72a41a3616d4410006ba6d436010926163864268d3b6975a6a2eda687edbfed2c3baee3284852aec8f17aea74c2ec5b38a79434993890247e12c542a1fec10f5835543bb9f962c2d42fc82615bc79ca502cda491adb566d47e09cad1711b8b3e99da5a2d8b732c5", 0xb0}, {&(0x7f0000001740)="0210e880d13b5a232baddb81263cc5e0bc29a450c1aa36e7bae3351d5e43176b5e76746eeb34ea9200dfdc9def690f2f5079a635a7b3449c5a558910a174bec4b72a9057b4eb9b956fcf242c35cd6d46f92cefea15be231df99760b054cb1cf0c0076e363342f0a3aa3ccfd686f40a2063a3b7267e9c5e551a97784abefe45600991", 0x82}, {&(0x7f0000001800)="2e8f59cdf1e4ba353159463c1b080fe46aec2aca5e0013e78051358c838c378ec0b3eddda8f4481fc5dcd7dc58cbfac2ad1250d6ed3757dc4489a309bfb3702ec1a3253ea6daeaa497d849fbdcad792d76498305a99a944ff3c499c3d1d7b8e280283a8332ec8d5258413112c43a", 0x6e}, {&(0x7f0000001880)="c3cad29a58f8cf84189f9fbe19c279a89460badfee7e4db6630006b3293b85cf6518a1d9ebf3ec0d353c3926bc3878b5d7209987d113c479dc7e247c52e6f8156c97d3879ce37e34e92b17cff07fcfe0c2fa9114df342a9ea555e3fe83bf6684b9041412363025b7e18f6d554787b8c971f6845e60502116b867fc3a9bb3da2d67c6a3053c70aa0f2e0c8e21e2c1b21daf1c3da386af60cd01c650aadf3d62bdcb6c5ac4ce2ecb3232e57ef089879b559c9108413eb133ad54c60908d5cef085459763717d9fca9aa70c1230d77da43c3a68895eab2e3257ee06d39cbe54816a9964abc1a5058eba9a40f82d02117f88ff39f31fbf", 0xf5}, {&(0x7f0000001980)="7e537de7dc489f0dc2cc9cf076fc8ebeff156714cd60f49859e9580e04ce9f7171bf268d7e07efb457778802319c473f314e74c99f84742c639ab2da6a1072ffd377dd38e8cb91ad0913da92e994e8f4410393e1f61c3724f0b5b1aedd0a2b5ed196422887a4696c8564d24946a47d8a20a765cb7f55fac0a7e5b1f0935d6ceb989db812a60832eeb02cd9b97bbf94388116de70a987e8c4bf68a57fa32cd9b93e7e8534578a74f6ba0972c7b327241e91b8f0e1029329fd533b3b7ff104fc38782c126ddb9e46bf72952868f2937d4f9d14cd783f0810e129efd333470393d5bb0bb0ca575619029155ff", 0xeb}, {&(0x7f0000001a80)="2d78b8f7972e9c2c8311c36755907cdb37e700d75b013de77c6bb2c998f332a6bacb210bd60a1f6b0953fb9f75903896c26b96db6e330e900e06e930d68f65e01329147b7fdafdacc992da951e62ecd5341f882c2b2243cdfbbdb068434d6fb90336989649b4f1cb4c", 0x69}, {&(0x7f0000001b00)="45c6203ced292554c7cdc05612faefc2500aa7ac8e43fe70555ceb004dfdcd3f44c1c8945be18a275b8f07042460d949be9de3806ba127d2c4754b1ebd0a0f49b3abcd403871b7a6933057a19c545b93ef42622160c2e4564e76b4276a37f14c1e51fcdec6c97375b674a06817e301684d72af16bbddc8e68159f59367b7b5f7f489b913aa35b7994f692b19", 0x8c}], 0x7, &(0x7f0000003440)=ANY=[@ANYBLOB="40000000000000008800000001000000928b0973c91fcff985b109362e3e08a2776bfeea4e7d1e2c24be470d6958f5c7e489d83c18fcbb0ad6a466530f000000400000000000000018010000ef01000003316a77a80c46b0b3cc496e728f81be9838012fe8183d2e7f1663f78557c3687a90cf5f815a2e34c255faf7a3870200126454"], 0x80}}, {{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x2, 0x2, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="de379c20b98a0cfe3a88e4a4cc10b8494276eb0403f751fdb302e677ef5bb2a1de43518812278731e8edfa799a1e305100c74abb064e82424cbe1ac5041f7b14102dd0ac6e37403836b0d02fc7560ec8e5cef76e5bdea8c0f705dc6406b39525ebb1193aec3aebd9cb49cb28846ade3bd056c4cac12e1c455078e7234abb317d1ebe69bc5e90e5e0447346a051ec958aaea981a3a13b482027ace9238701c47fbf36905e2311b53962f6274f2e7c6d526a3fe832f598a31759228943bf513f1a8d98adf7a3088baab5a653119a8f9177", 0xd0}, {&(0x7f0000002e40)="33e2baac41008f3908f645d25fd1f7fd742f68762ab106091c5823b011d715399882cee825b33329eeefae91af17da570c526a8ca43f95cafaf293477a952c3f78cec8b2f1f11a759d1ec971eb4cb42e1d1bc67eb1adc4d40a9b561952a9abd948e0deb425a64760a71f90e103cc0765701f61ea6afd", 0x76}, {&(0x7f0000002ec0)="8e858b3667", 0x5}, {&(0x7f0000002f00)="39f784781d3677b92e5a5d1c91c7d8cc9c504792de544de93faace", 0x1b}, {&(0x7f0000002f40)="cf6f6130ad0d39fcf3dd37aac29873d0238326c5610a423b282cd678657ea620efd760a54f304dac03ee800b42fef917171847e6c6e7da08b1a07f99e68dc186b4215c1c42c6cfe95b45ba38ae9e10b58d964fb542d5aed0d412faeae36f20e42667db85413599964763f10659826b09305fdef9a2b06c0f1df7f73f2ff6f87ee0223335e87e92be9baa3e7f1ce42c4556aafd845207cf8ae7e3e3ab3cbace1658952258c102504c203d8f8c97bcce79bdbd416021b674ed2672883fa69667ae66ea624a3112025759591090d9e66ad2", 0xd0}, {&(0x7f0000003040)="9f3a813532a386be7e332d40c1112f73c2d8993d534009fac9566a6e034e5ba645f6be0101db43c9e6a3a0937dccdcc3ee4efb95c5cb3c45f14bada31558e297e86196fa", 0x44}], 0x7, &(0x7f0000003140)=[{0x18, 0x114, 0xfffffffc, "aec95d012d4c528c"}, {0xf0, 0x108, 0x1, "1ddcca458ed428cdf18672f7f0a7beecb66db85315bfd23fdbc0a15c48f60d0f9b12dfb099747ff4d47f4ec46cfb934e96f31ecd2b67012d8aa184f8c16585a9e037984f8790072cecacd29b261ac95d5632a4f9bcbeee2c89dd0333e86f4a75ba0ec926acd1872415784c43a09bac2a58cea63522c6c9537b0dfc9ead0277a9a35ebbcd20045ddc45ac9f77eea22246aef61cb75a9e778e65239552d974e3190b73b17cc1a2b0fba46bcc5e2dc5eeb45f219234502d4a0798cd6399ff66182f074e339d4143eb96ad7c1c235936e8d8769ef90c3bd2f054c19ae7a241a0fbbf"}, {0xd0, 0x95, 0x10001, "4b0e08dd5ada951ddd6bc7c9c52eab8bbc1406d168638fb2d789f4a34d9206559219fbbc57d70a25a3ab66efa6bd23c33e8286123aa0ac63227583a30f4a22d209552f0a0378498a7231e74f1858a61426773ecf76c2c99733a90e221d61022a48f1b232adceb7a391868a1f4305f4b8610df4d20ff6b23ee0498075e1aa391f75af3f34d1ffc801d54ae23cb1abc70286764a7cfe6bc8911892e6ae79e3e981dfe39b0ef00650c126a36f660da58a99199f0f3163a6ee5ce75097f66f8756cb"}], 0x1d8}}], 0x4, 0x20000000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000002050001c0000000000900000400000000"]) write(r5, &(0x7f0000003500)="fd32d454a25319c2e0f76c45afc7a20ca2d8fbcc443a81e09913510aab89daf4a16d6456515912725d580942f7f7f1a9394c4b511afc979aa1f1c9433fe3bc8280111139174bde77e69daecf1899fbf1e10b33a04f62809074b1853490a5db422a501cd4419bd0a30e1c23a85585ef7b70a308cdd2d00e77144678b9537ba6b6fce46020faab3fc849c7fdb2895c368206821583beda46b1b06175543fb6bc006f34fe19c4e06f1d39f4f91a", 0xac) 1.356840006s ago: executing program 4 (id=114): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_clone(0x60080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vlan1\x00', 0x2000}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x398}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000300)="87992d800d80", 0x6, 0x9, 0x0, 0x0, r6}]) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x5bd}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000300)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000380)=[0x0, 0x0], 0x2, r11, r12, 0x3, 0x240, 0xffffffff, 0x801, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x8001, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x8, 0x9, 0x9f, 0x0, 0x2052, 0xa, 0x6e, 0xa0, 0x81, 0x1, 0xfc, 0x8, 0x0, 0x0, 0x5464, 0xcc, 0x7, 0x7f, 0x0, '\x00', 0x7f, 0x9}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x8, 0x5, 0x0, 0xd1, 0x39, 0x6, 0xfc, 0x3, 0x8, 0x5, 0x6, 0x0, 0x9, 0x8, 0xe, 0x0, 0x7f, 0x3, '\x00', 0x6, 0x47fff}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x100000000000, 0x5]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r13, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) getsockopt$inet6_opts(r13, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1.131807876s ago: executing program 3 (id=115): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea185000000000000", 0x38}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11", 0x17}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000d80)="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", 0x119}], 0x2}}], 0x2, 0xc0) close_range(r0, 0xffffffffffffffff, 0x0) 911.094646ms ago: executing program 2 (id=116): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc97a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xfe7fff01, 0x5, 0x5, 0xb, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x9, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x4, 0x7, 0x4000017, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x4, 0x5, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf1, 0xa, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x0, 0x7, 0x7fff, 0x6, 0x3fe, 0xffffffff, 0x6, 0x1, 0x8000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x43, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x6, 0x9, 0x3, 0x3, 0x4000007, 0x6, 0xffffffff, 0x9, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x80000005, 0x8, 0x86, 0x0, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x71, 0xa9, 0xc78, 0x6, 0xac8, 0xbf, 0x2, 0x0, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffc, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x8002, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x20014c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x1, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0xfffffffc, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0x9, 0x7]}, 0x45c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) r6 = syz_io_uring_setup(0x8ce, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x34d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r6, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[], 0x232) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="369ebcba9ff707860a641708d000bb91801fe00527e84be1a346794d51fc11e02167a4bb4b510652afb52e5b29ab46d81a9623b44f911e4046b3be732c8cba9da9fb6a00ba9826525f66d299e30a7a358cb9755ca8aa2ae125eaaaa88626eab5a06a342a18a1a36f756a8d0d13378437e38301e16eceb2f68f46a04be52dd3519fccf0ad5821d178fbd35608f70c2284e394e6c5e6b0b1f5989d84cfb3d8cc", 0x9f}, {&(0x7f0000000240)="a3961a66d2e6b3811b421a77442d95ed24db19d04a4c8a1116cfa17a65e8dc8925282ec8ad5f4c143604dbdd4f47518c15bd18c0289594060db810ce2918513d1b03e00ef7ff0fe32019d45ceca8b7b7878c0837f8d386f8a354a67085e44d3a2895692f07f7f4370093b416e3db16837e6b28bf83f85b101396cd5d922e992ea4f937f893849e233934d538ef655a7002d69d96e9f5beb21f45e6f9b3ec27a3fda64203", 0xa4}, {&(0x7f0000000080)}, {&(0x7f0000000880)="ad6dd2e5ae4cd1957dffa2292508b96f40a9100bde3bccdcf2e9c35ef263ba010191d48c564f7ec9c21d5dddcd3cd2724ad61cd7c3ca6a2d69f0fd55554bbc1aa2819f7ca95e8e0ff584ffd8cb25f26975ff7c2bd669346e2d8e020345a520eba0bb751b5bbeaeed6c56f5a3248074f088b01dcbb28cbe9c655aa46f08649d17fa1b87b13015616f934db4a5523996f32e950e", 0x93}, {&(0x7f0000000940)="111694c90599aeeab286c7697ca658045945eac35c33be315cebbda4226977207a8df914b326b148fd077a4194ec8e552b9c410757ecf52830caaa11e4cee39365a331506c5e16280cb112c9ac282c2342b21eee6d23ddcacbcc407c64cb60465f00c32edcb0978ba295ec51c9dbfc88df29f7e62db159737f28a0990c08836b07708d8486ad8d3d118970fb3a912abe41f4c53dca67a56cb10bfd1272f6f3fa0bc91ac96f0c92fb97fc1d91ae376ee67fb9bf8731430813bee8a75d1e4977135f49a71cd75f3e9dbf", 0xc9}, {&(0x7f0000000f40)="3408e44cc6dd18577028eef04ea7128b70158590e9c68f10c66a0db28e88270de8014eb36d2d6a175134b5a8af8245cd6d267d21c2ba9064c6b078a8428dff5019f139ea8ff8c746bf9d3633b9655f943fe24afb9a73abbca90fb4da73776301d1b7579bfc935d44603e37c8189e81df2a7175b37d5a65ef66a3012b2c0ba8fa58365bf9517d635ae6016523e01d7f3be1fd65472722c116ed7c07fee49f292c241b83e7d26838bb0263a93adf490571361615251e4959ffdd22e85906343e8374228c02d72f30117de2bda1d4dee7032ad4bfceb878ec58c2698bdea18643ed78cc67f5d1a85f04bf2dbfb2407ef5d1", 0xf0}, {&(0x7f0000001040)="6b8dc1bd4353319257a66c567a42cd9549a8dc494a45fd67f80dff8085fb1343b128b8c7dcb6638ca8f14f38e717c6650359ace3eced93a7df24d85e43e5abccb9e1d71e676ca67f72c35204e44a16850c30b83e903d91d56b12b78d7b7cf05b6e58bc86ca4a0543571e5a20d4af9ba1f8e907caa05fcd9029cafc2881cd8444163761ee02b368a2d4e013ba09905b87d72211a71a94b8dd971e5ba1b79f5bff6c0fe64768f394eb17aaa886fce13902be8c11e51e49acae64eaa1444c969b3cfe74cc7cebe1b4aca742598b9a5ec46b41c25f50b0ebd34a1924", 0xda}], 0x7) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x9}, 0x3, 0x3}) (async) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES16], 0x0) 876.19462ms ago: executing program 1 (id=117): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xd00) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r2 = syz_io_uring_setup(0x4478, &(0x7f0000000280)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0x779ce5a2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 681.011389ms ago: executing program 0 (id=118): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x89fe3719ac50b348, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r4, r4, 0x0, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r6, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/239, 0xef}, 0x2}], 0xa, 0x10162, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="070000002000016d6603000000000000000002000000000000000000000008000a000800bd1c8e1250b0c27a89819b20d7c24716e0651e4c4972afbd1d6ce86c5ad13a5a3a22adc52fd6b1bec1bce411937563f8fc"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c240200000003000000000009240600060100000009240300000000050009240605", @ANYRESHEX], 0x0) sendto(r6, &(0x7f0000000440)="2bf0e3ac38be96e3f64fd129e06eef408a87534f902d4b97576dbeee5eb125f1e87f1556dacffb197201e49cdbbf44355c66f4d7edde65b132acedc53538a2e5730053f541bffe593485db71dcf9a39c8ed11e53158b55dd10d6f244b5520eace7a78290ff47ab9b9a1cccd17f66b3bfa42a67b75a1a840cdd569ee79fc24b406643855cf408a7bf7bb96a6631438adfbc438b442742349bde3df9c62c42a41c4c56811443baef1797edd12277e4c5fb0ecc9b373ec259f20d9becaffe347fbbb5a10cf6664af0546c334b5356dd882606bbdecd3ab19845176c75ad22a127c44eab8039fcd2051dbbfafc6d036f62d3cb644cf22035fd", 0xf7, 0x4008001, &(0x7f0000000200)=@hci={0x1f, 0x2, 0x1}, 0x80) memfd_secret(0x0) 631.0168ms ago: executing program 3 (id=119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e21, @private=0xa010102}}) (fail_nth: 1) 200.28358ms ago: executing program 1 (id=120): socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x100022a6, &(0x7f0000001c40)={0x0, 0x0, 0x8000}, 0x0, &(0x7f0000000280)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000240)={0x0, 0x6, 0x91bd, 0x0, 0xff, "7f12ddb357f7adf97affffff8000e500"}) r11 = syz_open_pts(r10, 0x0) ioctl$TCGETA(r11, 0x5405, &(0x7f0000000180)) 0s ago: executing program 3 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 65.280278][ T5821] cgroup: Unknown subsys name 'net' [ 65.415864][ T5821] cgroup: Unknown subsys name 'cpuset' [ 65.424434][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.769579][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.876133][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.893336][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.903038][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.910983][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.922601][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.063995][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.071879][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.079849][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.087857][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.096052][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.165793][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.173929][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.181872][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.189951][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.198171][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.206154][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.215293][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.222859][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.246936][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.254610][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.280042][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.287838][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.288771][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.312988][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.313679][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.711888][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 69.860178][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.961897][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.969147][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.977349][ T5834] bridge_slave_0: entered allmulticast mode [ 69.984896][ T5834] bridge_slave_0: entered promiscuous mode [ 69.997783][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.004964][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.012126][ T5834] bridge_slave_1: entered allmulticast mode [ 70.020155][ T5834] bridge_slave_1: entered promiscuous mode [ 70.049656][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 70.189378][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.202936][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.217010][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.224707][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.231864][ T5837] bridge_slave_0: entered allmulticast mode [ 70.239865][ T5837] bridge_slave_0: entered promiscuous mode [ 70.247240][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 70.274245][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 70.285248][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.292655][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.299785][ T5837] bridge_slave_1: entered allmulticast mode [ 70.306916][ T5837] bridge_slave_1: entered promiscuous mode [ 70.383423][ T5834] team0: Port device team_slave_0 added [ 70.411537][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.449782][ T5834] team0: Port device team_slave_1 added [ 70.469806][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.485978][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.494456][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.501544][ T5848] bridge_slave_0: entered allmulticast mode [ 70.509329][ T5848] bridge_slave_0: entered promiscuous mode [ 70.557881][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.565242][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.573417][ T5848] bridge_slave_1: entered allmulticast mode [ 70.580866][ T5848] bridge_slave_1: entered promiscuous mode [ 70.600919][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.607961][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.634523][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.651855][ T5837] team0: Port device team_slave_0 added [ 70.663106][ T5837] team0: Port device team_slave_1 added [ 70.712391][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.719358][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.745930][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.781885][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.789532][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.796781][ T5846] bridge_slave_0: entered allmulticast mode [ 70.805123][ T5846] bridge_slave_0: entered promiscuous mode [ 70.815066][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.824581][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.831698][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.839596][ T5846] bridge_slave_1: entered allmulticast mode [ 70.846514][ T5846] bridge_slave_1: entered promiscuous mode [ 70.883442][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.890385][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.917339][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.930554][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.977373][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.983153][ T5833] Bluetooth: hci0: command tx timeout [ 70.984917][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.015665][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.067709][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.079014][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.088520][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.096051][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.104112][ T5849] bridge_slave_0: entered allmulticast mode [ 71.110933][ T5849] bridge_slave_0: entered promiscuous mode [ 71.118897][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.126039][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.133538][ T5849] bridge_slave_1: entered allmulticast mode [ 71.140431][ T5849] bridge_slave_1: entered promiscuous mode [ 71.142912][ T5833] Bluetooth: hci1: command tx timeout [ 71.181406][ T5834] hsr_slave_0: entered promiscuous mode [ 71.187700][ T5834] hsr_slave_1: entered promiscuous mode [ 71.234484][ T5848] team0: Port device team_slave_0 added [ 71.246252][ T5837] hsr_slave_0: entered promiscuous mode [ 71.252726][ T5837] hsr_slave_1: entered promiscuous mode [ 71.258691][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.266896][ T5837] Cannot create hsr debugfs directory [ 71.292440][ T5833] Bluetooth: hci2: command tx timeout [ 71.299641][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.307129][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.318035][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.329204][ T5848] team0: Port device team_slave_1 added [ 71.352705][ T5846] team0: Port device team_slave_0 added [ 71.360685][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.372636][ T56] Bluetooth: hci3: command tx timeout [ 71.378296][ T5833] Bluetooth: hci4: command tx timeout [ 71.417227][ T5846] team0: Port device team_slave_1 added [ 71.487010][ T5849] team0: Port device team_slave_0 added [ 71.495910][ T5849] team0: Port device team_slave_1 added [ 71.502039][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.509030][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.535144][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.564027][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.570980][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.599380][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.636645][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.643656][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.672477][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.723317][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.730264][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.756437][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.767979][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.777749][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.803921][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.859367][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.866418][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.892912][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.913778][ T5848] hsr_slave_0: entered promiscuous mode [ 71.919945][ T5848] hsr_slave_1: entered promiscuous mode [ 71.926137][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.934439][ T5848] Cannot create hsr debugfs directory [ 72.085187][ T5846] hsr_slave_0: entered promiscuous mode [ 72.091398][ T5846] hsr_slave_1: entered promiscuous mode [ 72.098360][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.105951][ T5846] Cannot create hsr debugfs directory [ 72.117114][ T5849] hsr_slave_0: entered promiscuous mode [ 72.123725][ T5849] hsr_slave_1: entered promiscuous mode [ 72.129724][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.137340][ T5849] Cannot create hsr debugfs directory [ 72.394997][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.425656][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.462694][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.478273][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.579374][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.608714][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.637631][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.648952][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.684945][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.708816][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.726344][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.757029][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.839451][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.849520][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.859913][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.878182][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.898628][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.979995][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.024353][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.031564][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.040390][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.052686][ T5833] Bluetooth: hci0: command tx timeout [ 73.071796][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.078916][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.089010][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.118397][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.127661][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.160396][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.206363][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.223813][ T5833] Bluetooth: hci1: command tx timeout [ 73.225476][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.293790][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.300884][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.316982][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.324094][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.336152][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.389554][ T5833] Bluetooth: hci2: command tx timeout [ 73.403306][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.410438][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.419098][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.426192][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.452167][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.463013][ T56] Bluetooth: hci3: command tx timeout [ 73.468477][ T5833] Bluetooth: hci4: command tx timeout [ 73.504408][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.528545][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.535661][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.548421][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.555508][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.588814][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.673036][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.736788][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.776045][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.789764][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.796951][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.811068][ T5834] veth0_vlan: entered promiscuous mode [ 73.821200][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.828345][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.851861][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.866100][ T5834] veth1_vlan: entered promiscuous mode [ 73.934832][ T5837] veth0_vlan: entered promiscuous mode [ 73.962134][ T5837] veth1_vlan: entered promiscuous mode [ 73.983216][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.016991][ T5834] veth0_macvtap: entered promiscuous mode [ 74.045843][ T5834] veth1_macvtap: entered promiscuous mode [ 74.070328][ T5849] veth0_vlan: entered promiscuous mode [ 74.116724][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.128595][ T5848] veth0_vlan: entered promiscuous mode [ 74.141075][ T5837] veth0_macvtap: entered promiscuous mode [ 74.151888][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.165264][ T5849] veth1_vlan: entered promiscuous mode [ 74.179941][ T5837] veth1_macvtap: entered promiscuous mode [ 74.190531][ T5848] veth1_vlan: entered promiscuous mode [ 74.198768][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.207837][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.217497][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.226572][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.277752][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.289493][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.300885][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.313658][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.345774][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.358075][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.371293][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.394105][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.403834][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.414714][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.423554][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.440627][ T5849] veth0_macvtap: entered promiscuous mode [ 74.468766][ T5849] veth1_macvtap: entered promiscuous mode [ 74.487630][ T5848] veth0_macvtap: entered promiscuous mode [ 74.520654][ T5848] veth1_macvtap: entered promiscuous mode [ 74.550591][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.560013][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.605114][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.616945][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.627172][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.639720][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.651041][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.694218][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.706532][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.719794][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.730290][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.742161][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.753053][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.755673][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.760868][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.778436][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.787241][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.796160][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.827274][ T5846] veth0_vlan: entered promiscuous mode [ 74.840518][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.852047][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.865288][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.875815][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.885803][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.897222][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.911337][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.923091][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.933892][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.944213][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.955742][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.965658][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.976423][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.988074][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.002482][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.038405][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.047494][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.056960][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065924][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.126925][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.142493][ T5833] Bluetooth: hci0: command tx timeout [ 75.148117][ T5846] veth1_vlan: entered promiscuous mode [ 75.160661][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.251034][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.270119][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.303009][ T5833] Bluetooth: hci1: command tx timeout [ 75.327910][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.340246][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.343890][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.359356][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.407660][ T5846] veth0_macvtap: entered promiscuous mode [ 75.412713][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.422138][ T5846] veth1_macvtap: entered promiscuous mode [ 75.453795][ T5833] Bluetooth: hci2: command tx timeout [ 75.490628][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.500371][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.508514][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.516902][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.532238][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.533048][ T5833] Bluetooth: hci4: command tx timeout [ 75.533090][ T5833] Bluetooth: hci3: command tx timeout [ 75.567129][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.577138][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.588081][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.598754][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.611995][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.625151][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.636584][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.642505][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.648233][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.660369][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.674844][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.700808][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.718730][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.723111][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.737656][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.745619][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.748727][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.762545][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.767631][ T10] usb 1-1: Product: syz [ 75.795344][ T10] usb 1-1: Manufacturer: syz [ 75.809945][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.813287][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 75.825936][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 75.841049][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.841174][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 75.858296][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.873751][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.882718][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 75.886665][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.939032][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.954080][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.964237][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.973412][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.022381][ T1216] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.113629][ T5894] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.216128][ T1216] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 76.229956][ T1216] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.257091][ T5883] usb 1-1: USB disconnect, device number 2 [ 76.293659][ T1216] usb 5-1: config 0 has no interfaces? [ 76.319648][ T1216] usb 5-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11 [ 76.342216][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.388248][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.400715][ T1216] usb 5-1: config 0 descriptor?? [ 76.444408][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.608016][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.622842][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.640542][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.782626][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.794933][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.817584][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 76.836623][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.896239][ T10] usb 3-1: Product: syz [ 76.975129][ T5883] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.994875][ T5883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.033312][ T10] usb 3-1: Manufacturer: syz [ 77.041819][ T10] usb 3-1: SerialNumber: syz [ 77.046816][ T5883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.052234][ T10] usb 3-1: config 0 descriptor?? [ 77.071813][ T10] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 77.081619][ T10] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 77.104342][ T5883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.193057][ T5883] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.214966][ T56] Bluetooth: hci0: command tx timeout [ 77.224156][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.253334][ T5883] usb 1-1: Product: syz [ 77.257528][ T5883] usb 1-1: Manufacturer: syz [ 77.293275][ T5883] cdc_wdm 1-1:1.0: skipping garbage [ 77.309290][ T5883] cdc_wdm 1-1:1.0: skipping garbage [ 77.322826][ T5883] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 77.343155][ T5883] cdc_wdm 1-1:1.0: Unknown control protocol [ 77.382501][ T56] Bluetooth: hci1: command tx timeout [ 77.527937][ T10] usb 3-1: USB disconnect, device number 2 [ 77.543297][ T56] Bluetooth: hci2: command tx timeout [ 77.612554][ T56] Bluetooth: hci3: command tx timeout [ 77.618278][ T5833] Bluetooth: hci4: command tx timeout [ 78.468238][ T5918] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 78.502078][ T53] usb 5-1: USB disconnect, device number 2 [ 78.598681][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.605538][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.613247][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.619872][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.626991][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.627422][ T5924] FAULT_INJECTION: forcing a failure. [ 78.627422][ T5924] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.633588][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.633822][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.646870][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.1.10 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 78.646890][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 78.646903][ T5924] Call Trace: [ 78.646914][ T5924] [ 78.646922][ T5924] dump_stack_lvl+0x189/0x250 [ 78.646952][ T5924] ? __lock_acquire+0xaac/0xd20 [ 78.646975][ T5924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.646994][ T5924] ? __pfx__printk+0x10/0x10 [ 78.647010][ T5924] ? __might_fault+0xb0/0x130 [ 78.647039][ T5924] should_fail_ex+0x414/0x560 [ 78.647066][ T5924] _copy_from_iter+0x1db/0x15a0 [ 78.647091][ T5924] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 78.647106][ T5924] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 78.647126][ T5924] ? __pfx__copy_from_iter+0x10/0x10 [ 78.647145][ T5924] ? __build_skb_around+0x257/0x3e0 [ 78.647166][ T5924] ? netlink_sendmsg+0x642/0xb30 [ 78.647181][ T5924] ? skb_put+0x11b/0x210 [ 78.647201][ T5924] netlink_sendmsg+0x6b2/0xb30 [ 78.647226][ T5924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.647246][ T5924] ? aa_sock_msg_perm+0x94/0x160 [ 78.647264][ T5924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 78.647280][ T5924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.647297][ T5924] __sock_sendmsg+0x219/0x270 [ 78.647322][ T5924] ____sys_sendmsg+0x505/0x830 [ 78.647345][ T5924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.647372][ T5924] ? import_iovec+0x74/0xa0 [ 78.647394][ T5924] ___sys_sendmsg+0x21f/0x2a0 [ 78.647414][ T5924] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.647465][ T5924] ? __fget_files+0x2a/0x420 [ 78.647482][ T5924] ? __fget_files+0x3a0/0x420 [ 78.647509][ T5924] __x64_sys_sendmsg+0x19b/0x260 [ 78.647530][ T5924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 78.647569][ T5924] ? do_syscall_64+0xba/0x210 [ 78.647590][ T5924] do_syscall_64+0xf6/0x210 [ 78.647608][ T5924] ? clear_bhb_loop+0x45/0xa0 [ 78.647627][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.647642][ T5924] RIP: 0033:0x7fbbbb18e969 [ 78.647660][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.647673][ T5924] RSP: 002b:00007fbbbbf7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.647696][ T5924] RAX: ffffffffffffffda RBX: 00007fbbbb3b5fa0 RCX: 00007fbbbb18e969 [ 78.647707][ T5924] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 78.647717][ T5924] RBP: 00007fbbbbf7b090 R08: 0000000000000000 R09: 0000000000000000 [ 78.647727][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.647735][ T5924] R13: 0000000000000000 R14: 00007fbbbb3b5fa0 R15: 00007fbbbb4dfa28 [ 78.647760][ T5924] [ 78.696330][ T5926] process 'syz.1.11' launched './file1' with NULL argv: empty string added [ 78.700289][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.701670][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.939949][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.950190][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.956821][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.963291][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.969907][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.976181][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.982790][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.989123][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.995732][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.002017][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 79.008630][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 79.033812][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 79.042610][ T5882] usb 1-1: USB disconnect, device number 3 [ 79.377108][ T5930] fuse: Bad value for 'fd' [ 79.384252][ T5930] xt_socket: unknown flags 0x8 [ 79.621865][ T5942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 79.828126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.852776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.863937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 79.872452][ T5882] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.971036][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.045340][ T5933] syz.3.13 (5933) used greatest stack depth: 20216 bytes left [ 80.072632][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 80.099746][ T5882] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.115175][ T5882] usb 5-1: config 0 has no interface number 0 [ 80.121420][ T5882] usb 5-1: config 0 interface 184 has no altsetting 0 [ 80.142137][ T5883] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 80.153996][ T5883] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.170803][ T5882] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.190807][ T5883] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.199985][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.208059][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.216197][ T5882] usb 5-1: Product: syz [ 80.220426][ T5882] usb 5-1: Manufacturer: syz [ 80.260404][ T5882] usb 5-1: SerialNumber: syz [ 80.282188][ T5883] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.314068][ T5882] usb 5-1: config 0 descriptor?? [ 80.339239][ T5882] smsc75xx v1.0.0 [ 80.493802][ T5942] vlan2: entered promiscuous mode [ 80.498930][ T5942] bond0: entered promiscuous mode [ 80.504109][ T5942] bond_slave_0: entered promiscuous mode [ 80.510077][ T5942] bond_slave_1: entered promiscuous mode [ 80.581715][ T5883] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 80.964192][ T53] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.106394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.133587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.141810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.167841][ T53] usb 1-1: config 0 has no interfaces? [ 81.187720][ T53] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 81.209464][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.220501][ T53] usb 1-1: Product: syz [ 81.225250][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 81.237978][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 81.269020][ T53] usb 1-1: Manufacturer: syz [ 81.295870][ T53] usb 1-1: SerialNumber: syz [ 81.323274][ T53] usb 1-1: config 0 descriptor?? [ 81.384447][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.537168][ T918] cfg80211: failed to load regulatory.db [ 81.542916][ T5881] usb 2-1: device descriptor read/64, error -71 [ 81.568724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.735587][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 81.750259][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 81.787251][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.799232][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.808000][ T5881] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.871540][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 81.959620][ T918] usb 1-1: USB disconnect, device number 4 [ 81.985788][ T5959] syz_tun: entered allmulticast mode [ 81.992532][ T5881] usb 2-1: device descriptor read/64, error -71 [ 82.052922][ T5882] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 82.081871][ T5882] usb 5-1: USB disconnect, device number 3 [ 82.104312][ T5881] usb usb2-port1: attempt power cycle [ 82.133367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.141859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.151006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.452465][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.483133][ T5881] usb 2-1: device descriptor read/8, error -71 [ 82.742521][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.773298][ T5881] usb 2-1: device descriptor read/8, error -71 [ 82.883024][ T5881] usb usb2-port1: unable to enumerate USB device [ 83.503710][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.769045][ T53] usb 3-1: USB disconnect, device number 3 [ 83.990955][ T5958] syz_tun: left allmulticast mode [ 84.082376][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 84.224525][ T5881] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 84.233623][ T5881] usb 5-1: config 0 has no interface number 0 [ 84.242605][ T5881] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.253634][ T5881] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.280917][ T5881] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 84.293605][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.355961][ T5881] usb 5-1: config 0 descriptor?? [ 84.876019][ T5987] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.058750][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 85.067707][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 85.075303][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.218238][ T5987] bridge_slave_1: left allmulticast mode [ 85.274074][ T5987] bridge_slave_1: left promiscuous mode [ 85.308579][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.331824][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.399341][ T10] usb 3-1: config 0 has no interfaces? [ 85.447962][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.462183][ T5987] bridge_slave_0: left allmulticast mode [ 85.474180][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 85.492112][ T5987] bridge_slave_0: left promiscuous mode [ 85.498308][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.516882][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.525871][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 85.542033][ T10] usb 3-1: Product: syz [ 85.558496][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.567705][ T10] usb 3-1: Manufacturer: syz [ 85.651712][ T10] usb 3-1: SerialNumber: syz [ 85.651919][ T5991] binder: 5990:5991 ioctl c0306201 200000000540 returned -14 [ 85.695958][ T10] usb 3-1: config 0 descriptor?? [ 85.701864][ T9] usb 2-1: config 0 descriptor?? [ 85.866368][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 86.032841][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 86.063824][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.072893][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.129781][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 86.156343][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 86.183881][ T9] usb 2-1: media controller created [ 86.261982][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.271895][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.295485][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.376915][ T5881] usbhid 5-1:0.4: can't add hid device: -71 [ 86.418607][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 86.429164][ T5881] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 86.442616][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 86.474639][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 86.503322][ T5881] usb 5-1: USB disconnect, device number 4 [ 86.532013][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 86.540051][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 86.696494][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.713561][ T9] dvb-usb: error while querying for an remote control event. [ 86.882439][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.918199][ T9] dvb-usb: error while querying for an remote control event. [ 87.368294][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 87.410908][ T9] dvb-usb: error while querying for an remote control event. [ 87.642489][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 87.648247][ T9] dvb-usb: error while querying for an remote control event. [ 87.772110][ T53] usb 3-1: USB disconnect, device number 4 [ 87.862409][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 87.868291][ T5871] dvb-usb: error while querying for an remote control event. [ 88.049342][ T9] usb 2-1: USB disconnect, device number 6 [ 88.127418][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 88.301751][ T6018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.652409][ T53] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.881407][ T53] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 88.901906][ T53] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.968742][ T53] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.978016][ T5882] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.055292][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.242363][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 89.331478][ T53] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.386166][ T5882] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 89.574403][ T5882] usb 2-1: config 0 has no interface number 0 [ 89.580935][ T5882] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.634306][ T6018] vlan2: entered promiscuous mode [ 89.639605][ T6018] bond0: entered promiscuous mode [ 89.646345][ T6018] bond_slave_0: entered promiscuous mode [ 89.677096][ T5882] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.695751][ T6018] bond_slave_1: entered promiscuous mode [ 89.722401][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.779537][ T5882] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 89.882146][ T53] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 89.897215][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.929375][ T5897] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.955216][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 89.980060][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.996828][ T5882] usb 2-1: config 0 descriptor?? [ 90.132339][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 90.141456][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 90.166067][ T9] usb 1-1: config 0 descriptor?? [ 90.178615][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 90.216262][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 90.270634][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 90.282092][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 90.347617][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 90.395917][ T5897] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 90.431533][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.471061][ T5897] usb 5-1: Product: syz [ 90.483626][ T5897] usb 5-1: Manufacturer: syz [ 90.499288][ T5897] usb 5-1: SerialNumber: syz [ 90.526492][ T5897] usb 5-1: config 0 descriptor?? [ 90.952568][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.996193][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.009429][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.020975][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.032183][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.047137][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.055754][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.062951][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.069756][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.077978][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.084823][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.094932][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.103844][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.110624][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.117715][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.127405][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 91.141765][ T5883] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 91.150425][ T5883] usb 3-1: config 0 has no interface number 0 [ 91.159869][ T5883] usb 3-1: config 0 interface 25 altsetting 6 endpoint 0x8 has invalid maxpacket 544, setting to 64 [ 91.171461][ T5883] usb 3-1: config 0 interface 25 has no altsetting 0 [ 91.205800][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.214084][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.221867][ T5883] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice=b4.82 [ 91.234608][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.244286][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.250830][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.257597][ T5883] usb 3-1: Product: syz [ 91.262059][ T5897] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 91.270260][ T5897] input input6: Timeout waiting for response from device. [ 91.286460][ T5897] usb 5-1: USB disconnect, device number 5 [ 91.301606][ T5883] usb 3-1: Manufacturer: syz [ 91.349945][ T5883] usb 3-1: SerialNumber: syz [ 91.378200][ T5883] usb 3-1: config 0 descriptor?? [ 91.615476][ T5883] usb 3-1: bad CDC descriptors [ 91.643418][ T5883] cp210x 3-1:0.25: cp210x converter detected [ 91.677169][ T5883] cp210x 3-1:0.25: failed to get vendor val 0x370b size 1: -71 [ 91.700358][ T5882] usbhid 2-1:0.4: can't add hid device: -71 [ 91.708545][ T5882] usbhid 2-1:0.4: probe with driver usbhid failed with error -71 [ 91.735062][ T5883] cp210x 3-1:0.25: querying part number failed [ 91.762967][ T5882] usb 2-1: USB disconnect, device number 7 [ 91.817723][ T5883] usb 3-1: cp210x converter now attached to ttyUSB0 [ 91.842255][ T5883] usb 3-1: USB disconnect, device number 5 [ 91.856117][ T9] gspca_stv06xx: HDCS-1020 sensor detected [ 91.866234][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 91.903341][ T5883] cp210x 3-1:0.25: device disconnected [ 91.909283][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 91.962732][ T6042] x_tables: duplicate underflow at hook 2 [ 91.969124][ T6042] netlink: 72 bytes leftover after parsing attributes in process `syz.4.44'. [ 92.019978][ T918] usb 4-1: USB disconnect, device number 2 [ 92.174422][ T9] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 92.202535][ T9] usb 1-1: USB disconnect, device number 5 [ 92.352530][ T53] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 92.514761][ T53] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 92.528563][ T53] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.532506][ T918] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.538902][ T53] usb 2-1: config 0 has no interface number 0 [ 92.553601][ T53] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 92.564051][ T5883] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.574289][ T53] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.592407][ T53] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 92.602783][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.610865][ T53] usb 2-1: Product: syz [ 92.616019][ T53] usb 2-1: Manufacturer: syz [ 92.620702][ T53] usb 2-1: SerialNumber: syz [ 92.631389][ T53] usb 2-1: config 0 descriptor?? [ 92.722396][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 92.732526][ T918] usb 4-1: Using ep0 maxpacket: 32 [ 92.747327][ T5883] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0105, bcdDevice=43.55 [ 92.762996][ T918] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 92.785239][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.795997][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.814040][ T5883] usb 3-1: Product: syz [ 92.825165][ T5883] usb 3-1: Manufacturer: syz [ 92.849030][ T5883] usb 3-1: SerialNumber: syz [ 92.860264][ T918] usb 4-1: config 0 descriptor?? [ 92.919381][ T5883] usb 3-1: config 0 descriptor?? [ 92.929872][ T53] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 92.946203][ T5883] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 92.977012][ T53] usb 2-1: USB disconnect, device number 8 [ 93.089302][ T918] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 93.112177][ T918] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 93.126507][ T918] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 93.166086][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.183555][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.201315][ T6053] fuse: Unknown parameter '0x00000000000000050x0000000000000008' [ 93.218334][ T53] usb 3-1: USB disconnect, device number 6 [ 93.243260][ T5881] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 93.414590][ T5881] usb 1-1: config 248 has an invalid interface number: 92 but max is 0 [ 93.422938][ T5881] usb 1-1: config 248 has no interface number 0 [ 93.429244][ T5881] usb 1-1: config 248 interface 92 has no altsetting 0 [ 93.444388][ T5881] usb 1-1: New USB device found, idVendor=249c, idProduct=9001, bcdDevice=70.8d [ 93.454272][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.462651][ T5881] usb 1-1: Product: syz [ 93.466875][ T5881] usb 1-1: Manufacturer: syz [ 93.471526][ T5881] usb 1-1: SerialNumber: syz [ 93.725458][ T5881] usb 1-1: can't set first interface for hiFace device. [ 93.765955][ T5881] snd-usb-hiface 1-1:248.92: probe with driver snd-usb-hiface failed with error -5 [ 93.811704][ T5881] usb 1-1: USB disconnect, device number 6 [ 94.073886][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.242498][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 94.310912][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.58'. [ 94.362496][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 94.389202][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.427822][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 94.439269][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.495787][ T9] usb 3-1: Product: syz [ 94.506357][ T9] usb 3-1: Manufacturer: syz [ 94.513305][ T9] usb 3-1: SerialNumber: syz [ 94.541418][ T9] usb 3-1: config 0 descriptor?? [ 94.570476][ T9] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 94.647769][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 94.657256][ T6082] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 94.690032][ T6082] xt_hashlimit: size too large, truncated to 1048576 [ 94.697098][ T6082] xt_hashlimit: max too large, truncated to 1048576 [ 94.818390][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.861402][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.915120][ T9] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 94.933225][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.944304][ T9] usb 3-1: USB disconnect, device number 7 [ 95.084973][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.099148][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 95.131457][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.183108][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.228594][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 95.245781][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.255345][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.263749][ T10] usb 5-1: Product: syz [ 95.267978][ T10] usb 5-1: Manufacturer: syz [ 95.276982][ T10] usb 5-1: SerialNumber: syz [ 95.727969][ T6093] input: syz1 as /devices/virtual/input/input8 [ 95.873461][ T6107] ALSA: mixer_oss: invalid index 40000 [ 96.036771][ T6093] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 96.266529][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 96.275773][ T6114] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 96.833789][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 96.914465][ T6116] macvlan2: entered promiscuous mode [ 96.927337][ T6116] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.989180][ T6122] input: syz0 as /devices/virtual/input/input9 [ 97.960689][ T10] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 97.992364][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 98.116239][ T30] audit: type=1326 audit(1746420938.998:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6147 comm="syz.0.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc71978e969 code=0x0 [ 98.162852][ T10] usb 5-1: USB disconnect, device number 6 [ 98.782460][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.992998][ T53] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 99.151043][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 99.195762][ T53] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.207906][ T53] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 99.228183][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.240961][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.257112][ T6136] vivid-007: ================= START STATUS ================= [ 99.258832][ T53] usb 2-1: Product: syz [ 99.269435][ T6136] vivid-007: Enable Output Cropping: true [ 99.275471][ T6136] vivid-007: Enable Output Composing: true [ 99.289570][ T6136] vivid-007: Enable Output Scaler: true [ 99.302441][ T53] usb 2-1: Manufacturer: syz [ 99.307130][ T53] usb 2-1: SerialNumber: syz [ 99.311924][ T6136] vivid-007: Tx RGB Quantization Range: Automatic [ 99.321882][ T53] usb 2-1: config 0 descriptor?? [ 99.330262][ T5881] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 99.338567][ T53] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 99.357262][ T53] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 99.368351][ T6136] vivid-007: Transmit Mode: HDMI [ 99.375449][ T6136] vivid-007: Hotplug Present: 0x00000000 [ 99.397336][ T10] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 99.419842][ T6136] vivid-007: RxSense Present: 0x00000000 [ 99.428767][ T6136] vivid-007: EDID Present: 0x00000000 [ 99.434221][ T5881] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 99.460787][ T6136] vivid-007: ================== END STATUS ================== [ 99.492143][ T10] usb 5-1: config 0 has no interface number 0 [ 99.533198][ T10] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.583992][ T53] usb 2-1: USB disconnect, device number 9 [ 99.640532][ T10] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.784793][ T10] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 99.811293][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.126496][ T10] usb 5-1: config 0 descriptor?? [ 101.815776][ T6213] netlink: zone id is out of range [ 101.889941][ T5881] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 101.898612][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.922438][ T5881] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 102.972502][ T5833] Bluetooth: hci3: command 0x0405 tx timeout [ 103.052426][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.059609][ T6190] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 103.100120][ T10] usbhid 5-1:0.4: can't add hid device: -71 [ 103.110913][ T10] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 103.197597][ T10] usb 5-1: USB disconnect, device number 7 [ 103.464784][ T6190] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.509378][ T6190] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.558798][ T6190] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.597910][ T6190] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.646011][ T6190] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.663488][ T6190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.676125][ T6190] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.685061][ T6190] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.975706][ T5882] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.113227][ T5903] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 104.147358][ T5882] usb 5-1: config 0 has no interfaces? [ 104.159538][ T5882] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.169997][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.201092][ T5882] usb 5-1: Product: syz [ 104.211048][ T5882] usb 5-1: Manufacturer: syz [ 104.220057][ T5882] usb 5-1: SerialNumber: syz [ 104.240886][ T5882] usb 5-1: config 0 descriptor?? [ 104.275559][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 104.318943][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 104.359231][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 104.399388][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 104.437744][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 104.476071][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 104.507281][ T5903] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 104.517237][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.534881][ T5903] usb 2-1: Product: syz [ 104.548752][ T5903] usb 2-1: Manufacturer: syz [ 104.559716][ T5903] usb 2-1: SerialNumber: syz [ 104.940057][ T5903] usb 2-1: config 0 descriptor?? [ 105.140295][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.173360][ T5881] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 105.317908][ T5881] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 105.480574][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.504346][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.535961][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.559152][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.576029][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.587455][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.605047][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.612512][ T56] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.619233][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.629203][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.693894][ T56] Bluetooth: hci3: command 0x0405 tx timeout [ 105.751117][ T5881] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 105.869791][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.889090][ T5881] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 105.902122][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.931450][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.956727][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 105.987974][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 106.016623][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 106.050334][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 106.071069][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 106.086408][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 106.130966][ T5903] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 106.158887][ T5903] input input10: Timeout waiting for response from device. [ 106.235201][ T5903] usb 2-1: USB disconnect, device number 10 [ 106.631009][ T6296] netlink: zone id is out of range [ 107.041137][ T5882] usb 5-1: USB disconnect, device number 8 [ 107.762520][ T56] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.769345][ T5881] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 107.796671][ T5881] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 108.549431][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 108.685705][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.712610][ T5882] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.730420][ T6328] bridge_slave_1: left allmulticast mode [ 108.738509][ T6328] bridge_slave_1: left promiscuous mode [ 108.744363][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.781243][ T6328] bridge_slave_0: left allmulticast mode [ 108.812160][ T6328] bridge_slave_0: left promiscuous mode [ 108.819171][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.872997][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 108.879387][ T5883] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 108.896447][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.908820][ T5882] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 108.930176][ T5882] usb 3-1: config 0 has no interface number 0 [ 108.948230][ T5883] usb 5-1: Product: syz [ 108.966848][ T5882] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.986059][ T5883] usb 5-1: Manufacturer: syz [ 108.996472][ T5883] usb 5-1: SerialNumber: syz [ 109.017750][ T5883] usb 5-1: config 0 descriptor?? [ 109.039717][ T5882] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 109.050167][ T5883] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 109.069087][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.089531][ T5882] usb 3-1: Product: syz [ 109.097683][ T5882] usb 3-1: Manufacturer: syz [ 109.110329][ T5882] usb 3-1: SerialNumber: syz [ 109.178576][ T5882] usb 3-1: config 0 descriptor?? [ 109.247526][ T5882] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 109.283666][ T5882] em28xx 3-1:0.132: Video interface 132 found: [ 109.527897][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.539900][ T6333] fuse: Bad value for 'fd' [ 109.548526][ T6333] xt_socket: unknown flags 0x8 [ 109.596891][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.617785][ T5882] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 109.698403][ T5883] gspca_sn9c2028: read1 error -71 [ 109.708143][ T5883] gspca_sn9c2028: read1 error -71 [ 109.718025][ T5883] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 109.745034][ T5883] usb 5-1: USB disconnect, device number 9 [ 110.073684][ T5882] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 110.332142][ T5882] em28xx 3-1:0.132: board has no eeprom [ 110.749247][ T6341] FAULT_INJECTION: forcing a failure. [ 110.749247][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 110.763258][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.3.111 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 110.763279][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 110.763288][ T6341] Call Trace: [ 110.763295][ T6341] [ 110.763302][ T6341] dump_stack_lvl+0x189/0x250 [ 110.763343][ T6341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.763363][ T6341] ? __pfx__printk+0x10/0x10 [ 110.763382][ T6341] ? consume_skb+0xce/0xf0 [ 110.763401][ T6341] ? netlink_broadcast_filtered+0x10c6/0x1140 [ 110.763416][ T6341] ? nla_put+0xd0/0x150 [ 110.763437][ T6341] should_fail_ex+0x414/0x560 [ 110.763465][ T6341] should_failslab+0xa8/0x100 [ 110.763487][ T6341] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 110.763506][ T6341] ? __alloc_skb+0x112/0x2d0 [ 110.763528][ T6341] __alloc_skb+0x112/0x2d0 [ 110.763550][ T6341] pfkey_send_acquire+0x606/0x2cb0 [ 110.763575][ T6341] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 110.763602][ T6341] ? security_xfrm_policy_alloc+0x7a/0x2b0 [ 110.763630][ T6341] km_query+0x119/0x210 [ 110.763648][ T6341] ? km_query+0x2e/0x210 [ 110.763671][ T6341] xfrm_add_acquire+0x773/0xb20 [ 110.763688][ T6341] ? __pfx_aa_get_newest_label+0x10/0x10 [ 110.763722][ T6341] ? __pfx_xfrm_add_acquire+0x10/0x10 [ 110.763741][ T6341] ? __nla_parse+0x40/0x60 [ 110.763763][ T6341] xfrm_user_rcv_msg+0x7a0/0xab0 [ 110.763787][ T6341] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 110.763844][ T6341] ? __mutex_trylock_common+0x153/0x260 [ 110.763863][ T6341] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.763891][ T6341] netlink_rcv_skb+0x219/0x490 [ 110.763910][ T6341] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 110.763928][ T6341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.763969][ T6341] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.763985][ T6341] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.764004][ T6341] xfrm_netlink_rcv+0x79/0x90 [ 110.764021][ T6341] netlink_unicast+0x758/0x8d0 [ 110.764055][ T6341] netlink_sendmsg+0x805/0xb30 [ 110.764082][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.764102][ T6341] ? aa_sock_msg_perm+0x94/0x160 [ 110.764120][ T6341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.764137][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.764155][ T6341] __sock_sendmsg+0x219/0x270 [ 110.764181][ T6341] ____sys_sendmsg+0x505/0x830 [ 110.764209][ T6341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.764238][ T6341] ? import_iovec+0x74/0xa0 [ 110.764261][ T6341] ___sys_sendmsg+0x21f/0x2a0 [ 110.764282][ T6341] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.764343][ T6341] ? __fget_files+0x2a/0x420 [ 110.764362][ T6341] ? __fget_files+0x3a0/0x420 [ 110.764392][ T6341] __x64_sys_sendmsg+0x19b/0x260 [ 110.764413][ T6341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.764451][ T6341] ? do_syscall_64+0xba/0x210 [ 110.764473][ T6341] do_syscall_64+0xf6/0x210 [ 110.764492][ T6341] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.764507][ T6341] ? clear_bhb_loop+0x45/0xa0 [ 110.764527][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.764542][ T6341] RIP: 0033:0x7f8a3cb8e969 [ 110.764557][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.764570][ T6341] RSP: 002b:00007f8a3d9ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.764588][ T6341] RAX: ffffffffffffffda RBX: 00007f8a3cdb5fa0 RCX: 00007f8a3cb8e969 [ 110.764600][ T6341] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 110.764610][ T6341] RBP: 00007f8a3d9ce090 R08: 0000000000000000 R09: 0000000000000000 [ 110.764620][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.764630][ T6341] R13: 0000000000000000 R14: 00007f8a3cdb5fa0 R15: 00007f8a3cedfa28 [ 110.764658][ T6341] [ 111.201039][ T6343] xt_TCPMSS: Only works on TCP SYN packets [ 111.217028][ T6343] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 111.252495][ T5882] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 111.254623][ T6343] loop6: detected capacity change from 0 to 16384 [ 111.260347][ T5882] em28xx 3-1:0.132: analog set to bulk mode. [ 111.261082][ T5883] em28xx 3-1:0.132: Registering V4L2 extension [ 111.431235][ T5882] usb 3-1: USB disconnect, device number 8 [ 111.432884][ T6343] I/O error, dev loop6, sector 1360 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 111.447031][ T6343] I/O error, dev loop6, sector 1360 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 111.526706][ T5883] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 111.551890][ T5882] em28xx 3-1:0.132: Disconnecting em28xx [ 111.867265][ T5883] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 111.962928][ T5883] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 112.056035][ T5883] em28xx 3-1:0.132: No AC97 audio processor [ 112.161184][ T5883] usb 3-1: Decoder not found [ 112.371946][ T6371] FAULT_INJECTION: forcing a failure. [ 112.371946][ T6371] name failslab, interval 1, probability 0, space 0, times 0 [ 112.437622][ T6371] CPU: 0 UID: 0 PID: 6371 Comm: syz.3.119 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 112.437645][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 112.437655][ T6371] Call Trace: [ 112.437661][ T6371] [ 112.437669][ T6371] dump_stack_lvl+0x189/0x250 [ 112.437697][ T6371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.437719][ T6371] ? __pfx__printk+0x10/0x10 [ 112.437741][ T6371] ? __pfx___might_resched+0x10/0x10 [ 112.437756][ T6371] ? fs_reclaim_acquire+0x7d/0x100 [ 112.437782][ T6371] should_fail_ex+0x414/0x560 [ 112.437810][ T6371] should_failslab+0xa8/0x100 [ 112.437831][ T6371] __kmalloc_noprof+0xcb/0x4f0 [ 112.437848][ T6371] ? kfree+0x4d/0x440 [ 112.437862][ T6371] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 112.437884][ T6371] tomoyo_realpath_from_path+0xe3/0x5d0 [ 112.437904][ T6371] ? tomoyo_domain+0xda/0x130 [ 112.437927][ T6371] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 112.437950][ T6371] tomoyo_path_number_perm+0x1e8/0x5a0 [ 112.437975][ T6371] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.438013][ T6371] ? __lock_acquire+0xaac/0xd20 [ 112.438052][ T6371] ? __fget_files+0x2a/0x420 [ 112.438076][ T6371] ? __fget_files+0x3a0/0x420 [ 112.438093][ T6371] ? __fget_files+0x2a/0x420 [ 112.438116][ T6371] security_file_ioctl+0xcb/0x2d0 [ 112.438139][ T6371] __se_sys_ioctl+0x47/0x170 [ 112.438158][ T6371] do_syscall_64+0xf6/0x210 [ 112.438187][ T6371] ? clear_bhb_loop+0x45/0xa0 [ 112.438208][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.438222][ T6371] RIP: 0033:0x7f8a3cb8e969 [ 112.438243][ T6371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.438255][ T6371] RSP: 002b:00007f8a3d9ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.438273][ T6371] RAX: ffffffffffffffda RBX: 00007f8a3cdb5fa0 RCX: 00007f8a3cb8e969 [ 112.438285][ T6371] RDX: 0000200000001040 RSI: 0000000000008916 RDI: 0000000000000003 [ 112.438295][ T6371] RBP: 00007f8a3d9ce090 R08: 0000000000000000 R09: 0000000000000000 [ 112.438305][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.438314][ T6371] R13: 0000000000000000 R14: 00007f8a3cdb5fa0 R15: 00007f8a3cedfa28 [ 112.438341][ T6371] [ 112.438349][ T6371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.471961][ T5883] em28xx 3-1:0.132: failed to create media graph [ 112.860775][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 112.895092][ T5883] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 112.910177][ T5883] em28xx 3-1:0.132: Remote control support is not available for this card. [ 112.919887][ T5882] em28xx 3-1:0.132: Closing input extension [ 112.930681][ T5882] ================================================================== [ 112.938768][ T5882] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400 [ 112.947195][ T5882] Read of size 8 at addr ffff8880247f8210 by task kworker/1:3/5882 [ 112.955108][ T5882] [ 112.957432][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/1:3 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 112.957449][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 112.957458][ T5882] Workqueue: usb_hub_wq hub_event [ 112.957482][ T5882] Call Trace: [ 112.957488][ T5882] [ 112.957494][ T5882] dump_stack_lvl+0x189/0x250 [ 112.957513][ T5882] ? __virt_addr_valid+0x18c/0x540 [ 112.957529][ T5882] ? rcu_is_watching+0x15/0xb0 [ 112.957547][ T5882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.957562][ T5882] ? rcu_is_watching+0x15/0xb0 [ 112.957578][ T5882] ? lock_release+0x4b/0x3e0 [ 112.957596][ T5882] ? __virt_addr_valid+0x18c/0x540 [ 112.957611][ T5882] ? __virt_addr_valid+0x469/0x540 [ 112.957626][ T5882] print_report+0xb4/0x290 [ 112.957641][ T5882] ? media_device_unregister+0x141/0x400 [ 112.957657][ T5882] kasan_report+0x118/0x150 [ 112.957673][ T5882] ? media_device_unregister+0x141/0x400 [ 112.957693][ T5882] media_device_unregister+0x141/0x400 [ 112.957713][ T5882] em28xx_release_resources+0xac/0x240 [ 112.957727][ T5882] em28xx_usb_disconnect+0x19f/0x2f0 [ 112.957739][ T5882] usb_unbind_interface+0x26b/0x8f0 [ 112.957759][ T5882] ? __pfx_usb_unbind_interface+0x10/0x10 [ 112.957776][ T5882] device_release_driver_internal+0x4d6/0x7c0 [ 112.957793][ T5882] bus_remove_device+0x34d/0x410 [ 112.957806][ T5882] device_del+0x511/0x8e0 [ 112.957821][ T5882] ? kfree+0x193/0x440 [ 112.957836][ T5882] ? __pfx_device_del+0x10/0x10 [ 112.957849][ T5882] ? kobject_put+0x446/0x480 [ 112.957867][ T5882] usb_disable_device+0x3e9/0x8a0 [ 112.957885][ T5882] usb_disconnect+0x330/0x910 [ 112.957902][ T5882] hub_event+0x1cdb/0x4a00 [ 112.957922][ T5882] ? __lock_acquire+0xaac/0xd20 [ 112.957939][ T5882] ? do_raw_spin_lock+0x121/0x290 [ 112.957957][ T5882] ? __lock_acquire+0xaac/0xd20 [ 112.957974][ T5882] ? __pfx_hub_event+0x10/0x10 [ 112.957990][ T5882] ? process_scheduled_works+0x9ec/0x17a0 [ 112.958009][ T5882] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.958021][ T5882] ? process_scheduled_works+0x9ec/0x17a0 [ 112.958038][ T5882] ? process_scheduled_works+0x9ec/0x17a0 [ 112.958055][ T5882] process_scheduled_works+0xadb/0x17a0 [ 112.958080][ T5882] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.958102][ T5882] worker_thread+0x8a0/0xda0 [ 112.958121][ T5882] kthread+0x70e/0x8a0 [ 112.958136][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 112.958148][ T5882] ? __pfx_kthread+0x10/0x10 [ 112.958162][ T5882] ? __pfx_kthread+0x10/0x10 [ 112.958176][ T5882] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.958188][ T5882] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.958202][ T5882] ? __pfx_kthread+0x10/0x10 [ 112.958215][ T5882] ret_from_fork+0x4b/0x80 [ 112.958227][ T5882] ? __pfx_kthread+0x10/0x10 [ 112.958240][ T5882] ret_from_fork_asm+0x1a/0x30 [ 112.958256][ T5882] [ 112.958261][ T5882] [ 113.228512][ T5882] Allocated by task 5883: [ 113.232825][ T5882] kasan_save_track+0x3e/0x80 [ 113.237496][ T5882] __kasan_kmalloc+0x93/0xb0 [ 113.242070][ T5882] __kmalloc_cache_noprof+0x230/0x3d0 [ 113.247437][ T5882] em28xx_v4l2_init+0x10b/0x2e70 [ 113.252364][ T5882] em28xx_init_extension+0x11d/0x1c0 [ 113.257639][ T5882] process_scheduled_works+0xadb/0x17a0 [ 113.263177][ T5882] worker_thread+0x8a0/0xda0 [ 113.267753][ T5882] kthread+0x70e/0x8a0 [ 113.271808][ T5882] ret_from_fork+0x4b/0x80 [ 113.276210][ T5882] ret_from_fork_asm+0x1a/0x30 [ 113.280957][ T5882] [ 113.283267][ T5882] Freed by task 5883: [ 113.287229][ T5882] kasan_save_track+0x3e/0x80 [ 113.291889][ T5882] kasan_save_free_info+0x46/0x50 [ 113.296904][ T5882] __kasan_slab_free+0x62/0x70 [ 113.301654][ T5882] kfree+0x193/0x440 [ 113.305533][ T5882] em28xx_v4l2_init+0x1683/0x2e70 [ 113.310542][ T5882] em28xx_init_extension+0x11d/0x1c0 [ 113.315817][ T5882] process_scheduled_works+0xadb/0x17a0 [ 113.321352][ T5882] worker_thread+0x8a0/0xda0 [ 113.325923][ T5882] kthread+0x70e/0x8a0 [ 113.329977][ T5882] ret_from_fork+0x4b/0x80 [ 113.334382][ T5882] ret_from_fork_asm+0x1a/0x30 [ 113.339135][ T5882] [ 113.341443][ T5882] The buggy address belongs to the object at ffff8880247f8000 [ 113.341443][ T5882] which belongs to the cache kmalloc-8k of size 8192 [ 113.355479][ T5882] The buggy address is located 528 bytes inside of [ 113.355479][ T5882] freed 8192-byte region [ffff8880247f8000, ffff8880247fa000) [ 113.369345][ T5882] [ 113.371657][ T5882] The buggy address belongs to the physical page: [ 113.378060][ T5882] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x247f8 [ 113.386808][ T5882] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.395291][ T5882] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 113.403264][ T5882] page_type: f5(slab) [ 113.407233][ T5882] raw: 00fff00000000040 ffff88801a042280 ffffea0001fc0000 dead000000000005 [ 113.415800][ T5882] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 113.424369][ T5882] head: 00fff00000000040 ffff88801a042280 ffffea0001fc0000 dead000000000005 [ 113.433030][ T5882] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 113.441689][ T5882] head: 00fff00000000003 ffffea000091fe01 00000000ffffffff 00000000ffffffff [ 113.450344][ T5882] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 113.458994][ T5882] page dumped because: kasan: bad access detected [ 113.465403][ T5882] page_owner tracks the page as allocated [ 113.471100][ T5882] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 72682774893, free_ts 72635735926 [ 113.492276][ T5882] post_alloc_hook+0x1d8/0x230 [ 113.497037][ T5882] get_page_from_freelist+0x21ce/0x22b0 [ 113.502575][ T5882] __alloc_frozen_pages_noprof+0x181/0x370 [ 113.508371][ T5882] alloc_pages_mpol+0x232/0x4a0 [ 113.513212][ T5882] allocate_slab+0x8a/0x3b0 [ 113.517702][ T5882] ___slab_alloc+0xbfc/0x1480 [ 113.522369][ T5882] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 113.528775][ T5882] kmalloc_reserve+0x136/0x290 [ 113.533523][ T5882] __alloc_skb+0x142/0x2d0 [ 113.537927][ T5882] netlink_dump+0x1eb/0xe70 [ 113.542420][ T5882] __netlink_dump_start+0x5cb/0x7e0 [ 113.547602][ T5882] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 113.553307][ T5882] genl_rcv_msg+0x5da/0x790 [ 113.557799][ T5882] netlink_rcv_skb+0x219/0x490 [ 113.562550][ T5882] genl_rcv+0x28/0x40 [ 113.566521][ T5882] netlink_unicast+0x758/0x8d0 [ 113.571283][ T5882] page last free pid 5849 tgid 5849 stack trace: [ 113.577591][ T5882] __free_frozen_pages+0xb0e/0xcd0 [ 113.582693][ T5882] __slab_free+0x326/0x400 [ 113.587100][ T5882] qlist_free_all+0x9a/0x140 [ 113.591674][ T5882] kasan_quarantine_reduce+0x148/0x160 [ 113.597116][ T5882] __kasan_slab_alloc+0x22/0x80 [ 113.601952][ T5882] __kmalloc_cache_noprof+0x1be/0x3d0 [ 113.607310][ T5882] ref_tracker_alloc+0x133/0x460 [ 113.612232][ T5882] register_netdevice+0x14a3/0x1af0 [ 113.617417][ T5882] nsim_create+0xb19/0xef0 [ 113.621821][ T5882] __nsim_dev_port_add+0x70a/0xb20 [ 113.626926][ T5882] nsim_dev_port_add_all+0x35/0xe0 [ 113.632023][ T5882] nsim_drv_probe+0x883/0xb70 [ 113.636690][ T5882] really_probe+0x26a/0x9a0 [ 113.641182][ T5882] __driver_probe_device+0x18c/0x2f0 [ 113.646455][ T5882] driver_probe_device+0x4f/0x430 [ 113.651476][ T5882] __device_attach_driver+0x2ce/0x530 [ 113.656836][ T5882] [ 113.659144][ T5882] Memory state around the buggy address: [ 113.664758][ T5882] ffff8880247f8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.672802][ T5882] ffff8880247f8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.680845][ T5882] >ffff8880247f8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.688885][ T5882] ^ [ 113.693457][ T5882] ffff8880247f8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.701502][ T5882] ffff8880247f8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.709543][ T5882] ================================================================== [ 114.263733][ T5898] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.803614][ T5882] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.810868][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/1:3 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 114.821221][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 114.831264][ T5882] Workqueue: usb_hub_wq hub_event [ 114.836285][ T5882] Call Trace: [ 114.839552][ T5882] [ 114.842472][ T5882] dump_stack_lvl+0x99/0x250 [ 114.847051][ T5882] ? __asan_memcpy+0x40/0x70 [ 114.851624][ T5882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.856830][ T5882] ? __pfx__printk+0x10/0x10 [ 114.861407][ T5882] panic+0x2db/0x790 [ 114.865295][ T5882] ? __pfx_panic+0x10/0x10 [ 114.869710][ T5882] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 114.875588][ T5882] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 114.881904][ T5882] ? print_memory_metadata+0x314/0x400 [ 114.887350][ T5882] ? media_device_unregister+0x141/0x400 [ 114.892978][ T5882] check_panic_on_warn+0x89/0xb0 [ 114.897900][ T5882] ? media_device_unregister+0x141/0x400 [ 114.903519][ T5882] end_report+0x78/0x160 [ 114.907778][ T5882] kasan_report+0x129/0x150 [ 114.912301][ T5882] ? media_device_unregister+0x141/0x400 [ 114.917943][ T5882] media_device_unregister+0x141/0x400 [ 114.923396][ T5882] em28xx_release_resources+0xac/0x240 [ 114.928845][ T5882] em28xx_usb_disconnect+0x19f/0x2f0 [ 114.934127][ T5882] usb_unbind_interface+0x26b/0x8f0 [ 114.939319][ T5882] ? __pfx_usb_unbind_interface+0x10/0x10 [ 114.945027][ T5882] device_release_driver_internal+0x4d6/0x7c0 [ 114.951083][ T5882] bus_remove_device+0x34d/0x410 [ 114.956003][ T5882] device_del+0x511/0x8e0 [ 114.960318][ T5882] ? kfree+0x193/0x440 [ 114.964372][ T5882] ? __pfx_device_del+0x10/0x10 [ 114.969207][ T5882] ? kobject_put+0x446/0x480 [ 114.973781][ T5882] usb_disable_device+0x3e9/0x8a0 [ 114.978790][ T5882] usb_disconnect+0x330/0x910 [ 114.983453][ T5882] hub_event+0x1cdb/0x4a00 [ 114.988294][ T5882] ? __lock_acquire+0xaac/0xd20 [ 114.993131][ T5882] ? do_raw_spin_lock+0x121/0x290 [ 114.998141][ T5882] ? __lock_acquire+0xaac/0xd20 [ 115.002976][ T5882] ? __pfx_hub_event+0x10/0x10 [ 115.007722][ T5882] ? process_scheduled_works+0x9ec/0x17a0 [ 115.013430][ T5882] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.018612][ T5882] ? process_scheduled_works+0x9ec/0x17a0 [ 115.024317][ T5882] ? process_scheduled_works+0x9ec/0x17a0 [ 115.030023][ T5882] process_scheduled_works+0xadb/0x17a0 [ 115.035563][ T5882] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.041535][ T5882] worker_thread+0x8a0/0xda0 [ 115.046113][ T5882] kthread+0x70e/0x8a0 [ 115.050166][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 115.055255][ T5882] ? __pfx_kthread+0x10/0x10 [ 115.059829][ T5882] ? __pfx_kthread+0x10/0x10 [ 115.064401][ T5882] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.069582][ T5882] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.074763][ T5882] ? __pfx_kthread+0x10/0x10 [ 115.079335][ T5882] ret_from_fork+0x4b/0x80 [ 115.083736][ T5882] ? __pfx_kthread+0x10/0x10 [ 115.088307][ T5882] ret_from_fork_asm+0x1a/0x30 [ 115.093062][ T5882] [ 115.096327][ T5882] Kernel Offset: disabled [ 115.100642][ T5882] Rebooting in 86400 seconds..