last executing test programs: 12.535907667s ago: executing program 0 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) (fail_nth: 6) 12.369215205s ago: executing program 0 (id=102): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) preadv2(r0, &(0x7f0000001480)=[{&(0x7f0000001380)=""/200, 0xc8}], 0x1, 0x4, 0x10001, 0x10) r1 = socket(0x1d, 0xa, 0x6) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) write$cgroup_type(r0, &(0x7f0000000280), 0x9) r2 = syz_usb_connect(0x5, 0x32, &(0x7f00000010c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="f4382ba50000000000000000"], 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x80000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c72ef6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) io_setup(0x5, &(0x7f0000000000)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r7, 0x8914, &(0x7f0000000080)='veth0:0') fchownat(r3, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, 0x0, 0x100) syz_usb_ep_read(r2, 0x2, 0x40, &(0x7f0000000100)) 9.237373936s ago: executing program 0 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x40, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x25}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x20008014) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16a0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 8.991387112s ago: executing program 0 (id=117): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="01a651d2"]) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x920, 0x12) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x801}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0xffff}, 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '\x00'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}], 0xa, "4add247b387920d0d25e09d8dc04c6787bd51fae2e806d34fd7cbc9e09dd6b7fe07ca4dfa9cc201a3e2c07ef264860bdd4ee1b437878387ea19eec51cec8aa002bf3c60cb5593550f6c0dea19e4c397b0ba8479c1bb8ebdff2f9f4f3d891"}, 0x79) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200014001000000000000000030000007a"], 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000340)="260f00500c640fc72a0f20d86635080000000f22d866b9800000c00f326635000400000f30f22e0f22e5660f229a66b9c602000066b80a00000066ba000000000f30660febec0f9ba5e9316766c7442400010000006766c7442402108000006766c744240600000000670f011424", 0x6e}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0xffffffffffffffff}]}) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @empty}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14feacd30e2002190000000066667d053fe0ea4c"], 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000001000615000000000000000000ebff0002050001000700c214b7920116e833215700000000000000e5ff0000009184a215b79c7e351a502d6e42c837682dd2d9731e68032943ab3786ad48428eead1a843b8d0d467d16c1e8dcdb707a8b2e54cbd70e84856a6fbb6f445a29573f456d1fc9c1578e092edb58d27d30fec4e19ec950784604a892de341b817203b6d89c25b87946dcd1be4"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f0000002180)=""/4089, 0x1069}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f00000005c0)=""/237, 0xed}], 0x3}, 0x40000020) 7.728690291s ago: executing program 2 (id=122): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) syz_usb_connect(0x5, 0x5c, &(0x7f0000000f00)=ANY=[@ANYBLOB="12210002f330a4101138959b32830102030109024a00017407a00909041900000e0104000a2401010038000201020f2406020404050007000000080003072408020d0008052404010f0c240203886d7e8706000e7007240604010009"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.646282642s ago: executing program 3 (id=123): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0xf43fa000) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x8c, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x804}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x60, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r2}, @IFLA_GTP_LOCAL={0x8, 0x7, @multicast1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @multicast1}, @IFLA_GTP_LOCAL={0x8, 0x7, @remote}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @loopback}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004880}, 0x8000000) 7.232817669s ago: executing program 4 (id=127): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000680)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181a5e317ceb5483f958ef038d4fa59d943be3f4aed50ea5a6b8686731cb890777123c899b699eeaa8eaa00734611196639000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aa00008ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d424", 0x0, 0xfe, 0x60000000, 0x5f, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r1 = openat(r0, 0x0, 0x0, 0x0) read(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="042fa95d148227192f616ed1efb79c9ac11dcb78a3719fffb02027273c5ce0b34083e91f597a65d7d3c98313dc17204174556f2fc29e74c8277761c414c3ec4f8a67344bd37826053beccc48746ca30c83d89ecd38f39d34bb8850c34e8bcb57d66734b36d6aff77", 0x68, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000480)={0x0, {{0x2, 0x4e64, @multicast2}}}, 0x88) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x20011) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000010401"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030303030303030303030393300050000000000"], 0x2a, 0x0) clock_adjtime(0x5, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0x6, @remote, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="409a290b8b233e0da51c4009760de0b9a5b456b128d385350f825c57b61e21ecf889a40a055984ee3ee5c4b795c933c4de743cc3f25139019ce04ccac5d76bde7008d02e5d55309f4179370fdceda6094f00e3c8bc77244a6d27975fc8029c3d207b24c03f4a6a729db7f5f6862342e0016c4a9458760be419a536a093faa87df3555e59", 0x84, r8) keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55) shutdown(r2, 0x1) 6.785154603s ago: executing program 3 (id=128): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x78a09a1d84b4e9f1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x1, 0x1, '/'}, 0x0, 0x0}) 5.918172088s ago: executing program 4 (id=129): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)=@urb_type_interrupt={0x1, {0x9, 0x1}, 0x1, 0x80, 0x0, 0x0, 0x5, 0x3ff, 0x0, 0x4, 0x8, 0x0}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd26, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x7, 0xb8822e013bb3d21}, {0x1, 0xfff3}, {0xffe0, 0xb}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x54, 0x6, 0x300, 0xc, 0x1, 0x40000002, 0x101}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x18, 0x7, 0xf, 0x0, 0x4, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x288, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x230, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x2ba810b9, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x1, 0x5, 0xfffffffa, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x4, 0x2c7, 0x80000001, 0x1, 0x2, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x46, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) 5.856532549s ago: executing program 0 (id=130): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x1000002d, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xe11, 0xffffffff}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002", 0x31) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x7ffffffe, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)='0', 0x1}], 0x1}}], 0x1, 0x4008440) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x60, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$printer(r5, &(0x7f0000000780)={0x14, &(0x7f00000005c0)={0x20, 0x6, 0xdf, {0xdf, 0x21, "3d7a8a73ceab9116e1fbad826d846c9a329a2e67b6c321c0f31ba70ece4a23b9a58559775f054d372ebcbbf648c1a14740be1d8da51db20ad7218a82d897c366a51384a09dacf43b641115f8c3927c01a4ba55a30524251c2e116f2e7978c6f64370cdbf00192625763d141a5ec3fd3c1e65d89780e8c4fd54e83a79c13850039c2889a4f93ed39bf7fe2a18b620ea5e4a9a9df2bf10beb4e17a1c02b298781e2b0ae885fd6811f401fb620274cd88651514db5b5c2084c14514850b40167bc1f573e19bc17f9019cae75a233a83cfd140b80c7933e62499a335c42e61"}}, &(0x7f00000006c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "9625fc3e8af5e22b85a824a87083617ceb6af75ae231db53404604e9c7ada780c2961ed9646597e506f7b1214a5d070d2d25f34994f38984a052c3edb773b0ad50c8a117c4d5ed4dd8cba077b600da2a6c693e058adba59e7d5ebdd2de7cbee728757b5913207542dacb79a1a08d4e79e42bbd76e03977834552e9994abd07744fae128f102abcc3d8c325a9ddd9db484a3bc0b05230b571e2ad1030df7f95d0a38a726b1a"}}}, &(0x7f0000000ac0)={0x34, &(0x7f00000007c0)={0x40, 0x31, 0xd9, "c5898340fab7f9707f989207747383332d3a8da06c590bab2ce097086509d703adcb0e4ff7d9a547432a44ea88a43b803fc01f27c1012ded2f6eb482d7300ab3c42812523333822ad5242a042216eae24ae04d3c901e58bf1ec218271e09449e5bca498f0b61c40ba053a88502e6fe16e2cc0f1f699579ab41940bd8fffb6d1bc2fbdb6bcf53b4a98b57a03cf96cfd967b0a742613b69ce68d8be93035696b8e2f68bf96e0766c909d68d494aaa7c8c3353d53626056c56875cf1707ec9225e372f6b493a3ef21a0de08d8ecb2d64f8dc1352406b3d756347c"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000940)={0x20, 0x0, 0xbc, {0xba, "63835f34c0a9410ee881ed71682b6fb177203db25d49a72475f2bebfdc4aea4913433e16d9bf18496e2ed69f7c048d34fb1539ee360c9898a0613ea9bb1ae51f01ee9cae57087f30fc79eae029aebbd7e166a903dc6b716838d428fa99e9fa51318a57f8597c1603a6aac3522b08531de17570c11cc432d59fc4c5fc50ee289677ea29ab9e25871b389f572d4c03d9e92a21b42f04e2236bc05cf6511b5f80113ba0b475a69a7e8b86e6a956fea5522285e944631970e0919639"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x7}}) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000280)={0x100, r6}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0x11, 0x8, "0c5bfbd8c79b3161"}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x81, 0x2, "07bb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 4.611808603s ago: executing program 2 (id=131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, &(0x7f00000000c0)=0x200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x5e}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001980)={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x59509529629f9410, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000015f0cfffffff2d188a07a5966ec34b87867a244d070000000000000000000000abec35fc"], 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) 4.606665083s ago: executing program 3 (id=132): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x8, 0x8, 0x2, 0x57, 0x1, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x80000001, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 4.493586346s ago: executing program 3 (id=133): r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)=""/137}, {&(0x7f0000000700)=""/119}, {&(0x7f0000000780)=""/103}, {&(0x7f0000000840)=""/145}], 0x64, 0x0, 0x11}, 0x20) 4.350294209s ago: executing program 3 (id=134): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) r1 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000000)) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r2, &(0x7f0000001300)=""/112, 0x70) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="9cd4efbeaa", @ANYRES16=r6, @ANYBLOB="010023010000340200000300000018000180130001006574683a73797a6b616c6c6572300000"], 0x2c}}, 0x0) write(r3, &(0x7f0000000500)="ffffffffffff02000000000188ca50c0003c00000000020000010000000100000200"/106, 0x68) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r7, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x4df, @private1, 0x64d}}, 0x24) connect$tipc(0xffffffffffffffff, &(0x7f0000000300)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1000002}}, 0x10) write(0xffffffffffffffff, &(0x7f0000000400)='hello\x00', 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120110016d1b78202104a00071090102030109021b0001020035050904c46f000202ff030924020102057f0400b666cf5025c5ebd43c9f74bb034088c72782f5ea019a2650cf1ac543b48d1d92242a32ef6a54924691e79a80bb984a8f70e7f5fc08e9943bc880f34f22c1f170791b9eac0ec8f47521a9815ba5fbbe227102cc5c022f79005aff0420c6b89eac8da3406a762a706fc0b6611280fcbde2014370bb278a63b63bbf9bdcbd68c4aa72a1e06cb7eb48b4b576e639614d1dacad46e0b0f68873090b79984e89bb281c388f894c0902466a5a5a0e64f17d92c5d51a76b666b345ef2c4cc812"], 0x0) 4.0763075s ago: executing program 1 (id=135): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x30, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x3, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8015, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x20002, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r4 = dup(r0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r6}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$inet6(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000300)="e0af6791e9c1819cf6c0d55d48242db8e2e8612f686a7a922179a6ce18d018df2058abf18e3c41653d043ac58fba75f641e7bab569bbc16a46d01cd171f9aad54a1ca66d7315df23bccd55aec30ec109216746c6d4dee211aa752da3b56d0c485b57a5f83c9018fef146ffc943f2212f5bd28d24e22b4a6ad88c9427af14e45a68a3b7092acf20c940e296bc1979d0a4496eb5e31c1ab3f7f0eea229fab4dd3a4d01a2a309149d04a8b35def397f134c3ab48952a7925c", 0xb7}, {&(0x7f00000004c0)="5d999cfd4ecd03d4f90385d55e67beaa7bb55c385412d7b0584df0b85e6170aa477666a69dc9030efc5363fbf26d6d5f030fe5563958ca3018f945104947db320c251427a28d48526655", 0x4a}], 0x2, &(0x7f00000005c0)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x0, 0x8}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts={{0x38, 0x29, 0x36, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @pad1, @pad1, @pad1, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r6}}}, @tclass={{0x14, 0x29, 0x43, 0xdb3e}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x11, 0x2, 0x2, 0x7, 0x0, [@empty]}}}], 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="0f78c60fc79c0060baf80c66b807e8718e66efbafc0cecf20f5a0fa7c0b800000f00d80f01c4640fc73fdfce66b9800000c00f32663500040000d230", 0x3c}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.705155457s ago: executing program 1 (id=136): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x16}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x2f, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x39, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x840}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x30, 0x30, 0x63, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000013c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x36, 0x30, 0x39, 0x30, 0x33, 0x30, 0x30, 0x31, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x27}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.656665335s ago: executing program 1 (id=137): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x1b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0x7a7ce1c2}, {0x6, '\x00', @data=0x7, 0x7ff}, {0x2a, '\x00', @buffer={"67156e93446a62b429dbc528411c5c2e13dcf1eed699475586a0f96baf9718c4", 0x20}, 0x802}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0500060075000000000e17738f708409cdd2ef53b2e19cb129c6c51ba933ae48d0c55c13190de6650eb20857d52b778330ba864859f7f00cc42bfee5d176526222f711cfb7ff6afdbde7f5aac901a42e7e76c9a96d98d13242a391ba1c0090058c2d36974a463aeaf6d9ea25639b60b287a251", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = inotify_init1(0x800) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0xd934b2bcc772e768, {{0x1}, 0x1}}, 0x10) inotify_add_watch(r3, &(0x7f0000005780)='./file0\x00', 0x9400002f) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socket$key(0xf, 0x3, 0x2) umount2(&(0x7f0000000000)='./file0\x00', 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000480)={0x4, [0x3, 0x5, 0x0, 0x4, 0x2, 0x6, 0x7, 0x9, 0x10, 0x1, 0x6, 0x9edf, 0x228, 0x385, 0x7f, 0xfff, 0x7, 0xb2, 0x1, 0xb, 0x5, 0x4, 0x1ff, 0x0, 0xf37e, 0x0, 0x2, 0x10, 0xffff, 0xd, 0x8d7, 0x6, 0x5, 0x7, 0x6, 0x2, 0x229e, 0x1, 0x8002, 0x9, 0x0, 0x0, 0x423, 0xfff, 0x86, 0x400, 0x3, 0x7], 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0xfffffffb, 0x9, 0xeb, 0xfffffffe, 0xc0, 0x6bd6, 0x2, 0x9}}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba5b"], 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) 3.568968397s ago: executing program 4 (id=138): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x441, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xcfa, 0x7, 0x6, 0x1, 0x1, 0x8, '\x00', 0x0, r3, 0x0, 0x2, 0x0, 0xc}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) getsockname$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000240)={r7, 0x7, 0x2, r6}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT_DONE(r8, 0x0, 0xc9, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r10 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r10, 0x7, 0x2, r6}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.701298508s ago: executing program 2 (id=139): unshare(0x2a060400) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f0000000080)) 2.607605482s ago: executing program 2 (id=140): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) getresgid(&(0x7f00000021c0)=0x0, &(0x7f0000002200), &(0x7f0000002240)) stat(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) fstat(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002600)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000002700)=0xe8) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async) statx(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x400, 0x40, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000028c0)={0x4f8, 0x0, r1, [{{0x3, 0x0, 0x4, 0x876, 0x7fff, 0x4, {0x5, 0xf50, 0x3, 0x6, 0x1ff, 0xcb, 0xfbfe, 0x5b, 0x729, 0xc000, 0x1, r5, r6, 0x9, 0x8001}}, {0x4, 0x8, 0x6, 0x8, '\\!!-]('}}, {{0x2, 0x1, 0x10001, 0x7, 0x1000, 0xddd, {0x3, 0x8, 0x2, 0x3db2, 0x8, 0xb, 0xf8, 0x9, 0x1d30, 0x8000, 0xd34, 0xee00, 0xee01, 0x8, 0x5}}, {0x4, 0x3, 0x0, 0x6}}, {{0x3, 0x0, 0x7, 0x8, 0xffb, 0xffff, {0x6, 0x7ff, 0x1, 0x100000001, 0xbc8, 0xb35, 0x101, 0xb3, 0xffffffff, 0xc000, 0x200, r7, 0xffffffffffffffff, 0x6, 0x5}}, {0x0, 0x1, 0x0, 0xfffffffa}}, {{0x1, 0x0, 0x1, 0x4, 0x23f, 0x1, {0x0, 0x46a0, 0x7, 0xdaea, 0x240000000, 0x8769, 0x1, 0x7f, 0x7, 0x4000, 0x54, r8, r9, 0x7, 0xf}}, {0x1, 0xe, 0xe, 0x9, '$,{.!{%^-(%\'./'}}, {{0x1, 0x0, 0xead, 0x800, 0x9, 0xff, {0x1, 0x80, 0x4, 0xf56e, 0x7fffffffffffffff, 0x9, 0x6, 0x7, 0xffff, 0x4000, 0xf, 0xee00, 0xee00, 0x7d5, 0x3}}, {0x3, 0x1800000000000, 0x4, 0x10000, '*{\'/'}}, {{0x0, 0x0, 0x1, 0x10000, 0x1fbd, 0xe34, {0x0, 0x20d, 0x0, 0x401, 0x0, 0x5, 0x0, 0x7, 0x6, 0x2000, 0x100, r10, r11, 0x7fff, 0x1000}}, {0x3, 0x100, 0x0, 0x2}}, {{0x0, 0x3, 0xfffffffffffffff5, 0x7fff, 0x7ff, 0x0, {0x1, 0x3, 0x5, 0x0, 0x6, 0x7, 0x9, 0x7fff, 0xc91, 0x0, 0x5, r12, 0xee00, 0x5, 0xfbed}}, {0x6, 0x2, 0x1, 0x7, '['}}, {{0x3, 0x1, 0x0, 0x2, 0x0, 0x6, {0x4, 0x0, 0x9, 0x2, 0x7f, 0x8000000000000000, 0x7, 0x35b, 0x5, 0xc000, 0x1, r14, r16, 0x9, 0xce7f}}, {0x3, 0x5, 0x0, 0x8}}]}, 0x4f8) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000002dc0)={0x2, {{0xa, 0x4e20, 0xb5a4, @empty, 0x400}}, 0x1, 0x5, [{{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ea9}}, {{0xa, 0x4e22, 0xc90, @mcast2, 0x4}}, {{0xa, 0x4e23, 0x3, @private1, 0x3}}, {{0xa, 0x4e22, 0x30000000, @mcast1, 0x1ff}}, {{0xa, 0x4e21, 0x5d, @local, 0x2}}]}, 0x310) write$P9_RGETATTR(r4, &(0x7f0000003100)={0xa0, 0x19, 0x2, {0x114e, {0x8, 0x0, 0x6}, 0x8c2bc7f7777ba268, r15, r2, 0x2, 0x7fff, 0xcb, 0x7fffffff, 0x0, 0x80000000, 0xff, 0x3, 0x401, 0x1, 0xd, 0x3, 0x3, 0xfffffffeffffffff}}, 0xa0) (async) ioctl$RTC_PLL_SET(r13, 0x40207012, &(0x7f00000031c0)={0x6, 0x5, 0xf, 0x0, 0x3, 0x7fffffff, 0x7}) (async) lremovexattr(&(0x7f0000003200)='./file0\x00', &(0x7f0000003240)=@random={'btrfs.', '/dev/fuse\x00'}) (async) statfs(&(0x7f0000003280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003380)=""/79) (async) r17 = syz_open_procfs(r3, &(0x7f0000003400)='net/sco\x00') fallocate(r17, 0x0, 0x38000000000, 0x10000) (async) r18 = socket$tipc(0x1e, 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r17, 0x40585883, &(0x7f0000003440)={r18, 0x0, 0x4, 0x8000, 0xb7f, 0x4, [0x3, 0x80, 0x7, 0x5, 0x6a9b, 0xff]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000003980)={{r0, &(0x7f00000034c0)='\x00', 0x38080, &(0x7f0000003500)={@_ha_fsid={[0xd0, 0x7fffffff]}, {0x101, 0x5, 0x8, 0xb}}, 0x6, &(0x7f0000003540)={@_ha_fsid}, &(0x7f0000003580)=0xfff}, 0x3, &(0x7f0000003900)=[{0x1, 0x20000, &(0x7f00000035c0)='$,{.!{%^-(%\'./', &(0x7f0000003600)="d117d3e1b49f6ead2a718e5460e6dbd779ad408f3e515ee7942f7d8b6ca69b2b755941cfd4dc8c59c56c6824bbb0fc49efc731c7b4bcde4bf854cc52558dc00e143aace6c427de40fc42221567e6c6f1da8cae3ac929b115d5be5e42974e40a25f04f7fce17b599b0317e8e36bc986e2d8550c0c0b3ec3a144846a1c1abc8ceeb426ad68e71bdc7930ebce7452b674f7ba9b1bdd744487510ffa46", 0x9b, 0x8}, {0x3, 0x7, &(0x7f00000036c0)='/dev/fuse\x00', &(0x7f0000003700)="d9136bae3a502c86c39472924cd33bf0a7b6d11a0fe42b85df9c6e51c8f584f52616e2b577597b506faf702b7322256fe4c9bf746987c6eba02a8895871e67c4907e77de5dbfa6eda848547e04eeb4d5821e235909fc9c36ef461dc43f89b0edeed54bb50e91bf2939466e5ed1272cda460ed3ff96b86b019b09b0a3c517caa493ea4017d2580fc6ec49799a83051455a84bf256d6f6e503b146dca54cc928a603209ef5920a1e988b4f15e689bf3fef6b0958f02906e0921997917d0f8568d2eea337bac667a41b78a97a3c26239b95b98da39de445f0d224d174960bd73b0a87ebe8df9822a096b1640b73ff709eeadfd60538f7d6", 0xf6, 0x38}, {0x3, 0x4, &(0x7f0000003800)='\x00', &(0x7f0000003840)="332f9bbf68ba8874aaee7798ee080c89a0aff22d980d6d385b8d97b6afae22a6262047ecd3f45a3ff5a203dced25555dff3f47b1f8a7c82181347a094cfaa344618f9f7b04c91616f8308edb35a738f2874c51dacbdd8e901c12a6416c03fcf27820e282d34a85965b055e811d3d919fdb8675a11c621834e9dd24a12066e3ae71aed7cb6570eb10ec47045b6a53667ae20abe20401de1fc87b8c00da3bd7cadedeb36f0bd026c807fa95ab7d7bd355e1e853d2ca9", 0xb5, 0x10}]}) (async) fstat(r0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000003a00)=@sg0, r20, &(0x7f0000003ac0)={0x2, 0x5, 0x5, 0xa, 0x87ab, 0x8, 0x8000000000000001, 0x6, 0xac}) (async) write$P9_RREADDIR(r13, &(0x7f0000003b40)={0x2a, 0x29, 0x2, {0x1ff, [{{0x40, 0x1, 0x4}, 0x81, 0x8, 0x7, './file0'}]}}, 0x2a) (async) syz_extract_tcp_res$synack(&(0x7f0000003b80), 0x1, 0x0) (async) chmod(&(0x7f0000003bc0)='./file0/file0\x00', 0xf) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r19, 0x8917, &(0x7f0000003c00)={'vlan1\x00', {0x2, 0x0, @private}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r13, 0x40505330, &(0x7f0000003c40)={{0x6, 0x7}, {0x8, 0x28}, 0xfffffffe, 0x7, 0x9}) 2.507039916s ago: executing program 2 (id=141): r0 = io_uring_setup(0x6bde, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x1c4}) unshare(0x22020400) timer_create(0x5, 0x0, &(0x7f0000000100)=0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="021d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa000000000000000003000600000000000200"/128], 0x80}}, 0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x204d) write$FUSE_INIT(r7, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, 0x0, 0x108d41, 0x0) write$FUSE_ENTRY(r11, &(0x7f0000000340)={0x90, 0xffffffffffffffda, r8, {0x2, 0x0, 0xa, 0x5, 0x800, 0x4, {0x2, 0x6, 0x27, 0x5, 0x4, 0x7, 0x5, 0x7fffffff, 0xf5, 0x8000, 0x9, r9, r10, 0x6, 0x3e}}}, 0x90) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r13 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r13, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x1000, &(0x7f0000003740)=""/4096, 0x0, 0x0}) getresgid(&(0x7f0000003540)=0x0, &(0x7f0000003580), &(0x7f00000035c0)) write$FUSE_STATX(r4, &(0x7f0000003600)={0x130, 0xfffffffffffffffe, r5, {0x101, 0x1dc, 0x0, '\x00', {0x80, 0x800, 0x8, 0x3, r9, r14, 0xc000, '\x00', 0x3f, 0x9, 0x8000, 0xffff, {0x6cd4b82f, 0x7}, {0x9, 0xa6f}, {0xffffffffffffffff, 0x6}, {0xfffffffffffffffc, 0x1}, 0xfffffc01, 0x1, 0x984, 0xf9f}}}, 0x130) socket$can_raw(0x1d, 0x3, 0x1) io_uring_enter(r0, 0x2000000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r15 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r6, r14}}, './file0\x00'}) pwrite64(r15, 0x0, 0x0, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2b08004502005800000000002f9078ac1414bbffffffff248065580000000000000800000006000800889b42f24c6a008390be08000000100000000100000000000000080022eb00000000200000000200000000000004000000000800655800cddb5eed1f85000000ddc02e94d23dfcc6a5c4f1e4188d36273068383a27e69886b8114fbbd4bcf500795fd715bed58ccdec64"], 0x0) 2.405325357s ago: executing program 1 (id=142): r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x62000, 0x63) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x4, 0x2, 0x3, 0x80, 0x6, 0x7fff, 0x7}, {0x0, 0x8, 0x1, 0x7, 0x5, 0xfffffff6, 0x5}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x4, 0x2b, 0x2, 0x13, 0x6, 0x2, 0x1, 0xb6, 0x1}) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 1.987339201s ago: executing program 0 (id=143): syz_usb_connect(0x3, 0x3b9, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c27dae20009050402ff03020eff0725010007450007250101067c08090501a1"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc881}, 0x4c040) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x198, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x4, 0x3}, {0x8, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x48, 0x3}, {0x1, 0x5}, {0x9, 0x3}, {0x9, 0x4}, {0x1b, 0x3}, {0x1e, 0x5}, {0xc, 0x2}, {0x7}, {0x71}, {0x2, 0x3}, {0x1, 0x6}, {0x8, 0x2}], "7f8c3af18f7411a2"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x2, 0x1}, {0xc, 0x2}, {0x3}, {0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0x6}, {0x2}, {0x8, 0x4}, {0x4f}, {0x5, 0x2}, {0xc3, 0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x6d, 0x2}, {0x4, 0x2}, {0x4}], "f82d81b4000a8003"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x4, 0x1}, {0x4, 0x3}, {0xb}, {0x2, 0x7}], "83bdd0de0506df2b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x7, 0x3}, {0xf8, 0x3}, {0x8}, {0x5c, 0x3}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x5}, {0x81, 0x2}, {0x0, 0x5}, {0xd, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0xf}, {0x81, 0x3}, {0x8, 0x6}, {0x5, 0x3}, {0x9, 0x3}], "f5afb1aa4affb5c7"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x5, 0x7}, {0x8, 0x7}, {0x1, 0x3}, {0x6, 0x3}, {0x8, 0x5}, {0x9, 0x5}, {0x4}, {0x7, 0x3}, {0x69, 0x5}, {0x3, 0x7}], "c1c139183347b16b"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xf5, 0x6}, {0x9}, {0xa, 0x1}, {0x2, 0x2}, {0x8}, {0x5e, 0xfd}, {0x8, 0x1}, {0x8, 0x4}, {0x6, 0x5}, {0x0, 0x4}, {0x60, 0x7}, {0xb}], "9a360af353f75ef8"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3, 0x1}, {0x6c}, {0xf8}, {0x2, 0xfd}, {0x40, 0x7}, {0x60, 0x2}, {0x8, 0x4}, {0x3, 0x4}, {0xff, 0x7}, {0x1c, 0x4}, {0x3}, {0x24, 0x7}, {0x2, 0x3}, {0x9, 0x1}, {0xa, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x8e, 0x5}], "dde0dceef0915048"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x0, 0x6}, {0xd4, 0x5}, {0x3}, {0x8}, {0x9, 0x3}, {0x9, 0x1}, {0x1}, {0xab, 0x4}, {0x0, 0x3}, {0x70, 0x3}], "b90fc9140ec5f1a9"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "8ff6af228b2e5e99"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x9, 0x3}, {0x0, 0x7}, {0x10, 0x6}, {0x8, 0x7}, {0x7, 0x7}, {0x7, 0x4}, {0x7, 0x5}, {0x7e, 0x4}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x6}, {0x4c, 0x1}, {0x5, 0x4}, {0x8, 0x7}, {0xfc, 0x3}, {0x9, 0x4}, {0x40}, {0x0, 0x6}, {0x7}, {0x2}, {0x8, 0x4}], "66e5f5ba0c275d4c"}}]}, 0x198}}, 0x84) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000080)='syz0\x00', 0x652002, &(0x7f0000000140)={@align=0x400000, {0x2, 0x3, 0x7, 0x7f}}, 0x1000, &(0x7f00000001c0), &(0x7f0000000240)=0x3ff}) write$P9_RGETLOCK(r4, &(0x7f00000002c0)={0x23, 0x37, 0x1, {0x1, 0x3, 0x2, 0x0, 0x5, 'syz0\x00'}}, 0x23) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100ff000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000100000008000b400000000018000480140001800b0001006c6f6f6b75700000040002800900010073797a300000000005000740ed000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x31857717b80f31eb}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) 1.269980625s ago: executing program 3 (id=144): syz_usb_connect(0x3, 0x3b9, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c27dae20009050402ff03020eff0725010007450007250101067c08090501a1"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc881}, 0x4c040) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x198, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x4, 0x3}, {0x8, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x48, 0x3}, {0x5, 0x3}, {0x9, 0x3}, {0x9, 0x4}, {0x1b, 0x3}, {0x1e, 0x5}, {0xc, 0x2}, {0x7}, {0x71}, {0x2, 0x3}, {0x1, 0x6}, {0x8, 0x2}], "7f8c3af18f7411a2"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x2, 0x1}, {0xc, 0x2}, {0x3}, {0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0x6}, {0x2}, {0x8, 0x4}, {0x4f}, {0x5, 0x2}, {0xc3, 0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x6d, 0x2}, {0x4, 0x2}, {0x4}], "f82d81b4000a8003"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x4, 0x1}, {0x4, 0x3}, {0xb}, {0x2, 0x7}], "83bdd0de0506df2b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x7, 0x3}, {0xf8, 0x3}, {0x8}, {0x5c, 0x3}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x5}, {0x81, 0x2}, {0x0, 0x5}, {0xd, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0xf}, {0x81, 0x3}, {0x8, 0x6}, {0x5, 0x3}, {0x9, 0x3}], "f5afb1aa4affb5c7"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x5, 0x7}, {0x8, 0x7}, {0x1, 0x3}, {0x6, 0x3}, {0x8, 0x5}, {0x9, 0x5}, {0x4}, {0x7, 0x3}, {0x69, 0x5}, {0x3, 0x7}], "c1c139183347b16b"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xf5, 0x6}, {0x9}, {0xa, 0x1}, {0x2, 0x2}, {0x8}, {0x5e, 0xfd}, {0x8, 0x1}, {0x8, 0x4}, {0x6, 0x5}, {0x0, 0x4}, {0x60, 0x7}, {0xb}], "9a360af353f75ef8"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3, 0x1}, {0x6c}, {0xf8}, {0x2, 0xfd}, {0x40, 0x7}, {0x60, 0x2}, {0x8, 0x4}, {0x3, 0x4}, {0xff, 0x7}, {0x1c, 0x4}, {0x3}, {0x24, 0x7}, {0x2, 0x3}, {0x9, 0x1}, {0xa, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x8e, 0x5}], "dde0dceef0915048"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x0, 0x6}, {0xd4, 0x5}, {0x3}, {0x8}, {0x9, 0x3}, {0x9, 0x1}, {0x1}, {0xab, 0x4}, {0x0, 0x3}, {0x70, 0x3}], "b90fc9140ec5f1a9"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "8ff6af228b2e5e99"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x9, 0x3}, {0x0, 0x7}, {0x10, 0x6}, {0x8, 0x7}, {0x7, 0x7}, {0x7, 0x4}, {0x7, 0x5}, {0x7e, 0x4}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x6}, {0x4c, 0x1}, {0x5, 0x4}, {0x8, 0x7}, {0xfc, 0x3}, {0x9, 0x4}, {0x40}, {0x0, 0x6}, {0x7}, {0x2}, {0x8, 0x4}], "66e5f5ba0c275d4c"}}]}, 0x198}}, 0x84) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000080)='syz0\x00', 0x652002, &(0x7f0000000140)={@align=0x400000, {0x2, 0x3, 0x7, 0x7f}}, 0x1000, &(0x7f00000001c0), &(0x7f0000000240)=0x3ff}) write$P9_RGETLOCK(r4, &(0x7f00000002c0)={0x23, 0x37, 0x1, {0x1, 0x3, 0x2, 0x0, 0x5, 'syz0\x00'}}, 0x23) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100ff000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000100000008000b400000000018000480140001800b0001006c6f6f6b75700000040002800900010073797a300000000005000740ed000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x31857717b80f31eb}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) 1.124251115s ago: executing program 2 (id=145): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0x8000) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x3, "531220f1326fd72d37a1f266f201f622b2724917a86e2b0545412039dfd6ce47", 0x3, 0x1}) add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) close(0x3) 942.01184ms ago: executing program 4 (id=146): socket$unix(0x1, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$nci(r5, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xdf9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1c}}}, &(0x7f0000000480)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x78, r9, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x577a, 0x1c}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4000000}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc8000000}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x22, 0x2, "f4fa557ee6e688fa13adff36ee387d9c4faea25c2bb522c5ea819a424c9b"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffc00000}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000000, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x23}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f1, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x800, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff7, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_io_uring_setup(0x1dc5, &(0x7f0000000180)={0x0, 0xc386, 0x3010, 0x20002, 0x1d0}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)) 672.162645ms ago: executing program 4 (id=147): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x16}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x2f, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x39, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x840}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x30, 0x30, 0x63, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000013c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x36, 0x30, 0x39, 0x30, 0x33, 0x30, 0x30, 0x31, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x27}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 299.394906ms ago: executing program 1 (id=148): fstat(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x7f7) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xb, 0xd0e0011, 0x0, 0xc6, 0x220, 0x1d8, 0x190, 0x220, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xe0, 0x148, 0x2000000, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x8, 0x7, 0x3, {0x42}}}, @common=@unspec=@owner={{0x38}, {0x0, 0xee01, 0x0, 0x0, 0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x6, 0xb67f, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x1e}}}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'xfrm0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 286.623261ms ago: executing program 4 (id=149): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, &(0x7f00000000c0)=0x200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x5e}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001980)={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x59509529629f9410, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000015f0cfffffff2d188a07a5966ec34b87867a244d070000000000000000000000abec35fc"], 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) 0s ago: executing program 1 (id=150): fanotify_init(0x2, 0x400) r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r4, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x1, 0x40000002, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. [ 72.833651][ T5600] cgroup: Unknown subsys name 'net' [ 72.940083][ T5600] cgroup: Unknown subsys name 'cpuset' [ 72.949514][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.292805][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.939172][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.947586][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.958171][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.978228][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.980365][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.980816][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.981861][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.983683][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.985746][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.993497][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.039658][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.048146][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.063335][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.065261][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.068705][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.087285][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.096021][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.102666][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.103407][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.104623][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.105982][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.109456][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.110931][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.124105][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.126733][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.203478][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.203664][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.204059][ T5634] bridge_slave_0: entered allmulticast mode [ 79.207188][ T5634] bridge_slave_0: entered promiscuous mode [ 79.212651][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.212754][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.212941][ T5634] bridge_slave_1: entered allmulticast mode [ 79.214739][ T5634] bridge_slave_1: entered promiscuous mode [ 79.258583][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.258696][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.259211][ T5630] bridge_slave_0: entered allmulticast mode [ 79.261692][ T5630] bridge_slave_0: entered promiscuous mode [ 79.265509][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.265635][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.265757][ T5630] bridge_slave_1: entered allmulticast mode [ 79.269125][ T5630] bridge_slave_1: entered promiscuous mode [ 79.373185][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.373850][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.374244][ T5631] bridge_slave_0: entered allmulticast mode [ 79.375897][ T5631] bridge_slave_0: entered promiscuous mode [ 79.398046][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.416028][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.416236][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.416398][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.418025][ T5632] bridge_slave_0: entered allmulticast mode [ 79.421199][ T5632] bridge_slave_0: entered promiscuous mode [ 79.426478][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.426775][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.426874][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.427240][ T5631] bridge_slave_1: entered allmulticast mode [ 79.429087][ T5631] bridge_slave_1: entered promiscuous mode [ 79.430836][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.430982][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.431355][ T5633] bridge_slave_0: entered allmulticast mode [ 79.433753][ T5633] bridge_slave_0: entered promiscuous mode [ 79.440669][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.455050][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.455158][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.455524][ T5632] bridge_slave_1: entered allmulticast mode [ 79.458053][ T5632] bridge_slave_1: entered promiscuous mode [ 79.488239][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.488349][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.488460][ T5633] bridge_slave_1: entered allmulticast mode [ 79.490505][ T5633] bridge_slave_1: entered promiscuous mode [ 79.580874][ T5634] team0: Port device team_slave_0 added [ 79.593808][ T5630] team0: Port device team_slave_0 added [ 79.598118][ T5630] team0: Port device team_slave_1 added [ 79.601368][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.617681][ T5634] team0: Port device team_slave_1 added [ 79.630894][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.646379][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.661394][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.665196][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.681676][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.681839][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.681863][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.688186][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.704687][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.704707][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.704728][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.751288][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.751308][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.751330][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.825642][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.825677][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.826341][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.829550][ T5631] team0: Port device team_slave_0 added [ 79.832625][ T5633] team0: Port device team_slave_0 added [ 79.861854][ T5632] team0: Port device team_slave_0 added [ 79.875890][ T5631] team0: Port device team_slave_1 added [ 79.878866][ T5633] team0: Port device team_slave_1 added [ 79.883994][ T5632] team0: Port device team_slave_1 added [ 79.996200][ T5630] hsr_slave_0: entered promiscuous mode [ 79.998108][ T5630] hsr_slave_1: entered promiscuous mode [ 80.001897][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.001913][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.001932][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.006821][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.006838][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.006859][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.031944][ T5634] hsr_slave_0: entered promiscuous mode [ 80.032973][ T5634] hsr_slave_1: entered promiscuous mode [ 80.034192][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 80.034302][ T5634] Cannot create hsr debugfs directory [ 80.037424][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.037439][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.037461][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.040172][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.040187][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.040209][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.041483][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.041496][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.041517][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.047098][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.047116][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.047139][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.088038][ T5617] Bluetooth: hci0: command tx timeout [ 80.096990][ T5617] Bluetooth: hci2: command tx timeout [ 80.097149][ T5617] Bluetooth: hci1: command tx timeout [ 80.170033][ T5625] Bluetooth: hci3: command tx timeout [ 80.170344][ T5617] Bluetooth: hci4: command tx timeout [ 80.339393][ T5633] hsr_slave_0: entered promiscuous mode [ 80.340507][ T5633] hsr_slave_1: entered promiscuous mode [ 80.341157][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 80.341175][ T5633] Cannot create hsr debugfs directory [ 80.409335][ T5632] hsr_slave_0: entered promiscuous mode [ 80.410630][ T5632] hsr_slave_1: entered promiscuous mode [ 80.411368][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 80.411386][ T5632] Cannot create hsr debugfs directory [ 80.439987][ T5631] hsr_slave_0: entered promiscuous mode [ 80.441534][ T5631] hsr_slave_1: entered promiscuous mode [ 80.442210][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 80.442228][ T5631] Cannot create hsr debugfs directory [ 80.812218][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.823703][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.844124][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.854662][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.873016][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.882850][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.883787][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.895324][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.960981][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.975621][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.985364][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.994974][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.996334][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.005974][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.017958][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.029067][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.114040][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.131511][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.133308][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.145877][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.159050][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.168914][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.184056][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.194001][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.293415][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.303160][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.319703][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.329726][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.330622][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.340638][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.362729][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.372673][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.382406][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.450410][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.489582][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.499752][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.500702][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.511884][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.519472][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.519822][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.527929][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.542375][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.542481][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.550433][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.560224][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.574772][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.581693][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.621699][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.653424][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.653532][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.725151][ T253] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.725276][ T253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.766267][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.885904][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.949068][ T253] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.949216][ T253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.969933][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.992867][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.992985][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.045613][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.081943][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.113351][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.113459][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.119581][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.119703][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.167009][ T5617] Bluetooth: hci1: command tx timeout [ 82.167111][ T5625] Bluetooth: hci2: command tx timeout [ 82.167949][ T5625] Bluetooth: hci0: command tx timeout [ 82.181244][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.201010][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.247563][ T5617] Bluetooth: hci4: command tx timeout [ 82.247618][ T5617] Bluetooth: hci3: command tx timeout [ 82.285253][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.300185][ T5630] veth0_vlan: entered promiscuous mode [ 82.325569][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.325668][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.354891][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.354990][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.359526][ T5630] veth1_vlan: entered promiscuous mode [ 82.402805][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.410739][ T5634] veth0_vlan: entered promiscuous mode [ 82.432564][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.453763][ T5634] veth1_vlan: entered promiscuous mode [ 82.492419][ T5630] veth0_macvtap: entered promiscuous mode [ 82.524622][ T5630] veth1_macvtap: entered promiscuous mode [ 82.580270][ T5633] veth0_vlan: entered promiscuous mode [ 82.585579][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.588114][ T5634] veth0_macvtap: entered promiscuous mode [ 82.614838][ T5634] veth1_macvtap: entered promiscuous mode [ 82.623916][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.629560][ T5631] veth0_vlan: entered promiscuous mode [ 82.641882][ T5633] veth1_vlan: entered promiscuous mode [ 82.688865][ T5631] veth1_vlan: entered promiscuous mode [ 82.698479][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.717967][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.751053][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.767934][ T1495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.775684][ T1495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.775731][ T1495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.775764][ T1495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.812878][ T5633] veth0_macvtap: entered promiscuous mode [ 82.848677][ T5633] veth1_macvtap: entered promiscuous mode [ 82.917509][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.921476][ T5631] veth0_macvtap: entered promiscuous mode [ 82.937303][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.937348][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.951849][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.969040][ T5631] veth1_macvtap: entered promiscuous mode [ 83.017173][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.041244][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.050798][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.096701][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.096763][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.096811][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.117906][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.155751][ T5632] veth0_vlan: entered promiscuous mode [ 83.196222][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.199569][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.199592][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.224764][ T5630] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.260365][ T5632] veth1_vlan: entered promiscuous mode [ 83.356144][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.356197][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.399989][ T5710] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.437186][ T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.437226][ T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.606893][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.610700][ T5632] veth0_macvtap: entered promiscuous mode [ 83.623005][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.643781][ T5632] veth1_macvtap: entered promiscuous mode [ 83.647271][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.647453][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.647594][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.647738][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.647869][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.647998][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.648148][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.648276][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.712398][ T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.712424][ T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.759482][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.829886][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.840864][ T5672] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.845788][ T253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.845809][ T253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.857468][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.858712][ T253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.859183][ T253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.859367][ T253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.905553][ T5707] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.054747][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.063917][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.075248][ T5707] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 84.089618][ T5672] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 84.112707][ T5672] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.120986][ T5718] input: syz0 as /devices/virtual/input/input5 [ 84.129857][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.139393][ T5672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 84.139518][ T5672] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.173121][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 84.184579][ T5672] usb 3-1: Product: syz [ 84.184973][ T5672] usb 3-1: Manufacturer: syz [ 84.184994][ T5672] usb 3-1: SerialNumber: syz [ 84.214870][ T5707] usb 1-1: config 0 descriptor?? [ 84.220504][ T5672] usb 3-1: config 0 descriptor?? [ 84.235633][ T5707] cp210x 1-1:0.0: cp210x converter detected [ 84.248295][ T5617] Bluetooth: hci0: command tx timeout [ 84.248535][ T52] Bluetooth: hci2: command tx timeout [ 84.248572][ T52] Bluetooth: hci1: command tx timeout [ 84.268617][ T5672] usb 3-1: no audio or video endpoints found [ 84.293785][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.307758][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.329243][ T5617] Bluetooth: hci4: command tx timeout [ 84.337002][ T5617] Bluetooth: hci3: command tx timeout [ 84.661403][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.690042][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.690492][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.702106][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.702504][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.757930][ T5699] usb 3-1: USB disconnect, device number 2 [ 85.016971][ T5707] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 85.038091][ T5707] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 85.038151][ T5707] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 85.095656][ T5707] usb 1-1: cp210x converter now attached to ttyUSB0 [ 85.270905][ T9] usb 1-1: USB disconnect, device number 2 [ 85.312847][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 85.313603][ T9] cp210x 1-1:0.0: device disconnected [ 85.330752][ T5732] netlink: 'syz.4.7': attribute type 34 has an invalid length. [ 85.330797][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7'. [ 85.445587][ T5732] bond1: option lacp_strict: invalid value (255) [ 85.520800][ T5732] bond1 (unregistering): Released all slaves [ 86.101584][ T5739] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9'. [ 86.330660][ T5617] Bluetooth: hci1: command tx timeout [ 86.330691][ T5625] Bluetooth: hci2: command tx timeout [ 86.330725][ T5617] Bluetooth: hci0: command tx timeout [ 86.406725][ T52] Bluetooth: hci3: command tx timeout [ 86.406782][ T52] Bluetooth: hci4: command tx timeout [ 86.574001][ T985] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.879914][ T10] cfg80211: failed to load regulatory.db [ 87.048606][ T4505] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.218278][ T4505] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 87.230177][ T4505] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 87.230212][ T4505] usb 4-1: Product: syz [ 87.231245][ T4505] usb 4-1: SerialNumber: syz [ 87.245858][ T4505] usb 4-1: config 0 descriptor?? [ 87.628592][ T5759] fuseblk: Unknown parameter 'E˜**:Iƒ–~Üx…user_id' [ 87.812938][ T5750] syz_tun: entered allmulticast mode [ 87.899425][ T4505] usb 4-1: USB disconnect, device number 2 [ 87.989413][ T5749] syz_tun: left allmulticast mode [ 88.137857][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.292187][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 88.297204][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.297251][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.303628][ T10] usb 2-1: config 0 descriptor?? [ 88.767433][ T5707] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.858417][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858494][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858517][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858538][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858560][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858585][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858609][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858634][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858671][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.858695][ T10] aquacomputer_d5next 0003:0C70:F003.0001: unknown main item tag 0x0 [ 88.966447][ T10] aquacomputer_d5next 0003:0C70:F003.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0 [ 88.980099][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 88.987082][ T5707] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.997948][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.009219][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.028579][ T5707] usb 5-1: config 0 descriptor?? [ 89.474856][ T5672] usb 2-1: USB disconnect, device number 2 [ 89.565147][ T5707] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.741920][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 89.908716][ T5707] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.085726][ T5707] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 90.100152][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.115667][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.156306][ T5707] usb 4-1: config 0 descriptor?? [ 90.258507][ T5672] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.427383][ T5672] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 90.442926][ T5672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.454272][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.469050][ T5672] usb 3-1: config 0 descriptor?? [ 90.620398][ T5707] aquacomputer_d5next 0003:0C70:F003.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 90.931225][ T5672] aquacomputer_d5next 0003:0C70:F003.0003: hidraw1: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 91.363245][ T5796] FAULT_INJECTION: forcing a failure. [ 91.363245][ T5796] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.363319][ T5796] CPU: 0 UID: 0 PID: 5796 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 91.363351][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.363370][ T5796] Call Trace: [ 91.363380][ T5796] [ 91.363388][ T5796] dump_stack_lvl+0xe8/0x150 [ 91.363429][ T5796] should_fail_ex+0x410/0x560 [ 91.363459][ T5796] _copy_from_user+0x2d/0xb0 [ 91.363480][ T5796] get_timespec64+0x96/0x1b0 [ 91.363502][ T5796] ? __pfx_get_timespec64+0x10/0x10 [ 91.363522][ T5796] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 91.363555][ T5796] __x64_sys_recvmmsg+0x14b/0x250 [ 91.363580][ T5796] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 91.363606][ T5796] do_syscall_64+0x166/0x520 [ 91.363629][ T5796] ? trace_irq_disable+0x3b/0x140 [ 91.363645][ T5796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.363662][ T5796] ? clear_bhb_loop+0x70/0xc0 [ 91.363684][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.363702][ T5796] RIP: 0033:0x7f11db79e159 [ 91.363724][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.363738][ T5796] RSP: 002b:00007f11dc67b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 91.363762][ T5796] RAX: ffffffffffffffda RBX: 00007f11dba26180 RCX: 00007f11db79e159 [ 91.363773][ T5796] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000005 [ 91.363782][ T5796] RBP: 00007f11dc67b090 R08: 0000200000000480 R09: 0000000000000000 [ 91.363792][ T5796] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 91.363801][ T5796] R13: 00007f11dba26218 R14: 00007f11dba26180 R15: 00007f11dbb4fa48 [ 91.363828][ T5796] [ 91.420158][ T5792] syz_tun: entered allmulticast mode [ 91.594929][ T5789] syz_tun: left allmulticast mode [ 91.861267][ T5692] usb 5-1: USB disconnect, device number 2 [ 92.085080][ T985] usb 4-1: USB disconnect, device number 3 [ 92.307673][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.436725][ T5692] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 92.466599][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 92.472470][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 92.474800][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 92.474833][ T10] usb 1-1: config 0 has no interface number 0 [ 92.474882][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 92.480120][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.480144][ T10] usb 1-1: Product: syz [ 92.480157][ T10] usb 1-1: Manufacturer: syz [ 92.480171][ T10] usb 1-1: SerialNumber: syz [ 92.499250][ T10] usb 1-1: config 0 descriptor?? [ 92.575605][ T5821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.589651][ T5692] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.591299][ T5692] usb 5-1: not running at top speed; connect to a high speed hub [ 92.591336][ T5692] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 92.594018][ T5692] usb 5-1: config 83 has too many interfaces: 49, using maximum allowed: 32 [ 92.594051][ T5692] usb 5-1: config 83 has an invalid descriptor of length 80, skipping remainder of the config [ 92.594068][ T5692] usb 5-1: config 83 has 0 interfaces, different from the descriptor's value: 49 [ 92.602178][ T5692] usb 5-1: string descriptor 0 read error: -22 [ 92.602361][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.756924][ T5692] usb 3-1: USB disconnect, device number 4 [ 92.868251][ T5824] FAULT_INJECTION: forcing a failure. [ 92.868251][ T5824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.879054][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(full) [ 92.879083][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.879094][ T5824] Call Trace: [ 92.879102][ T5824] [ 92.879110][ T5824] dump_stack_lvl+0xe8/0x150 [ 92.879142][ T5824] should_fail_ex+0x410/0x560 [ 92.879174][ T5824] _copy_to_user+0x31/0xb0 [ 92.879197][ T5824] simple_read_from_buffer+0xe1/0x170 [ 92.879226][ T5824] proc_fail_nth_read+0x1bb/0x230 [ 92.879251][ T5824] ? common_file_perm+0x20e/0x2b0 [ 92.879272][ T5824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.879301][ T5824] ? rw_verify_area+0x24a/0x4c0 [ 92.879328][ T5824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.879353][ T5824] vfs_read+0x213/0xa80 [ 92.879381][ T5824] ? __pfx___mutex_lock+0x10/0x10 [ 92.879400][ T5824] ? __pfx_vfs_read+0x10/0x10 [ 92.879425][ T5824] ? __fget_files+0x2a/0x420 [ 92.879452][ T5824] ? __fget_files+0x3a2/0x420 [ 92.879472][ T5824] ? __fget_files+0x2a/0x420 [ 92.879502][ T5824] ksys_read+0x150/0x270 [ 92.879529][ T5824] ? __pfx_ksys_read+0x10/0x10 [ 92.879563][ T5824] do_syscall_64+0x166/0x520 [ 92.879579][ T5824] ? trace_irq_disable+0x3b/0x140 [ 92.879595][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.879614][ T5824] ? clear_bhb_loop+0x70/0xc0 [ 92.879635][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.879653][ T5824] RIP: 0033:0x7f99ea55e98e [ 92.879670][ T5824] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.879684][ T5824] RSP: 002b:00007f99eb3c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.879704][ T5824] RAX: ffffffffffffffda RBX: 00007f99eb3c66c0 RCX: 00007f99ea55e98e [ 92.879716][ T5824] RDX: 000000000000000f RSI: 00007f99eb3c60a0 RDI: 0000000000000005 [ 92.879727][ T5824] RBP: 00007f99eb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 92.879738][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.879748][ T5824] R13: 00007f99ea826038 R14: 00007f99ea825fa0 R15: 00007f99ea94fa48 [ 92.879776][ T5824] [ 93.212196][ T5826] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 93.219435][ T5692] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 93.243012][ T253] IPVS: starting estimator thread 0... [ 93.338383][ T5829] IPVS: using max 32 ests per chain, 76800 per kthread [ 93.378322][ T5692] usb 2-1: Invalid ep0 maxpacket: 16 [ 93.517050][ T5692] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 93.667014][ T5692] usb 2-1: Invalid ep0 maxpacket: 16 [ 93.667500][ T5692] usb usb2-port1: attempt power cycle [ 93.687517][ T4505] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.838217][ T4505] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 93.840672][ T4505] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 93.840827][ T4505] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 93.840845][ T4505] usb 4-1: config 171 has no interface number 0 [ 93.840915][ T4505] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 93.840937][ T4505] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 93.840961][ T4505] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 93.845755][ T4505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.845782][ T4505] usb 4-1: Product: syz [ 93.845795][ T4505] usb 4-1: Manufacturer: syz [ 93.845808][ T4505] usb 4-1: SerialNumber: syz [ 93.885304][ T5835] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 94.006692][ T5692] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 94.027375][ T5692] usb 2-1: Invalid ep0 maxpacket: 16 [ 94.158391][ T5692] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 94.178101][ T5692] usb 2-1: Invalid ep0 maxpacket: 16 [ 94.178448][ T5692] usb usb2-port1: unable to enumerate USB device [ 94.213091][ T4505] ath6kl: Failed to submit usb control message: -71 [ 94.213176][ T4505] ath6kl: unable to send the bmi data to the device: -71 [ 94.213189][ T4505] ath6kl: Unable to send get target info: -71 [ 94.236334][ T4505] ath6kl: Failed to init ath6kl core: -71 [ 94.238979][ T4505] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 94.279041][ T4505] usb 4-1: USB disconnect, device number 4 [ 94.656622][ T985] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.819725][ T10] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 94.819807][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 94.819820][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 94.819893][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 94.838689][ T10] usb 1-1: USB disconnect, device number 3 [ 94.857892][ T985] usb 3-1: Using ep0 maxpacket: 16 [ 94.866330][ T985] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.879172][ T985] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.891493][ T985] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.908527][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.916854][ T985] usb 3-1: Product: syz [ 94.922226][ T985] usb 3-1: Manufacturer: syz [ 94.927121][ T985] usb 3-1: SerialNumber: syz [ 94.964061][ T985] usb 3-1: 0:2 : does not exist [ 95.042117][ T4505] usb 5-1: USB disconnect, device number 3 [ 95.165185][ T985] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 95.215929][ T985] usb 3-1: USB disconnect, device number 5 [ 95.250920][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.266684][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.417255][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 95.417959][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 95.418901][ T10] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 95.418944][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.418967][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 95.418990][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.419014][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.419048][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.431658][ T10] usb 4-1: config 0 descriptor?? [ 95.432634][ T5846] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 95.522555][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 95.827131][ T985] usb 4-1: USB disconnect, device number 5 [ 95.827352][ C0] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 96.072500][ T5860] netlink: 'syz.2.44': attribute type 21 has an invalid length. [ 96.072846][ T5860] netlink: 156 bytes leftover after parsing attributes in process `syz.2.44'. [ 96.576795][ T985] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.748327][ T985] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 96.762172][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.782567][ T985] usb 2-1: config 0 descriptor?? [ 96.803839][ T985] cp210x 2-1:0.0: cp210x converter detected [ 96.888331][ T5871] FAULT_INJECTION: forcing a failure. [ 96.888331][ T5871] name failslab, interval 1, probability 0, space 0, times 1 [ 96.901333][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz.2.49 Not tainted syzkaller #0 PREEMPT(full) [ 96.901359][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.901370][ T5871] Call Trace: [ 96.901378][ T5871] [ 96.901388][ T5871] dump_stack_lvl+0xe8/0x150 [ 96.901421][ T5871] should_fail_ex+0x410/0x560 [ 96.901454][ T5871] should_failslab+0xa8/0x100 [ 96.901477][ T5871] __kmalloc_noprof+0xfe/0x720 [ 96.901506][ T5871] ? ethnl_default_set_doit+0x169/0x1080 [ 96.901532][ T5871] ? ethnl_default_set_doit+0x169/0x1080 [ 96.901564][ T5871] ethnl_default_set_doit+0x169/0x1080 [ 96.901592][ T5871] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 96.901619][ T5871] genl_family_rcv_msg_doit+0x233/0x340 [ 96.901644][ T5871] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 96.901675][ T5871] ? bpf_lsm_capable+0x9/0x20 [ 96.901700][ T5871] ? security_capable+0x7e/0x2c0 [ 96.901726][ T5871] genl_rcv_msg+0x614/0x7a0 [ 96.901750][ T5871] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.901767][ T5871] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 96.901794][ T5871] ? __pfx_ref_tracker_free+0x10/0x10 [ 96.901823][ T5871] netlink_rcv_skb+0x226/0x4a0 [ 96.901847][ T5871] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.901866][ T5871] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.901903][ T5871] ? down_read+0x2be/0x330 [ 96.901926][ T5871] genl_rcv+0x28/0x40 [ 96.901950][ T5871] netlink_unicast+0x7bd/0x940 [ 96.901983][ T5871] netlink_sendmsg+0x813/0xb40 [ 96.902016][ T5871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.902047][ T5871] ? apparmor_socket_sendmsg+0x98/0x360 [ 96.902077][ T5871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.902099][ T5871] sock_sendmsg_nosec+0x13a/0x180 [ 96.902124][ T5871] ____sys_sendmsg+0x54e/0x850 [ 96.902147][ T5871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.902174][ T5871] ? import_iovec+0x73/0xa0 [ 96.902198][ T5871] ___sys_sendmsg+0x2a5/0x360 [ 96.902217][ T5871] ? __lock_acquire+0x6df/0x2e50 [ 96.902240][ T5871] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.902304][ T5871] ? __fget_files+0x2a/0x420 [ 96.902326][ T5871] ? __fget_files+0x3a2/0x420 [ 96.902359][ T5871] __x64_sys_sendmsg+0x1b1/0x290 [ 96.902383][ T5871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.902425][ T5871] do_syscall_64+0x166/0x520 [ 96.902441][ T5871] ? trace_irq_disable+0x3b/0x140 [ 96.902458][ T5871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.902477][ T5871] ? clear_bhb_loop+0x70/0xc0 [ 96.902500][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.902518][ T5871] RIP: 0033:0x7f99ea59e159 [ 96.902536][ T5871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.902551][ T5871] RSP: 002b:00007f99eb3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.902571][ T5871] RAX: ffffffffffffffda RBX: 00007f99ea825fa0 RCX: 00007f99ea59e159 [ 96.902584][ T5871] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 96.902596][ T5871] RBP: 00007f99eb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.902607][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.902618][ T5871] R13: 00007f99ea826038 R14: 00007f99ea825fa0 R15: 00007f99ea94fa48 [ 96.902648][ T5871] [ 97.276840][ T4505] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.356687][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.381997][ T985] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 97.390581][ T985] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 97.398700][ T985] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 97.411813][ T985] usb 2-1: cp210x converter now attached to ttyUSB0 [ 97.429099][ T4505] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 97.434263][ T4505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.434292][ T4505] usb 5-1: Product: syz [ 97.434304][ T4505] usb 5-1: Manufacturer: syz [ 97.434317][ T4505] usb 5-1: SerialNumber: syz [ 97.440360][ T4505] usb 5-1: config 0 descriptor?? [ 97.459099][ T4505] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 97.508245][ T10] usb 4-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 97.512192][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.512223][ T10] usb 4-1: Product: syz [ 97.512236][ T10] usb 4-1: Manufacturer: syz [ 97.512274][ T10] usb 4-1: SerialNumber: syz [ 97.538217][ T10] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 97.545094][ T10] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB1 [ 97.576796][ T5884] vivid-000: disconnect [ 97.581821][ T5707] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 97.616416][ T10] usb 2-1: USB disconnect, device number 7 [ 97.631551][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 97.632538][ T10] cp210x 2-1:0.0: device disconnected [ 97.747994][ T5707] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 97.753688][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.753716][ T5707] usb 3-1: Product: syz [ 97.753730][ T5707] usb 3-1: Manufacturer: syz [ 97.753742][ T5707] usb 3-1: SerialNumber: syz [ 97.861119][ T5672] usb 5-1: USB disconnect, device number 4 [ 97.913201][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.913754][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.186585][ T5881] vivid-000: reconnect [ 98.193447][ T5707] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 98.193529][ T5707] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 98.194008][ T5707] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 98.194048][ T5707] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 98.194962][ T5707] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 98.254752][ T5707] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 98.274312][ T5707] usb 3-1: USB disconnect, device number 6 [ 98.306325][ T5888] syzkaller0: entered promiscuous mode [ 98.306362][ T5888] syzkaller0: entered allmulticast mode [ 98.324385][ T5888] tipc: Started in network mode [ 98.324460][ T5888] tipc: Node identity c6a5d8f24ccb, cluster identity 4711 [ 98.324877][ T5888] tipc: Enabled bearer , priority 0 [ 98.334239][ T5887] tipc: Resetting bearer [ 98.368995][ T5887] tipc: Disabling bearer [ 98.498187][ T5892] syzkaller0: entered promiscuous mode [ 98.509488][ T5892] syzkaller0: entered allmulticast mode [ 98.520953][ T5892] tipc: Started in network mode [ 98.532545][ T5892] tipc: Node identity d6813b9ec7df, cluster identity 4711 [ 98.540690][ T5892] tipc: Enabled bearer , priority 0 [ 98.552332][ T5892] tipc: Resetting bearer [ 98.562533][ T5891] tipc: Resetting bearer [ 98.585120][ T5891] tipc: Disabling bearer [ 98.942693][ T5707] usb 4-1: USB disconnect, device number 6 [ 98.980644][ T5707] qcserial ttyUSB1: Qualcomm USB modem converter now disconnected from ttyUSB1 [ 98.983167][ T5707] qcserial 4-1:1.0: device disconnected [ 99.389409][ T5922] xt_policy: too many policy elements [ 99.402406][ T5922] FAULT_INJECTION: forcing a failure. [ 99.402406][ T5922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.402470][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.2.66 Not tainted syzkaller #0 PREEMPT(full) [ 99.402488][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.402498][ T5922] Call Trace: [ 99.402506][ T5922] [ 99.402514][ T5922] dump_stack_lvl+0xe8/0x150 [ 99.402561][ T5922] should_fail_ex+0x410/0x560 [ 99.402587][ T5922] _copy_to_user+0x31/0xb0 [ 99.402608][ T5922] simple_read_from_buffer+0xe1/0x170 [ 99.402634][ T5922] proc_fail_nth_read+0x1bb/0x230 [ 99.402658][ T5922] ? common_file_perm+0x20e/0x2b0 [ 99.402678][ T5922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.402704][ T5922] ? rw_verify_area+0x24a/0x4c0 [ 99.402726][ T5922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.402750][ T5922] vfs_read+0x213/0xa80 [ 99.402778][ T5922] ? __pfx___mutex_lock+0x10/0x10 [ 99.402796][ T5922] ? __pfx_vfs_read+0x10/0x10 [ 99.402822][ T5922] ? __fget_files+0x2a/0x420 [ 99.402849][ T5922] ? __fget_files+0x3a2/0x420 [ 99.402878][ T5922] ? __fget_files+0x2a/0x420 [ 99.402910][ T5922] ksys_read+0x150/0x270 [ 99.402939][ T5922] ? __pfx_ksys_read+0x10/0x10 [ 99.402963][ T5922] ? __pfx_v4l2_ioctl+0x10/0x10 [ 99.402994][ T5922] do_syscall_64+0x166/0x520 [ 99.403011][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.403028][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 99.403050][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.403069][ T5922] RIP: 0033:0x7f99ea55e98e [ 99.403086][ T5922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.403101][ T5922] RSP: 002b:00007f99eb3c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.403120][ T5922] RAX: ffffffffffffffda RBX: 00007f99eb3c66c0 RCX: 00007f99ea55e98e [ 99.403132][ T5922] RDX: 000000000000000f RSI: 00007f99eb3c60a0 RDI: 0000000000000008 [ 99.403144][ T5922] RBP: 00007f99eb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.403155][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.403166][ T5922] R13: 00007f99ea826038 R14: 00007f99ea825fa0 R15: 00007f99ea94fa48 [ 99.403192][ T5922] [ 100.066683][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.126603][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 100.226646][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 100.232508][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.242932][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.242956][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.242978][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.276992][ T4505] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.285682][ T10] usb 3-1: config 0 descriptor?? [ 100.297276][ T10] hub 3-1:0.0: USB hub found [ 100.302023][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 100.308679][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.319230][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.319274][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.319314][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.357075][ T9] usb 4-1: config 0 descriptor?? [ 100.375080][ T9] hub 4-1:0.0: USB hub found [ 100.460266][ T4505] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 100.472500][ T4505] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 100.484151][ T4505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.509917][ T10] hub 3-1:0.0: 1 port detected [ 100.537523][ T4505] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 100.585785][ T9] hub 4-1:0.0: 1 port detected [ 100.936222][ T5940] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 100.973815][ T5943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.990283][ T5940] bond1 (unregistering): Released all slaves [ 101.131060][ T9] hub 3-1:0.0: activate --> -90 [ 101.204881][ T10] hub 4-1:0.0: activate --> -90 [ 101.217753][ T5672] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.377967][ T5672] usb 1-1: Using ep0 maxpacket: 8 [ 101.389507][ T5672] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 101.393222][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.393246][ T5672] usb 1-1: Product: syz [ 101.393259][ T5672] usb 1-1: Manufacturer: syz [ 101.393272][ T5672] usb 1-1: SerialNumber: syz [ 101.398332][ T5672] usb 1-1: config 0 descriptor?? [ 101.403113][ T5672] gspca_main: se401-2.14.0 probing 047d:5003 [ 101.550558][ T50] usb 3-1: Failed to suspend device, error -71 [ 101.562247][ T9] usb 3-1: USB disconnect, device number 7 [ 101.611121][ T4505] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 101.623152][ T4505] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 101.623215][ T4505] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 101.653494][ T985] usb 4-1: USB disconnect, device number 7 [ 101.661477][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.683017][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.793238][ T5946] CIFS: bad ip= option (::.) [ 101.902977][ T5672] gspca_se401: ExtraFeatures: 4 [ 101.903002][ T5672] gspca_se401: Frame size: 64x513 bayer [ 101.903707][ T5672] gspca_se401: Frame size: 259x0 bayer [ 101.903724][ T5672] gspca_se401: Frame size: 0x0 1/16th janggu [ 101.903736][ T5672] gspca_se401: Frame size: 1x0 bayer [ 101.903745][ T5672] gspca_se401: Frame size: 1343x0 bayer [ 102.066679][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.123614][ T5672] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 102.146113][ T5672] usb 1-1: USB disconnect, device number 4 [ 102.206808][ T9] usb 5-1: device descriptor read/64, error -71 [ 102.337559][ T985] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 102.446710][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.486793][ T985] usb 3-1: Using ep0 maxpacket: 16 [ 102.487503][ T985] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 102.491225][ T985] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 102.491275][ T985] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.491298][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 102.491322][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.491346][ T985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.491382][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.502324][ T985] usb 3-1: config 0 descriptor?? [ 102.503079][ T5959] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 102.528137][ T985] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 102.667303][ T9] usb 5-1: device descriptor read/64, error -71 [ 102.783126][ T9] usb usb5-port1: attempt power cycle [ 102.892910][ T10] usb 3-1: USB disconnect, device number 8 [ 102.980467][ T985] usb 2-1: USB disconnect, device number 8 [ 103.126758][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.147388][ T9] usb 5-1: device descriptor read/8, error -71 [ 103.306672][ T5707] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 103.394924][ T5974] FAULT_INJECTION: forcing a failure. [ 103.394924][ T5974] name failslab, interval 1, probability 0, space 0, times 0 [ 103.394972][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(full) [ 103.394992][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.395001][ T5974] Call Trace: [ 103.395009][ T5974] [ 103.395015][ T5974] dump_stack_lvl+0xe8/0x150 [ 103.395051][ T5974] should_fail_ex+0x410/0x560 [ 103.395082][ T5974] should_failslab+0xa8/0x100 [ 103.395104][ T5974] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 103.395134][ T5974] ? __d_alloc+0x37/0x6f0 [ 103.395157][ T5974] ? __d_alloc+0x37/0x6f0 [ 103.395183][ T5974] ? make_vfsuid+0x49/0xa0 [ 103.395203][ T5974] __d_alloc+0x37/0x6f0 [ 103.395230][ T5974] d_alloc+0x4b/0x190 [ 103.395257][ T5974] vfs_tmpfile+0x2fc/0xa10 [ 103.395294][ T5974] do_tmpfile+0xd3/0x240 [ 103.395323][ T5974] path_openat+0x1638/0x1d60 [ 103.395354][ T5974] ? __lock_acquire+0x6df/0x2e50 [ 103.395382][ T5974] do_file_open+0x23e/0x4a0 [ 103.395413][ T5974] ? __pfx_do_file_open+0x10/0x10 [ 103.395458][ T5974] ? _raw_spin_unlock+0x28/0x50 [ 103.395481][ T5974] ? alloc_fd+0x651/0x6c0 [ 103.395513][ T5974] do_sys_openat2+0x115/0x200 [ 103.395537][ T5974] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.395569][ T5974] __se_sys_openat2+0x223/0x2d0 [ 103.395594][ T5974] ? __pfx___se_sys_openat2+0x10/0x10 [ 103.395628][ T5974] do_syscall_64+0x166/0x520 [ 103.395644][ T5974] ? trace_irq_disable+0x3b/0x140 [ 103.395661][ T5974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.395686][ T5974] ? clear_bhb_loop+0x70/0xc0 [ 103.395708][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.395726][ T5974] RIP: 0033:0x7fd81ed9e159 [ 103.395743][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.395758][ T5974] RSP: 002b:00007fd81fd50028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 103.395777][ T5974] RAX: ffffffffffffffda RBX: 00007fd81f025fa0 RCX: 00007fd81ed9e159 [ 103.395790][ T5974] RDX: 0000200000000140 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 103.395802][ T5974] RBP: 00007fd81fd50090 R08: 0000000000000000 R09: 0000000000000000 [ 103.395813][ T5974] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 103.395826][ T5974] R13: 00007fd81f026038 R14: 00007fd81f025fa0 R15: 00007fd81f14fa48 [ 103.395855][ T5974] [ 103.426796][ T985] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 103.436984][ T5707] usb 1-1: device descriptor read/64, error -71 [ 103.440828][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.500235][ T9] usb 5-1: device descriptor read/8, error -71 [ 103.580716][ T985] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.582004][ T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.582033][ T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.582061][ T985] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.582099][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.592534][ T985] usb 2-1: config 0 descriptor?? [ 103.634162][ T9] usb usb5-port1: unable to enumerate USB device [ 103.721108][ T5707] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 103.741092][ T5978] program syz.3.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.801617][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.803243][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.887186][ T5707] usb 1-1: device descriptor read/64, error -71 [ 103.893681][ T30] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 103.997879][ T5707] usb usb1-port1: attempt power cycle [ 104.016088][ T985] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 104.035271][ T985] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 104.048820][ T30] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 104.063385][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.063429][ T30] usb 3-1: Product: syz [ 104.063463][ T30] usb 3-1: Manufacturer: syz [ 104.063478][ T30] usb 3-1: SerialNumber: syz [ 104.092793][ T30] usb 3-1: config 0 descriptor?? [ 104.107684][ T30] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 104.186609][ T4505] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.288737][ T9] usb 2-1: USB disconnect, device number 9 [ 104.348669][ T4505] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.348732][ T4505] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 104.349862][ T4505] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 104.349890][ T4505] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 104.349906][ T4505] usb 4-1: config 63 has no interface number 0 [ 104.349942][ T4505] usb 4-1: config 63 interface 66 has no altsetting 0 [ 104.351969][ T4505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.351990][ T4505] usb 4-1: Product: syz [ 104.352007][ T4505] usb 4-1: Manufacturer: syz [ 104.352024][ T4505] usb 4-1: SerialNumber: syz [ 104.393790][ T5707] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 104.430972][ T5707] usb 1-1: device descriptor read/8, error -71 [ 104.666684][ T5707] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 104.687816][ T5707] usb 1-1: device descriptor read/8, error -71 [ 104.703686][ T4505] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 104.710929][ T4505] usb 4-1: USB disconnect, device number 8 [ 104.718584][ T30] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 104.718693][ T30] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 104.746047][ T30] usb 3-1: USB disconnect, device number 9 [ 104.796882][ T5707] usb usb1-port1: unable to enumerate USB device [ 105.176660][ T30] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 105.316819][ T30] usb 2-1: device descriptor read/64, error -71 [ 105.486639][ T5672] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.546635][ T4505] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 105.556697][ T30] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 105.646611][ T5672] usb 4-1: Using ep0 maxpacket: 16 [ 105.647411][ T5672] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 105.648601][ T5672] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 105.648624][ T5672] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 105.648642][ T5672] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 105.648658][ T5672] usb 4-1: config 166 has no interface number 0 [ 105.648673][ T5672] usb 4-1: config 166 has no interface number 1 [ 105.648717][ T5672] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 105.648735][ T5672] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 105.648765][ T5672] usb 4-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 105.648787][ T5672] usb 4-1: config 166 interface 177 has no altsetting 0 [ 105.648803][ T5672] usb 4-1: config 166 interface 34 has no altsetting 0 [ 105.650859][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.650882][ T5672] usb 4-1: Product: syz [ 105.650895][ T5672] usb 4-1: Manufacturer: syz [ 105.650908][ T5672] usb 4-1: SerialNumber: syz [ 105.686729][ T30] usb 2-1: device descriptor read/64, error -71 [ 105.748287][ T4505] usb 3-1: Using ep0 maxpacket: 32 [ 105.767867][ T4505] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 105.798140][ T30] usb usb2-port1: attempt power cycle [ 105.803860][ T4505] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 105.803905][ T4505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 105.803954][ T4505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 105.803978][ T4505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 105.804004][ T4505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 105.863890][ T4505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.872040][ T4505] usb 3-1: Product: syz [ 105.876309][ T4505] usb 3-1: Manufacturer: syz [ 105.881084][ T4505] usb 3-1: SerialNumber: syz [ 105.893973][ T4505] usb 3-1: config 0 descriptor?? [ 105.904123][ T5672] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 106.085793][ T5672] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 106.136624][ T30] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 106.168009][ T30] usb 2-1: device descriptor read/8, error -71 [ 106.243506][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 106.292299][ T5672] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 106.292375][ T5672] uvcvideo 4-1:166.34: No valid video chain found. [ 106.302442][ T5672] usb 4-1: USB disconnect, device number 9 [ 106.326274][ T4505] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 106.335159][ T4505] input input10: Device does not respond to id packet M [ 106.351263][ T4505] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 106.351354][ T4505] input input10: Device does not respond to id packet P [ 106.364788][ T4505] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 106.364841][ T4505] input input10: Device does not respond to id packet B [ 106.380150][ T4505] input input10: Device does not respond to id packet N [ 106.392204][ T6020] FAULT_INJECTION: forcing a failure. [ 106.392204][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 106.406179][ T6020] CPU: 0 UID: 0 PID: 6020 Comm: syz.0.101 Not tainted syzkaller #0 PREEMPT(full) [ 106.406208][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.406218][ T6020] Call Trace: [ 106.406225][ T6020] [ 106.406233][ T6020] dump_stack_lvl+0xe8/0x150 [ 106.406266][ T6020] should_fail_ex+0x410/0x560 [ 106.406303][ T6020] should_failslab+0xa8/0x100 [ 106.406323][ T6020] ? skb_clone+0x212/0x3a0 [ 106.406345][ T6020] kmem_cache_alloc_noprof+0xa1/0x600 [ 106.406374][ T6020] ? skb_clone+0x212/0x3a0 [ 106.406401][ T6020] skb_clone+0x212/0x3a0 [ 106.406426][ T6020] __netlink_deliver_tap+0x413/0x860 [ 106.406461][ T6020] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.406483][ T6020] netlink_deliver_tap+0x19c/0x1b0 [ 106.406503][ T6020] netlink_unicast+0x781/0x940 [ 106.406531][ T6020] netlink_sendmsg+0x813/0xb40 [ 106.406560][ T6020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.406587][ T6020] ? apparmor_socket_sendmsg+0x98/0x360 [ 106.406616][ T6020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.406637][ T6020] sock_sendmsg_nosec+0x13a/0x180 [ 106.406664][ T6020] __sys_sendto+0x408/0x5a0 [ 106.406688][ T6020] ? __pfx___sys_sendto+0x10/0x10 [ 106.406733][ T6020] ? do_user_addr_fault+0xc4c/0x1340 [ 106.406755][ T6020] __x64_sys_sendto+0xde/0x100 [ 106.406777][ T6020] do_syscall_64+0x166/0x520 [ 106.406793][ T6020] ? trace_irq_disable+0x3b/0x140 [ 106.406810][ T6020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.406829][ T6020] ? clear_bhb_loop+0x70/0xc0 [ 106.406852][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.406869][ T6020] RIP: 0033:0x7f11db75e98e [ 106.406887][ T6020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.406901][ T6020] RSP: 002b:00007f11dc6bbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.406922][ T6020] RAX: ffffffffffffffda RBX: 00007f11dc6bd6c0 RCX: 00007f11db75e98e [ 106.406935][ T6020] RDX: 0000000000000024 RSI: 00007f11dc6bc000 RDI: 0000000000000003 [ 106.406946][ T6020] RBP: 0000000000000000 R08: 00007f11dc6bbf04 R09: 000000000000000c [ 106.406958][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 106.406968][ T6020] R13: 00007f11dc6bbf58 R14: 00007f11dc6bc000 R15: 0000000000000000 [ 106.406996][ T6020] [ 106.407869][ T30] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 106.430594][ T30] usb 2-1: device descriptor read/8, error -71 [ 106.537586][ T30] usb usb2-port1: unable to enumerate USB device [ 106.577156][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.583635][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.602224][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.610957][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.619392][ T6001] netlink: 14 bytes leftover after parsing attributes in process `syz.2.95'. [ 106.686341][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.694160][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.741602][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.770804][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.786019][ T6001] bond0 (unregistering): Released all slaves [ 106.879658][ T4505] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 106.890136][ T4505] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 106.894537][ T6031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.903515][ T4505] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 106.909887][ T4505] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 106.923862][ T4505] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 106.949173][ T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.957117][ T4505] usb 3-1: USB disconnect, device number 10 [ 107.037712][ T5707] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 107.051824][ T12] IPVS: starting estimator thread 0... [ 107.086649][ T30] usb 1-1: device descriptor read/64, error -71 [ 107.166996][ T6034] IPVS: using max 33 ests per chain, 79200 per kthread [ 107.187851][ T5707] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 107.189452][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.189476][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.189520][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.211109][ T5707] usb 5-1: config 0 descriptor?? [ 107.221551][ T5707] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 107.229564][ T5707] dvb-usb: bulk message failed: -22 (3/0) [ 107.265264][ T5707] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 107.272363][ T5707] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 107.272436][ T5707] usb 5-1: media controller created [ 107.275720][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.327000][ T30] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 107.334594][ T5707] dvb-usb: bulk message failed: -22 (6/0) [ 107.334753][ T5707] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 107.348209][ T5707] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 107.364524][ T5707] dvb-usb: schedule remote query interval to 150 msecs. [ 107.364574][ T5707] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 107.451045][ T6029] dibusb: i2c wr: len=1116 is too big! [ 107.451045][ T6029] [ 107.457963][ T30] usb 1-1: device descriptor read/64, error -71 [ 107.470129][ T5707] usb 5-1: USB disconnect, device number 9 [ 107.569678][ T30] usb usb1-port1: attempt power cycle [ 107.589816][ T5707] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 107.907016][ T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 107.929225][ T30] usb 1-1: device descriptor read/8, error -71 [ 107.946711][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 108.076956][ T10] usb 3-1: device descriptor read/64, error -71 [ 108.170390][ T30] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 108.190975][ T30] usb 1-1: device descriptor read/8, error -71 [ 108.297240][ T30] usb usb1-port1: unable to enumerate USB device [ 108.336644][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 108.466966][ T10] usb 3-1: device descriptor read/64, error -71 [ 108.476767][ T4505] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 108.496784][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 108.577063][ T10] usb usb3-port1: attempt power cycle [ 108.637460][ T4505] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 108.638853][ T4505] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.638898][ T4505] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.641563][ T4505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.641586][ T4505] usb 2-1: Product: syz [ 108.641599][ T4505] usb 2-1: Manufacturer: syz [ 108.641613][ T4505] usb 2-1: SerialNumber: syz [ 108.648315][ T9] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 108.649312][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.649353][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.656592][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.656622][ T9] usb 4-1: Product: syz [ 108.656634][ T9] usb 4-1: Manufacturer: syz [ 108.656647][ T9] usb 4-1: SerialNumber: syz [ 108.659609][ T4505] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 108.659719][ T4505] gspca_mr97310a: reg write [21] error -22 [ 108.659788][ T4505] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -22 [ 108.688838][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 108.688920][ T9] gspca_mr97310a: reg write [21] error -22 [ 108.688990][ T9] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -22 [ 108.728502][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.889969][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 108.897463][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.908484][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.908545][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.908580][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.920375][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 108.921252][ T30] usb 5-1: config 0 descriptor?? [ 108.929077][ T30] hub 5-1:0.0: USB hub found [ 108.978073][ T10] usb 3-1: device descriptor read/8, error -71 [ 109.138390][ T30] hub 5-1:0.0: 1 port detected [ 109.145150][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.150832][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.216643][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 109.237998][ T10] usb 3-1: device descriptor read/8, error -71 [ 109.272301][ T5708] usb 4-1: USB disconnect, device number 10 [ 109.347009][ T10] usb usb3-port1: unable to enumerate USB device [ 109.621759][ T6066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.634720][ T6066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.742301][ T6069] netlink: 'syz.0.116': attribute type 8 has an invalid length. [ 109.746189][ T5708] hub 5-1:0.0: activate --> -90 [ 110.152652][ T10] usb 5-1: USB disconnect, device number 10 [ 110.156898][ T5707] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 110.158702][ T62] usb 5-1: Failed to suspend device, error -71 [ 110.226898][ T30] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 110.307462][ T5707] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 110.308564][ T5707] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 110.308589][ T5707] usb 1-1: config 0 has no interface number 0 [ 110.308626][ T5707] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 110.308649][ T5707] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.310535][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.310557][ T5707] usb 1-1: Product: syz [ 110.310570][ T5707] usb 1-1: Manufacturer: syz [ 110.310583][ T5707] usb 1-1: SerialNumber: syz [ 110.318082][ T5707] usb 1-1: config 0 descriptor?? [ 110.318885][ T6071] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 110.320947][ T5707] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 110.343388][ T5707] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 110.397157][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 110.400964][ T30] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 110.409716][ T30] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 110.409743][ T30] usb 4-1: config 0 has no interface number 0 [ 110.409784][ T30] usb 4-1: config 0 interface 12 has no altsetting 0 [ 110.412061][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.412086][ T30] usb 4-1: Product: syz [ 110.412099][ T30] usb 4-1: Manufacturer: syz [ 110.412112][ T30] usb 4-1: SerialNumber: syz [ 110.420242][ T30] usb 4-1: config 0 descriptor?? [ 110.632186][ T30] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 110.632262][ T30] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 110.632299][ T30] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 110.632372][ T30] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 110.641834][ T30] usb 4-1: USB disconnect, device number 11 [ 110.875622][ T6071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.882429][ T6071] block device autoloading is deprecated and will be removed. [ 110.924321][ T6071] Zero length message leads to an empty skb [ 110.931852][ T6082] ip_tables: iptables: counters copy to user failed while replacing table [ 110.934266][ T6082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.099024][ T6083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.362584][ T9] usb 2-1: USB disconnect, device number 14 [ 111.426626][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 111.579940][ T10] usb 3-1: device descriptor read/64, error -71 [ 111.718045][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 111.827935][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 111.966651][ T10] usb 3-1: device descriptor read/64, error -71 [ 111.967865][ T30] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 111.981041][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 112.087188][ T10] usb usb3-port1: attempt power cycle [ 112.116889][ T9] usb 2-1: device descriptor read/64, error -71 [ 112.128919][ T30] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 112.130101][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 51551, setting to 64 [ 112.130142][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.133735][ T30] usb 5-1: config 0 descriptor?? [ 112.134588][ T6099] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.296672][ T5728] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.339443][ T6097] trusted_key: encrypted_key: key user:syz not found [ 112.340432][ T30] ath6kl: Failed to submit usb control message: -71 [ 112.340525][ T30] ath6kl: unable to send the bmi data to the device: -71 [ 112.340544][ T30] ath6kl: Unable to send get target info: -71 [ 112.343419][ T30] ath6kl: Failed to init ath6kl core: -71 [ 112.359104][ T30] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 112.375836][ T30] usb 5-1: USB disconnect, device number 11 [ 112.386671][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 112.456674][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 112.476604][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 112.477541][ T10] usb 3-1: device descriptor read/8, error -71 [ 112.477910][ T5728] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 112.479721][ T5728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.479770][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.482996][ T5728] usb 4-1: config 0 descriptor?? [ 112.486470][ T5728] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 112.536679][ T9] usb 2-1: device descriptor read/64, error -71 [ 112.647174][ T9] usb usb2-port1: attempt power cycle [ 112.716741][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 112.737325][ T10] usb 3-1: device descriptor read/8, error -71 [ 112.847653][ T10] usb usb3-port1: unable to enumerate USB device [ 112.983347][ T10] usb 1-1: USB disconnect, device number 13 [ 112.998205][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 113.013568][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 113.016132][ T10] cyberjack 1-1:0.69: device disconnected [ 113.029252][ T9] usb 2-1: device descriptor read/8, error -71 [ 113.266841][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 113.287858][ T9] usb 2-1: device descriptor read/8, error -71 [ 113.378624][ T5692] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 113.407033][ T9] usb usb2-port1: unable to enumerate USB device [ 113.426606][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 113.527678][ T5692] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.531313][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.531339][ T5692] usb 5-1: Product: syz [ 113.531352][ T5692] usb 5-1: Manufacturer: syz [ 113.531388][ T5692] usb 5-1: SerialNumber: syz [ 113.534946][ T5692] usb 5-1: config 0 descriptor?? [ 113.577401][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 113.579691][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 113.579720][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 113.579786][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.594214][ T10] usb 1-1: probing VID:PID(0424:012C) [ 113.611787][ T10] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 113.611816][ T10] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 113.611833][ T10] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 113.611871][ T10] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 113.611892][ T10] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 113.704416][ T5728] gspca_vc032x: reg_w err -71 [ 113.704551][ T5728] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 113.710940][ T5728] usb 4-1: USB disconnect, device number 12 [ 113.739848][ T5692] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.988705][ T10] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 114.191164][ T10] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 114.706720][ T5728] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 114.752211][ T5692] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 114.760899][ T5692] usb 5-1: USB disconnect, device number 12 [ 114.769203][ T30] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 114.857592][ T5728] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 114.858899][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.858943][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.867677][ T5728] usb 3-1: config 0 descriptor?? [ 114.931223][ T30] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 114.941605][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.952283][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.976452][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.985995][ T30] usb 4-1: Product: syz [ 114.990527][ T30] usb 4-1: Manufacturer: syz [ 114.995369][ T30] usb 4-1: SerialNumber: syz [ 115.014232][ T30] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 115.014325][ T30] gspca_mr97310a: reg write [21] error -22 [ 115.014386][ T30] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -22 [ 115.243117][ T6133] fuse: Unknown parameter '' [ 115.245432][ T6133] capability: warning: `syz.1.137' uses deprecated v2 capabilities in a way that may be insecure [ 115.289547][ T5728] hid_parser_main: 47 callbacks suppressed [ 115.289601][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289637][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289690][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289716][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289743][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289768][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289815][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289844][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289870][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.289898][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x0 [ 115.388359][ T5728] aquacomputer_d5next 0003:0C70:F003.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 115.487342][ T30] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 115.617054][ T5707] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.618329][ T5708] usb 3-1: USB disconnect, device number 19 [ 115.639678][ T30] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 115.642268][ T30] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 115.642301][ T30] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 115.642327][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 115.642348][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 115.645342][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.645426][ T30] usb 2-1: Product: syz [ 115.645438][ T30] usb 2-1: Manufacturer: syz [ 115.645451][ T30] usb 2-1: SerialNumber: syz [ 115.651775][ T30] usb 2-1: config 0 descriptor?? [ 115.656275][ T6133] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 115.658263][ T30] usb 2-1: ucan: probing device on interface #0 [ 115.658289][ T30] usb 2-1: ucan: invalid endpoint configuration [ 115.658302][ T30] usb 2-1: ucan: probe failed; try to update the device firmware [ 115.776967][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 115.777653][ T5707] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 115.779690][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.783464][ T5707] usb 5-1: config 0 descriptor?? [ 115.794401][ T5707] gspca_main: sq930x-2.14.0 probing 041e:403c [ 115.865186][ T5708] usb 2-1: USB disconnect, device number 19 [ 115.967755][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.973239][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.309295][ T62] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 116.342278][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 116.344741][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 116.345133][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 116.348874][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 116.597084][ T5708] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 116.648046][ T6152] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.754303][ T5708] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 116.759389][ T5708] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 116.759439][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.759463][ T5708] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.759485][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.759507][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.770411][ T5708] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 116.770462][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.770486][ T5708] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.770507][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.770529][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.772038][ T5708] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 116.772082][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.772106][ T5708] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.772127][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.772149][ T5708] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.796689][ T5707] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 116.796785][ T5707] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 116.804125][ T5708] usb 3-1: string descriptor 0 read error: -22 [ 116.804261][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.906000][ T5708] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 117.310543][ T5728] usb 5-1: USB disconnect, device number 13 [ 117.407513][ T62] usb 1-1: device descriptor read/64, error -71 [ 117.446705][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 117.571538][ T5728] usb 4-1: USB disconnect, device number 13 [ 117.603478][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.603558][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 117.604928][ T9] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 117.604952][ T9] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 117.604969][ T9] usb 2-1: config 63 has no interface number 0 [ 117.604998][ T9] usb 2-1: config 63 interface 66 has no altsetting 0 [ 117.608402][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.608431][ T9] usb 2-1: Product: syz [ 117.608444][ T9] usb 2-1: Manufacturer: syz [ 117.608457][ T9] usb 2-1: SerialNumber: syz [ 117.659732][ T62] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 117.669282][ T4505] usb 3-1: USB disconnect, device number 20 [ 117.807982][ T62] usb 1-1: device firmware changed [ 117.812414][ T5602] usb 1-1: USB disconnect, device number 14 [ 117.835589][ T10] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 117.839168][ T9] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 117.841109][ T9] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 117.841563][ T9] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 117.842565][ T9] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 117.842992][ T9] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 117.843600][ T9] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 117.843676][ T9] uvcvideo 2-1:63.66: No streaming interface found for terminal 29. [ 117.843703][ T9] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized! [ 117.863045][ T9] usb 2-1: USB disconnect, device number 20 [ 117.913481][ T5602] USB vub300 remote SDIO host controller[0] now disconnected [ 118.036688][ T5728] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 118.066790][ T5602] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 118.066982][ T4505] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 118.189414][ T5728] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 118.191815][ T5728] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 118.191845][ T5728] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 118.191861][ T5728] usb 4-1: config 171 has no interface number 0 [ 118.191901][ T5728] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 118.191923][ T5728] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 118.191945][ T5728] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 118.195394][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.195425][ T5728] usb 4-1: Product: syz [ 118.195438][ T5728] usb 4-1: Manufacturer: syz [ 118.195451][ T5728] usb 4-1: SerialNumber: syz [ 118.205041][ T6165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.216711][ T4505] usb 3-1: Using ep0 maxpacket: 16 [ 118.219369][ T5602] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 118.219743][ T4505] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 118.221728][ T4505] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 118.221773][ T4505] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.221850][ T4505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 118.221874][ T4505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.221897][ T4505] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.221933][ T4505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.222063][ T5602] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 118.222081][ T5602] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 118.222098][ T5602] usb 1-1: config 171 has no interface number 0 [ 118.222136][ T5602] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 118.222157][ T5602] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 118.222178][ T5602] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 118.231987][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.232012][ T5602] usb 1-1: Product: syz [ 118.232025][ T5602] usb 1-1: Manufacturer: syz [ 118.232061][ T5602] usb 1-1: SerialNumber: syz [ 118.240454][ T4505] usb 3-1: config 0 descriptor?? [ 118.244116][ T6164] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 118.249733][ T6158] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 118.278910][ T4505] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 118.624827][ T5728] ath6kl: Failed to submit usb control message: -71 [ 118.625014][ T5728] ath6kl: unable to send the bmi data to the device: -71 [ 118.625030][ T5728] ath6kl: Unable to send get target info: -71 [ 118.661151][ T5728] ath6kl: Failed to init ath6kl core: -71 [ 118.663839][ T5728] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 118.718081][ T9] usb 3-1: USB disconnect, device number 21 [ 118.718989][ C0] pxrc 3-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 118.723363][ T5728] usb 4-1: USB disconnect, device number 14 [ 118.777969][ T5602] ath6kl: Failed to submit usb control message: -71 [ 118.778042][ T5602] ath6kl: unable to send the bmi data to the device: -71 [ 118.778055][ T5602] ath6kl: Unable to send get target info: -71 [ 118.788878][ T5602] ath6kl: Failed to init ath6kl core: -71 [ 118.794212][ T5602] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 118.823658][ T5602] usb 1-1: USB disconnect, device number 15 [ 118.898653][ C1] [ 118.901724][ C1] ============================= [ 118.906651][ C1] WARNING: suspicious RCU usage [ 118.911534][ C1] syzkaller #0 Not tainted [ 118.915968][ C1] ----------------------------- [ 118.920885][ C1] kernel/sched/core.c:9196 Illegal context switch in RCU-sched read-side critical section! [ 118.930920][ C1] [ 118.930920][ C1] other info that might help us debug this: [ 118.930920][ C1] [ 118.941223][ C1] [ 118.941223][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 118.949378][ C1] locks held by syz.1.150/6183: 3, last CPU#1: [ 118.955715][ C1] #0: ffff888030d816f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 118.965540][ C1] #1: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: fd_install+0x94/0x3d0 [ 118.975142][ C1] #2: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 118.985714][ C1] [ 118.985714][ C1] stack backtrace: [ 118.991675][ C1] CPU: 1 UID: 0 PID: 6183 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) [ 119.000893][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.010972][ C1] Call Trace: [ 119.014275][ C1] [ 119.017140][ C1] dump_stack_lvl+0xe8/0x150 [ 119.021770][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 119.027229][ C1] __might_resched+0xbb/0x4c0 [ 119.031960][ C1] ? __cancel_work_sync+0x5c/0x110 [ 119.037140][ C1] __cancel_work_sync+0x6d/0x110 [ 119.042131][ C1] mmc_free_host+0x19/0x30 [ 119.046600][ C1] call_timer_fn+0x18d/0x5f0 [ 119.051306][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.058052][ C1] ? call_timer_fn+0xd5/0x5f0 [ 119.062766][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 119.067909][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.073143][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.079850][ C1] __run_timer_base+0x652/0x8b0 [ 119.084731][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 119.090119][ C1] ? ktime_get+0x1f5/0x220 [ 119.094548][ C1] ? lapic_next_event+0x11/0x20 [ 119.099403][ C1] run_timer_softirq+0xb7/0x170 [ 119.104258][ C1] handle_softirqs+0x226/0x860 [ 119.109025][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 119.113796][ C1] __irq_exit_rcu+0xcb/0x220 [ 119.118391][ C1] irq_exit_rcu+0x9/0x30 [ 119.122631][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 119.128274][ C1] [ 119.131209][ C1] [ 119.134137][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.140115][ C1] RIP: 0010:fd_install+0x1df/0x3d0 [ 119.145227][ C1] Code: c1 ef 03 41 80 3c 2f 00 74 08 48 89 df e8 a9 17 e3 ff 45 89 ec 49 c1 e4 03 4c 8b 2b 4d 01 e5 4c 89 e8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ef e8 87 17 e3 ff 49 83 7d 00 00 0f 85 d2 01 00 00 41 [ 119.164834][ C1] RSP: 0018:ffffc9000bfa76a8 EFLAGS: 00000246 [ 119.170969][ C1] RAX: 1ffff1100a8ea64b RBX: ffff8880276a0108 RCX: 0000000000080000 [ 119.178939][ C1] RDX: ffffc90003ed1000 RSI: 000000000000022a RDI: 000000000000022b [ 119.186903][ C1] RBP: dffffc0000000000 R08: 0400000000000000 R09: 0000000000000000 [ 119.194863][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: 0000000000000258 [ 119.202828][ C1] R13: ffff888054753258 R14: ffffffff825479f4 R15: 1ffff11004ed4021 [ 119.210799][ C1] ? fd_install+0x94/0x3d0 [ 119.215242][ C1] ? fd_install+0x1a6/0x3d0 [ 119.219746][ C1] scm_recv_one_fd+0x17f/0x210 [ 119.224518][ C1] scm_detach_fds+0x215/0x6b0 [ 119.229207][ C1] scm_recv_unix+0x122/0x420 [ 119.233802][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 119.239011][ C1] ? unix_destroy_fpl+0x1cd/0x200 [ 119.244072][ C1] ? pid_vnr+0xfd/0x1e0 [ 119.248224][ C1] __unix_dgram_recvmsg+0x9d6/0xd70 [ 119.253429][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 119.259172][ C1] ? lock_acquire+0x115/0x350 [ 119.263844][ C1] ? aa_sock_msg_perm+0x129/0x210 [ 119.268876][ C1] ? unix_seqpacket_recvmsg+0x103/0x140 [ 119.274420][ C1] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 119.280311][ C1] sock_recvmsg+0x196/0x1e0 [ 119.284822][ C1] ____sys_recvmsg+0x1e6/0x4a0 [ 119.289593][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 119.294890][ C1] ? import_iovec+0x73/0xa0 [ 119.299399][ C1] ___sys_recvmsg+0x213/0x5a0 [ 119.304076][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 119.309271][ C1] ? lock_acquire+0x115/0x350 [ 119.313952][ C1] ? __fget_files+0x3a2/0x420 [ 119.318636][ C1] __x64_sys_recvmsg+0x1ae/0x290 [ 119.323571][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 119.329039][ C1] do_syscall_64+0x166/0x520 [ 119.333624][ C1] ? trace_irq_disable+0x3b/0x140 [ 119.338642][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.344707][ C1] ? clear_bhb_loop+0x70/0xc0 [ 119.349379][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.355264][ C1] RIP: 0033:0x7fe99339e159 [ 119.359683][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.379282][ C1] RSP: 002b:00007fe994198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 119.387692][ C1] RAX: ffffffffffffffda RBX: 00007fe993625fa0 RCX: 00007fe99339e159 [ 119.395674][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 119.403649][ C1] RBP: 00007fe993435024 R08: 0000000000000000 R09: 0000000000000000 [ 119.411641][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.419601][ C1] R13: 00007fe993626038 R14: 00007fe993625fa0 R15: 00007fe99374fa48 [ 119.427578][ C1] [ 119.430716][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 119.430734][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6183, name: syz.1.150 [ 119.430751][ C1] preempt_count: 101, expected: 0 [ 119.430764][ C1] RCU nest depth: 0, expected: 0 [ 119.430777][ C1] locks held by syz.1.150/6183: 3, last CPU#1: [ 119.430793][ C1] #0: ffff888030d816f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 119.430879][ C1] #1: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: fd_install+0x94/0x3d0 [ 119.430943][ C1] #2: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 119.431025][ C1] Preemption disabled at: [ 119.431033][ C1] [] fd_install+0x8d/0x3d0 [ 119.431073][ C1] CPU: 1 UID: 0 PID: 6183 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) [ 119.431095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.431105][ C1] Call Trace: [ 119.431113][ C1] [ 119.431120][ C1] dump_stack_lvl+0xe8/0x150 [ 119.431149][ C1] __might_resched+0x36a/0x4c0 [ 119.431177][ C1] ? fd_install+0x8d/0x3d0 [ 119.431203][ C1] __cancel_work_sync+0x6d/0x110 [ 119.431232][ C1] mmc_free_host+0x19/0x30 [ 119.431260][ C1] call_timer_fn+0x18d/0x5f0 [ 119.431286][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.431317][ C1] ? call_timer_fn+0xd5/0x5f0 [ 119.431341][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 119.431375][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.431405][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.431438][ C1] __run_timer_base+0x652/0x8b0 [ 119.431476][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 119.431504][ C1] ? ktime_get+0x1f5/0x220 [ 119.431526][ C1] ? lapic_next_event+0x11/0x20 [ 119.431556][ C1] run_timer_softirq+0xb7/0x170 [ 119.431578][ C1] handle_softirqs+0x226/0x860 [ 119.431606][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 119.431636][ C1] __irq_exit_rcu+0xcb/0x220 [ 119.431665][ C1] irq_exit_rcu+0x9/0x30 [ 119.431690][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 119.431724][ C1] [ 119.431732][ C1] [ 119.431740][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.431766][ C1] RIP: 0010:fd_install+0x1df/0x3d0 [ 119.431795][ C1] Code: c1 ef 03 41 80 3c 2f 00 74 08 48 89 df e8 a9 17 e3 ff 45 89 ec 49 c1 e4 03 4c 8b 2b 4d 01 e5 4c 89 e8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ef e8 87 17 e3 ff 49 83 7d 00 00 0f 85 d2 01 00 00 41 [ 119.431813][ C1] RSP: 0018:ffffc9000bfa76a8 EFLAGS: 00000246 [ 119.431832][ C1] RAX: 1ffff1100a8ea64b RBX: ffff8880276a0108 RCX: 0000000000080000 [ 119.431849][ C1] RDX: ffffc90003ed1000 RSI: 000000000000022a RDI: 000000000000022b [ 119.431910][ C1] RBP: dffffc0000000000 R08: 0400000000000000 R09: 0000000000000000 [ 119.431925][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: 0000000000000258 [ 119.431939][ C1] R13: ffff888054753258 R14: ffffffff825479f4 R15: 1ffff11004ed4021 [ 119.431956][ C1] ? fd_install+0x94/0x3d0 [ 119.431989][ C1] ? fd_install+0x1a6/0x3d0 [ 119.432013][ C1] scm_recv_one_fd+0x17f/0x210 [ 119.432042][ C1] scm_detach_fds+0x215/0x6b0 [ 119.432076][ C1] scm_recv_unix+0x122/0x420 [ 119.432103][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 119.432133][ C1] ? unix_destroy_fpl+0x1cd/0x200 [ 119.432163][ C1] ? pid_vnr+0xfd/0x1e0 [ 119.432184][ C1] __unix_dgram_recvmsg+0x9d6/0xd70 [ 119.432219][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 119.432249][ C1] ? lock_acquire+0x115/0x350 [ 119.432274][ C1] ? aa_sock_msg_perm+0x129/0x210 [ 119.432303][ C1] ? unix_seqpacket_recvmsg+0x103/0x140 [ 119.432336][ C1] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 119.432363][ C1] sock_recvmsg+0x196/0x1e0 [ 119.432394][ C1] ____sys_recvmsg+0x1e6/0x4a0 [ 119.432429][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 119.432471][ C1] ? import_iovec+0x73/0xa0 [ 119.432499][ C1] ___sys_recvmsg+0x213/0x5a0 [ 119.432531][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 119.432563][ C1] ? lock_acquire+0x115/0x350 [ 119.432598][ C1] ? __fget_files+0x3a2/0x420 [ 119.432637][ C1] __x64_sys_recvmsg+0x1ae/0x290 [ 119.432666][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 119.432714][ C1] do_syscall_64+0x166/0x520 [ 119.432734][ C1] ? trace_irq_disable+0x3b/0x140 [ 119.432756][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.432778][ C1] ? clear_bhb_loop+0x70/0xc0 [ 119.432805][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.432826][ C1] RIP: 0033:0x7fe99339e159 [ 119.432846][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.432872][ C1] RSP: 002b:00007fe994198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 119.432895][ C1] RAX: ffffffffffffffda RBX: 00007fe993625fa0 RCX: 00007fe99339e159 [ 119.432911][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 119.432925][ C1] RBP: 00007fe993435024 R08: 0000000000000000 R09: 0000000000000000 [ 119.432939][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.432952][ C1] R13: 00007fe993626038 R14: 00007fe993625fa0 R15: 00007fe99374fa48 [ 119.432985][ C1] [ 119.433628][ C1] [ 119.943081][ C1] ============================= [ 119.947989][ C1] WARNING: suspicious RCU usage [ 119.952854][ C1] syzkaller #0 Tainted: G W [ 119.958890][ C1] ----------------------------- [ 119.963785][ C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 119.975832][ C1] [ 119.975832][ C1] other info that might help us debug this: [ 119.975832][ C1] [ 119.986117][ C1] [ 119.986117][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 119.994237][ C1] locks held by syz.1.150/6183: 3, last CPU#1: [ 120.000439][ C1] #0: ffff888030d816f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 120.010207][ C1] #1: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: fd_install+0x94/0x3d0 [ 120.019794][ C1] #2: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 120.030296][ C1] [ 120.030296][ C1] stack backtrace: [ 120.036197][ C1] CPU: 1 UID: 0 PID: 6183 Comm: syz.1.150 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.046975][ C1] Tainted: [W]=WARN [ 120.050781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.060847][ C1] Call Trace: [ 120.064124][ C1] [ 120.066955][ C1] dump_stack_lvl+0xe8/0x150 [ 120.071540][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 120.076901][ C1] __synchronize_srcu+0x157/0x2f0 [ 120.081918][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 120.087449][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 120.092470][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.098273][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 120.103855][ C1] ? synchronize_srcu+0x20a/0x260 [ 120.108963][ C1] wakeup_source_unregister+0x129/0x3f0 [ 120.114529][ C1] mmc_host_classdev_release+0x47/0x100 [ 120.120083][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 120.126239][ C1] device_release+0xc4/0x1f0 [ 120.130915][ C1] kobject_put+0x222/0x550 [ 120.135329][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 120.140092][ C1] call_timer_fn+0x18d/0x5f0 [ 120.144683][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 120.151356][ C1] ? call_timer_fn+0xd5/0x5f0 [ 120.156033][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 120.161159][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.166364][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 120.173046][ C1] __run_timer_base+0x652/0x8b0 [ 120.177911][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 120.183289][ C1] ? ktime_get+0x1f5/0x220 [ 120.187711][ C1] ? lapic_next_event+0x11/0x20 [ 120.192561][ C1] run_timer_softirq+0xb7/0x170 [ 120.197416][ C1] handle_softirqs+0x226/0x860 [ 120.202530][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 120.207310][ C1] __irq_exit_rcu+0xcb/0x220 [ 120.212014][ C1] irq_exit_rcu+0x9/0x30 [ 120.216267][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 120.221914][ C1] [ 120.224848][ C1] [ 120.227769][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.233745][ C1] RIP: 0010:fd_install+0x1df/0x3d0 [ 120.238860][ C1] Code: c1 ef 03 41 80 3c 2f 00 74 08 48 89 df e8 a9 17 e3 ff 45 89 ec 49 c1 e4 03 4c 8b 2b 4d 01 e5 4c 89 e8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ef e8 87 17 e3 ff 49 83 7d 00 00 0f 85 d2 01 00 00 41 [ 120.258462][ C1] RSP: 0018:ffffc9000bfa76a8 EFLAGS: 00000246 [ 120.264540][ C1] RAX: 1ffff1100a8ea64b RBX: ffff8880276a0108 RCX: 0000000000080000 [ 120.272515][ C1] RDX: ffffc90003ed1000 RSI: 000000000000022a RDI: 000000000000022b [ 120.280499][ C1] RBP: dffffc0000000000 R08: 0400000000000000 R09: 0000000000000000 [ 120.288464][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: 0000000000000258 [ 120.296430][ C1] R13: ffff888054753258 R14: ffffffff825479f4 R15: 1ffff11004ed4021 [ 120.304400][ C1] ? fd_install+0x94/0x3d0 [ 120.308847][ C1] ? fd_install+0x1a6/0x3d0 [ 120.313351][ C1] scm_recv_one_fd+0x17f/0x210 [ 120.318147][ C1] scm_detach_fds+0x215/0x6b0 [ 120.322856][ C1] scm_recv_unix+0x122/0x420 [ 120.327470][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 120.332596][ C1] ? unix_destroy_fpl+0x1cd/0x200 [ 120.337626][ C1] ? pid_vnr+0xfd/0x1e0 [ 120.341788][ C1] __unix_dgram_recvmsg+0x9d6/0xd70 [ 120.347087][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 120.352807][ C1] ? lock_acquire+0x115/0x350 [ 120.357502][ C1] ? aa_sock_msg_perm+0x129/0x210 [ 120.362580][ C1] ? unix_seqpacket_recvmsg+0x103/0x140 [ 120.368168][ C1] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 120.374091][ C1] sock_recvmsg+0x196/0x1e0 [ 120.378615][ C1] ____sys_recvmsg+0x1e6/0x4a0 [ 120.383390][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 120.388689][ C1] ? import_iovec+0x73/0xa0 [ 120.393205][ C1] ___sys_recvmsg+0x213/0x5a0 [ 120.397886][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 120.403089][ C1] ? lock_acquire+0x115/0x350 [ 120.407776][ C1] ? __fget_files+0x3a2/0x420 [ 120.412469][ C1] __x64_sys_recvmsg+0x1ae/0x290 [ 120.417420][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 120.422915][ C1] do_syscall_64+0x166/0x520 [ 120.427522][ C1] ? trace_irq_disable+0x3b/0x140 [ 120.432579][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.438659][ C1] ? clear_bhb_loop+0x70/0xc0 [ 120.443362][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.449264][ C1] RIP: 0033:0x7fe99339e159 [ 120.453685][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.473289][ C1] RSP: 002b:00007fe994198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 120.481716][ C1] RAX: ffffffffffffffda RBX: 00007fe993625fa0 RCX: 00007fe99339e159 [ 120.489699][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 120.497679][ C1] RBP: 00007fe993435024 R08: 0000000000000000 R09: 0000000000000000 [ 120.505649][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.513621][ C1] R13: 00007fe993626038 R14: 00007fe993625fa0 R15: 00007fe99374fa48 [ 120.521610][ C1] [ 120.524718][ C1] BUG: sleeping function ca ** replaying previous printk message ** [ 120.524718][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 120.524745][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6183, name: syz.1.150 [ 120.524770][ C1] preempt_count: 101, expected: 0 [ 120.524784][ C1] RCU nest depth: 0, expected: 0 [ 120.524798][ C1] locks held by syz.1.150/6183: 3, last CPU#1: [ 120.524818][ C1] #0: ffff888030d816f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 120.524914][ C1] #1: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: fd_install+0x94/0x3d0 [ 120.524994][ C1] #2: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 120.525052][ C1] Preemption disabled at: [ 120.525057][ C1] [] fd_install+0x8d/0x3d0 [ 120.525095][ C1] CPU: 1 UID: 0 PID: 6183 Comm: syz.1.150 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.525123][ C1] Tainted: [W]=WARN [ 120.525130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.525143][ C1] Call Trace: [ 120.525153][ C1] [ 120.525160][ C1] dump_stack_lvl+0xe8/0x150 [ 120.525190][ C1] __might_resched+0x36a/0x4c0 [ 120.525222][ C1] ? fd_install+0x8d/0x3d0 [ 120.525250][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 120.525274][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 120.525294][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 120.525332][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.525361][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 120.525398][ C1] ? synchronize_srcu+0x20a/0x260 [ 120.525419][ C1] wakeup_source_unregister+0x129/0x3f0 [ 120.525457][ C1] mmc_host_classdev_release+0x47/0x100 [ 120.525493][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 120.525524][ C1] device_release+0xc4/0x1f0 [ 120.525551][ C1] kobject_put+0x222/0x550 [ 120.525576][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 120.525602][ C1] call_timer_fn+0x18d/0x5f0 [ 120.525626][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 120.525653][ C1] ? call_timer_fn+0xd5/0x5f0 [ 120.525678][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 120.525712][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.525739][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 120.525769][ C1] __run_timer_base+0x652/0x8b0 [ 120.525805][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 120.525831][ C1] ? ktime_get+0x1f5/0x220 [ 120.525852][ C1] ? lapic_next_event+0x11/0x20 [ 120.525887][ C1] run_timer_softirq+0xb7/0x170 [ 120.525910][ C1] handle_softirqs+0x226/0x860 [ 120.525941][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 120.525974][ C1] __irq_exit_rcu+0xcb/0x220 [ 120.526002][ C1] irq_exit_rcu+0x9/0x30 [ 120.526027][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 120.526058][ C1] [ 120.526065][ C1] [ 120.526073][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.526096][ C1] RIP: 0010:fd_install+0x1df/0x3d0 [ 120.526123][ C1] Code: c1 ef 03 41 80 3c 2f 00 74 08 48 89 df e8 a9 17 e3 ff 45 89 ec 49 c1 e4 03 4c 8b 2b 4d 01 e5 4c 89 e8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ef e8 87 17 e3 ff 49 83 7d 00 00 0f 85 d2 01 00 00 41 [ 120.526139][ C1] RSP: 0018:ffffc9000bfa76a8 EFLAGS: 00000246 [ 120.526157][ C1] RAX: 1ffff1100a8ea64b RBX: ffff8880276a0108 RCX: 0000000000080000 [ 120.526169][ C1] RDX: ffffc90003ed1000 RSI: 000000000000022a RDI: 000000000000022b [ 120.526180][ C1] RBP: dffffc0000000000 R08: 0400000000000000 R09: 0000000000000000 [ 120.526191][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: 0000000000000258 [ 120.526204][ C1] R13: ffff888054753258 R14: ffffffff825479f4 R15: 1ffff11004ed4021 [ 120.526221][ C1] ? fd_install+0x94/0x3d0 [ 120.526259][ C1] ? fd_install+0x1a6/0x3d0 [ 120.526288][ C1] scm_recv_one_fd+0x17f/0x210 [ 120.526320][ C1] scm_detach_fds+0x215/0x6b0 [ 120.526357][ C1] scm_recv_unix+0x122/0x420 [ 120.526388][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 120.526421][ C1] ? unix_destroy_fpl+0x1cd/0x200 [ 120.526453][ C1] ? pid_vnr+0xfd/0x1e0 [ 120.526474][ C1] __unix_dgram_recvmsg+0x9d6/0xd70 [ 120.526510][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 120.526538][ C1] ? lock_acquire+0x115/0x350 [ 120.526561][ C1] ? aa_sock_msg_perm+0x129/0x210 [ 120.526588][ C1] ? unix_seqpacket_recvmsg+0x103/0x140 [ 120.526618][ C1] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 120.526648][ C1] sock_recvmsg+0x196/0x1e0 [ 120.526688][ C1] ____sys_recvmsg+0x1e6/0x4a0 [ 120.526721][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 120.526764][ C1] ? import_iovec+0x73/0xa0 [ 120.526792][ C1] ___sys_recvmsg+0x213/0x5a0 [ 120.526821][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 120.526850][ C1] ? lock_acquire+0x115/0x350 [ 120.526891][ C1] ? __fget_files+0x3a2/0x420 [ 120.526927][ C1] __x64_sys_recvmsg+0x1ae/0x290 [ 120.526955][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 120.527000][ C1] do_syscall_64+0x166/0x520 [ 120.527018][ C1] ? trace_irq_disable+0x3b/0x140 [ 120.527038][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.527059][ C1] ? clear_bhb_loop+0x70/0xc0 [ 120.527084][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.527104][ C1] RIP: 0033:0x7fe99339e159 [ 120.527122][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.527138][ C1] RSP: 002b:00007fe994198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 120.527157][ C1] RAX: ffffffffffffffda RBX: 00007fe993625fa0 RCX: 00007fe99339e159 [ 120.527172][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 120.527185][ C1] RBP: 00007fe993435024 R08: 0000000000000000 R09: 0000000000000000 [ 120.527197][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.527209][ C1] R13: 00007fe993626038 R14: 00007fe993625fa0 R15: 00007fe99374fa48 [ 120.527239][ C1] [ 120.527282][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc9000bfa0000, but annotated. [ 120.527972][ C1] ------------[ cut here ]------------ [ 120.527980][ C1] 1 [ 120.527990][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz.1.150/6183 [ 121.125093][ C1] Modules linked in: [ 121.129017][ C1] CPU: 1 UID: 0 PID: 6183 Comm: syz.1.150 Tainted: G W syzkaller #0 PREEMPT(full) [ 121.139784][ C1] Tainted: [W]=WARN [ 121.143576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.153629][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 121.159551][ C1] Code: cc cc cc 41 ff c7 44 89 3d 49 64 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd d8 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 61 ad 6e 0a 3b 05 5f [ 121.179173][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 121.185270][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: e51027a535e4f300 [ 121.193259][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 121.201247][ C1] RBP: ffff88802a23bea0 R08: 0000000000000100 R09: 0000000000080000 [ 121.209227][ C1] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: 1ffff9200014314c [ 121.217199][ C1] R13: ffff88807814ad20 R14: dffffc0000000000 R15: 0000000000000001 [ 121.225172][ C1] FS: 00007fe9941986c0(0000) GS:ffff888124dd8000(0000) knlGS:0000000000000000 [ 121.234189][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.240769][ C1] CR2: 0000200000003340 CR3: 000000007ba20000 CR4: 00000000003526f0 [ 121.248743][ C1] Call Trace: [ 121.252021][ C1] [ 121.254861][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 121.260431][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 121.265482][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 121.271037][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 121.276075][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.281893][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 121.287662][ C1] ? synchronize_srcu+0x20a/0x260 [ 121.292715][ C1] wakeup_source_unregister+0x129/0x3f0 [ 121.298298][ C1] mmc_host_classdev_release+0x47/0x100 [ 121.303871][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 121.310054][ C1] device_release+0xc4/0x1f0 [ 121.314655][ C1] kobject_put+0x222/0x550 [ 121.319083][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 121.323845][ C1] call_timer_fn+0x18d/0x5f0 [ 121.328437][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 121.335104][ C1] ? call_timer_fn+0xd5/0x5f0 [ 121.339780][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 121.344894][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.350124][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 121.356809][ C1] __run_timer_base+0x652/0x8b0 [ 121.361678][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 121.367048][ C1] ? ktime_get+0x1f5/0x220 [ 121.371479][ C1] ? lapic_next_event+0x11/0x20 [ 121.376355][ C1] run_timer_softirq+0xb7/0x170 [ 121.381224][ C1] handle_softirqs+0x226/0x860 [ 121.386019][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 121.390801][ C1] __irq_exit_rcu+0xcb/0x220 [ 121.395392][ C1] irq_exit_rcu+0x9/0x30 [ 121.399628][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 121.405356][ C1] [ 121.408278][ C1] [ 121.411203][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.417180][ C1] RIP: 0010:fd_install+0x1df/0x3d0 [ 121.422295][ C1] Code: c1 ef 03 41 80 3c 2f 00 74 08 48 89 df e8 a9 17 e3 ff 45 89 ec 49 c1 e4 03 4c 8b 2b 4d 01 e5 4c 89 e8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ef e8 87 17 e3 ff 49 83 7d 00 00 0f 85 d2 01 00 00 41 [ 121.441900][ C1] RSP: 0018:ffffc9000bfa76a8 EFLAGS: 00000246 [ 121.447974][ C1] RAX: 1ffff1100a8ea64b RBX: ffff8880276a0108 RCX: 0000000000080000 [ 121.455939][ C1] RDX: ffffc90003ed1000 RSI: 000000000000022a RDI: 000000000000022b [ 121.463916][ C1] RBP: dffffc0000000000 R08: 0400000000000000 R09: 0000000000000000 [ 121.471884][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: 0000000000000258 [ 121.479861][ C1] R13: ffff888054753258 R14: ffffffff825479f4 R15: 1ffff11004ed4021 [ 121.487853][ C1] ? fd_install+0x94/0x3d0 [ 121.492309][ C1] ? fd_install+0x1a6/0x3d0 [ 121.496816][ C1] scm_recv_one_fd+0x17f/0x210 [ 121.501587][ C1] scm_detach_fds+0x215/0x6b0 [ 121.506279][ C1] scm_recv_unix+0x122/0x420 [ 121.510881][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 121.515998][ C1] ? unix_destroy_fpl+0x1cd/0x200 [ 121.521026][ C1] ? pid_vnr+0xfd/0x1e0 [ 121.525178][ C1] __unix_dgram_recvmsg+0x9d6/0xd70 [ 121.530565][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 121.536297][ C1] ? lock_acquire+0x115/0x350 [ 121.540980][ C1] ? aa_sock_msg_perm+0x129/0x210 [ 121.546004][ C1] ? unix_seqpacket_recvmsg+0x103/0x140 [ 121.551551][ C1] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 121.557455][ C1] sock_recvmsg+0x196/0x1e0 [ 121.561962][ C1] ____sys_recvmsg+0x1e6/0x4a0 [ 121.566730][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 121.572035][ C1] ? import_iovec+0x73/0xa0 [ 121.576563][ C1] ___sys_recvmsg+0x213/0x5a0 [ 121.581278][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 121.586492][ C1] ? lock_acquire+0x115/0x350 [ 121.591204][ C1] ? __fget_files+0x3a2/0x420 [ 121.595958][ C1] __x64_sys_recvmsg+0x1ae/0x290 [ 121.600911][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 121.606390][ C1] do_syscall_64+0x166/0x520 [ 121.610976][ C1] ? trace_irq_disable+0x3b/0x140 [ 121.615993][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.622056][ C1] ? clear_bhb_loop+0x70/0xc0 [ 121.626737][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.632621][ C1] RIP: 0033:0x7fe99339e159 [ 121.637034][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.656636][ C1] RSP: 002b:00007fe994198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 121.665058][ C1] RAX: ffffffffffffffda RBX: 00007fe993625fa0 RCX: 00007fe99339e159 [ 121.673026][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 121.681000][ C1] RBP: 00007fe993435024 R08: 0000000000000000 R09: 0000000000000000 [ 121.688972][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.696960][ C1] R13: 00007fe993626038 R14: 00007fe993625fa0 R15: 00007fe99374fa48 [ 121.704967][ C1] [ 121.707994][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.715310][ C1] CPU: 1 UID: 0 PID: 6183 Comm: syz.1.150 Tainted: G W syzkaller #0 PREEMPT(full) [ 121.726070][ C1] Tainted: [W]=WARN [ 121.729864][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.739908][ C1] Call Trace: [ 121.743188][ C1] [ 121.746024][ C1] vpanic+0x56d/0xa60 [ 121.750190][ C1] ? __pfx__printk+0x10/0x10 [ 121.754780][ C1] ? __pfx_vpanic+0x10/0x10 [ 121.759288][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 121.764586][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 121.769806][ C1] panic+0xc5/0xd0 [ 121.773540][ C1] ? __pfx_panic+0x10/0x10 [ 121.777978][ C1] __warn+0x315/0x4c0 [ 121.781972][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 121.787258][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 121.792547][ C1] __report_bug+0x276/0x570 [ 121.797090][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 121.802389][ C1] ? __pfx___report_bug+0x10/0x10 [ 121.807428][ C1] ? __wake_up_klogd+0xf0/0x130 [ 121.812306][ C1] ? vprintk_emit+0x4ee/0x560 [ 121.817005][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 121.822047][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 121.827329][ C1] report_bug+0x16b/0x220 [ 121.831752][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 121.837025][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 121.842315][ C1] handle_bug+0x9c/0x200 [ 121.846554][ C1] exc_invalid_op+0x1a/0x50 [ 121.851052][ C1] asm_exc_invalid_op+0x1a/0x20 [ 121.855901][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 121.861788][ C1] Code: cc cc cc 41 ff c7 44 89 3d 49 64 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd d8 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 61 ad 6e 0a 3b 05 5f [ 121.881819][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 121.887990][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: e51027a535e4f300 [ 121.895970][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 121.903943][ C1] RBP: ffff88802a23bea0 R08: 0000000000000100 R09: 0000000000080000 [ 121.911913][ C1] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: 1ffff9200014314c [ 121.919973][ C1] R13: ffff88807814ad20 R14: dffffc0000000000 R15: 0000000000000001 [ 121.927984][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 121.933279][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 121.938856][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 121.943884][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 121.949420][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 121.954461][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.960270][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 121.965841][ C1] ? synchronize_srcu+0x20a/0x260 [ 121.970863][ C1] wakeup_source_unregister+0x129/0x3f0 [ 121.976425][ C1] mmc_host_classdev_release+0x47/0x100 [ 121.981985][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 121.988150][ C1] device_release+0xc4/0x1f0 [ 121.992747][ C1] kobject_put+0x222/0x550 [ 121.997166][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 122.002044][ C1] call_timer_fn+0x18d/0x5f0 [ 122.006745][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 122.013452][ C1] ? call_timer_fn+0xd5/0x5f0 [ 122.018151][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 122.023302][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.028527][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 122.035243][ C1] __run_timer_base+0x652/0x8b0 [ 122.040131][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 122.045515][ C1] ? ktime_get+0x1f5/0x220 [ 122.049968][ C1] ? lapic_next_event+0x11/0x20 [ 122.054830][ C1] run_timer_softirq+0xb7/0x170 [ 122.059683][ C1] handle_softirqs+0x226/0x860 [ 122.064450][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 122.069219][ C1] __irq_exit_rcu+0xcb/0x220 [ 122.073806][ C1] irq_exit_rcu+0x9/0x30 [ 122.078044][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 122.083679][ C1] [ 122.086603][ C1] [ 122.089534][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.095510][ C1] RIP: 0010:fd_install+0x1df/0x3d0 [ 122.100628][ C1] Code: c1 ef 03 41 80 3c 2f 00 74 08 48 89 df e8 a9 17 e3 ff 45 89 ec 49 c1 e4 03 4c 8b 2b 4d 01 e5 4c 89 e8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ef e8 87 17 e3 ff 49 83 7d 00 00 0f 85 d2 01 00 00 41 [ 122.120236][ C1] RSP: 0018:ffffc9000bfa76a8 EFLAGS: 00000246 [ 122.126320][ C1] RAX: 1ffff1100a8ea64b RBX: ffff8880276a0108 RCX: 0000000000080000 [ 122.134285][ C1] RDX: ffffc90003ed1000 RSI: 000000000000022a RDI: 000000000000022b [ 122.142252][ C1] RBP: dffffc0000000000 R08: 0400000000000000 R09: 0000000000000000 [ 122.150221][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: 0000000000000258 [ 122.158187][ C1] R13: ffff888054753258 R14: ffffffff825479f4 R15: 1ffff11004ed4021 [ 122.166241][ C1] ? fd_install+0x94/0x3d0 [ 122.170672][ C1] ? fd_install+0x1a6/0x3d0 [ 122.175174][ C1] scm_recv_one_fd+0x17f/0x210 [ 122.179939][ C1] scm_detach_fds+0x215/0x6b0 [ 122.184652][ C1] scm_recv_unix+0x122/0x420 [ 122.189254][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 122.194368][ C1] ? unix_destroy_fpl+0x1cd/0x200 [ 122.199393][ C1] ? pid_vnr+0xfd/0x1e0 [ 122.203552][ C1] __unix_dgram_recvmsg+0x9d6/0xd70 [ 122.208764][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 122.214499][ C1] ? lock_acquire+0x115/0x350 [ 122.219174][ C1] ? aa_sock_msg_perm+0x129/0x210 [ 122.224206][ C1] ? unix_seqpacket_recvmsg+0x103/0x140 [ 122.229762][ C1] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 122.235654][ C1] sock_recvmsg+0x196/0x1e0 [ 122.240160][ C1] ____sys_recvmsg+0x1e6/0x4a0 [ 122.244927][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 122.250221][ C1] ? import_iovec+0x73/0xa0 [ 122.254732][ C1] ___sys_recvmsg+0x213/0x5a0 [ 122.259422][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 122.264728][ C1] ? lock_acquire+0x115/0x350 [ 122.269420][ C1] ? __fget_files+0x3a2/0x420 [ 122.274102][ C1] __x64_sys_recvmsg+0x1ae/0x290 [ 122.279049][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 122.284522][ C1] do_syscall_64+0x166/0x520 [ 122.289105][ C1] ? trace_irq_disable+0x3b/0x140 [ 122.294122][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.300180][ C1] ? clear_bhb_loop+0x70/0xc0 [ 122.304859][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.311562][ C1] RIP: 0033:0x7fe99339e159 [ 122.316015][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.336520][ C1] RSP: 002b:00007fe994198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 122.345119][ C1] RAX: ffffffffffffffda RBX: 00007fe993625fa0 RCX: 00007fe99339e159 [ 122.353095][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 122.361242][ C1] RBP: 00007fe993435024 R08: 0000000000000000 R09: 0000000000000000 [ 122.369204][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.377162][ C1] R13: 00007fe993626038 R14: 00007fe993625fa0 R15: 00007fe99374fa48 [ 122.385142][ C1] [ 122.388309][ C1] Kernel Offset: disabled [ 122.392636][ C1] Rebooting in 86400 seconds..