last executing test programs: 18.829015409s ago: executing program 4 (id=5020): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xfffe}, 0x9c) 18.520049483s ago: executing program 4 (id=5022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 18.283503602s ago: executing program 4 (id=5025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3fffffff]}}], 0xffc8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 15.716545113s ago: executing program 4 (id=5034): r0 = socket$inet6(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x48, @mcast1, 0x8040002}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_dump={0x3f, 0xc21, 0x0, 0x98, "62189105c4676150f37ca68bbfa1af920d97a77da2ca59ddc457643bc042bcdc99dbac8246fc8f967ee425f5cf87c2332033133ed77f4b03b2436a4f01680bb19248353b008d936bb2bec3c94bb7133bb016686f32ccf85626f8fec433a80c5152df81e46036077a986ec9701750ca9a271f50f5b501df937c315b0a182aff94de80f5f8f667c699b213cf84940cf74a1f215e2425c5c49e"}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x40a8132, r3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="2e260f009d040000000f3266ba4100ec36650fc75d85b9800000c00f3235000800000f30b805000000b9060000000f01c10f1bde652e0f309a004800006700c4e29d026a05", 0x45}], 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRES32=r2, @ANYBLOB="40c1b55c4cb674fc8b70c43385f8f3c9ac71086d331c7644c574a00114638387b458b3d4d88d18e2a8c966f382219171cbd1edc1ac23ad805938b95ce35f9b102ac5d441f606fd32de444618073b294d22043e6c3b7726c7e23040aac3e4ffc5f5ab6e02def1d579c6294459b8d9a9034e4765112b9e8aacd900b2eee9faa235ae97bcc87e564312be53b50db30c441b5c8fd38ed027bed722e8260261886ebac3f578670ff9d25c8385eb87b482aec6b0a5aaa7fe8150ece9c5fdd4822502156b7d"], 0x28, 0x500}}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x22, &(0x7f0000000140), 0x4) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000005c0)="b8010000000f01d948b800000000000000800f23d80f21f835000000900f23f8b91d080000b8ebdd0000ba000000000f30f3430f01df662e678068aefcc4c11d6c620b7c670f01caca64e40f30304424007d000000c74424020b3d0000ff1c24c40253f611", 0x65}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, &(0x7f0000000380), 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) 14.868334966s ago: executing program 2 (id=5041): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) (fail_nth: 10) 14.341048714s ago: executing program 2 (id=5043): write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x3}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x1000, 0x9, 0xfffc, 0x7fff, 0x9, 0x4, 0x7f5c, 0x659, 0x1}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x15}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13.927223902s ago: executing program 4 (id=5045): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfd7}}, './file0\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x0, 0x5b47, 0x100009, 0x2000, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x0, 0x3, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x93, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0x12, 0x29, 0x33, 0x40, 0x6737, 0x1, 0xef0f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2e, 0x0, 0x0, 0xc6, 0x27, 0xe7, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xea}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x1, 0x5, [0x7, 0x5, 0x4, 0x8, 0x5], 0xd}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x44, "6bfb"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x5], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x81, 0x68a, 0x2, 0x7d}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "5e7cc553"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xb1, 0x2, 0xa, 0x4}, {0x6, 0x24, 0x1a, 0x5}, [@obex={0x5, 0x24, 0x15, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0xca, 0x15, 0x3}, @dmm={0x7, 0x24, 0x14, 0x2, 0x7ff}, @obex={0x5, 0x24, 0x15, 0x1}]}]}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) fsmount(0xffffffffffffffff, 0x0, 0x8) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbb056f3f59aaaaaabb0806000600000604"], 0x0) socket$packet(0x11, 0x0, 0x300) r8 = socket(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$nl_xfrm(r8, 0x0, 0x24000854) 13.352270747s ago: executing program 4 (id=5047): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="0f01bf84ecf04266263e0f359ad57c000081002e0f30dec80f7823c4e2d1bb560dc4c37961a1000000000a66b876008ee8676564660f2f6f00"}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.492077935s ago: executing program 1 (id=5051): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_usb_connect(0x0, 0x2c9, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e69ba3207c2c1205d45d000000010902b7020100000000090474000affffff0009050f100004098100662366b51c849f076b5b5b25fb80f278f30bb7ef2b628f62479b817451d37db2c74fcb02b1cfadbab37943f4bcfab008f986d10a1540dee08adb9893ce9ea50231962215e018a3703a22d620b4373b14b6bf7556343d7a0470c16027a1b3f1eef9d424e4222d090508032000023f020725010103090009050d"], 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$tipc(r5, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10, 0x0}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000140)={{r1}, "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"}) 11.472990756s ago: executing program 2 (id=5053): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 4) 10.956446884s ago: executing program 2 (id=5055): r0 = socket$inet6(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x48, @mcast1, 0x8040002}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_dump={0x3f, 0xc21, 0x0, 0x98, "62189105c4676150f37ca68bbfa1af920d97a77da2ca59ddc457643bc042bcdc99dbac8246fc8f967ee425f5cf87c2332033133ed77f4b03b2436a4f01680bb19248353b008d936bb2bec3c94bb7133bb016686f32ccf85626f8fec433a80c5152df81e46036077a986ec9701750ca9a271f50f5b501df937c315b0a182aff94de80f5f8f667c699b213cf84940cf74a1f215e2425c5c49e"}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x40a8132, r3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="2e260f009d040000000f3266ba4100ec36650fc75d85b9800000c00f3235000800000f30b805000000b9060000000f01c10f1bde652e0f309a004800006700c4e29d026a05", 0x45}], 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRES32=r2, @ANYBLOB="40c1b55c4cb674fc8b70c43385f8f3c9ac71086d331c7644c574a00114638387b458b3d4d88d18e2a8c966f382219171cbd1edc1ac23ad805938b95ce35f9b102ac5d441f606fd32de444618073b294d22043e6c3b7726c7e23040aac3e4ffc5f5ab6e02def1d579c6294459b8d9a9034e4765112b9e8aacd900b2eee9faa235ae97bcc87e564312be53b50db30c441b5c8fd38ed027bed722e8260261886ebac3f578670ff9d25c8385eb87b482aec6b0a5aaa7fe8150ece9c5fdd4822502156b7d"], 0x28, 0x500}}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x22, &(0x7f0000000140), 0x4) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000005c0)="b8010000000f01d948b800000000000000800f23d80f21f835000000900f23f8b91d080000b8ebdd0000ba000000000f30f3430f01df662e678068aefcc4c11d6c620b7c670f01caca64e40f30304424007d000000c74424020b3d0000ff1c24c40253f611", 0x65}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, &(0x7f0000000380), 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) 10.004666355s ago: executing program 1 (id=5058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 9.712258527s ago: executing program 1 (id=5059): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000003, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x18001, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000005580)=""/4092, 0xffc}, {&(0x7f0000001600)=""/4087, 0xff7}, {&(0x7f0000006580)=""/4102, 0x1006}, {&(0x7f0000001540)=""/177, 0xb1}, {&(0x7f0000001140)=""/164, 0xa4}], 0x5}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x101c}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x17, 0x5}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x17b}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x120) 9.332484108s ago: executing program 3 (id=5060): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="42a9f27d24bd44b4e66f7ab15e1193b879", 0x11}], 0x1, 0x4, 0x4, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) futex(0x0, 0xb, 0x0, 0x0, &(0x7f00000003c0), 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x1b}, {&(0x7f0000000280)="f697079a161c027702311e629acda76933ddd0c24174eb4d4d28f9", 0xd}, {&(0x7f00000002c0)="c27d037369597e0a4e", 0x9}], 0x3, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0x10132) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmmsg(r5, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}], 0x1, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000020000000b0c00"/83], 0x78) 9.284000935s ago: executing program 1 (id=5061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 9.048117691s ago: executing program 3 (id=5062): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000bc0)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @multicast1}}]}, 0x110) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x2000000, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 8.212259031s ago: executing program 2 (id=5063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 7.590423086s ago: executing program 1 (id=5065): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfd7}}, './file0\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x0, 0x5b47, 0x100009, 0x2000, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x0, 0x3, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x93, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0x12, 0x29, 0x33, 0x40, 0x6737, 0x1, 0xef0f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2e, 0x0, 0x0, 0xc6, 0x27, 0xe7, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xea}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x1, 0x5, [0x7, 0x5, 0x4, 0x8, 0x5], 0xd}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x44, "6bfb"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x5], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x81, 0x68a, 0x2, 0x7d}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "5e7cc553"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xb1, 0x2, 0xa, 0x4}, {0x6, 0x24, 0x1a, 0x5}, [@obex={0x5, 0x24, 0x15, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0xca, 0x15, 0x3}, @dmm={0x7, 0x24, 0x14, 0x2, 0x7ff}, @obex={0x5, 0x24, 0x15, 0x1}]}]}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) fsmount(0xffffffffffffffff, 0x0, 0x8) r7 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbb056f3f59aaaaaabb0806000600000604"], 0x0) socket$packet(0x11, 0x0, 0x300) r8 = socket(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$nl_xfrm(r8, 0x0, 0x24000854) 6.190984307s ago: executing program 0 (id=5066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x2, &(0x7f0000000280)={0x100}, 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000009380)}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000002c0)="c7eff28135b6d2f9593a2e25aa3e8157da6900462f257d881472638431bd8f64582c0a290737ef1fdfa002581480b1a1249198404d5cd7859d4dfb239c4d597f932864350e5edc2a1f0445741a1f6d99b882a257b3a2e39a2d5f950204cc", 0x5e) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000540)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000580)="05", 0x1}], 0x1}}], 0x1, 0x4000000) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000140)="89e4635fbc6e37197dc6dd61b3cd49a055a5478a6ffa62c6af2e72e03f1a60ab90fab5d8d7b7ea04fb173234144ec30e1831c2ef12ff51bb11f227b47cb433", 0x3f, 0x1, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = socket$inet6(0xa, 0x1, 0xfffff139) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff00e306835eeb1317b208feefaf234b4ff8b4cc4c39dc32f0925d89409ab7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae00079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41990ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6a8fcea6dbe9d4a54c17aac0db6e3845000000", 0x118) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r9, 0x5522, &(0x7f0000000200)=0x5) close_range(r3, 0xffffffffffffffff, 0x0) inotify_init() 6.11063991s ago: executing program 3 (id=5067): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)={0x1, 'vlan1\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r4, 0x80}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000005700), r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001980)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="595089d28da2075033b11a08605f34b4aa5afe79365979089fcfbaf687b319f0b4861bcf263b3c2a4677304000549e55e9dd2234f57d61fba276d3426c96f78a12f523ba365f24721d35784771cd2b10db02179276629cd1cb81d5272a2f08ede60841439928cdba1ff94d1521313a75f202969e01363c435340a260a05261edff216984b1408a4285cd76ef", 0x8c}, {&(0x7f0000000500)="272180c16a116fbbd380bea75397820e89b41e0a190bedcb6b6436ddaa9d03d5d8f96ae00482cef68419f37f98e99d86eacf1ef70505731557c866b7f1845e641c4dfe6c84442056ab7cd24ac8e3", 0x4e}, {&(0x7f0000000580)="8ebfa6359bce69e0c096c4c60c082f0fc0c2b947d41ce467fa97993210ce8aca87e4213a80e40dab314aa052b22317ceb343f0143fa9a1fddc712a793fc26b21e20c1d52757ea45aa31c1e54c8b1eb79fcd8ff55c12ff017f63185bfd4ec25c0e75d41264f0a43ede4a4ee4b76a9f9a47f164e29fd422ff646fc5f68774d23217e4d829753dad8f60341405b39bd8d566d3e58fa82d6c9c942f88bb75e8b2f9719da", 0xa2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)="ca9ea510a009d77b79a6b6fd553d70d6e7bf8093be007e32337aee214f960c528334df987f70c75833605f24bda9934d2f587e823c5ab6532e091ad3b70d1c535afd12798523606c61c14ea6068fd0534553ab67e5d70004debfa90b2b8a69e022e81d086b93fa06fe44fac387790ea2d7fd6a6b63c227264c1e5d9c1b3e0876317a0f462f54164d2843f53ad7f00374e5002ac5229c7aa8393707b023608212de5e9eda85b1eaae0a7e648f7f8a27d061f0b94d4e5db4a155e4195460d61e16cd12f28abff8450ac5a7866c982cfc5d07b4db77223652f509e9dbcc049263a86004c0c8ac01ce7c7dc7b8f1cde377c5bd38", 0xf2}, {&(0x7f0000000740)="ae42dc890e7e36be010f4173398b0cfde019753b0e0b30a39224d5c60d0b3b072b1ccc9e33dd1621c85ba64f2e304dbfcedb814ac5f051bd20618d27ab5f0ea06d56cf9976fa87f178c88c9b457ab0bcb24d", 0x52}, {&(0x7f00000007c0)="0b5010fb605df6ba9d64db732382d6e6738e3048149dc9352e13b60df980c549d119c7ff0a278776809f17f4471911184fe78ef2dd457f829b6e413bbc920650a12c929f57fcf5c963accc192434442d4968502fb9698c362bd68588293fea79f1be7c2706cfdd555da741c81c2840a954401932f85f4bbd9528fdc27c5d1d775a9db83538c7d0b6b00022c015897f2a2b00276b7a435d47fe5966ff8ff0ea96e51d28846e026fd4d3da438234cde3da99d03d3795288693e3120079faccaa1adcdecfad26d5f740c6320d78", 0xcc}, {0x0}, {&(0x7f0000000980)="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", 0xfb}, {0x0}], 0x6, &(0x7f0000005740)=[{0xf0, 0x118, 0x2, "d9d1e3d7f1119702034ec5db2b2b721f3c4ae72c240eba5612530c836199e6b4fa2f2a67a4df7351ede038d6d535dde2c8d1092fb28749e9384c5b337a13e1c41b36b765b8ba799c2599d86e7b491f24432d61c7db367613fa670f848db3e1b26d4b40734273f336f25029dda06461e0cce9e0a45b8c4c406e5a0764106912e010342c168df99241eb4344fdc1329c8f710d735c084ebd07c3ad11bf5e60193e59fe546ebf19f8dd9e484f6c356cafc783c9a7e967bd1d342a6bf7f3ccb48243ef01246b83724763901b0c9a6d62d6242fcd3b8f0a8ba3c173281b09"}, {0x108, 0x107, 0xffffffd9, "04b41a93745693b28a16c4f2b01b2c89bd5c65919bc65fdaa05c14678bbc6f8670ea71a797825c6a3edcddc60b9fc8412ef5bb7d5cebe1741ffb12e7deb5ebf8937b747b8fb619719c549e5ab571596ed16a69172748e7c2beac2e74c6cb43c42767a7047a5f2b9d2556907e12b28eca1970b88b40bc0f999ea95584a51a551b28398ab7ab972fabb0a9c465ba1f36de38f1fd2e4897cafd79fac9e7ad57cde9d86b621d546939d68653a54a4f641213866c7fb0e84a1b9c857553bb5ac41e1d2cae6ef1d9c5eed4fc26a2b1897a0547fe71ec5f3484b22341f9997f629ce0ddcc6c8b3d5335b25553cbf875802b267bb0c095"}, {0x10, 0x113, 0xe8}], 0x208}}, {{&(0x7f0000000b80)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000f40)="72f54a46025fedc8c0c16cc89cfe37568d09886e298fce5d1538cd43d5ffa576be6338d2e2d392c020611c1d63cb478228c8af08e7028cf564da782fc142a2dbe16fb0ea8c2a", 0x46}, {&(0x7f0000000fc0)="871db022eaf808536e878a181d075b7e8d8c7e7519a67312bdd55a288e1d438683b97e6de38c30139f4efec3b1052da017a81ecf14bb9c030face3ba040004000000000000a7", 0x46}], 0x2, &(0x7f0000001040)=[{0x60, 0x101, 0x5a, "00d713892ca6ca00cdb67c8e0264edfead63c3771a5fec6bf7bceb419825eb131d310b07f9264c093a3a6bca168238b2f6e9ce730eb43155ab052baf3b61f3c790248c2eb48072f84d"}], 0x60}}, {{&(0x7f00000010c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)="3c73977ad8936de036450cac6c6d741db5c2cfabf183ce17bb8b2d85b6e4f2229e0facbd7f23a6f8b269f7e596025307035155d7e69b47eea430602969df4c44b6de1c3237a5d4a7ce9ccd4c15631ead3e02c341c6ab129089e6219b0891b0dd95529b15a4509144f8", 0x69}], 0x1, &(0x7f0000001200)=ANY=[@ANYBLOB="60000000000000008400000001040000fa17bbc84e59c96588cdcfa8ba44bf37434f6bf10ac5b0d3ae7fa7e123ce0eced59cfcd0c900dacd5f8c47d7264da74523c359d21d7dc29464412ed80b15501019bc2a708588cf8be9e9ba0000000000e0000000000000000f010000a3000000fd1e94aeb35355ea6e5670ebb00e2903575ee9f5ff004ab2be84cdd3c6bcb3255c658f003dae802c81f0ea9b6a0078f41e912991b9ee6b4761b6799e1a26922e778e9ccc8b25ea36d64ded765c43556b8783e1471d1e291edcd4deccfee28d9f08fa3d49577a5df49ed353b133ae060aa50535d341812f4713fcf62a2580adc42f5e1e0422d5fd6a6228394c2c26956f8bf844d9f2f5b42d14076306d7e27a86fa2498b2a9dd6411fd0d950948adfcb4b40392b0d8d8d01f068ecf16613f0cbc01386ba06269daa5dc54a71ab373338ef0000000000000000c010020008000009e9ebe3148b8ecb692216cd4c5f546ae52db70ec4a1f7d5e36348aa2dc8f8ed5d0e39846a4e61178d8235b4ce091307d2219aad81ffce244b4e1f46d928d2684a74c1139b03b18edca44eb5ede2dd1f77ae87afa79ae4ac167759112b13cc3339b41140220c45c295e6f6bf949c5a3774c7dea0948d77b08c347112bcffb3801938d4f5d64add0ea825889f4355f0d90c3e7b101adbd2b92f55da60d3000c71b41583b35be26772e2170f19f5a870fc48415761601a3f599dcb542dea1a835e5b9999ab3254dc7efcb75c4cbe99f35e9bcbcd49d240ad15532ac845cc366040030000000000000001201000000020000bfc436eff87f408b5173df549ed8073d81737822f3301792e1cd629fd848e0009800000000000000070100000700000006de53015be2b2b1cdcf069d1cfd0706556b29f8191d6dd59cf34a57232aacfdce71b5ba331ce2939030fc2188e7ca7d879ea3c46782efc2422f89f64ea727de993c82f01317eb3182a286a414f7ab0e5fbadd23cd7cc6a12c6e6633b92310a0eb0a7f3cfe27967ebce35b8d0e854ee828dc852e5b18327f813fe7e80fbd91a7484da3d0ebcc0b48780000000000000088000000ff01000041758927fe1a9b311cba4c59c6e8b7311d8cb75256d3262aeb1744eda59d6f80bec6ec182b8e1f92290f0422360694e50df594a0a0c76c33cc4a5bdd97625329d08fa1233017183829a654a708eed99aebc5bb33bbba6114792d05bbaf92e37673d672a0aaadc44e"], 0x370}}, {{&(0x7f0000001580)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001600)="62b656ad9e91dcdfbff3afbe63d84e4b19b2bb09e7", 0x15}, {&(0x7f0000001640)="e93d73646c0aac9630e7ae363a1218230dc2bee8384ab094bb752a591d20d89bef2c77c0da0f28a2f818b29685f3151180ecb027c850d87f85e4f52edc191357571fa230ba4337175169b586fd82585f5a73770fec617da7b95e6de40a21390f5085c40ca8c48f3520f641e2d43b6d14d72bea754afaadbcc77086bcb1fe24ded2883b63c14d367330bc6c1e221215a188860118fa4b72a7d6218dc520a533c8cff1bb146490b31f786c69d007f0173e97e9c9ffad572f1a7e4b099ac3f54986769cd123f732599065db13cd801cfa0b", 0xd0}, {&(0x7f0000002a80)="bacb7fe62aef43065fa52bc02cb6b41448e0937ee8b479ac6aa000080791c9f79e558030b3e900db607ef4c389641cb716c3dd78994c1d6ac16350b276f0a801aa53648aec22825b8e8ad8ea20618f36370a2b7bc7269c428df9f568b886085fe5e00df658fe801e90ea864ef7c431ba7f2d656dd6868c396158d43231c52cbb967b126762c44f38263cb7b67542ed04a70c0de9647236e50c88cf88bcff12c8f4969e12375cff907d65c54f85ff08ad8cfcef0ea568d6cf419ad4cca0a474b4a9c9f5075a84d0a8769e5e113c370742e474875af7f6be49694b4f014cfa4e73fbfc4d9f70b01f28b673d7dce349e062cb3281a4a6288cb246582c36be109d9aebbe294e13dcbea2fb84b13987c32fbbe9e1f56afd6edde9a4ce26e98619cfe0a26772bc8dedd7b0b3ff860efd9b3169bf0a894d7b0ec7983eb4a8c4522a884dce2efb071fedf325589afd3c78322364bc0b67ddb7f2de31ed72014cc193013ae3fb5945414f437554ca8ac266c68428f759d722590e552ebd21c7660eeb73f01d587cb187884295207c5aa41c6e399128a027a997497285733954dbc33700d53cf2bca2a5da9d8f032d616a78e976d2a303be410a4f0e9615707ad7cf71af2f75ddd56e94895e04ac5aae2c23bf47a46fed010c59c43957a5f9f6be6bb0af162e46f12f135663a3548b855f51d2bf5b1bbf8b83c067f202fcf2e1ebb30f3356acc5df3e6b17ae4864457d0b09464b015c39f59c7fd049ddc50e9a53c20dc448b635539d401efba20a4a02eeb877d4e345331a9234f956a7b8a316c4a6e76531171739a4cbc617615c33fd2e3beffbab4501878c6cfb00c1a675940918de48de2f3bf192cdfbf83dd618322e0275a74a1b767a41fabbfbae1655d292542fbe237e778a8a0c5aeab6adb1e550cb2ba28ab3fbd015fda4f303f8712fd195c570e3e48c2a14cb19a500104c24753d536e37e0686d84c8411d2a88f89619f180495cb3b0fa163f8b6d9f809cbf729b012b2f5cdb4babf520c2bf5c808ddff2507bdd20815463d0a8fd60935daf6c0059b556223b2f56a14a3b702b2313425e649bb3f1bad1c2dfbff76f67c24166eabbbcc0539bd484a741e7efe339111daf7dfbf5cb514050215078c07c241fd78ac94fa9bc3e904b93fe6865ed594b4ee807ebd0e092d38b4353220d1a8f80fa0d8749316398bce0cc57795eb9886abc3ed98ae66a6e4f9b692b9dfc4658ae1bcc489a32bf25a6ef00aae49c0cfc01b848d1554ab18e32072ed26caead9c64d02e86987e2d08c50599d3f2286a5576377b537871b8af02f003f1ca4c9df6ada704b8292def4c6ae206a94b92721298e5083f8e51333aaeafd30cb771f413bbfce075a940b58ad3532594ba2ac04702cd5d0ef24888d98cd23438b6e23cb725a94e2be1a37e482aecad432e7099e83873a4012ff148dfddd5303ed93f9d8c8e8c2bd5373eb6b0fbdc12ee550ce0e29911d79aeb329e290a690d0546934a916635ddf6216ae2cc5e99145aa71eba73e28b883ae07eefad6da3a1f7a1bcf073b89d20a763078f6b1593f235551ffffb7a330941def5f643d727f77ba0dda3369373038adae61f600bcf6bb209620ae0ab70299090506812c2e60dfb4ceee60eebba301cb59a7dcc21670185792452c3610ab793b8af9567ac90ccb1354e5c6883b12776ffbe72403c6feb03b271c132ffc6854c965968e1de37ddffe722aaa4419b5ab089a9c8ae7ca96acfbacdc7c7a6102b9f9928b83f15e0ae0f4b67dca598cef90099a64459ee8a77273baf536b89ba6fbf0fc530a85cf60652433fbcbe5d75c712390f59b664a6164e69623733a67f0d7531eaefb0c63b687f8dd6a89f55341303ca470de9d5ff8acfc4a214d871588559d442ec36302f4211bb3b7c6adfe3e43d9003b91e030feddd68cde004b51702bb5a54c2612ef552eaa5bde1406265efc5013191cbc77e69de6b8316b55443f1fe7fa53860b02c1fe47385872ab8363a78394c8ef85e56e575613a48325cd3c11cec952d505765bb239294b3d2bd6f9200c41b48514778e8450fefd7c724c28bb15d6a2cc2dca59b8900f9c96f4ecc0e1f7f557f0ed0dee1c19cf41fac5d896cb0fa3b37fbb6ab7bd67d686a2b97d496c41dc6307d45aeb4a038b5bc52dd1322717151564749f17b4273d9a601138d7399ecfe129a8b63a052e4b65154a366b455636c4a076537b3cec05d76f33087f5b7b5e774c304eccf22aa4e1eab6db243054c52219abc093741b2015a3a81bf8367fd528a1623dd7270815423b5de83e4142ed9e297f4344ec71c065a6f90e1ed39f91105bd3e40e3a8f7869f7a5139ffdaf79f5a9b35d484af72b5157cea323a1368627297f9c487c6032df869b540701af628fafb9b004d863251ae01d07d7b24237c0143e34a9b114291902e06c6b070f6bb5f20793ff38823b2266a3b274d65987dca38914858a4ec0ad975df775d9e70e76842f5deda2eb082020a678da6224a77075962b730f4fad02ccb354e674e74b22edd0e115fe9ef951e3f04058a2130e49292b635f52eb3340ba6c799da09f255e0f0d2686387748f5b93effd163eff2c1bc6b0d0066e9c87251c035b268edf6e2789a3b2fc1b8a87f4b77a66b3dcac90ab1024343073f0066ce3f5f17e932d2efbe70d292fb6b03e12812ba5961d248890463e0a83b72a543901ee9e561f23e9c1cbf8a6c0707ea025f4af643dca2205892f9bbfa44952868d86d5708c0e555498a2c63cd642017f98d74d997d011db047fe0b89ddb65413566319d238d679e5dd3038363440ce24d2f293f68cb2a18787269fe21e5f0b39687bad2c26cc0bd1dd7a65b02ccb29733492ac19f096ebfedfc698da533b69f9b55fde29a993b878c85fbe1edbc288aea3e93ac74e2c6abd047555f6566fd8c65c430290b7e88c5ca66e3752bef5277ca35972d6b8595f7263b0ceb42aff7b943cb81c5cae10793727d1712ca684d607b2bcf09a1f445510ec6c38575334d146d9d1cb9cd8252e02d7f502a076a44c96077f70688a6b913fc9864bad7b136c0292b6e8dffbf98a6e90f57ef2d94315a0486a88e4550c0698acc6b7c8c96bbe9d4c93a7f26a891c43a04639d301564aadc10f4659d78a60df6bbc7f39ac57972534765b31adacda00483b335950fabcaf82e645060c32e77ea31c711cdf2cc66e9e232c92d08452fc23bcfb2492901420b652aee83f8f2e7e69d73fec7730f922ddead21c34e7bfe6fa7bc7e661858d17fb86dc5a4ecd0fb9bbaba9592f1e5419dcaab0eb3845e7c9dd7db5497e7a22fe31986a4ff55066569538b68ff6aa0001f283d1cf752841c8b4588ea9e3db827e9ea346c27ff98881908a88a220a15402d2e80a58e894f683edfa7e984042caef86ded755be0809c0948e2af7cf29d8583dcf184b727dc0722f9beeae35f0a3c79582b4fe1efb26a53441c6856075ca3abc4cc5af73347a2e224f78b3e353f2b354c6fa5bcf161ac853c47a6a46f15cb790b600c5ec04b85cc778e5afef5c96aaa75f1cf14fd1346b478746b6107a4ff6b071849b25301ca94a9cc3318c5eccec634d88695df389db2cbe7c9f6de517a2a78bc23af694e3c7202f13152f79b092fa2a84501d519807e40504a59cb599e37b14591530c7b2ede9f4e2de99fe42260b6fa03d9dd9cc6fef7d60d3a88ab38a79dfc4911c012143d1fae9e35b201d35939e9dc1666127208f4c33e2e54dd438de7dcdf056377150e14ea86464a950f8ec0db059855251fbf843f1d50719092732886e8e3e4a65b02fcbe0e8edf6a67cb2afa6d1a5d2ef2422fe5019aeb184df80b1df620f98324d76a66d6c09377c7df6ade6e5f3c844669b5aa7cce8b49acc851f62d380fd19f2bd5665f00e93886337011e8a307e4482e2122661c35c5f28608f3f18ebd940c461c57920f9261b97603955d9a82cc8c87002648c9d4bfb18800b40f3f37937292265917df5b892d8b2ede599c557744f83a069c06dc69ee509555b32fcf852e143175e559f58641bcac01a6548174656095a10c20b606ce14a370271c1efd5ef2ceaa1f263bdab6adc27c703204b7f8a1b11e760145542fb2065bad1a92647219c563294687364d0bebbd71bbd65f02dfc8aa8d783b9c22da29df9e89e6d1b2f78ae8d704f29183bbf9dd864dea4a0fbe8e65bd792eef89800837e1bfae69aa37db1a833f4302f2383c6745e5b9819c3d7ff488e0e5e3a4f650106ce79ea4b32611af3e80fb3a420aa5c7521dc8abdad80e74d341ae7ecc5334f4c9107f0f0731dd1c15b526624f4ab148e5e14117e7406274ada95c460d7e325e8c80e225beb18e9b548e08fff4fdf7b660f0a0d418bee9ccfd86f516f228eb2b2d19e7eb33bc8694f581d037045452546ab04306499688acd6fd0ef4e158c4f5c409564c191f2cc8c9d20d74dd02fd2a15f644bcb02aea88a0ed77b6053f69e62be980412a0ba2f2616dac4e73d25a4b5d823412e2b26a0fbce4a0156e0e417d007e37052da21df6942d5c6dfce9c42da96c16bdc0bacd88136fa03b3911a832ef46600e872f5d1c9b7f8b0248b369d45e57c220729f0b0948d80c9690ea050b7ca96cce9fa127f64ad375f56275d155b8b21cbe5447552effa0118dad6a919eab36b423aed7961cf3b2ac0639e75d921f263f71413726dea6f0cd646a4a68b769df6475ff51b7394541112415785c90bdc915389f645bfb59efd7b5c846f424ee70c23ffffe1538ddd6cf8b5a624ad3de24fe200954deecb12b57c2cd1d5853e328444f5c55ee2aac795eb86ae4ee229046c5e2d3193575929e91cf0cddc6fc694d99b75ed673f267fc769531240db3828150c53964024ef94dd78a9f09281d6b2d17522714385f59b27af1c21a0fe7d191f29c65c3532a175a242a829069fb39c86975b08f64dcbe5f3a66e8fb9e2874e3fe58b0383dd32de0c3bab44f1f16fee0bc343a37f2344fc00e59927c9776b743087fae685ba57e766fa8cf9c456fdfaf93cfa5df203c23e2319539a74817ec9580c3d23d3d539622a22596322f4f51cd8fd9a91c51aa1dfa03cf9ca6b1aead136100a36f56301a2b34c61a6598c9884c6dc85eb1039a7c451a29c06e0e4632b71cad080e62e87a8c458bde9f6713e45d33f561e670e4a1d78d970d8e563e3524303b9fceca9bc408bf6c36ad437ab3827c749451a49a03ab9e86ccf48437fd0a21b26638a361895d1368ce2c5f3add7a6c8471c00907c0d974ebeee16d92cdae3360e8bfc11f4c68a75c4a971fd3e137ee1bbb928c2d0c24def13d7fca7ff18e7529909b1805ca26054f9642e1ca01f5252864633aaf40ca2f478d1e8a7ca923039ef6a447bf18efe57c57d3f9a7f4ee583611bc5effc2dae45c9293c9fedbf66d548a6367339bd42d7ab6e1ea275e4c9407e33f59d8c31134eae8f0168d9713ee0278b4159a722a9094a991a22e5809e1f0a1cb6591039020a73bfbbb518b94fac20fb3d0033a9dc2c794520cb98ce6dabb74ae2b66ab26828f733c31863a13ce852c88b527e57f4bf7e17645c01d99aa3f9d46f80fece52cc4e4934df133c8bb0be8f05cfe79eb5156cdb12972a8cf3a21a07b71814848d87ddb08f02d6fcbaa65e940acca23289c41f9373550bb11fd8fb6d6da6d88ab11024128c9b01ab71ab124e1082ecb9de3dbdef47c23cd9b45c400148d700230cb4663a406744b52ba6e8c76a223ed1854ce40a53bf599c0752ab32ef3916193e1b79667cbcb39e78acdf974e67649e6f566ecfc8ef3b7457c1de3e", 0x1000}], 0x3, &(0x7f0000001780)=[{0x20, 0x88, 0x5c29, "277b986dbf93a0817157e5358183a6ae"}], 0x20}}, {{&(0x7f00000017c0)=@llc={0x1a, 0x30f, 0x87, 0x23, 0x7f, 0x0, @remote}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)="30c6edc79e94f0dbaacf8b1f1c1994d5c18c1927b8343c9fd77a17e22d311f93ed89ea324e2d37e9a4daee387123b21ab473a8d5cd63da19119ccec8ad943940511c4dbf75c29b56c42301363fc0d9dd4b70d321ce48a93b10c4c5a355e91b0bfa9c04f757a84fb4d8d4e7172ae76381747bf84a38d32872baf12d97b0bca6a24a0d0632c693def4dac0cb37616dd15a98962b2ded3fea7e73c2e957e72fd61f443bfbe4809a3cd216dea743e300a08e02c5ea63bbcf317f3365085a1e29b18e822e", 0xc2}], 0x1, &(0x7f0000003a80)=[{0xd0, 0x112, 0x7, "815e149681f2c54307509a77ac05341d8de5907c474c03871f24ecc721a0155400cdc170ad90d57c9969b4cb80d33befbcfdb73fd7047916e63ef0408737be812f6e9fe58f3d835e305adec428ab4e2ce384518e820129721cc662bb718a4fdb28de87a40d17cfcc57f4c1914748aa25bc8e732e5ded86b386390cd9cffb567166b9973d1957442f470e0e05b7a1f12901d47f33eb856f84918ed8501722acddda8a110160f83142f2adad446816f83930cfbdb0d75d755ed931"}, {0x68, 0x119, 0x0, "86800ee277e34ce5fb593749262e03e9f991dc08cdb5f919b99b3ed8af50f031b915cd844b4e1c6eb1b1b3155185656640dd9282758a46d807ef4c71752db3a1bc7f07f21367bf74b06ee79855fdc5a8f1e9f0"}], 0x138}}, {{&(0x7f00000019c0)=@nfc={0x27, r9, 0x1, 0x6}, 0x80, &(0x7f0000004f40), 0x0, &(0x7f0000004fc0)=ANY=[@ANYBLOB="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"], 0x100}}, {{&(0x7f00000050c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f00000052c0)=[{&(0x7f00000008c0)="49498cae0e9b6dd8b8f7f4c3c4227e5fcd5e2432c64d58ce6db550bceb51d711e7", 0x21}, {&(0x7f0000005180)="0f1efefac35bb705f8ff5088d1712e43106d886b250c1f380487b147b5247ace252e03e755274f43d214125f2355139e0963cd39bc2ea61a2fbe1a437c3e9c7631749f85153b1fe7e98567a83d37b299566d56c7422018cf3c20c9af2e07bb", 0x5f}, {&(0x7f0000005200)="b215c87976cb5bc865e115700b", 0xd}, {&(0x7f0000005240)="ebd286782321b66a0423da689ffb27cbacc6260640bef440ce1ab0ab8341525c88d1d829726338652839fb5c017eb85e7273ffd302aada5bb601b0e4392b51de040241f0c8b575bafdebb436a382d2930f", 0x51}], 0x4, &(0x7f0000005300)=[{0x48, 0x0, 0x3, "0b73d96f23f881a65f25b1d5d2a14e4f0d9796dd1ff4791f0bdce38b98f6c99fadbf09707c71e60ff0ac8b5669622544342f509839"}, {0x28, 0x17510dbb0046e2de, 0x70000, "e42a3e5ed980cd8bf9de716519898178d8f5d57498a59a13"}, {0xf8, 0x6, 0xfff, "2175c3e60c0087a6343f3edfb651cdcf5518896194df91059e0bb8c1feb266e89b13aa37aee684652d6199e211a841e6c3801ca8ba35d24b301885336afbded20e50ddfe228d3eee1e4c1b125eeabed709ea8f1595ee3882d1a0074537ef3c7be30fee16eb17980a58baf42797468d87ba992467acb83584de65b4a97c0dc160610ef0b0e29a0fb377c53d6f784ea1d0acf5c6dbf593ab558eaabb688052c553b95d70651f0807b6e7a8418db546109a68ca926ffb00d5bb8b60e9234a480630612c57193b3770c16f29929bdd0a8b742e421c0dbf33235a6eccf163005d0742a3"}, {0x98, 0x112, 0x1f, "a7c63a22f09c3ab0b2b01f8e16be78ef1dde037090dcf58be7b6bae74a78a46ad9e43ae5646ccde6cb66058b3784be831f1104da39a5c73e96fd1ad7c0f975c2a0a10baa8736b7f5947172076b7ccd4d05fc85a35a01eaf7c6fe3db436525106215223f21082b09302bd567edf97a7ec7d231a4e30d96a761f48d27ce4bd04779b"}], 0x200}}], 0x8, 0x20040011) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r10}, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x52, 0x0, {}, {r11}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41ff8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="01000000000040000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001000000000000000000000018f19185e9e9e293"], 0x48}}, 0x0) 5.823216033s ago: executing program 2 (id=5068): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x5, 0x9fd, 0x85, 0x483}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6c, r4}, 0x38) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x168, 0x11, 0x148, 0xd0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.279210264s ago: executing program 0 (id=5070): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x2000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe30209c9b53cb2d2, 0x10, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000900)={'wg2\x00', @random="0600002000"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x56, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) socket(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002340)=@delchain={0x300, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_CLASSID={0x8}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x268, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x250, 0x6, [@m_ife={0x1d0, 0x0, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c}]}, {0x145, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7038eceef52fe7bdca153fe865c65015a3b208b282c16472e451aa10a8631235c49cae271f5fc8ce5e34d9938e3d5f43ac7a0e31b0acfc73199ca90e81246819f4c740a4fa3247a2af88d6569da09be7179b89f9f024c9f465098a5a52058a431206bee68089bddc13ffe76ff0f000053fa1517700a54d423c13fb6732a5d39c87101b0882ccd8e86eb437849e249675c60d8a9cf9430b6aa206e8116810b35151fce1e1bf48c2b9cbf0728c53ba121a82f52d6365ff203b02c074528c59a49843dd5cd36ce48d9ed8513e383a84e436714bf5d49ab0247f4567ab52f84c8f43d6020d56cb20b8d6a13f35ae9adfe01f0e0a20f555d4aea89"}, {0xc}, {0xc}}}, @m_nat={0x50, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x25, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e030"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x300}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 5.082132467s ago: executing program 3 (id=5071): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x2000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe30209c9b53cb2d2, 0x10, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000900)={'wg2\x00', @random="0600002000"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x56, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) socket(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002340)=@delchain={0x300, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_CLASSID={0x8}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x268, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x250, 0x6, [@m_ife={0x1d0, 0x0, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c}]}, {0x145, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x50, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x25, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e030"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x300}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@local}, {@multicast1}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 3.979140571s ago: executing program 0 (id=5072): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback=0xac141417}, @in6={0xa, 0x4e23, 0x0, @remote, 0x2}], 0x2c) 3.827969084s ago: executing program 0 (id=5073): r0 = socket$inet6(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x48, @mcast1, 0x8040002}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_dump={0x3f, 0xc21, 0x0, 0x98, "62189105c4676150f37ca68bbfa1af920d97a77da2ca59ddc457643bc042bcdc99dbac8246fc8f967ee425f5cf87c2332033133ed77f4b03b2436a4f01680bb19248353b008d936bb2bec3c94bb7133bb016686f32ccf85626f8fec433a80c5152df81e46036077a986ec9701750ca9a271f50f5b501df937c315b0a182aff94de80f5f8f667c699b213cf84940cf74a1f215e2425c5c49e"}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x40a8132, r3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="2e260f009d040000000f3266ba4100ec36650fc75d85b9800000c00f3235000800000f30b805000000b9060000000f01c10f1bde652e0f309a004800006700c4e29d026a05", 0x45}], 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRES32=r2, @ANYBLOB="40c1b55c4cb674fc8b70c43385f8f3c9ac71086d331c7644c574a00114638387b458b3d4d88d18e2a8c966f382219171cbd1edc1ac23ad805938b95ce35f9b102ac5d441f606fd32de444618073b294d22043e6c3b7726c7e23040aac3e4ffc5f5ab6e02def1d579c6294459b8d9a9034e4765112b9e8aacd900b2eee9faa235ae97bcc87e564312be53b50db30c441b5c8fd38ed027bed722e8260261886ebac3f578670ff9d25c8385eb87b482aec6b0a5aaa7fe8150ece9c5fdd4822502156b7d"], 0x28, 0x500}}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x22, &(0x7f0000000140), 0x4) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000005c0)="b8010000000f01d948b800000000000000800f23d80f21f835000000900f23f8b91d080000b8ebdd0000ba000000000f30f3430f01df662e678068aefcc4c11d6c620b7c670f01caca64e40f30304424007d000000c74424020b3d0000ff1c24c40253f611", 0x65}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, &(0x7f0000000380), 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) 3.421271849s ago: executing program 3 (id=5074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 1.898264465s ago: executing program 3 (id=5075): socket$inet6(0xa, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e900000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000201009f6eae02000000adb20200000000152c000000000000000001020014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000002840)="3900000013000b4700bb65e1c3e4ffff0100000030000000560000022500000019000a001000000007fd17e5ffff080502000000000000000a", 0x39}], 0x1) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)={0x0, [[0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x7fff, 0x10001], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400]], '\x00', [{}, {}, {}, {0x101, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}], '\x00', 0x0, 0x0, 0x0, 0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x8f, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0x3f, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x1f, {{0x7, 0x24, 0x6, 0x0, 0x0, "a581"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfd9, 0x5f33, 0x3, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x48, 0xc9, [0x7, 0xff, 0xe78, 0x20, 0x5, 0x7]}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x1ff, 0x62, 0x4, 0x81, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x4}, @dmm={0x7, 0x24, 0x14, 0x1, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0xa7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2d, 0x18}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x250, 0x3f, 0xb2, 0x2, 0x40, 0x9}, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f3600030a1040020a001c4000800b10010204001f0901007f1c100a1f640000000f005c360000ff00ff00000000ff0000cfff0000"], 0x4, [{0x2c, &(0x7f0000000bc0)=@string={0x2c, 0x3, "1bf4b91b36fb2cc0b0d48f27f68896c03e85cd1541bc6783409da4a1071cf4a025134bfa5873cbe9dee4"}}, {0xb4, &(0x7f0000000c00)=@string={0xb4, 0x3, "130effa2e554c38fd8a6d94fb01b6347468711651a1f000f6ce62ffd6e0a8db3eaa798534e3a37d1269c0f9dc6aa99f59bff125e615b0a381610619663f719519fd90280f266b448af761d3bd8d6ea30555821a153c35ef221a67086e215a118922e291c82e8f87bccce88cc09ce97ea0321dd0392071f18f9a63456a94fb00336a86c800af4c713b0eddeacab78dcde37a760e33bb13f8835aba6e46150b806b16b419dbc3ff02ef452d199eea9e901d8b9"}}, {0xe6, &(0x7f0000000cc0)=@string={0xe6, 0x3, "93c7fac97bf5b3dc3fbfa58ff07db44a0f3d340272de96dd45dedef1bbe1d435646e123546805f7cbd880ee1f618f33e9a8f539b2655a64ccfa15f72a1f55217335826102694214c77c66e069472b10cb6eae20f9948729c64c641475ab6afa39a08a3f238e654dba3daf26997986a45e033c7b8b3e03d247b459f258ee74f037b90a0e092c2c5a6f24e0d45d1da7f3916d05577a00055c51f3262adf36c7966d7f00664577e59081422eeebf1882a3501bfb7577d0ea66644552c3a27175b63ecd1665bcb70db88007eba9ad257e8c44f5e3d6897183398ba59accd73cef6d8ae055b96"}}, {0x12, &(0x7f0000000dc0)=@string={0x12, 0x3, "f33f00b585c07743d4a30af2cade29fd"}}]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700000101c0003e4ffff03000000040801"], 0x101c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.696965503s ago: executing program 1 (id=5076): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_usb_connect(0x0, 0x2c9, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e69ba3207c2c1205d45d000000010902b7020100000000090474000affffff0009050f100004098100662366b51c849f076b5b5b25fb80f278f30bb7ef2b628f62479b817451d37db2c74fcb02b1cfadbab37943f4bcfab008f986d10a1540dee08adb9893ce9ea50231962215e018a3703a22d620b4373b14b6bf7556343d7a0470c16027a1b3f1eef9d424e4222d090508032000023f020725010103090009050d"], 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$tipc(r5, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000140)={{r1}, "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"}) 1.686212688s ago: executing program 0 (id=5077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 0s ago: executing program 0 (id=5078): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x5, 0x9fd, 0x85, 0x483}, 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x168, 0x11, 0x148, 0xd0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 000003e syscall=310 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1542.734926][T19857] Bluetooth: Frame is too long (len 10, expected len 9) [ 1542.745030][T27204] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4778'. [ 1542.772793][T27193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4773'. [ 1542.777503][ T29] audit: type=1326 audit(1720096120.598:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27203 comm="syz.4.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1542.814861][T25856] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1542.848590][ T29] audit: type=1326 audit(1720096120.598:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27203 comm="syz.4.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1542.874941][T27206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.898827][T27206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.916740][ T29] audit: type=1326 audit(1720096120.598:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27203 comm="syz.4.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1543.006434][ T29] audit: type=1326 audit(1720096120.598:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27203 comm="syz.4.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1543.047597][T25856] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1543.063228][T25856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.087881][ T29] audit: type=1326 audit(1720096120.598:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27203 comm="syz.4.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1543.123300][T25856] usb 3-1: config 0 descriptor?? [ 1543.133497][ T29] audit: type=1326 audit(1720096120.598:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27203 comm="syz.4.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1543.157652][ T29] audit: type=1326 audit(1720096120.598:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27203 comm="syz.4.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1543.485915][ T45] usb 4-1: string descriptor 0 read error: -71 [ 1543.521530][ T45] usb 4-1: USB disconnect, device number 28 [ 1544.636660][T27230] Cannot find del_set index 0 as target [ 1544.683513][T25856] usb 3-1: Cannot read MAC address [ 1544.689343][T25856] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1544.845091][T27236] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1544.880384][T27234] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1545.340864][T27250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4790'. [ 1545.636072][ T5159] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1545.831215][ T5159] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1545.853975][ T5159] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1545.886504][ T5159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1545.901886][ T5159] usb 4-1: config 1 has no interface number 0 [ 1545.922719][ T5159] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1545.936931][T15699] usb 3-1: USB disconnect, device number 19 [ 1545.953096][ T5159] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1545.998704][ T5159] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1546.027924][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.076407][ T5159] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1546.392087][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.398731][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.478958][T15699] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1546.637423][ T5159] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1546.728784][T15699] usb 2-1: Using ep0 maxpacket: 32 [ 1546.771698][T15699] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 1546.784929][T19857] Bluetooth: Frame is too long (len 10, expected len 9) [ 1546.790169][T15699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.845118][T15699] usb 2-1: config 0 has no interface number 0 [ 1546.885733][T15699] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1546.920878][T14684] usb 4-1: USB disconnect, device number 29 [ 1546.928347][T14684] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1546.941854][T15699] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1546.995696][T15699] usb 2-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1547.021917][T27277] FAULT_INJECTION: forcing a failure. [ 1547.021917][T27277] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.043989][T15699] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1547.057309][T27277] CPU: 1 PID: 27277 Comm: syz.0.4797 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1547.065688][T15699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.067512][T27277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1547.085599][T27277] Call Trace: [ 1547.088926][T27277] [ 1547.091887][T27277] dump_stack_lvl+0x241/0x360 [ 1547.096620][T27277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1547.098399][T15699] usb 2-1: config 0 descriptor?? [ 1547.101854][T27277] ? __pfx__printk+0x10/0x10 [ 1547.101896][T27277] ? __pfx___might_resched+0x10/0x10 [ 1547.101928][T27277] ? __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 1547.101964][T27277] should_fail_ex+0x3b0/0x4e0 [ 1547.102003][T27277] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 1547.102040][T27277] should_failslab+0x9/0x20 [ 1547.102073][T27277] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1547.102120][T27277] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 1547.102173][T27277] kvm_mmu_load+0x115/0x26e0 [ 1547.102226][T27277] ? pfn_valid+0xf6/0x440 [ 1547.102261][T27277] ? __pfx_kvm_mmu_load+0x10/0x10 [ 1547.102299][T27277] ? vmx_set_apic_access_page_addr+0x58a/0x7c0 [ 1547.102336][T27277] ? pfn_valid+0xf6/0x440 [ 1547.102375][T27277] ? folio_mark_accessed+0x32b/0x1ca0 [ 1547.102410][T27277] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1547.102437][T27277] ? kvm_apic_has_interrupt+0x4bc/0xa70 [ 1547.102483][T27277] vcpu_run+0x6b72/0x87f0 [ 1547.102613][T27277] ? __pfx_vcpu_run+0x10/0x10 [ 1547.102647][T27277] ? __local_bh_enable_ip+0x168/0x200 [ 1547.102672][T27277] ? lockdep_hardirqs_on+0x99/0x150 [ 1547.102708][T27277] ? __pfx_lock_acquire+0x10/0x10 [ 1547.102733][T27277] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 1547.102759][T27277] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1547.102785][T27277] ? xfd_validate_state+0x6e/0x150 [ 1547.102817][T27277] ? rcu_is_watching+0x15/0xb0 [ 1547.102853][T27277] ? rcu_is_watching+0x15/0xb0 [ 1547.102884][T27277] kvm_arch_vcpu_ioctl_run+0xa7e/0x1920 [ 1547.102915][T27277] ? mark_lock+0x9a/0x350 [ 1547.102953][T27277] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x1920 [ 1547.102982][T27277] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1547.103038][T27277] ? __pfx_lock_acquire+0x10/0x10 [ 1547.103064][T27277] ? get_task_pid+0x23/0x310 [ 1547.103101][T27277] ? __pfx_lock_release+0x10/0x10 [ 1547.103127][T27277] ? kvm_vcpu_ioctl+0x1d9/0xd00 [ 1547.103172][T27277] ? get_task_pid+0x23/0x310 [ 1547.103207][T27277] kvm_vcpu_ioctl+0x7f5/0xd00 [ 1547.103243][T27277] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1547.103284][T27277] ? __fget_files+0x29/0x470 [ 1547.103315][T27277] ? __fget_files+0x3f6/0x470 [ 1547.103342][T27277] ? __fget_files+0x29/0x470 [ 1547.103377][T27277] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1547.103403][T27277] ? security_file_ioctl+0x87/0xb0 [ 1547.103430][T27277] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1547.103458][T27277] __se_sys_ioctl+0xfc/0x170 [ 1547.103487][T27277] do_syscall_64+0xf3/0x230 [ 1547.103522][T27277] ? clear_bhb_loop+0x35/0x90 [ 1547.103549][T27277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.103584][T27277] RIP: 0033:0x7f7540b75bd9 [ 1547.103608][T27277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.103628][T27277] RSP: 002b:00007f75418b7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1547.103656][T27277] RAX: ffffffffffffffda RBX: 00007f7540d04038 RCX: 00007f7540b75bd9 [ 1547.103676][T27277] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1547.103692][T27277] RBP: 00007f75418b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1547.103708][T27277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.103724][T27277] R13: 000000000000006e R14: 00007f7540d04038 R15: 00007f7540e2fa68 [ 1547.103760][T27277] [ 1547.103916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1547.676263][T27264] tipc: Can't bind to reserved service type 0 [ 1547.706399][T15699] qmi_wwan 2-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1547.763208][T15699] usb 2-1: USB disconnect, device number 117 [ 1547.827741][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 1547.827762][ T29] audit: type=1326 audit(1720096125.748:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1547.886743][ T29] audit: type=1326 audit(1720096125.778:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1547.954935][ T29] audit: type=1326 audit(1720096125.778:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1547.998173][ T29] audit: type=1326 audit(1720096125.778:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1548.105714][ T29] audit: type=1326 audit(1720096125.778:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7540b7796c code=0x7ffc0000 [ 1548.162780][ T29] audit: type=1326 audit(1720096125.778:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1548.228613][ T29] audit: type=1326 audit(1720096125.778:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1548.294759][ T29] audit: type=1326 audit(1720096125.778:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1548.381552][ T29] audit: type=1326 audit(1720096125.788:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1548.460572][ T29] audit: type=1326 audit(1720096125.788:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.0.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1548.786072][T15699] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1549.010951][T15699] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1549.031097][T15699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.075874][T15699] usb 3-1: config 0 descriptor?? [ 1549.182849][T27318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4809'. [ 1549.228229][T27321] netlink: 'syz.0.4811': attribute type 11 has an invalid length. [ 1549.505881][ T45] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1549.730062][ T45] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1549.766227][ T45] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1549.774956][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1549.803749][ T45] usb 4-1: config 1 has no interface number 0 [ 1549.816934][ T45] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1549.857952][ T45] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1549.871707][ T45] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1549.881310][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.905563][ T45] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1550.460106][T14684] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1550.462674][ T45] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1550.496751][T27345] Cannot find del_set index 0 as target [ 1550.556058][T15699] usb 3-1: Cannot read MAC address [ 1550.588088][T15699] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1550.686890][T14684] usb 5-1: Using ep0 maxpacket: 32 [ 1550.700579][T14684] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 1550.717651][T14684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.723824][ T45] usb 4-1: USB disconnect, device number 30 [ 1550.737499][T14684] usb 5-1: config 0 has no interface number 0 [ 1550.758031][T14684] usb 5-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1550.772059][ T45] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1550.809341][T14684] usb 5-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1550.858450][T14684] usb 5-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1550.891718][T14684] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1550.902737][T14684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.938488][T14684] usb 5-1: config 0 descriptor?? [ 1551.171028][T14684] qmi_wwan 5-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1551.194555][T14684] usb 5-1: USB disconnect, device number 18 [ 1551.253177][T19857] Bluetooth: Frame is too long (len 10, expected len 9) [ 1551.784409][T27361] netlink: 'syz.3.4822': attribute type 11 has an invalid length. [ 1551.827209][T19857] Bluetooth: hci1: command tx timeout [ 1551.905188][T27366] FAULT_INJECTION: forcing a failure. [ 1551.905188][T27366] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.946028][T27366] CPU: 1 PID: 27366 Comm: syz.0.4824 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1551.955946][T15699] usb 3-1: USB disconnect, device number 20 [ 1551.956323][T27366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1551.973479][T27366] Call Trace: [ 1551.976840][T27366] [ 1551.979881][T27366] dump_stack_lvl+0x241/0x360 [ 1551.985776][T27366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1551.991726][T27366] ? __pfx__printk+0x10/0x10 [ 1551.996843][T27366] should_fail_ex+0x3b0/0x4e0 [ 1552.003666][T27366] ? nl80211_parse_connkeys+0x1c6/0xeb0 [ 1552.009879][T27366] should_failslab+0x9/0x20 [ 1552.014796][T27366] kmalloc_trace_noprof+0x6c/0x2c0 [ 1552.020563][T27366] nl80211_parse_connkeys+0x1c6/0xeb0 [ 1552.028130][T27366] ? cfg80211_chandef_valid+0xc27/0xf20 [ 1552.034122][T27366] ? _cfg80211_chandef_usable+0xc3b/0x14e0 [ 1552.043393][T27366] ? __pfx_nl80211_parse_connkeys+0x10/0x10 [ 1552.051239][T27366] ? _cfg80211_reg_can_beacon+0x6d5/0xb70 [ 1552.059225][T27366] nl80211_join_ibss+0xc3e/0x12c0 [ 1552.065131][T27366] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 1552.070966][T27366] ? __nla_parse+0x40/0x60 [ 1552.075905][T27366] genl_rcv_msg+0xb14/0xec0 [ 1552.080976][T27366] ? mark_lock+0x9a/0x350 [ 1552.086008][T27366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1552.091987][T27366] ? __pfx_lock_acquire+0x10/0x10 [ 1552.097679][T27366] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1552.104057][T27366] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 1552.110325][T27366] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1552.116465][T27366] ? __pfx___might_resched+0x10/0x10 [ 1552.122067][T27366] netlink_rcv_skb+0x1e3/0x430 [ 1552.127149][T27366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1552.133063][T27366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1552.138790][T27366] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1552.145014][T27366] genl_rcv+0x28/0x40 [ 1552.149885][T27366] netlink_unicast+0x7ea/0x980 [ 1552.154880][T27366] ? __pfx_netlink_unicast+0x10/0x10 [ 1552.160320][T27366] ? __virt_addr_valid+0x183/0x520 [ 1552.165579][T27366] ? __check_object_size+0x49c/0x900 [ 1552.170943][T27366] ? bpf_lsm_netlink_send+0x9/0x10 [ 1552.176164][T27366] netlink_sendmsg+0x8db/0xcb0 [ 1552.181065][T27366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1552.186594][T27366] ? __import_iovec+0x536/0x820 [ 1552.192882][T27366] ? aa_sock_msg_perm+0x91/0x160 [ 1552.198840][T27366] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1552.205161][T27366] ? security_socket_sendmsg+0x87/0xb0 [ 1552.211589][T27366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1552.217106][T27366] __sock_sendmsg+0x221/0x270 [ 1552.222040][T27366] ____sys_sendmsg+0x525/0x7d0 [ 1552.227168][T27366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1552.233033][T27366] __sys_sendmsg+0x2b0/0x3a0 [ 1552.238274][T27366] ? __pfx___sys_sendmsg+0x10/0x10 [ 1552.246664][T27366] ? vfs_write+0x7c4/0xc90 [ 1552.252283][T27366] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1552.259599][T27366] ? do_syscall_64+0x100/0x230 [ 1552.264489][T27366] ? do_syscall_64+0xb6/0x230 [ 1552.271202][T27366] do_syscall_64+0xf3/0x230 [ 1552.276551][T27366] ? clear_bhb_loop+0x35/0x90 [ 1552.282108][T27366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.289038][T27366] RIP: 0033:0x7f7540b75bd9 [ 1552.294115][T27366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.319649][T27366] RSP: 002b:00007f75418d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1552.329145][T27366] RAX: ffffffffffffffda RBX: 00007f7540d03f60 RCX: 00007f7540b75bd9 [ 1552.338635][T27366] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 1552.347560][T27366] RBP: 00007f75418d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1552.358147][T27366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.368156][T27366] R13: 000000000000000b R14: 00007f7540d03f60 R15: 00007f7540e2fa68 [ 1552.377598][T27366] [ 1552.381818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.025790][T25856] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1553.165158][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.179489][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.190718][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.203463][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.221712][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.236597][T25856] usb 1-1: Using ep0 maxpacket: 32 [ 1553.250640][T25856] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1553.281110][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.282106][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 1553.282126][ T29] audit: type=1326 audit(1720096131.198:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.288736][T25856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.297848][T25856] usb 1-1: config 0 descriptor?? [ 1553.317396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.340923][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.375243][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.393680][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.396623][T27389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4831'. [ 1553.401346][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.428693][ T29] audit: type=1326 audit(1720096131.248:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.457540][T25856] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1553.469610][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.485817][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.503700][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.511931][ T29] audit: type=1326 audit(1720096131.258:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.545122][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.565745][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.584605][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.596393][ T29] audit: type=1326 audit(1720096131.258:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.622590][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.634741][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.645704][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.665709][ T29] audit: type=1326 audit(1720096131.258:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.695695][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.707411][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.716414][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.724782][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.733255][ T29] audit: type=1326 audit(1720096131.258:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.746052][ T5159] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1553.765676][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.808863][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.829221][ T29] audit: type=1326 audit(1720096131.258:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.829311][ T29] audit: type=1326 audit(1720096131.258:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.829363][ T29] audit: type=1326 audit(1720096131.258:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.829412][ T29] audit: type=1326 audit(1720096131.258:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27387 comm="syz.3.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498b975bd9 code=0x7ffc0000 [ 1553.830916][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.830985][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.831018][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.831048][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.831105][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.831136][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.831168][T14684] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1553.833724][T14684] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1553.907018][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.989162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.020901][ T5159] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1554.124724][T25856] gspca_sq930x: ucbus_write failed -71 [ 1554.124820][T25856] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 1554.127440][T25856] usb 1-1: USB disconnect, device number 5 [ 1554.132600][ T5159] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1554.132633][ T5159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1554.132658][ T5159] usb 4-1: config 1 has no interface number 0 [ 1554.132706][ T5159] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1554.132739][ T5159] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1554.132789][ T5159] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1554.132817][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.195040][ T5159] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1554.462237][T27407] netlink: 'syz.2.4835': attribute type 11 has an invalid length. [ 1554.471805][T14684] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1554.484999][T27407] netlink: 'syz.2.4835': attribute type 11 has an invalid length. [ 1554.495941][T27407] debugfs: Directory 'netdev:' with parent 'phy230' already present! [ 1554.675802][T14684] usb 2-1: Using ep0 maxpacket: 32 [ 1554.695393][T14684] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 1554.717186][T14684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.734939][T14684] usb 2-1: config 0 has no interface number 0 [ 1554.755840][T14684] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1554.756738][ T5159] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1554.790169][T14684] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1554.804654][T14684] usb 2-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1554.876403][T14684] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1554.889836][T15699] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1554.917586][T14684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.936725][T14684] usb 2-1: config 0 descriptor?? [ 1555.011893][T21142] usb 4-1: USB disconnect, device number 31 [ 1555.029661][T21142] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1555.098032][T15699] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1555.107544][T15699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.119789][T15699] usb 3-1: config 0 descriptor?? [ 1555.173384][T14684] qmi_wwan 2-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1555.222368][T14684] usb 2-1: USB disconnect, device number 118 [ 1555.295894][ T5147] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1555.523062][ T5147] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1555.553990][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.579740][ T5147] usb 1-1: config 0 descriptor?? [ 1555.897996][T27429] delete_channel: no stack [ 1556.132596][T27428] delete_channel: no stack [ 1556.610672][T27436] Cannot find del_set index 0 as target [ 1556.762652][T15699] usb 3-1: Cannot read MAC address [ 1556.779540][T15699] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1556.990159][T14513] Bluetooth: Frame is too long (len 10, expected len 9) [ 1557.185825][T27448] Cannot find del_set index 0 as target [ 1557.271761][ T5147] usb 1-1: Cannot read MAC address [ 1557.289879][T27450] netlink: 'syz.1.4847': attribute type 11 has an invalid length. [ 1557.298215][ T5147] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1557.320875][T27450] netlink: 'syz.1.4847': attribute type 11 has an invalid length. [ 1557.352392][T27450] debugfs: Directory 'netdev:' with parent 'phy234' already present! [ 1558.146352][ T5147] usb 3-1: USB disconnect, device number 21 [ 1558.471455][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1558.471477][ T29] audit: type=1326 audit(1720096136.388:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.530750][T27465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4852'. [ 1558.557202][ T29] audit: type=1326 audit(1720096136.418:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.626481][ T29] audit: type=1326 audit(1720096136.418:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.626545][ T29] audit: type=1326 audit(1720096136.418:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.626597][ T29] audit: type=1326 audit(1720096136.418:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.626650][ T29] audit: type=1326 audit(1720096136.418:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.626701][ T29] audit: type=1326 audit(1720096136.428:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.626755][ T29] audit: type=1326 audit(1720096136.428:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.626807][ T29] audit: type=1326 audit(1720096136.428:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.626868][ T29] audit: type=1326 audit(1720096136.428:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.2.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20c775bd9 code=0x7ffc0000 [ 1558.705709][ T5147] usb 1-1: USB disconnect, device number 6 [ 1558.716338][T14513] Bluetooth: hci2: command 0x0406 tx timeout [ 1558.855823][T21142] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1559.025972][T15699] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1559.033192][T27478] netlink: 'syz.0.4858': attribute type 11 has an invalid length. [ 1559.035034][T25856] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1559.044698][T27478] netlink: 'syz.0.4858': attribute type 11 has an invalid length. [ 1559.058742][T27478] debugfs: Directory 'netdev:' with parent 'phy228' already present! [ 1559.127187][ T5159] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1559.179981][T21142] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1559.190163][T21142] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1559.199770][T21142] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1559.216617][T21142] usb 3-1: config 1 has no interface number 0 [ 1559.217906][T15699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1559.223138][T21142] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1559.245672][T21142] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1559.259246][T21142] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1559.265737][T25856] usb 5-1: Using ep0 maxpacket: 32 [ 1559.269506][T21142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.286680][T15699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.303312][T25856] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 1559.317325][T25856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.317396][T21142] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1559.328693][T15699] usb 4-1: config 0 descriptor?? [ 1559.335089][ T5159] usb 2-1: Using ep0 maxpacket: 16 [ 1559.344594][T25856] usb 5-1: config 0 has no interface number 0 [ 1559.357064][ T5159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.368061][ T5159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1559.385177][ T5159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1559.389333][T25856] usb 5-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1559.405178][ T5159] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1559.416810][ T5159] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1559.441454][ T5159] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1559.446076][T25856] usb 5-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1559.451904][ T5159] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1559.470957][ T5159] usb 2-1: Manufacturer: syz [ 1559.490933][ T5159] usb 2-1: config 0 descriptor?? [ 1559.502075][T25856] usb 5-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1559.549896][T25856] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1559.568767][T25856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.624414][T25856] usb 5-1: config 0 descriptor?? [ 1559.882975][T25856] qmi_wwan 5-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1559.902740][T21142] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1559.908280][T25856] usb 5-1: USB disconnect, device number 19 [ 1560.061064][T15699] ath6kl: Failed to submit usb control message: -71 [ 1560.070012][T15699] ath6kl: unable to send the bmi data to the device: -71 [ 1560.092268][T15699] ath6kl: Unable to send get target info: -71 [ 1560.119246][T15699] ath6kl: Failed to init ath6kl core: -71 [ 1560.144259][ T5151] usb 3-1: USB disconnect, device number 22 [ 1560.172773][T15699] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1560.183701][ T5151] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1560.226173][T15699] usb 4-1: USB disconnect, device number 32 [ 1560.373050][T27487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.413457][T27487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.569334][T27492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4861'. [ 1560.596548][ T5159] rc_core: IR keymap rc-hauppauge not found [ 1560.606603][ T5159] Registered IR keymap rc-empty [ 1560.611668][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1560.675872][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1560.726768][ T5159] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1560.763843][ T5159] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input131 [ 1560.828493][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1560.865940][T15699] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1560.874958][T27507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.900640][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1560.923122][T27507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.948994][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1560.959090][T27507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.995859][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1560.995909][T27507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.050183][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1561.079104][T15699] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1561.094049][T15699] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1561.107278][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1561.125916][T15699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1561.146971][T15699] usb 1-1: config 1 has no interface number 0 [ 1561.153246][T15699] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1561.166692][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1561.194777][T15699] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1561.205976][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1561.218344][T15699] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1561.238615][T15699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.272805][T15699] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1561.275949][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1561.325811][ T5159] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1561.368586][ T5159] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1561.395898][ T5159] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1561.431162][ T5159] usb 2-1: USB disconnect, device number 119 [ 1561.437580][T12266] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1561.564267][T19857] Bluetooth: Frame is too long (len 10, expected len 9) [ 1561.652291][T12266] usb 5-1: Using ep0 maxpacket: 8 [ 1561.669427][T12266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1561.679896][T12266] usb 5-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=db.d0 [ 1561.693048][T12266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.709659][T12266] usb 5-1: config 0 descriptor?? [ 1561.836279][T12266] rtsx_usb 5-1:0.0: probe with driver rtsx_usb failed with error -8 [ 1561.934197][T12266] usb 5-1: USB disconnect, device number 20 [ 1562.275948][ T5147] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1562.455908][ T5151] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1562.477009][ T5147] usb 3-1: Using ep0 maxpacket: 32 [ 1562.495726][ T5147] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 1562.514420][ T5147] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.532331][ T5147] usb 3-1: config 0 has no interface number 0 [ 1562.536913][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4874'. [ 1562.545730][ T5147] usb 3-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1562.566762][ T5147] usb 3-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1562.578877][ T5147] usb 3-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1562.592620][ T5147] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1562.602050][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.608440][T27531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4874'. [ 1562.615117][ T5147] usb 3-1: config 0 descriptor?? [ 1562.660254][T27533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4875'. [ 1562.684753][ T5151] usb 2-1: config index 0 descriptor too short (expected 1004, got 18) [ 1562.700365][ T5151] usb 2-1: config 54 has too many interfaces: 100, using maximum allowed: 32 [ 1562.730219][ T5151] usb 2-1: config 54 has an invalid descriptor of length 122, skipping remainder of the config [ 1562.748840][ T5151] usb 2-1: config 54 has 0 interfaces, different from the descriptor's value: 100 [ 1562.774567][ T5151] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1562.786019][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.874483][ T5147] qmi_wwan 3-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1562.932015][ T5147] usb 3-1: USB disconnect, device number 23 [ 1562.987377][ T5159] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1563.191890][ T5159] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1563.203109][ T5159] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1563.213726][ T5159] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1563.233864][ T5159] usb 5-1: config 1 has no interface number 0 [ 1563.243058][ T5159] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1563.263436][ T5159] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1563.285693][ T5159] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1563.305816][ T5159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.330814][ T5159] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1563.542089][T15699] snd_usb_pod 1-1:1.1: set_interface failed [ 1563.548463][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 1563.548483][ T29] audit: type=1326 audit(1720096141.468:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1563.583308][T15699] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1563.627821][T15699] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1563.645762][ T29] audit: type=1326 audit(1720096141.468:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1563.649494][ T5151] usb 2-1: string descriptor 0 read error: -71 [ 1563.668345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.715374][T15699] usb 1-1: USB disconnect, device number 7 [ 1563.762269][ T29] audit: type=1326 audit(1720096141.498:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4d23757db code=0x7ffc0000 [ 1563.769366][ T5151] usb 2-1: USB disconnect, device number 120 [ 1563.785084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.826445][T14513] Bluetooth: hci4: command 0x0406 tx timeout [ 1563.939322][ T5159] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1563.967651][ T29] audit: type=1326 audit(1720096141.888:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d23a7bc5 code=0x7ffc0000 [ 1564.025768][T21142] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1564.168121][ T29] audit: type=1326 audit(1720096142.088:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1564.204806][ T5159] usb 5-1: USB disconnect, device number 21 [ 1564.222841][ T5159] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1564.231777][T21142] usb 3-1: Using ep0 maxpacket: 16 [ 1564.242563][ T29] audit: type=1326 audit(1720096142.088:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1564.258513][T21142] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.315763][T21142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1564.336367][T21142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1564.352630][T21142] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1564.367093][T21142] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1564.411339][T21142] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1564.420903][T21142] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1564.431018][T21142] usb 3-1: Manufacturer: syz [ 1564.449040][T21142] usb 3-1: config 0 descriptor?? [ 1564.691408][T19857] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1565.092422][T27585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4890'. [ 1565.277011][T27587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.326646][T27587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.545752][T21142] rc_core: IR keymap rc-hauppauge not found [ 1565.545780][T21142] Registered IR keymap rc-empty [ 1565.545939][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.578115][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.606917][T21142] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1565.608868][T21142] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input132 [ 1565.626293][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.663141][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.685916][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.721988][ T29] audit: type=1326 audit(1720096143.628:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27598 comm="syz.4.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1565.722057][ T29] audit: type=1326 audit(1720096143.628:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27598 comm="syz.4.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1565.722314][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.726192][ T29] audit: type=1326 audit(1720096143.648:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27598 comm="syz.4.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1565.726255][ T29] audit: type=1326 audit(1720096143.648:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27598 comm="syz.4.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1565.746538][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.756264][ T5151] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1565.776486][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.788391][T27600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.797275][T27599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1565.825919][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1565.866356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.918372][T27600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.053203][T27560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.061968][ T5151] usb 2-1: Using ep0 maxpacket: 32 [ 1566.080069][ T5151] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 1566.100754][ T5151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.107818][T27560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.122246][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1566.131271][ T5151] usb 2-1: config 0 has no interface number 0 [ 1566.164292][ T5151] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1566.168291][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1566.186138][ T5147] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1566.204154][ T5151] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1566.236844][ T5151] usb 2-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1566.244062][T21142] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1566.272276][ T5151] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1566.289324][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.327254][ T5151] usb 2-1: config 0 descriptor?? [ 1566.328334][T21142] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1566.370202][T21142] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1566.389742][ T5147] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1566.400684][ T5147] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1566.436073][ T5147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1566.472608][T15699] usb 3-1: USB disconnect, device number 24 [ 1566.500230][ T5147] usb 5-1: config 1 has no interface number 0 [ 1566.508652][ T5147] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1566.553212][ T5151] qmi_wwan 2-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1566.570235][ T5147] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1566.617086][ T5147] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1566.637182][ T5151] usb 2-1: USB disconnect, device number 121 [ 1566.646704][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.699454][ T5147] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1567.532747][T27635] netlink: 'syz.2.4903': attribute type 11 has an invalid length. [ 1567.603733][T27639] netlink: 'syz.2.4903': attribute type 11 has an invalid length. [ 1567.866920][T15699] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1567.975434][ T6929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.141538][ T6929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.150192][T15699] usb 1-1: Using ep0 maxpacket: 16 [ 1568.193417][T15699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.232038][T15699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1568.249611][T15699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1568.263964][T15699] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1568.282350][T15699] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1568.324309][ T6929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.327047][T15699] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1568.353166][T15699] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1568.366800][T15699] usb 1-1: Manufacturer: syz [ 1568.440506][T15699] usb 1-1: config 0 descriptor?? [ 1568.644627][ T6929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.765743][ T5147] snd_usb_pod 5-1:1.1: set_interface failed [ 1568.772108][ T5147] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1568.892202][ T5147] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1568.926220][ T5147] usb 5-1: USB disconnect, device number 22 [ 1569.207488][ T6929] bridge_slave_1: left allmulticast mode [ 1569.238436][ T6929] bridge_slave_1: left promiscuous mode [ 1569.286121][T14513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1569.290393][T27661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.306467][T14513] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1569.322123][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.324203][T14513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1569.338283][T14513] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1569.366555][T14513] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1569.368344][T14513] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1569.415414][ T6929] bridge_slave_0: left allmulticast mode [ 1569.415451][ T6929] bridge_slave_0: left promiscuous mode [ 1569.415978][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.476053][T27661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.705930][T15699] rc_core: IR keymap rc-hauppauge not found [ 1569.705957][T15699] Registered IR keymap rc-empty [ 1569.706108][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1569.738541][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1569.767098][T15699] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1569.769104][T15699] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input133 [ 1569.786661][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1569.835278][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1569.855930][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1569.897823][T27678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.898160][T27678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.903165][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1569.926955][T27678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.927284][T27678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.933147][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1569.966150][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1570.004463][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1570.026990][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1570.072645][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1570.109115][T15699] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1570.148380][T15699] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1570.148408][T15699] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1570.634921][T15699] usb 1-1: USB disconnect, device number 8 [ 1570.916335][T14513] Bluetooth: Frame is too long (len 10, expected len 9) [ 1571.354972][ T6929] team0: Port device bond0 removed [ 1571.396260][ T6929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.426703][T14513] Bluetooth: hci0: command tx timeout [ 1571.426994][ T6929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.461268][ T6929] bond0 (unregistering): Released all slaves [ 1571.789696][T27702] netlink: 'syz.4.4918': attribute type 10 has an invalid length. [ 1571.836067][T27702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4918'. [ 1571.886870][T27702] bridge0: port 3(syz_tun) entered blocking state [ 1571.916126][T27702] bridge0: port 3(syz_tun) entered disabled state [ 1571.935893][T27702] syz_tun: entered allmulticast mode [ 1571.943283][T27702] syz_tun: entered promiscuous mode [ 1571.953390][T27702] bridge0: port 3(syz_tun) entered blocking state [ 1571.960146][T27702] bridge0: port 3(syz_tun) entered forwarding state [ 1572.046437][T27711] FAULT_INJECTION: forcing a failure. [ 1572.046437][T27711] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.121892][T27711] CPU: 0 PID: 27711 Comm: syz.2.4921 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1572.132406][T27711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1572.142914][T27711] Call Trace: [ 1572.146406][T27711] [ 1572.149386][T27711] dump_stack_lvl+0x241/0x360 [ 1572.154130][T27711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1572.159413][T27711] ? __pfx__printk+0x10/0x10 [ 1572.164081][T27711] ? __pfx___might_resched+0x10/0x10 [ 1572.169423][T27711] ? __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 1572.175574][T27711] should_fail_ex+0x3b0/0x4e0 [ 1572.180494][T27711] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 1572.186633][T27711] should_failslab+0x9/0x20 [ 1572.191199][T27711] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1572.197166][T27711] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 1572.203195][T27711] kvm_mmu_load+0x115/0x26e0 [ 1572.207855][T27711] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1572.213565][T27711] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1572.219636][T27711] ? __pfx_kvm_mmu_load+0x10/0x10 [ 1572.224749][T27711] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1572.230913][T27711] ? __asan_memset+0x23/0x50 [ 1572.235747][T27711] ? vmx_flush_tlb_guest+0x1e5/0x310 [ 1572.241101][T27711] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 1572.247013][T27711] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1572.253320][T27711] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 1572.259207][T27711] vcpu_run+0x6b72/0x87f0 [ 1572.263870][T27711] ? __pfx_vcpu_run+0x10/0x10 [ 1572.268626][T27711] ? __local_bh_enable_ip+0x168/0x200 [ 1572.274112][T27711] ? lockdep_hardirqs_on+0x99/0x150 [ 1572.280165][T27711] ? __pfx_lock_acquire+0x10/0x10 [ 1572.286039][T27711] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 1572.291498][T27711] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1572.297942][T27711] ? xfd_validate_state+0x6e/0x150 [ 1572.303424][T27711] ? rcu_is_watching+0x15/0xb0 [ 1572.308374][T27711] ? rcu_is_watching+0x15/0xb0 [ 1572.313288][T27711] kvm_arch_vcpu_ioctl_run+0xa7e/0x1920 [ 1572.319021][T27711] ? mark_lock+0x9a/0x350 [ 1572.323527][T27711] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x1920 [ 1572.329334][T27711] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1572.335668][T27711] ? __pfx_lock_acquire+0x10/0x10 [ 1572.341010][T27711] ? get_task_pid+0x23/0x310 [ 1572.345654][T27711] ? __pfx_lock_release+0x10/0x10 [ 1572.350829][T27711] ? kvm_vcpu_ioctl+0x1d9/0xd00 [ 1572.355794][T27711] ? get_task_pid+0x23/0x310 [ 1572.360547][T27711] kvm_vcpu_ioctl+0x7f5/0xd00 [ 1572.365733][T27711] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1572.371067][T27711] ? __fget_files+0x29/0x470 [ 1572.375718][T27711] ? __fget_files+0x3f6/0x470 [ 1572.380459][T27711] ? __fget_files+0x29/0x470 [ 1572.385110][T27711] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1572.390144][T27711] ? security_file_ioctl+0x87/0xb0 [ 1572.395500][T27711] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1572.401898][T27711] __se_sys_ioctl+0xfc/0x170 [ 1572.406842][T27711] do_syscall_64+0xf3/0x230 [ 1572.411513][T27711] ? clear_bhb_loop+0x35/0x90 [ 1572.416435][T27711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.422928][T27711] RIP: 0033:0x7fb20c775bd9 [ 1572.427931][T27711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.448289][T27711] RSP: 002b:00007fb20d62c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.457195][T27711] RAX: ffffffffffffffda RBX: 00007fb20c903f60 RCX: 00007fb20c775bd9 [ 1572.465325][T27711] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1572.473345][T27711] RBP: 00007fb20d62c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1572.481504][T27711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.489525][T27711] R13: 000000000000000b R14: 00007fb20c903f60 R15: 00007fb20ca2fa68 [ 1572.497721][T27711] [ 1572.682530][T27721] input: syz0 as /devices/virtual/input/input134 [ 1572.920406][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1572.921293][ T29] audit: type=1326 audit(1720096150.838:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.042375][ T29] audit: type=1326 audit(1720096150.838:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.173218][ T29] audit: type=1326 audit(1720096150.858:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.231939][ T6929] hsr_slave_0: left promiscuous mode [ 1573.257259][ T6929] hsr_slave_1: left promiscuous mode [ 1573.296852][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.320634][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.335849][ T45] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1573.359805][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.378543][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.415704][ T29] audit: type=1326 audit(1720096150.858:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.502437][ T29] audit: type=1326 audit(1720096150.858:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.525356][T19857] Bluetooth: hci0: command tx timeout [ 1573.534597][ T6929] veth1_macvtap: left promiscuous mode [ 1573.553316][ T45] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1573.561469][ T29] audit: type=1326 audit(1720096150.858:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.576005][ T6929] veth0_macvtap: left promiscuous mode [ 1573.594004][ T29] audit: type=1326 audit(1720096150.858:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.595698][ T45] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1573.619160][ T29] audit: type=1326 audit(1720096150.858:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.657691][ T6929] veth1_vlan: left promiscuous mode [ 1573.675884][ T6929] veth0_vlan: left promiscuous mode [ 1573.691352][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1573.721993][ T45] usb 2-1: config 1 has no interface number 0 [ 1573.738084][ T29] audit: type=1326 audit(1720096150.858:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.753992][ T45] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1573.776780][T15699] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1573.806116][ T29] audit: type=1326 audit(1720096150.858:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27732 comm="syz.1.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fbd75bd9 code=0x7ffc0000 [ 1573.817980][ T45] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1573.894945][ T45] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1573.921451][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.953219][ T45] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1573.990624][T15699] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1574.005650][T15699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.041542][T15699] usb 3-1: config 0 descriptor?? [ 1574.066851][T19857] Bluetooth: hci3: command 0x0406 tx timeout [ 1574.507933][ T45] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1574.733835][ T45] usb 2-1: USB disconnect, device number 122 [ 1574.760008][ T45] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1575.020031][ T6929] team0 (unregistering): Port device team_slave_1 removed [ 1575.089657][T27758] Cannot find del_set index 0 as target [ 1575.101736][ T6929] team0 (unregistering): Port device team_slave_0 removed [ 1575.102638][T15699] usb 3-1: Cannot read MAC address [ 1575.128760][T15699] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1575.594179][T14513] Bluetooth: hci0: command tx timeout [ 1576.222470][T27665] chnl_net:caif_netlink_parms(): no params data found [ 1576.371068][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1576.578815][ T5147] usb 3-1: USB disconnect, device number 25 [ 1576.740961][T27665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.774942][T27665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.790451][T27665] bridge_slave_0: entered allmulticast mode [ 1576.822031][T27665] bridge_slave_0: entered promiscuous mode [ 1576.838716][T27665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.885067][T27665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.909280][T27665] bridge_slave_1: entered allmulticast mode [ 1576.935860][T27665] bridge_slave_1: entered promiscuous mode [ 1577.211913][T27665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.249600][T27665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.364862][T14513] Bluetooth: Frame is too long (len 10, expected len 9) [ 1577.366262][T27802] [U] v3f"S/4:XTzWtlW= [ 1577.401562][T27797] input: syz0 as /devices/virtual/input/input135 [ 1577.446166][T27802] [U] J"e:" [ 1577.549894][T27665] team0: Port device team_slave_0 added [ 1577.657975][T27665] team0: Port device team_slave_1 added [ 1577.666308][T14513] Bluetooth: hci0: command tx timeout [ 1577.685139][T27802] can: request_module (can-proto-0) failed. [ 1577.994081][T27665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.014683][T27665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.081269][T27665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.254514][T27665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.275742][T27665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.344677][T27665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.591680][T27665] hsr_slave_0: entered promiscuous mode [ 1578.619328][T27665] hsr_slave_1: entered promiscuous mode [ 1578.675759][T27665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1578.704366][T27665] Cannot create hsr debugfs directory [ 1578.781130][T27831] FAULT_INJECTION: forcing a failure. [ 1578.781130][T27831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.846142][T27831] CPU: 0 PID: 27831 Comm: syz.1.4945 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1578.856411][T27831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1578.866509][T27831] Call Trace: [ 1578.869825][T27831] [ 1578.872787][T27831] dump_stack_lvl+0x241/0x360 [ 1578.877618][T27831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1578.882914][T27831] ? __pfx__printk+0x10/0x10 [ 1578.887757][T27831] should_fail_ex+0x3b0/0x4e0 [ 1578.892571][T27831] strncpy_from_user+0x36/0x2f0 [ 1578.897549][T27831] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 1578.903208][T27831] getname_flags+0xfa/0x4f0 [ 1578.907740][T27831] user_path_at_empty+0x2c/0x60 [ 1578.912633][T27831] __se_sys_mount+0x29a/0x3c0 [ 1578.917331][T27831] ? __pfx___se_sys_mount+0x10/0x10 [ 1578.922549][T27831] ? do_syscall_64+0x100/0x230 [ 1578.927378][T27831] ? __x64_sys_mount+0x20/0xc0 [ 1578.932185][T27831] do_syscall_64+0xf3/0x230 [ 1578.936723][T27831] ? clear_bhb_loop+0x35/0x90 [ 1578.941418][T27831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.947340][T27831] RIP: 0033:0x7f60fbd75bd9 [ 1578.951768][T27831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1578.971411][T27831] RSP: 002b:00007f60fcc32048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1578.979860][T27831] RAX: ffffffffffffffda RBX: 00007f60fbf03f60 RCX: 00007f60fbd75bd9 [ 1578.987860][T27831] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 1578.995844][T27831] RBP: 00007f60fcc320a0 R08: 0000000020000780 R09: 0000000000000000 [ 1579.003823][T27831] R10: 0000000002814021 R11: 0000000000000246 R12: 0000000000000001 [ 1579.011802][T27831] R13: 000000000000000b R14: 00007f60fbf03f60 R15: 00007f60fc02fa68 [ 1579.019823][T27831] [ 1579.040768][T27835] usb usb8: usbfs: process 27835 (syz.4.4946) did not claim interface 0 before use [ 1579.051262][T27835] usb usb8: selecting invalid altsetting 19 [ 1579.293800][T27841] netlink: 'syz.1.4949': attribute type 10 has an invalid length. [ 1579.302322][T27841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4949'. [ 1579.320044][T27841] bridge0: port 3(syz_tun) entered blocking state [ 1579.335192][T27841] bridge0: port 3(syz_tun) entered disabled state [ 1579.347756][T27841] syz_tun: entered allmulticast mode [ 1579.365234][T27841] syz_tun: entered promiscuous mode [ 1579.390258][T27841] bridge0: port 3(syz_tun) entered blocking state [ 1579.397030][T27841] bridge0: port 3(syz_tun) entered forwarding state [ 1579.439797][T27849] FAULT_INJECTION: forcing a failure. [ 1579.439797][T27849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1579.487249][T27849] CPU: 0 PID: 27849 Comm: syz.0.4951 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1579.497675][T27849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1579.507786][T27849] Call Trace: [ 1579.511140][T27849] [ 1579.514111][T27849] dump_stack_lvl+0x241/0x360 [ 1579.518862][T27849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1579.524150][T27849] ? __pfx__printk+0x10/0x10 [ 1579.528814][T27849] ? __pfx_lock_release+0x10/0x10 [ 1579.533924][T27849] should_fail_ex+0x3b0/0x4e0 [ 1579.538713][T27849] _copy_from_user+0x2f/0xe0 [ 1579.543368][T27849] input_event_from_user+0x1e2/0x4a0 [ 1579.548726][T27849] ? __pfx_input_event_from_user+0x10/0x10 [ 1579.554860][T27849] ? __lock_acquire+0x1346/0x1fd0 [ 1579.559946][T27849] evdev_write+0x4f2/0x7c0 [ 1579.564436][T27849] ? __pfx_evdev_write+0x10/0x10 [ 1579.569452][T27849] ? bpf_lsm_file_permission+0x9/0x10 [ 1579.574904][T27849] ? security_file_permission+0x7f/0xa0 [ 1579.580610][T27849] ? rw_verify_area+0x1d2/0x6b0 [ 1579.585513][T27849] ? __pfx_evdev_write+0x10/0x10 [ 1579.590512][T27849] vfs_write+0x2a2/0xc90 [ 1579.594813][T27849] ? __pfx_vfs_write+0x10/0x10 [ 1579.599737][T27849] ? __fget_files+0x29/0x470 [ 1579.604385][T27849] ? __fget_files+0x3f6/0x470 [ 1579.609117][T27849] ? __fget_files+0x29/0x470 [ 1579.613783][T27849] ksys_write+0x1a0/0x2c0 [ 1579.618193][T27849] ? __pfx_ksys_write+0x10/0x10 [ 1579.623163][T27849] ? do_syscall_64+0x100/0x230 [ 1579.628040][T27849] ? do_syscall_64+0xb6/0x230 [ 1579.632782][T27849] do_syscall_64+0xf3/0x230 [ 1579.637353][T27849] ? clear_bhb_loop+0x35/0x90 [ 1579.642088][T27849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.648047][T27849] RIP: 0033:0x7f7540b75bd9 [ 1579.652514][T27849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1579.672173][T27849] RSP: 002b:00007f75418d8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1579.680643][T27849] RAX: ffffffffffffffda RBX: 00007f7540d03f60 RCX: 00007f7540b75bd9 [ 1579.688666][T27849] RDX: 00000000000012d8 RSI: 0000000020000040 RDI: 0000000000000006 [ 1579.696772][T27849] RBP: 00007f75418d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1579.704834][T27849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1579.712869][T27849] R13: 000000000000000b R14: 00007f7540d03f60 R15: 00007f7540e2fa68 [ 1579.720916][T27849] [ 1580.486887][ T5147] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1580.669463][ T5147] usb 2-1: device descriptor read/64, error -71 [ 1580.777487][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1580.901283][T14513] Bluetooth: Frame is too long (len 10, expected len 9) [ 1580.976066][ T5147] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1581.031693][T27894] FAULT_INJECTION: forcing a failure. [ 1581.031693][T27894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.056578][T27894] CPU: 1 PID: 27894 Comm: syz.2.4963 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1581.066910][T27894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1581.077022][T27894] Call Trace: [ 1581.080349][T27894] [ 1581.083321][T27894] dump_stack_lvl+0x241/0x360 [ 1581.088073][T27894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1581.093344][T27894] ? __pfx__printk+0x10/0x10 [ 1581.098002][T27894] ? __pfx_lock_release+0x10/0x10 [ 1581.103264][T27894] should_fail_ex+0x3b0/0x4e0 [ 1581.108065][T27894] _copy_to_iter+0x43a/0x1960 [ 1581.112822][T27894] ? __virt_addr_valid+0x183/0x520 [ 1581.118026][T27894] ? __pfx__copy_to_iter+0x10/0x10 [ 1581.123234][T27894] ? __virt_addr_valid+0x183/0x520 [ 1581.128484][T27894] ? __virt_addr_valid+0x183/0x520 [ 1581.133653][T27894] ? __virt_addr_valid+0x44e/0x520 [ 1581.138809][T27894] ? __phys_addr_symbol+0x2f/0x70 [ 1581.143877][T27894] ? __check_object_size+0x49c/0x900 [ 1581.149225][T27894] __skb_datagram_iter+0x10f/0x870 [ 1581.154380][T27894] ? __pfx_skb_recv_datagram+0x10/0x10 [ 1581.159857][T27894] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1581.165512][T27894] skb_copy_datagram_iter+0xd1/0x250 [ 1581.170824][T27894] netlink_recvmsg+0x2d0/0x11d0 [ 1581.175706][T27894] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1581.181026][T27894] ? iovec_from_user+0x87/0x240 [ 1581.185917][T27894] ? iovec_from_user+0x87/0x240 [ 1581.190813][T27894] ? __pfx_aa_sk_perm+0x10/0x10 [ 1581.195697][T27894] ? aa_sock_msg_perm+0x91/0x160 [ 1581.200665][T27894] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1581.206027][T27894] ? security_socket_recvmsg+0x90/0xb0 [ 1581.211541][T27894] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1581.216925][T27894] sock_recvmsg+0x22f/0x280 [ 1581.221464][T27894] ____sys_recvmsg+0x1db/0x470 [ 1581.226343][T27894] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1581.231670][T27894] __sys_recvmsg+0x2f0/0x3e0 [ 1581.236380][T27894] ? __pfx___sys_recvmsg+0x10/0x10 [ 1581.241538][T27894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1581.247889][T27894] ? do_syscall_64+0x100/0x230 [ 1581.252699][T27894] ? do_syscall_64+0xb6/0x230 [ 1581.257517][T27894] do_syscall_64+0xf3/0x230 [ 1581.262065][T27894] ? clear_bhb_loop+0x35/0x90 [ 1581.266776][T27894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.272714][T27894] RIP: 0033:0x7fb20c775bd9 [ 1581.277144][T27894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1581.296882][T27894] RSP: 002b:00007fb20d62c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1581.305338][T27894] RAX: ffffffffffffffda RBX: 00007fb20c903f60 RCX: 00007fb20c775bd9 [ 1581.313353][T27894] RDX: 0000000000000000 RSI: 00000000200030c0 RDI: 0000000000000003 [ 1581.321378][T27894] RBP: 00007fb20d62c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.329373][T27894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.337383][T27894] R13: 000000000000000b R14: 00007fb20c903f60 R15: 00007fb20ca2fa68 [ 1581.345389][T27894] [ 1581.351858][ T5147] usb 2-1: device descriptor read/64, error -71 [ 1581.363610][T27665] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1581.420822][T27665] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1581.459479][T27665] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1581.476435][ T5147] usb usb2-port1: attempt power cycle [ 1581.477430][T27665] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1581.926291][ T5147] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1581.988030][T27665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.007521][ T5147] usb 2-1: device descriptor read/8, error -71 [ 1582.130361][T27665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.209559][T21142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.216869][T21142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.238359][ T5159] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1582.296734][T12266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.303932][T12266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.337878][ T5147] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1582.396662][ T5147] usb 2-1: device descriptor read/8, error -71 [ 1582.464308][ T5159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.523298][T27918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4967'. [ 1582.539626][ T5159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.547407][ T5147] usb usb2-port1: unable to enumerate USB device [ 1582.575021][ T5159] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1582.608069][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.688688][T27665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.700608][ T5159] usb 1-1: config 0 descriptor?? [ 1582.857829][T27665] veth0_vlan: entered promiscuous mode [ 1582.925156][T27665] veth1_vlan: entered promiscuous mode [ 1583.058383][T27665] veth0_macvtap: entered promiscuous mode [ 1583.113324][T27665] veth1_macvtap: entered promiscuous mode [ 1583.256298][T27665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.305788][T27665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.340810][T27665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.390928][T27665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.442118][T27665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.478540][T27665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.517458][T27665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.544877][T27665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.585136][T27665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.656247][T27665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.679100][T27665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.704525][T27665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.746105][T27665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.808764][T27665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.829840][T27665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.866423][T27665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.908530][T27665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.965441][T27665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.040781][T27665] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.069771][T27665] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.096032][T27665] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.106556][T27665] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.172799][T27948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1584.330848][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1584.330870][ T29] audit: type=1326 audit(1720096162.248:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1584.378069][ T29] audit: type=1326 audit(1720096162.248:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1584.405298][ T29] audit: type=1326 audit(1720096162.288:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1584.455165][T27955] netlink: 'syz.1.4974': attribute type 4 has an invalid length. [ 1584.494339][ T29] audit: type=1326 audit(1720096162.288:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1584.562112][ T29] audit: type=1326 audit(1720096162.288:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1584.625872][ T5147] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1584.838435][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.962184][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1584.981670][ T5147] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1585.012160][ T6927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.022378][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.071650][ T6927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.071829][ T5147] usb 5-1: config 0 descriptor?? [ 1585.196004][ T5159] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1585.214226][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.272145][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.326173][ T5147] usbhid 5-1:0.0: can't add hid device: -71 [ 1585.351926][ T5147] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1585.409075][ T5147] usb 5-1: USB disconnect, device number 23 [ 1585.421014][ T5159] usb 2-1: Using ep0 maxpacket: 16 [ 1585.454817][ T5159] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1585.515818][ T5159] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1585.525524][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1585.539929][ T5159] usb 2-1: SerialNumber: syz [ 1585.577357][ T5159] cdc_acm 2-1:1.0: skipping garbage [ 1585.593595][ T5159] cdc_acm 2-1:1.0: invalid descriptor buffer length [ 1585.614195][T15699] usb 1-1: USB disconnect, device number 9 [ 1585.618375][ T5159] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1585.641886][ T5159] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1585.680417][ T5159] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1586.400394][T21142] usb 2-1: USB disconnect, device number 127 [ 1586.975817][T21142] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1587.178702][T21142] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 1587.195862][T21142] usb 3-1: config 0 has no interface number 0 [ 1587.205644][T21142] usb 3-1: New USB device found, idVendor=2040, idProduct=7201, bcdDevice=1f.2f [ 1587.215057][T21142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.249823][T21142] usb 3-1: config 0 descriptor?? [ 1587.514094][T21142] usb 3-1: USB disconnect, device number 26 [ 1587.817131][ T5159] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1588.038086][ T5159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.091074][ T5159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.134071][ T5159] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1588.174413][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.231139][ T5159] usb 1-1: config 0 descriptor?? [ 1588.676181][T28047] batadv0: mtu less than device minimum [ 1589.586050][ T5147] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1589.750814][T28070] netlink: 'syz.3.4995': attribute type 4 has an invalid length. [ 1589.804558][ T5147] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 1 [ 1589.841748][ T5147] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1589.916655][ T5147] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1589.947376][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.967462][ T5147] usb 2-1: Product: syz [ 1589.973220][ T5147] usb 2-1: Manufacturer: syz [ 1589.982470][ T5147] usb 2-1: SerialNumber: syz [ 1590.003557][ T5147] usb 2-1: config 0 descriptor?? [ 1590.063884][ T5147] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1590.138414][ T5147] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1590.284203][ T29] audit: type=1326 audit(1720096168.158:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28020 comm="syz.0.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1590.384100][ T29] audit: type=1326 audit(1720096168.158:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28020 comm="syz.0.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1590.543819][T28086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4997'. [ 1590.555839][ T29] audit: type=1326 audit(1720096168.408:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28020 comm="syz.0.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1590.652877][ T29] audit: type=1326 audit(1720096168.448:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28020 comm="syz.0.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1590.769384][ T29] audit: type=1326 audit(1720096168.608:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28020 comm="syz.0.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540b75bd9 code=0x7ffc0000 [ 1591.182123][ T29] audit: type=1326 audit(1720096169.098:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1591.184031][T28102] FAULT_INJECTION: forcing a failure. [ 1591.184031][T28102] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.259420][T28101] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1591.311419][T28106] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1591.315824][ T29] audit: type=1326 audit(1720096169.098:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1591.341610][T28102] CPU: 0 PID: 28102 Comm: syz.4.5001 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1591.354329][T28102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1591.364436][T28102] Call Trace: [ 1591.367786][T28102] [ 1591.370763][T28102] dump_stack_lvl+0x241/0x360 [ 1591.375580][T28102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1591.380847][T28102] ? __pfx__printk+0x10/0x10 [ 1591.385508][T28102] should_fail_ex+0x3b0/0x4e0 [ 1591.390268][T28102] ? __alloc_skb+0x1c3/0x440 [ 1591.394916][T28102] should_failslab+0x9/0x20 [ 1591.399489][T28102] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1591.405374][T28102] __alloc_skb+0x1c3/0x440 [ 1591.409857][T28102] ? __pfx___alloc_skb+0x10/0x10 [ 1591.414945][T28102] ? rcu_is_watching+0x15/0xb0 [ 1591.416015][ T29] audit: type=1326 audit(1720096169.098:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1591.419823][T28102] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1591.419862][T28102] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 1591.419903][T28102] audit_log_start+0x186/0xa30 [ 1591.458320][T28102] ? __pfx_audit_log_start+0x10/0x10 [ 1591.463752][T28102] ? migrate_enable+0x3b5/0x520 [ 1591.468720][T28102] ? __pfx_migrate_enable+0x10/0x10 [ 1591.473978][T28102] ? __pfx___cant_migrate+0x10/0x10 [ 1591.479252][T28102] audit_seccomp+0x63/0x1f0 [ 1591.483825][T28102] ? migrate_disable+0xce/0x180 [ 1591.488737][T28102] __seccomp_filter+0xb38/0x1fe0 [ 1591.493835][T28102] ? __might_fault+0xaa/0x120 [ 1591.498585][T28102] ? __pfx_lock_release+0x10/0x10 [ 1591.503676][T28102] ? __pfx___seccomp_filter+0x10/0x10 [ 1591.509141][T28102] ? __might_fault+0xaa/0x120 [ 1591.513881][T28102] ? rcu_is_watching+0x15/0xb0 [ 1591.518707][T28102] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 1591.524861][T28102] ? __secure_computing+0x125/0x370 [ 1591.529538][ T29] audit: type=1326 audit(1720096169.098:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1591.530099][T28102] syscall_trace_enter+0xa8/0x150 [ 1591.557597][T28102] do_syscall_64+0xcc/0x230 [ 1591.562242][T28102] ? clear_bhb_loop+0x35/0x90 [ 1591.566993][T28102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.572955][T28102] RIP: 0033:0x7fd4d2375bd9 [ 1591.577439][T28102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.585579][ T29] audit: type=1326 audit(1720096169.098:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d2375bd9 code=0x7ffc0000 [ 1591.597240][T28102] RSP: 002b:00007fd4d3158048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1591.597280][T28102] RAX: ffffffffffffffda RBX: 00007fd4d2503f60 RCX: 00007fd4d2375bd9 [ 1591.597299][T28102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1591.597313][T28102] RBP: 00007fd4d31580a0 R08: 0000000000000000 R09: 0000000000000000 [ 1591.597328][T28102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.597342][T28102] R13: 000000000000000b R14: 00007fd4d2503f60 R15: 00007fd4d262fa68 [ 1591.597376][T28102] [ 1591.900238][T12266] usb 1-1: USB disconnect, device number 10 [ 1593.488360][ T5151] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1593.707180][ T5151] usb 4-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 1593.754802][ T5151] usb 4-1: too many endpoints for config 0 interface 0 altsetting 236: 102, using maximum allowed: 30 [ 1593.790641][ T5151] usb 4-1: config 0 interface 0 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 1593.821844][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1593.830852][ T5151] usb 4-1: New USB device found, idVendor=19d2, idProduct=1164, bcdDevice=69.6c [ 1593.859581][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.892203][ T5151] usb 4-1: config 0 descriptor?? [ 1594.328444][T12266] usb 2-1: USB disconnect, device number 2 [ 1594.455980][T25856] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1594.584821][T28170] fuse: Unknown parameter '' [ 1594.685765][T25856] usb 3-1: Using ep0 maxpacket: 16 [ 1594.704097][ T5151] usb 4-1: string descriptor 0 read error: -71 [ 1594.715075][T25856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.744409][T25856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1594.756930][ T5151] usb 4-1: USB disconnect, device number 33 [ 1594.790408][T25856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1594.810850][T25856] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1594.833623][T25856] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1594.880684][T25856] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1594.917248][T25856] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1594.954229][T25856] usb 3-1: Manufacturer: syz [ 1594.971811][T25856] usb 3-1: config 0 descriptor?? [ 1595.422347][T28198] FAULT_INJECTION: forcing a failure. [ 1595.422347][T28198] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.450322][T28198] CPU: 1 PID: 28198 Comm: syz.0.5024 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1595.460576][T28198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1595.471468][T28198] Call Trace: [ 1595.474790][T28198] [ 1595.477757][T28198] dump_stack_lvl+0x241/0x360 [ 1595.482681][T28198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1595.487962][T28198] ? __pfx__printk+0x10/0x10 [ 1595.492858][T28198] ? netlink_insert+0x10b7/0x14b0 [ 1595.498407][T28198] should_fail_ex+0x3b0/0x4e0 [ 1595.503260][T28198] ? __alloc_skb+0x1c3/0x440 [ 1595.507910][T28198] should_failslab+0x9/0x20 [ 1595.512471][T28198] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1595.518361][T28198] __alloc_skb+0x1c3/0x440 [ 1595.523399][T28198] ? __pfx___alloc_skb+0x10/0x10 [ 1595.528386][T28198] ? netlink_autobind+0xd6/0x2f0 [ 1595.533573][T28198] ? netlink_autobind+0x2b0/0x2f0 [ 1595.539016][T28198] netlink_sendmsg+0x631/0xcb0 [ 1595.543908][T28198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1595.549685][T28198] ? __import_iovec+0x536/0x820 [ 1595.554685][T28198] ? aa_sock_msg_perm+0x91/0x160 [ 1595.559692][T28198] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1595.565037][T28198] ? security_socket_sendmsg+0x87/0xb0 [ 1595.570667][T28198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1595.575983][T28198] __sock_sendmsg+0x221/0x270 [ 1595.580774][T28198] ____sys_sendmsg+0x525/0x7d0 [ 1595.585582][T28198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1595.590987][T28198] __sys_sendmsg+0x2b0/0x3a0 [ 1595.595922][T28198] ? __pfx___sys_sendmsg+0x10/0x10 [ 1595.601236][T28198] ? vfs_write+0x7c4/0xc90 [ 1595.606144][T28198] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1595.612768][T28198] ? do_syscall_64+0x100/0x230 [ 1595.617684][T28198] ? do_syscall_64+0xb6/0x230 [ 1595.622569][T28198] do_syscall_64+0xf3/0x230 [ 1595.627232][T28198] ? clear_bhb_loop+0x35/0x90 [ 1595.632048][T28198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.638609][T28198] RIP: 0033:0x7f7540b75bd9 [ 1595.643596][T28198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1595.667870][T28198] RSP: 002b:00007f75418d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.676574][T28198] RAX: ffffffffffffffda RBX: 00007f7540d03f60 RCX: 00007f7540b75bd9 [ 1595.685273][T28198] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1595.693954][T28198] RBP: 00007f75418d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1595.702838][T28198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.711002][T28198] R13: 000000000000000b R14: 00007f7540d03f60 R15: 00007f7540e2fa68 [ 1595.720015][T28198] [ 1595.723315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.907269][T28206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.932105][T28206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.215843][T25856] rc_core: IR keymap rc-hauppauge not found [ 1596.221885][T25856] Registered IR keymap rc-empty [ 1596.274523][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.308820][T21142] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1596.328799][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.387025][T25856] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1596.445161][T25856] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input136 [ 1596.515728][T21142] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 1 [ 1596.517216][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.568405][T21142] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1596.591556][T28222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.605848][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.628861][T21142] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1596.644296][T28222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.654437][T21142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.664087][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.695664][T21142] usb 1-1: Product: syz [ 1596.716893][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.730240][T21142] usb 1-1: Manufacturer: syz [ 1596.735051][T21142] usb 1-1: SerialNumber: syz [ 1596.740219][T28222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.772768][T21142] usb 1-1: config 0 descriptor?? [ 1596.790398][T28222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.800864][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.822236][T21142] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1596.856354][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.876086][T21142] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1596.925882][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1596.981198][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1597.050516][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1597.095860][T25856] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1597.147783][T25856] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1597.175706][T25856] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1597.227605][T25856] usb 3-1: USB disconnect, device number 27 [ 1598.653788][T28261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5038'. [ 1598.845927][T28269] FAULT_INJECTION: forcing a failure. [ 1598.845927][T28269] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.881569][T28269] CPU: 0 PID: 28269 Comm: syz.2.5041 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1598.892069][T28269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1598.902171][T28269] Call Trace: [ 1598.905492][T28269] [ 1598.908475][T28269] dump_stack_lvl+0x241/0x360 [ 1598.913203][T28269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1598.918449][T28269] ? __pfx__printk+0x10/0x10 [ 1598.923074][T28269] ? rcu_is_watching+0x15/0xb0 [ 1598.927956][T28269] ? trace_kmalloc+0x1f/0xd0 [ 1598.932573][T28269] ? kvmalloc_node_noprof+0x72/0x190 [ 1598.937893][T28269] should_fail_ex+0x3b0/0x4e0 [ 1598.942599][T28269] should_failslab+0x9/0x20 [ 1598.947130][T28269] kmalloc_node_trace_noprof+0x74/0x300 [ 1598.952877][T28269] ? sbitmap_queue_init_node+0x1ca/0x4c0 [ 1598.958618][T28269] sbitmap_queue_init_node+0x1ca/0x4c0 [ 1598.964188][T28269] blk_mq_init_tags+0x109/0x270 [ 1598.969532][T28269] blk_mq_alloc_map_and_rqs+0xc5/0x970 [ 1598.975147][T28269] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1598.981522][T28269] blk_mq_alloc_set_map_and_rqs+0x19c/0x830 [ 1598.987500][T28269] blk_mq_alloc_tag_set+0x7b4/0xf40 [ 1598.992738][T28269] loop_add+0x40e/0xba0 [ 1598.997116][T28269] ? __pfx_loop_add+0x10/0x10 [ 1599.001849][T28269] loop_control_ioctl+0x11c/0x780 [ 1599.006898][T28269] ? __fget_files+0x29/0x470 [ 1599.011510][T28269] ? __fget_files+0x3f6/0x470 [ 1599.016322][T28269] ? __fget_files+0x29/0x470 [ 1599.020979][T28269] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1599.026663][T28269] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1599.031632][T28269] ? security_file_ioctl+0x87/0xb0 [ 1599.036770][T28269] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1599.042348][T28269] __se_sys_ioctl+0xfc/0x170 [ 1599.046985][T28269] do_syscall_64+0xf3/0x230 [ 1599.051515][T28269] ? clear_bhb_loop+0x35/0x90 [ 1599.056209][T28269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.062300][T28269] RIP: 0033:0x7fb20c775bd9 [ 1599.066912][T28269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.087590][T28269] RSP: 002b:00007fb20d62c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.096587][T28269] RAX: ffffffffffffffda RBX: 00007fb20c903f60 RCX: 00007fb20c775bd9 [ 1599.104593][T28269] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 0000000000000003 [ 1599.112609][T28269] RBP: 00007fb20d62c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1599.120699][T28269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1599.131367][T28269] R13: 000000000000000b R14: 00007fb20c903f60 R15: 00007fb20ca2fa68 [ 1599.140401][T28269] [ 1599.143672][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.168267][T28269] blk-mq: reduced tag depth (128 -> 64) [ 1599.401760][T28275] x_tables: duplicate underflow at hook 3 [ 1599.655810][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1599.708089][T12266] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1599.858149][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.888865][T26878] bridge0: port 3(syz_tun) entered disabled state [ 1599.896115][ T45] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1599.915911][T12266] usb 2-1: Using ep0 maxpacket: 8 [ 1599.935350][T12266] usb 2-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 1599.964600][T12266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.974914][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1599.984659][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.995847][T12266] usb 2-1: Product: syz [ 1600.000176][T12266] usb 2-1: Manufacturer: syz [ 1600.004830][T12266] usb 2-1: SerialNumber: syz [ 1600.018200][T26878] syz_tun (unregistering): left allmulticast mode [ 1600.024723][T26878] syz_tun (unregistering): left promiscuous mode [ 1600.030282][ T5147] usb 1-1: USB disconnect, device number 11 [ 1600.031302][ T45] usb 3-1: Product: syz [ 1600.047369][ T45] usb 3-1: Manufacturer: syz [ 1600.053285][ T45] usb 3-1: SerialNumber: syz [ 1600.059583][T12266] usb 2-1: config 0 descriptor?? [ 1600.069953][T26878] bridge0: port 3(syz_tun) entered disabled state [ 1600.082052][T12266] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1600.112367][T12266] usb-storage 2-1:0.0: Quirks match for vid 0781 pid 0001: 1 [ 1600.125015][T12266] usb-storage 2-1:0.0: This device (0781,0001,0200 S 06 P a4) has an unneeded SubClass entry in unusual_devs.h (kernel 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc) [ 1600.125015][T12266] Please send a copy of this message to and [ 1600.326795][T12266] usb 2-1: USB disconnect, device number 3 [ 1600.345009][T28273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1600.476734][ T6927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.714089][ T6927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.891137][ T6927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.995118][T28273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1601.059515][ T6927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.207359][ T45] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1601.207392][ T45] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1601.207415][ T45] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1601.243762][T19857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1601.265020][T19857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1601.293287][T19857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1601.302186][T19857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1601.308884][T12266] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1601.321772][T19857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1601.332823][T19857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1601.412807][ T45] cdc_ncm 3-1:1.0: setting tx_max = 28 [ 1601.455404][ T6927] bridge_slave_1: left allmulticast mode [ 1601.455437][ T6927] bridge_slave_1: left promiscuous mode [ 1601.455939][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.469196][ T45] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1601.471819][ T6927] bridge_slave_0: left allmulticast mode [ 1601.471849][ T6927] bridge_slave_0: left promiscuous mode [ 1601.472083][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.486267][ T45] usb 3-1: USB disconnect, device number 28 [ 1601.497398][T12266] usb 1-1: Using ep0 maxpacket: 32 [ 1601.501485][ T45] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1601.516321][T12266] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 1601.516357][T12266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.516381][T12266] usb 1-1: config 0 has no interface number 0 [ 1601.516427][T12266] usb 1-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1601.516460][T12266] usb 1-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1601.516486][T12266] usb 1-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1601.516534][T12266] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1601.516562][T12266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.532270][T12266] usb 1-1: config 0 descriptor?? [ 1601.577840][T25856] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1601.769223][T12266] qmi_wwan 1-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1601.814574][T12266] usb 1-1: USB disconnect, device number 12 [ 1601.987787][T25856] usb 2-1: Using ep0 maxpacket: 32 [ 1602.024002][T25856] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 1602.033529][T25856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.051715][T25856] usb 2-1: config 0 has no interface number 0 [ 1602.065713][T25856] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1602.105993][T25856] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1602.125999][T25856] usb 2-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1602.171645][T25856] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1602.183581][T25856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.195270][T28302] FAULT_INJECTION: forcing a failure. [ 1602.195270][T28302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.215418][T25856] usb 2-1: config 0 descriptor?? [ 1602.221004][T28302] CPU: 0 PID: 28302 Comm: syz.2.5053 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1602.231661][T28302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1602.241772][T28302] Call Trace: [ 1602.245173][T28302] [ 1602.248127][T28302] dump_stack_lvl+0x241/0x360 [ 1602.252919][T28302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1602.258165][T28302] ? __pfx__printk+0x10/0x10 [ 1602.262808][T28302] ? __pfx_lock_release+0x10/0x10 [ 1602.267880][T28302] should_fail_ex+0x3b0/0x4e0 [ 1602.273030][T28302] _copy_from_iter+0x1f6/0x1960 [ 1602.277937][T28302] ? __virt_addr_valid+0x183/0x520 [ 1602.283095][T28302] ? __pfx_lock_release+0x10/0x10 [ 1602.288242][T28302] ? __alloc_skb+0x28f/0x440 [ 1602.292877][T28302] ? __pfx__copy_from_iter+0x10/0x10 [ 1602.298263][T28302] ? __virt_addr_valid+0x183/0x520 [ 1602.303527][T28302] ? __virt_addr_valid+0x183/0x520 [ 1602.308666][T28302] ? __virt_addr_valid+0x44e/0x520 [ 1602.313865][T28302] ? __check_object_size+0x49c/0x900 [ 1602.319222][T28302] netlink_sendmsg+0x743/0xcb0 [ 1602.324051][T28302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.329369][T28302] ? __import_iovec+0x536/0x820 [ 1602.334355][T28302] ? aa_sock_msg_perm+0x91/0x160 [ 1602.339369][T28302] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1602.344743][T28302] ? security_socket_sendmsg+0x87/0xb0 [ 1602.350290][T28302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.355642][T28302] __sock_sendmsg+0x221/0x270 [ 1602.360481][T28302] ____sys_sendmsg+0x525/0x7d0 [ 1602.365324][T28302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1602.370784][T28302] __sys_sendmmsg+0x3b2/0x740 [ 1602.375882][T28302] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1602.381189][T28302] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1602.387249][T28302] ? ksys_write+0x23e/0x2c0 [ 1602.391824][T28302] ? __pfx_lock_release+0x10/0x10 [ 1602.397013][T28302] ? vfs_write+0x7c4/0xc90 [ 1602.401746][T28302] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1602.407485][T28302] ? __pfx_vfs_write+0x10/0x10 [ 1602.412354][T28302] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1602.418490][T28302] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1602.424868][T28302] ? do_syscall_64+0x100/0x230 [ 1602.429684][T28302] __x64_sys_sendmmsg+0xa0/0xb0 [ 1602.434589][T28302] do_syscall_64+0xf3/0x230 [ 1602.439136][T28302] ? clear_bhb_loop+0x35/0x90 [ 1602.444355][T28302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.450325][T28302] RIP: 0033:0x7fb20c775bd9 [ 1602.454972][T28302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.474958][T28302] RSP: 002b:00007fb20d62c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1602.483407][T28302] RAX: ffffffffffffffda RBX: 00007fb20c903f60 RCX: 00007fb20c775bd9 [ 1602.491590][T28302] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000004 [ 1602.499690][T28302] RBP: 00007fb20d62c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1602.507711][T28302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.515751][T28302] R13: 000000000000000b R14: 00007fb20c903f60 R15: 00007fb20ca2fa68 [ 1602.523873][T28302] [ 1602.527160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.716542][T12257] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1602.834399][T25856] qmi_wwan 2-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1602.878487][T12257] usb 1-1: device descriptor read/64, error -71 [ 1602.886706][T25856] usb 2-1: USB disconnect, device number 4 [ 1602.924003][ T6927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.966850][ T6927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.994539][ T6927] bond0 (unregistering): Released all slaves [ 1603.145729][T12257] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1603.335951][T12257] usb 1-1: device descriptor read/64, error -71 [ 1603.437963][T14513] Bluetooth: hci1: command tx timeout [ 1603.486073][T12257] usb usb1-port1: attempt power cycle [ 1603.924188][T28322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.955281][T28322] team0: Port device bond0 added [ 1603.965919][T12257] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1604.027364][T12257] usb 1-1: device descriptor read/8, error -71 [ 1604.158676][ T6927] hsr_slave_0: left promiscuous mode [ 1604.194918][ T6927] hsr_slave_1: left promiscuous mode [ 1604.296747][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1604.298510][T12257] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1604.335925][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.376084][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.384006][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.396197][T12257] usb 1-1: device descriptor read/8, error -71 [ 1604.470847][ T6927] veth1_macvtap: left promiscuous mode [ 1604.497664][ T6927] veth0_macvtap: left promiscuous mode [ 1604.503422][ T6927] veth1_vlan: left promiscuous mode [ 1604.528146][T12257] usb usb1-port1: unable to enumerate USB device [ 1604.553946][ T6927] veth0_vlan: left promiscuous mode [ 1605.377258][ C0] vkms_vblank_simulate: vblank timer overrun [ 1605.520314][T14513] Bluetooth: hci1: command tx timeout [ 1606.079558][ T6927] team0 (unregistering): Port device team_slave_1 removed [ 1606.182591][ T6927] team0 (unregistering): Port device team_slave_0 removed [ 1606.405763][T12266] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1606.598903][T12266] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 1606.607254][T12266] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1606.624927][T12266] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1606.640077][T12266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.653718][T12266] usb 2-1: config 0 has no interface number 0 [ 1606.660240][T12266] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ef.0f [ 1606.670144][T12266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.687538][T12266] usb 2-1: config 0 descriptor?? [ 1606.699278][T12266] cypress_m8 2-1:0.46: HID->COM RS232 Adapter converter detected [ 1606.735491][T12266] cyphidcom ttyUSB0: required endpoint is missing [ 1607.595723][T14513] Bluetooth: hci1: command tx timeout [ 1607.829501][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.836287][T28294] chnl_net:caif_netlink_parms(): no params data found [ 1607.837085][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.634338][T28294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.665959][T28294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.673310][T28294] bridge_slave_0: entered allmulticast mode [ 1608.711894][T28294] bridge_slave_0: entered promiscuous mode [ 1608.781871][T28294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.817805][T28294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.872098][T28294] bridge_slave_1: entered allmulticast mode [ 1608.898609][T28294] bridge_slave_1: entered promiscuous mode [ 1609.145194][T28294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.206907][T28294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.286963][T19857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1609.306657][T19857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1609.326765][T19857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1609.339853][T19857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1609.356150][T19857] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1609.370182][T19857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1609.667307][T19857] Bluetooth: hci1: command tx timeout [ 1609.814515][ T6927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.340268][ T6927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.373674][T28294] team0: Port device team_slave_0 added [ 1610.404125][T28294] team0: Port device team_slave_1 added [ 1610.561822][ T6927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.880523][ T6927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.954734][T28294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.001571][T28294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.110914][T28294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.140495][T28294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.153462][T28294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.238638][T28294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.435924][T19857] Bluetooth: hci4: command tx timeout [ 1611.657183][T28294] hsr_slave_0: entered promiscuous mode [ 1611.702327][T28294] hsr_slave_1: entered promiscuous mode [ 1611.720912][T28294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1611.743730][T28294] Cannot create hsr debugfs directory [ 1611.904157][ T5151] usb 2-1: USB disconnect, device number 5 [ 1611.952689][ T5151] cypress_m8 2-1:0.46: device disconnected [ 1612.122889][T28431] netlink: 'syz.3.5075': attribute type 10 has an invalid length. [ 1612.164488][T28431] team0: Device hsr_slave_1 failed to register rx_handler [ 1612.271883][T28397] chnl_net:caif_netlink_parms(): no params data found [ 1612.283865][ T6927] bridge_slave_1: left allmulticast mode [ 1612.293900][ T6927] bridge_slave_1: left promiscuous mode [ 1612.300655][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.317440][ T6927] bridge_slave_0: left allmulticast mode [ 1612.323276][ T6927] bridge_slave_0: left promiscuous mode [ 1612.331152][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.375903][ T5147] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1612.419577][ T5151] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1612.592604][ T5147] usb 4-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1612.603568][ T5147] usb 4-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1612.614565][ T5147] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.630027][ T5151] usb 2-1: Using ep0 maxpacket: 32 [ 1612.638335][ T5147] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1612.647165][ T5151] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 1612.655491][ T5151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.668730][ T5151] usb 2-1: config 0 has no interface number 0 [ 1612.675169][ T5147] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1612.684560][ T5147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.692797][ T5151] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1612.706627][ T5147] usb 4-1: Product: 잓짺뼿辥緰䪴㴏ȴ㗔湤㔒聆籟袽᣶㻳辚魓唦䲦ꇏ牟ᝒ堳ဦ鐦䰡왷ٮ犔ಱ࿢䢙鱲왤䝁뙚ꎯ࢚槲颗䕪㏠룇␽䕻▟͏遻슒ꛅ仲䔍㥿퀖睕 압㈟굢泳晹搆繗࡙∔裱㔪뼁垷๽暦啄㨬ᜧ捛퇬学烋裛縀骺埒쓨幏栽ᢗ頳妺춬칳֮陛 [ 1612.737775][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.745509][ T5151] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1612.755473][ T5151] usb 2-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1612.770815][ T5147] usb 4-1: Manufacturer: ณꋿ哥迃ꛘ俙᮰䝣蝆攑Ἒༀﴯ੮뎍꟪厘㩎턷鰦鴏꫆ﾛ帒孡㠊ဖ陡儙耂曲䢴皯㬝훘リ塕ꄡ썓꘡虰ᗢᢡ⺒ᰩ篸컌첈츉℃ϝޒ᠟꛹嘴侩ΰ꠶聬Ꮗ곞碫ꜷ넻蠿ꬵ偡ڸ殱鵁㾼⻰勴駑ꧮǩ맘 [ 1612.797580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.804598][ T5151] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 1612.825367][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.836622][ T5151] usb 2-1: config 0 descriptor?? [ 1612.844670][ T5147] usb 4-1: SerialNumber: 㿳딀삅䍷ꏔﴩ [ 1612.857993][T28433] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1612.865433][T28433] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1613.093229][ T5151] qmi_wwan 2-1:0.116: probe with driver qmi_wwan failed with error -22 [ 1613.139824][ T5151] usb 2-1: USB disconnect, device number 6 [ 1613.183281][T28427] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.5075'. [ 1613.200384][ T6927] team0: Port device bond0 removed [ 1613.208352][T28427] netlink: zone id is out of range [ 1613.213611][T28427] netlink: zone id is out of range [ 1613.223373][ T6927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1613.230568][T28427] netlink: zone id is out of range [ 1613.237919][T28427] netlink: get zone limit has 8 unknown bytes [ 1613.254058][ T6927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1613.266818][ T5147] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1613.281391][ T6927] bond0 (unregistering): Released all slaves [ 1613.297302][ T5147] usb 4-1: USB disconnect, device number 34 [ 1613.511082][T19857] Bluetooth: hci4: command tx timeout [ 1613.832312][T25594] ------------[ cut here ]------------ [ 1613.839395][T25594] ida_free called for id=8192 which is not allocated. [ 1613.856456][T25594] WARNING: CPU: 1 PID: 25594 at lib/idr.c:525 ida_free+0x370/0x420 [ 1613.864989][T25594] Modules linked in: [ 1613.869525][T25594] CPU: 1 PID: 25594 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1613.880109][T25594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1613.890322][T25594] RIP: 0010:ida_free+0x370/0x420 [ 1613.895307][T25594] Code: 10 42 80 3c 28 00 74 05 e8 8d bd 82 f6 48 8b 7c 24 40 4c 89 fe e8 40 a5 17 00 90 48 c7 c7 60 33 ec 8c 89 de e8 51 36 df f5 90 <0f> 0b 90 90 eb 3d e8 05 08 1d f6 49 bd 00 00 00 00 00 fc ff df 4d [ 1613.915046][T25594] RSP: 0018:ffffc90004727940 EFLAGS: 00010246 [ 1613.921308][T25594] RAX: 7fcd44533e2b5e00 RBX: 0000000000002000 RCX: ffff888027998000 [ 1613.929496][T25594] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1613.937649][T25594] RBP: ffffc90004727a30 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 1613.945767][T25594] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc90004727980 [ 1613.953776][T25594] R13: dffffc0000000000 R14: ffff88806cb240a0 R15: 0000000000000246 [ 1613.961925][T25594] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 1613.971463][T25594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1613.978688][T25594] CR2: 0000001b33ef8ff8 CR3: 00000000172a6000 CR4: 00000000003506f0 [ 1613.987107][T25594] Call Trace: [ 1613.990447][T25594] [ 1613.993418][T25594] ? __warn+0x163/0x4e0 [ 1613.997779][T25594] ? ida_free+0x370/0x420 [ 1614.002171][T25594] ? report_bug+0x2b3/0x500 [ 1614.006861][T25594] ? ida_free+0x370/0x420 [ 1614.011265][T25594] ? handle_bug+0x3e/0x70 [ 1614.015739][T25594] ? exc_invalid_op+0x1a/0x50 [ 1614.020463][T25594] ? asm_exc_invalid_op+0x1a/0x20 [ 1614.025641][T25594] ? __warn_printk+0x292/0x360 [ 1614.030580][T25594] ? ida_free+0x370/0x420 [ 1614.034963][T25594] ? __pfx_ida_free+0x10/0x10 [ 1614.039806][T25594] ? synchronize_rcu+0x11b/0x360 [ 1614.044794][T25594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1614.050901][T25594] hci_conn_del+0x746/0xc40 [ 1614.055449][T25594] hci_conn_hash_flush+0x18e/0x240 [ 1614.060722][T25594] hci_dev_close_sync+0x911/0xf60 [ 1614.066172][T25594] hci_unregister_dev+0x1db/0x4e0 [ 1614.071821][T25594] vhci_release+0x83/0xd0 [ 1614.076765][T25594] ? __pfx_vhci_release+0x10/0x10 [ 1614.081864][T25594] __fput+0x24a/0x8a0 [ 1614.086169][T25594] task_work_run+0x24f/0x310 [ 1614.090808][T25594] ? __pfx_task_work_run+0x10/0x10 [ 1614.096020][T25594] ? switch_task_namespaces+0xe1/0x110 [ 1614.101610][T25594] do_exit+0xa27/0x27e0 [ 1614.105919][T25594] ? __pfx_do_exit+0x10/0x10 [ 1614.110595][T25594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1614.116714][T25594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1614.123088][T25594] ? _raw_spin_unlock_irq+0x23/0x50 [ 1614.128456][T25594] ? lockdep_hardirqs_on+0x99/0x150 [ 1614.133723][T25594] do_group_exit+0x207/0x2c0 [ 1614.138424][T25594] __x64_sys_exit_group+0x3f/0x40 [ 1614.143495][T25594] do_syscall_64+0xf3/0x230 [ 1614.148491][T25594] ? clear_bhb_loop+0x35/0x90 [ 1614.153221][T25594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.159363][T25594] RIP: 0033:0x7f7540b75bd9 [ 1614.163834][T25594] Code: Unable to access opcode bytes at 0x7f7540b75baf. [ 1614.170998][T25594] RSP: 002b:00007fffe52d6558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1614.180087][T25594] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f7540b75bd9 [ 1614.188635][T25594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1614.196778][T25594] RBP: 00007f7540d04a18 R08: 00007fffe52d42f7 R09: 000000000000000c [ 1614.204789][T25594] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1614.212926][T25594] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1614.221098][T25594] [ 1614.224160][T25594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1614.231547][T25594] CPU: 1 PID: 25594 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1614.241911][T25594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1614.252006][T25594] Call Trace: [ 1614.255292][T25594] [ 1614.258244][T25594] dump_stack_lvl+0x241/0x360 [ 1614.262980][T25594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1614.268218][T25594] ? __pfx__printk+0x10/0x10 [ 1614.272829][T25594] ? vscnprintf+0x5d/0x90 [ 1614.277193][T25594] panic+0x349/0x860 [ 1614.281138][T25594] ? __warn+0x172/0x4e0 [ 1614.285316][T25594] ? __pfx_panic+0x10/0x10 [ 1614.289767][T25594] __warn+0x346/0x4e0 [ 1614.293885][T25594] ? ida_free+0x370/0x420 [ 1614.298246][T25594] report_bug+0x2b3/0x500 [ 1614.302595][T25594] ? ida_free+0x370/0x420 [ 1614.306988][T25594] handle_bug+0x3e/0x70 [ 1614.311189][T25594] exc_invalid_op+0x1a/0x50 [ 1614.315733][T25594] asm_exc_invalid_op+0x1a/0x20 [ 1614.320624][T25594] RIP: 0010:ida_free+0x370/0x420 [ 1614.325589][T25594] Code: 10 42 80 3c 28 00 74 05 e8 8d bd 82 f6 48 8b 7c 24 40 4c 89 fe e8 40 a5 17 00 90 48 c7 c7 60 33 ec 8c 89 de e8 51 36 df f5 90 <0f> 0b 90 90 eb 3d e8 05 08 1d f6 49 bd 00 00 00 00 00 fc ff df 4d [ 1614.345222][T25594] RSP: 0018:ffffc90004727940 EFLAGS: 00010246 [ 1614.351309][T25594] RAX: 7fcd44533e2b5e00 RBX: 0000000000002000 RCX: ffff888027998000 [ 1614.359297][T25594] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1614.367281][T25594] RBP: ffffc90004727a30 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 1614.375290][T25594] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc90004727980 [ 1614.383293][T25594] R13: dffffc0000000000 R14: ffff88806cb240a0 R15: 0000000000000246 [ 1614.391294][T25594] ? __warn_printk+0x292/0x360 [ 1614.396105][T25594] ? __pfx_ida_free+0x10/0x10 [ 1614.400821][T25594] ? synchronize_rcu+0x11b/0x360 [ 1614.405779][T25594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1614.411782][T25594] hci_conn_del+0x746/0xc40 [ 1614.416307][T25594] hci_conn_hash_flush+0x18e/0x240 [ 1614.421442][T25594] hci_dev_close_sync+0x911/0xf60 [ 1614.426494][T25594] hci_unregister_dev+0x1db/0x4e0 [ 1614.431562][T25594] vhci_release+0x83/0xd0 [ 1614.435910][T25594] ? __pfx_vhci_release+0x10/0x10 [ 1614.440955][T25594] __fput+0x24a/0x8a0 [ 1614.444965][T25594] task_work_run+0x24f/0x310 [ 1614.449581][T25594] ? __pfx_task_work_run+0x10/0x10 [ 1614.454743][T25594] ? switch_task_namespaces+0xe1/0x110 [ 1614.460218][T25594] do_exit+0xa27/0x27e0 [ 1614.464507][T25594] ? __pfx_do_exit+0x10/0x10 [ 1614.469115][T25594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1614.475111][T25594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1614.481463][T25594] ? _raw_spin_unlock_irq+0x23/0x50 [ 1614.486703][T25594] ? lockdep_hardirqs_on+0x99/0x150 [ 1614.491944][T25594] do_group_exit+0x207/0x2c0 [ 1614.496566][T25594] __x64_sys_exit_group+0x3f/0x40 [ 1614.501617][T25594] do_syscall_64+0xf3/0x230 [ 1614.506151][T25594] ? clear_bhb_loop+0x35/0x90 [ 1614.510847][T25594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.516787][T25594] RIP: 0033:0x7f7540b75bd9 [ 1614.521215][T25594] Code: Unable to access opcode bytes at 0x7f7540b75baf. [ 1614.528266][T25594] RSP: 002b:00007fffe52d6558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1614.536727][T25594] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f7540b75bd9 [ 1614.544728][T25594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1614.552712][T25594] RBP: 00007f7540d04a18 R08: 00007fffe52d42f7 R09: 000000000000000c [ 1614.560702][T25594] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1614.568792][T25594] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1614.576841][T25594] [ 1614.580123][T25594] Kernel Offset: disabled [ 1614.584601][T25594] Rebooting in 86400 seconds..