last executing test programs: 11.28477144s ago: executing program 3 (id=204): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000006900)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/182, 0xb6}, {&(0x7f0000001180)=""/146, 0x92}, {&(0x7f0000001240)=""/146, 0x92}, {&(0x7f0000001300)=""/96, 0x60}], 0x6}, 0xf93c}, {{&(0x7f0000001400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001480)=""/67, 0x43}, {&(0x7f0000001500)=""/37, 0x25}, {&(0x7f0000001540)=""/117, 0x75}, {&(0x7f00000015c0)=""/11, 0xb}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/251, 0xfb}, {&(0x7f0000002700)=""/130, 0x82}, {&(0x7f00000027c0)=""/67, 0x43}, {&(0x7f0000002840)=""/231, 0xe7}], 0x9, &(0x7f0000002a00)=""/86, 0x56}, 0x6}, {{&(0x7f0000002a80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b00)=""/186, 0xba}, {&(0x7f0000002bc0)=""/153, 0x99}, {&(0x7f0000002c80)=""/189, 0xbd}], 0x3, &(0x7f0000002d80)=""/4096, 0x1000}, 0x4035}, {{&(0x7f0000003d80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/102, 0x66}, {&(0x7f0000003e80)=""/218, 0xda}, {&(0x7f0000003f80)=""/188, 0xbc}], 0x3}, 0x6}, {{&(0x7f0000004080)=@sco, 0x80, &(0x7f0000005600)=[{&(0x7f0000004100)=""/201, 0xc9}, {&(0x7f0000004200)=""/239, 0xef}, {&(0x7f0000004300)=""/254, 0xfe}, {&(0x7f0000004400)=""/36, 0x24}, {&(0x7f0000004440)=""/99, 0x63}, {&(0x7f00000044c0)=""/140, 0x8c}, {&(0x7f0000004580)=""/75, 0x4b}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x8, &(0x7f0000005680)=""/213, 0xd5}, 0xfffffcc1}, {{&(0x7f0000005780)=@nfc, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005800)=""/153, 0x99}], 0x1, &(0x7f0000005900)=""/4096, 0x1000}, 0xffe00000}], 0x6, 0x43, &(0x7f0000006a80)={0x0, 0x989680}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000006bc0)={r0, &(0x7f0000006ac0)='\'[[\x00', 0x200020, &(0x7f0000006b00)={@align, {0x3, 0x3, 0x0, 0x9}}, 0x5, &(0x7f0000006b40)={@_ha_fsid}, &(0x7f0000006b80)=0x8}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000006c00)={0x20000000}) pipe2$watch_queue(&(0x7f0000006c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = signalfd(r4, &(0x7f0000006c80)={[0x9]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000006d80)={'syztnl2\x00', &(0x7f0000006d00)={'syztnl1\x00', r2, 0x29, 0x9, 0x6e, 0xa1, 0x6a, @mcast1, @loopback, 0x80, 0x40, 0x4f37, 0x5}}) sendmsg$nl_xfrm(r6, &(0x7f0000006f40)={&(0x7f0000006cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006f00)={&(0x7f0000006dc0)=@flushsa={0x138, 0x1c, 0x2, 0x70bd2a, 0x25dfdbff, {0x6c}, [@mark={0xc, 0x15, {0x35075b, 0x3}}, @tfcpad={0x8, 0x16, 0xe}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @offload={0xc, 0x1c, {r7, 0x3}}, @mark={0xc, 0x15, {0x35075d}}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xd58}}, @algo_auth_trunc={0x99, 0x14, {{'sha224-generic\x00'}, 0x268, 0x200, "1e92c3b0286aa3d551fd5424f72699668112070c4ab49bf89e645038d99a1d3a4ac73ea6d4e9a7b8d0bab73a5edc19e35b36120ca873ada9dd7ad6e4e7f399ad353659b9cefd1b88c4572476fc"}}, @tfcpad={0x8, 0x16, 0x10}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2a, 0x70bd28, 0x70bd25, 0x70bd2a, 0x40, [0x1000, 0x9, 0x4, 0x7ff, 0x1, 0x7fffffff]}}, @extra_flags={0x8, 0x18, 0xb7c}]}, 0x138}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000007000)={'ip6tnl0\x00', &(0x7f0000006f80)={'ip6gre0\x00', r2, 0x2f, 0xd7, 0x67, 0xc72, 0x13, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x20, 0x6, 0x3}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000007040)={0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000007080)={0x0, @bt={0x8000000, 0xfffffffb, 0x0, 0x1, 0x84f, 0x101, 0x5, 0xb33c, 0x7, 0x8, 0x1, 0xd6, 0x9, 0x5, 0x6, 0x10, {0x6, 0x5}, 0x2, 0x5}}) syz_usb_connect$uac3(0x6, 0x125, &(0x7f0000007140)={{0x12, 0x1, 0x320, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x5, 0x60, 0x6, {0x8, 0xb, 0x0, 0x0, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x6, 0x4}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xfd, 0x2, 0x6, 0x92, "098299c487f620"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0xff, 0x80, "1ab9", "a3"}, @as_header={0x17, 0x24, 0x1, 0xb, 0x400, 0x8, 0x5, 0xb, 0x8, 0x6, 0xf}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x1, 0x9, "c6b7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x9, 0xa, 0xf, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x26, 0x0, {0xa, 0x25, 0x25, 0x1, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x9, 0x9, "0839c9f9ba15"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x70, 0x401, 0x7, 0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x10, "8873bb150d53009c"}, @as_header={0x17, 0x24, 0x1, 0x3, 0x8000, 0x10, 0x1002, 0x4, 0x4, 0x6, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x400, 0x42, 0xb, "99cda664"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x1, 0x4b, 0xf7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9a, 0xc, 0x6, {0xa, 0x25, 0x25, 0x760, 0x3, 0x6}}}}}}}}]}}, &(0x7f0000007480)={0xa, &(0x7f0000007280)={0xa, 0x6, 0x201, 0x4, 0x3, 0x0, 0x8, 0x5}, 0x94, &(0x7f00000072c0)={0x5, 0xf, 0x94, 0x6, [@generic={0x20, 0x10, 0xa, "36ee430cc8720fbbf976db9cdf465dca413b5bf0d48844f061926914c5"}, @generic={0x20, 0x10, 0x1, "0991cbd18199617d57fb51c123d1a8844ec7de558c34829af3b077e040"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x1, 0xf000, 0x6, [0x3f30, 0xff, 0xc0c0]}, @ssp_cap={0x20, 0x10, 0xa, 0x4e, 0x5, 0xc, 0x0, 0x1, [0xff6000, 0x30, 0x30, 0x3f30, 0xf]}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x37, 0xf00f, 0x9, [0xc0c0, 0xc000]}]}, 0x1, [{0xf5, &(0x7f0000007380)=@string={0xf5, 0x3, "f83717c56ed87b8052413cfd3d013ef4bdddf53c7d8cd295a183e410611d07f39224210ddecbabf1fd278e828c4d2ee9894cef384c9e67f7ad4e5f249e2bada45c67369b15d85a57cab84bd0421d97b3eebf38e6fc91ac6251b0433277f278d993ee9056123044bc689ed88356e0befe5900fa4b7c624c5ba4df2d9fa544d3608eb8faf9a3c63b8b2cca0d17bc616007046d37460866f04301e72d19de65681e167faf42078c3dff844bc4c4a395cf614f2c8291dccd674fd8b9af5e791809df96bc80b416b3168e340729feec67da5c8023a075b58a6a11658ffa1dc007e28ed9cd52c4a686a7fe03b4040273ec557b738735"}}]}) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000074c0)={'vxcan1\x00'}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000007500), 0x400000, 0x0) ioctl$BLKGETNRZONES(r8, 0x80041285, &(0x7f0000007540)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000007580)={0x1, 0x7fffffffffffffff, 0x8a}) bind$inet6(r1, &(0x7f00000075c0)={0xa, 0x4e21, 0x2, @private1, 0x8000}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000007600)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x2, 0x0, 0xfc, 0x1, 0x308, 0x5}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000007640)=0x8, 0x0, 0x4) epoll_pwait(r5, &(0x7f0000007680)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f00000076c0)={[0x8]}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000089c0)={{r3, 0xffffffffffffffff}, &(0x7f0000008940), &(0x7f0000008980)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000008a00)={&(0x7f0000007700)="1acf2516bf2e2efd683f39bbb2deb364faf7d11fad95df601d3a7e6bf0060efe868f3f42cfd6281832a90df6b03ec7a47b359dd5ea348b70519eb10a670c1d27a79cec8797fd028817a9d7efedbee98ed9c675d1cbf454cdb1253cedb05c2bbf06cd4659218ba499ad2c3ee66e8a24a40e0b5c6b45241e81719d4c81b2080ecc26a76e2b7ba6e18dcf29104c639697800fef8ac06892b5b00b9bde6484f6a9fb382079ab0f6e72e31b7895b1aa87c57671f0bca28fb0b154991561", &(0x7f00000077c0)=""/4096, &(0x7f00000087c0)="d0cb29f6e6129e7a47791d6a2d42028d22a43725814570bcf5e117268bdd5cb15def36c22d9694b1ed4da2b5021bf45fab0626b1461c363de90eb1d7fe33a1ffd231493b1bd91d15595092c42aa9ef80df72bbe6217e", &(0x7f0000008840)="1b072202b76c145970e9298c2b9be0d15132827f3b1627847ba71d2c574bb8a75f9861c2a4569f98f6a4b8780e58c2154537b16510d22caa10d8dc127189be6017a0d8b1c12679ec963706c5625d3966f657f3f2203aca24f5b75d02f84df23c7b5814008732b2cb6f02bf7e98e5561c720479b7c20ab3744714409c1b810142d09fe96d9dafb010d6f51628d61f3b6202b10a4d0586fa3ea5b3577103d9b2296b9f820c59d295dcf8ec03332c13238df5d37afcda6a3764447e785f942ed0fbff1eb7c3afaf00005b4d63899da7028112df13d364da3731bfb84c3e1173148a3c7d9e74283b6fe4a304e946a74b9cbbf044325011d0f536503e", 0x3, r10, 0x4}, 0x38) syz_open_dev$hiddev(&(0x7f0000008a40), 0x1, 0x22000) ioctl$BLKGETNRZONES(r8, 0x80041285, &(0x7f0000008a80)=0x9) ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x100, &(0x7f0000008ac0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x0, 0xc0, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "332bd831"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x155e, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7, 0x3}, @mdlm_detail={0x85, 0x24, 0x13, 0x5, "6f0fa7db89c90012a690bf2459ec6358e14863b54e44be9f8bc1c4e01939a943e1e696d5bdcf9dfbb0dcce26bf212ceba93ce70463ea9a2c2b8733b49b9b4161fdc9a4dc057a67a1c15f4624da8b7f12fd1fe9f0af2a6d6be10e6b76ecc69f1ea04dfad61efb37d3a63b0a6a8899f50c925f01ca3da12f7a67138700db1e71e360"}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff7, 0x9, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3e, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000008d00)={0xa, &(0x7f0000008bc0)={0xa, 0x6, 0x200, 0x7, 0x3, 0x5, 0x8, 0x9}, 0x6c, &(0x7f0000008c00)={0x5, 0xf, 0x6c, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x7, 0x0, 0x9, [0xff3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x15, "eea6288031d152fdf4ce7580d8ecb739"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x8, 0x8, 0x7, 0x3}, @generic={0x38, 0x10, 0x0, "b770b2cce53fd8a5b8085c7a111cd6ac9f5f2a6ec72f72f41494c920308060ce3bf83268925f87487cfcae80490ffe75f37810141e"}]}, 0x2, [{0x4, &(0x7f0000008c80)=@lang_id={0x4, 0x3, 0x8cc3852794d795bd}}, {0x4, &(0x7f0000008cc0)=@lang_id={0x4, 0x3, 0x41d}}]}) socket$netlink(0x10, 0x3, 0xc) 9.45728232s ago: executing program 3 (id=209): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 9.349609276s ago: executing program 4 (id=210): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) memfd_create(0x0, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet(0xa, 0x1, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x3, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004fc0)=ANY=[@ANYBLOB="2000000000000000100100000500004065584e90026834f7cbe2a50c2b9fde0000000000b443"], 0x30}, 0x0, 0x4, 0x1}) io_uring_enter(r4, 0x4203, 0x0, 0x2, 0x0, 0x0) 7.035649808s ago: executing program 2 (id=219): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gretap0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 6.898116194s ago: executing program 4 (id=220): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ftruncate(0xffffffffffffffff, 0xffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 6.709478292s ago: executing program 4 (id=221): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002300)={{}, {}, [], {}, [{0x8, 0x6}, {0x8, 0x2}, {0x8, 0x4}, {}, {0x8, 0x1}, {0x8, 0x5, 0xee01}]}, 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r8, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) 6.200252744s ago: executing program 3 (id=224): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x1014, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0xfba, 0x1, {{'sha512-neon\x00'}, 0x7b90, "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"}}]}, 0x1014}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) read$proc_mixer(r0, &(0x7f0000000240)=""/215, 0xd7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) 4.775855716s ago: executing program 2 (id=229): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r5, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r5}}, 0x1c) rmdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 4.2622318s ago: executing program 4 (id=230): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) memfd_create(0x0, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004fc0)=ANY=[@ANYBLOB="2000000000000000100100000500004065584e90026834f7cbe2a50c2b9fde0000000000b443"], 0x30}, 0x0, 0x4, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4203, 0x0, 0x2, 0x0, 0x0) 4.208522744s ago: executing program 3 (id=231): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = dup(0xffffffffffffffff) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000780)={0x60, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) getsockname(r1, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000003380)={0x2020}, 0x2020) write$binfmt_misc(r9, &(0x7f00000000c0)="0046dbabed73b890dc066cdc2ea2b9ffea8f2fd5d75d1d66a7b853903a7ad9cc6bbbb5f7784aa40aeee0f8389e3f5faf3f6625461333c87df4f49bad3882796156af677bcfd8b704c9af1424c329a89d1ff2d45a814bf050c8354164ea38a702b0095c06948ce30c9be14ef3", 0x6c) 3.250671164s ago: executing program 1 (id=234): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.00698939s ago: executing program 1 (id=235): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006800010003000000fddbdf250a00000000000000060007000800000008000500", @ANYRES32=r3, @ANYBLOB="100008800c0001000010"], 0x38}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x8, 0x95, 0x0, 0x8, 0x8e, 0x5}}) creat(&(0x7f0000000300)='./bus\x00', 0x0) 2.936855611s ago: executing program 0 (id=236): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) (async) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000e00)={{r4}, r6, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r7}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000780)={0x0, 0x7, {0x0, @usage=0x6, 0x0, 0x0, 0x5, 0x7, 0x7, 0x6, 0x20, @usage=0x60000, 0x6, 0x8001, [0x1, 0x83, 0x7, 0x4, 0x2e0b, 0xff]}, {0x2, @usage=0x7, r7, 0x7, 0x8, 0x2ea1, 0x6, 0x5, 0x8, @usage=0x3795, 0x9861, 0x9, [0xe2, 0x200, 0x15, 0xff, 0x3, 0x1]}, {0xab, @usage=0x1, 0x0, 0xfffffffffffffffe, 0x7, 0x5, 0x0, 0x6, 0x400, @usage, 0xd2a, 0x100, [0x0, 0x0, 0x9, 0x800, 0x9, 0x10]}, {0xe, 0x4, 0x7}}) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x118, @private1, 0x7}, 0x1c) (async) listen(r8, 0xfffffffc) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r10, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x6, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r9) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r11], 0x428}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x2d, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="07a38a29c9877baecb0002000000140001800600010002dd000008000300ac1414aa6384e32e"], 0x28}}, 0x0) 2.910522763s ago: executing program 2 (id=237): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000004940)=[{{&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f0000002280)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000900)=""/211, 0xd3}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/233, 0xe9}], 0x5}, 0x7fff}, {{&(0x7f0000000c40)=@caif=@dbg, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000cc0)=""/68, 0x44}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000002700)=""/190, 0xbe}, {&(0x7f0000001e00)=""/80, 0x50}, {&(0x7f0000001e80)=""/47, 0x2f}], 0x5, &(0x7f0000001f40)=""/173, 0xad}, 0xffffffff}, {{&(0x7f0000002000)=@rc={0x1f, @none}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002080)=""/34, 0x22}, {&(0x7f00000020c0)=""/126, 0x7e}, {&(0x7f0000002180)=""/77, 0x4d}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000004b00)=""/198, 0xc6}, {&(0x7f0000002340)=""/27, 0x1b}, {&(0x7f0000002400)=""/110, 0x6e}], 0x7, &(0x7f0000002500)=""/207, 0xcf}, 0x10001}, {{&(0x7f0000002600)=@pppol2tpv3, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b80)=""/96, 0x60}}, {{&(0x7f0000002c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002c80)=""/115, 0x73}, {&(0x7f00000027c0)=""/146, 0x92}, {&(0x7f0000002dc0)=""/153, 0x99}, {&(0x7f0000002e80)=""/52, 0x34}, {&(0x7f0000002ec0)=""/249, 0xf9}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/249, 0xf9}, {&(0x7f00000040c0)=""/169, 0xa9}, {&(0x7f0000004180)=""/214, 0xd6}], 0x9, &(0x7f0000004340)=""/25, 0x19}, 0x4}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004380)}, {&(0x7f00000043c0)=""/149, 0x95}, {&(0x7f0000004480)=""/146, 0x92}, {&(0x7f0000004540)=""/250, 0xfa}], 0x4}, 0x7}, {{&(0x7f0000004680)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002680)=[{&(0x7f0000004700)=""/27, 0x1b}, {&(0x7f0000004740)=""/45, 0x2d}, {&(0x7f0000004780)=""/177, 0xb1}, {&(0x7f0000004840)=""/9, 0x9}, {&(0x7f0000000bc0)=""/64, 0x40}], 0x5, &(0x7f0000001d40)=""/82, 0x52}, 0x4}], 0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00db8f5b7051023c7ee5266e8700000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x28, 0x1, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, 0x0) syz_clone(0x80881800, &(0x7f0000000540)="2a4d7879d0b6c794e4003b67e1e60e2ecc825ccd9e281647d6dc636c51e09abe9eb5a6fb02aba4df2f1459497f256f428f30162069443e6d69e39233001710793ae9936e6d3f8e2f0ed8a70d787217210e2654682f53b7a5405eeaadd0aca562d8cc75a12e65fa97a8f5da7792803bad125b16c6a14d5fde4271fa85abd36909cfe01b83ef6fc399a1bc15cbda4b060cdc1bee3079d6727671f4957387f52795155214687ab43a02c7db52ae89c3fa01d65a64aea352a32aa9725d46c347263a1eef5e362e39d6", 0xc7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000340)="f9d3b16eb4cebd281ada51b7ee2788283dc0c4b47fd921a52743a1937c591a9f761516a794dd1abb7032a52396cb036b6602277150bd6ba013fbe98256982cc4e72ec3bb343dd488d14b5abc5366c695ce5adbd7921da8ec85fe55cdc71b844b4350ec231aacd474cab2599d3d5ebb94f6eb4fa7e4d93c3fa16561b7fdaa7a919229e8e8a31082") ustat(0x2, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000640)={0xa6, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000680)={0x10200, 0x4, 0x4000, 0x2000, &(0x7f0000382000/0x2000)=nil, 0x4, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) unshare(0x28000600) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) 2.663021938s ago: executing program 0 (id=238): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)={0x6d, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x1268, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "280be8dbe108598948224ad54afac180000000bdb20405000000000000ffff3d458dd4992861ac00008000000000000000002300000000000000000080004000", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.433125355s ago: executing program 0 (id=239): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x200020, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0x8}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0xfffd, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) 2.24332721s ago: executing program 0 (id=240): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002300)={{}, {}, [], {}, [{0x8, 0x6}, {0x8, 0x2}, {0x8, 0x4}, {}, {0x8, 0x1}, {0x8, 0x5, 0xee01}]}, 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r8, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) 2.150693095s ago: executing program 4 (id=241): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x87) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002300)={{}, {}, [], {}, [{0x8, 0x6}, {0x8, 0x2}, {0x8, 0x4}, {}, {0x8, 0x1}, {0x8, 0x5, 0xee01}]}, 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) 1.596665544s ago: executing program 1 (id=242): r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000000)={@any, 0x4}) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x9, 0x4) 1.595632165s ago: executing program 2 (id=243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000030801c02d578a00000000000700000714000480080005400000000608000440fffffff90500030084000000c41ee1058719b260d45342fc1899b752c233a36a8303c41e6fd4fedf439d69d71a25b7c0726029ccc02f620d9331e481d5eb97f91a9e6f435c7cbd34d1111c987da66a1fcd21d557e32ed888a30207579303dc1b80d6558ae4f8f1cd2a9abf89cfdf43081593a08548f069c8aa9e8dcdec2179f4da13981eb5ee471bce8a7c6febf2ac87c54042a81602aba76d296941ec2dedc026e9bbd0daf042dd6c29765c98cb9f3c39d68e37b7ee376578f37344b6b2769a5fa16fdd9911c05d69cc11ef"], 0x30}}, 0xc0) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x58}, 0x90) 1.380747168s ago: executing program 1 (id=244): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99", 0x5e}, {&(0x7f0000001400)="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", 0xde6}], 0x3, &(0x7f0000002400)=ANY=[@ANYBLOB="1000760000000100010000000800"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.115841822s ago: executing program 1 (id=245): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.040675801s ago: executing program 1 (id=246): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@mmap={0x8, 0xb, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x1, 0x3, 0x81, 0x10, 0x9f, 0x8, "4005a1f5"}, 0x3, 0x1, {}, 0x8, 0x0, r0}) 800.537897ms ago: executing program 2 (id=247): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)}, {&(0x7f0000001400)="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", 0xde5}], 0x3, &(0x7f0000002400)=[{0x10, 0x1, 0x8}], 0x10}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 710.170143ms ago: executing program 3 (id=248): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0xd0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xff5, &(0x7f00000003c0)=""/4085}, 0x24) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r6, 0x0, 0x4, 0x5b}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r6, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000340)={0x20, r6, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007912a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x4c, {{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}}}, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x20, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x8ca59a0f97f5fcab}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0) 370.055474ms ago: executing program 2 (id=249): syz_open_dev$dri(0x0, 0x8000, 0x1d5500) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d000100000000090400000503001500092105000001220500090581032000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 285.542811ms ago: executing program 0 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, &(0x7f0000000340), 0x0, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r6, 0x0, 0x2, 0x4, &(0x7f0000000240)="bdc95f8a", 0x4}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0xffff, 0x0, 0x5}}}}]}, 0x48}}, 0x24000890) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000020301010000000000000000020000010900090000000007010000000800010001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x404) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32=r10, @ANYRES8=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x850) sendmmsg(r9, &(0x7f0000000c40)=[{{&(0x7f0000000400)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbcdd}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)="e69334c17afb86127884a6647b31c6c19dab9756fdcd6241b9adb3fea2dacfc625b37f6d3d4ff181845a912d4cfb1be087c215cc709532f2dea1d28cd389481d64853363950cae2b", 0x48}, {&(0x7f0000000580)="80a45e0824e39ef8835075f3236c09247863cb7e6bbd9efd9df4fab0a62a34d05c3ce5a951916c4c4f53a6b6834230a1c44dda6378fccd873ad045d9b1447d9847ac051b69b9fa694fc578209a585665195a99b92b06fbbc02c5405a9b95380a495cfdbbab483ceb6871af62ce3817803f190c78ee40deecada83a88629d4fc664a0c16160507acafcafb95081ef707cfe4dcc51b9e87f15303104a2d889f116b3f09a1d25ae82d2e2d530b33136dac8ae762a935cdda56847404acf1d3f2c82c3ce5d2ef8161f6b966c83db1fb08dd19c3023e917b183577c3405070b", 0xdd}, {&(0x7f0000000680)="b313a787f3ad2c997357dd95aec45a10f234ba63712e449a38797f855c8ac5c8c2b452f6ff60000bd642f66dca759b7c9207b34d6e4b70efcf30cac4c4118d4c37f8677f1473afb1ea422c62bc701b1b65828c2c82a4741dd82f6435726e35cd1e15246670957f8849f40dd0e1880182a31b9da9b49739390d0e0da3a81c7ece09d9c455a622f020cd8ffcd478f68c83a95805ea1f3f8be8b0aaad906208e221310bcb6eb7eb682a01c3e4d22d802d21e74e", 0xb2}, {&(0x7f0000000740)="c80b0be3e4a1c65c28e57fb7cc22f6f01be371bf7de653f3c4264ca0f16ec049e3d79f471ba6c54eea16ada7d91cac7889920783abd39229b1086056dea6cd348d3b1de79017334a914a4ff672d1d91dd1074903d855054754ddfc20c9b96ae66d4c60f0584dec1b868d4ea6f852f9f064913f9a56dd479364131068d0319bdd9395c186d1c808e64f1b00f8c4cd75eb1ae3c6ed9d930b7d72c48cef11c72da4c8f21cef3a34aee616024867619e6db344ba418e6e", 0xb5}, {&(0x7f0000000380)="1340c1a1a75d42caf5c8e21d55a339b5ac6682", 0x13}, {&(0x7f0000000500)="c18c528fbd8a83013010b240f732d4582f1344208e15c840a2feadc6e8c08f01577b8c", 0x23}, {&(0x7f0000000800)="566030d392a9a76f0b6f436a8573a2fa469d9616ab1875cdec691a33af315ad05c043b1fb38effd950864dfdecd8e636ffd881e92ccf70a99ead19", 0x3b}, {&(0x7f0000000840)="4011f77d74fd666b55c7b3520bec577540afbe34363078786c00173f071eae5837cda0e19823ba0e499cc3c38bc29ce6377a087b2d8e396b91edbbe7de18693f2e36210c7e23f54e3cc4d18caed795cdd97fe425fa87c0e7d7dfc6fe29b2fcff2b2e09ace7b97421b8311caee5276e7160fbf3a59e595624789f9799bbdbd1616574cccfe2734127f57d22c40f9cf8dff3ba0df3bee1d9dc0376f49e5da2cb009e2413c36eae5129f989da50920dfd425fee5547c6429dfe78f09a536da3c2f60bd0422afc131ac82b6b4cbb84fcf0", 0xcf}, {&(0x7f0000000940)="a08cd39f0860c7bc9372df", 0xb}], 0x9, &(0x7f0000000a40)=[{0xa8, 0x112, 0x401, "1eb16de93f69deffad579e8197d99da52d70ed0ca67533d4507775af79c9af88cd59956e7feabe87df7ce0879c61922109f755827703949061b65e9960bab192f4d029ba3b1b6e663dc1083ac515beb9b4a7a50ea5b5605b6ef2b5850b825b7c30c2f009874adce75b683aa3f615e17d0537699d508553764fac8f203db5869332b7ed1ae6bc453cf77903c3172a02f5cbb62eb77539"}, {0x18, 0x10d, 0x3, "80"}, {0x10, 0x109, 0x3}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="742d37794998558723f5e945d3a78f7bf1388d866fed1ca9bec95122bd57503bacf0c430fd8160c5380729ee8ab7c8f73596dfe54505f0111315632f8c09ba6ec8b63138d26ef7a0e7dfca016f1ad53dd5a1cc2b123b41cc2b859a54beb42c2271412a74c26b0e0f5f9895b46c31cdb971917b216eb6d5d3fd3d5e6f08ca070359e570a9d54bef5b712688f7a8d1d58c8e6af87cbea12aa70dcfd3674d24cbc5a302848b9720aa86f1500813169c0cb6a0808b44", 0xb4}], 0x1}}], 0x2, 0x0) 113.426907ms ago: executing program 3 (id=251): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) memfd_create(0x0, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004fc0)=ANY=[@ANYBLOB="2000000000000000100100000500004065584e90026834f7cbe2a50c2b9fde0000000000b443"], 0x30}, 0x0, 0x4, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4203, 0x0, 0x2, 0x0, 0x0) 110.477791ms ago: executing program 4 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)="a2f9aa79b016ac2bd81c3a42079bdd506d8c2fc6d195aced6549242c58a12ec369b68076ae633ce9934e96aa57999c0d7868f59cba3af87bbf8db6701f54e9be1a8d9d3031e575b4ca7a76d5de583da99d776049698efa18c840293f5e33a844b74d0a8796d5a1805d712ff08da36b5dae3e4b916e5f540197fb28bc053b9260", &(0x7f0000000600)="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", 0x8, r0}, 0x38) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x8) fcntl$setlease(r5, 0x400, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000040c0)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r9 = socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 0 (id=253): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x7f, 0x1a}, {0xb, 0x6, 0x4c, 0x0, [0x2, 0x5, 0xed, 0xc, 0x0, 0x7, 0x5, 0x5, 0x3]}}}}, 0x27) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x10, 0xc8, {0x8, 0x7fff, 0xa981, 0x7, 0x7f}}}}, 0x17) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 63.639626][ T5808] cgroup: Unknown subsys name 'net' [ 63.789342][ T5808] cgroup: Unknown subsys name 'cpuset' [ 63.797739][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.146089][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.034622][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.042066][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.051246][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.059788][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.067444][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.068556][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.076124][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.082657][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.090507][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.097501][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.104514][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.116376][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.118352][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.125453][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.132935][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.150565][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.158092][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.167143][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.167422][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.174725][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.190011][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.190732][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.205837][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.222880][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.231216][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.693990][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 67.854978][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 67.920960][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 67.987853][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.995189][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.002404][ T5832] bridge_slave_0: entered allmulticast mode [ 68.009757][ T5832] bridge_slave_0: entered promiscuous mode [ 68.039920][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 68.060174][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.067514][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.074640][ T5832] bridge_slave_1: entered allmulticast mode [ 68.081936][ T5832] bridge_slave_1: entered promiscuous mode [ 68.090004][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 68.184401][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.191655][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.198900][ T5833] bridge_slave_0: entered allmulticast mode [ 68.206636][ T5833] bridge_slave_0: entered promiscuous mode [ 68.248833][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.256137][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.263427][ T5833] bridge_slave_1: entered allmulticast mode [ 68.270629][ T5833] bridge_slave_1: entered promiscuous mode [ 68.280532][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.300187][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.308150][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.315845][ T5835] bridge_slave_0: entered allmulticast mode [ 68.322986][ T5835] bridge_slave_0: entered promiscuous mode [ 68.341620][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.361163][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.368455][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.375834][ T5835] bridge_slave_1: entered allmulticast mode [ 68.382754][ T5835] bridge_slave_1: entered promiscuous mode [ 68.429148][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.476896][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.488283][ T5832] team0: Port device team_slave_0 added [ 68.521666][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.533464][ T5832] team0: Port device team_slave_1 added [ 68.559921][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.567538][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.574672][ T5836] bridge_slave_0: entered allmulticast mode [ 68.581907][ T5836] bridge_slave_0: entered promiscuous mode [ 68.588967][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.596221][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.603397][ T5834] bridge_slave_0: entered allmulticast mode [ 68.610463][ T5834] bridge_slave_0: entered promiscuous mode [ 68.620467][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.649288][ T5833] team0: Port device team_slave_0 added [ 68.655561][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.662680][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.669983][ T5836] bridge_slave_1: entered allmulticast mode [ 68.677328][ T5836] bridge_slave_1: entered promiscuous mode [ 68.686900][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.694037][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.701582][ T5834] bridge_slave_1: entered allmulticast mode [ 68.708816][ T5834] bridge_slave_1: entered promiscuous mode [ 68.726207][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.733176][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.759244][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.772679][ T5833] team0: Port device team_slave_1 added [ 68.806034][ T5835] team0: Port device team_slave_0 added [ 68.821682][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.828744][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.854725][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.887418][ T5835] team0: Port device team_slave_1 added [ 68.895651][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.913234][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.920459][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.946968][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.960085][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.981320][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.004996][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.011951][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.038268][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.052124][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.081612][ T5834] team0: Port device team_slave_0 added [ 69.101250][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.108694][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.135101][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.156000][ T5834] team0: Port device team_slave_1 added [ 69.175743][ T5828] Bluetooth: hci0: command tx timeout [ 69.183582][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.191124][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.217214][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.244604][ T5832] hsr_slave_0: entered promiscuous mode [ 69.251343][ T5832] hsr_slave_1: entered promiscuous mode [ 69.257453][ T5826] Bluetooth: hci1: command tx timeout [ 69.263083][ T5826] Bluetooth: hci2: command tx timeout [ 69.269014][ T5828] Bluetooth: hci3: command tx timeout [ 69.284310][ T5836] team0: Port device team_slave_0 added [ 69.306504][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.313477][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.339853][ T5826] Bluetooth: hci4: command tx timeout [ 69.345434][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.370073][ T5836] team0: Port device team_slave_1 added [ 69.386251][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.393222][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.420477][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.463945][ T5833] hsr_slave_0: entered promiscuous mode [ 69.472274][ T5833] hsr_slave_1: entered promiscuous mode [ 69.478954][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 69.485376][ T5833] Cannot create hsr debugfs directory [ 69.508240][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.515309][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.541373][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.577787][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.584746][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.611342][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.628838][ T5835] hsr_slave_0: entered promiscuous mode [ 69.635442][ T5835] hsr_slave_1: entered promiscuous mode [ 69.641607][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 69.647505][ T5835] Cannot create hsr debugfs directory [ 69.732705][ T5834] hsr_slave_0: entered promiscuous mode [ 69.739701][ T5834] hsr_slave_1: entered promiscuous mode [ 69.746253][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 69.752019][ T5834] Cannot create hsr debugfs directory [ 69.856704][ T5836] hsr_slave_0: entered promiscuous mode [ 69.862965][ T5836] hsr_slave_1: entered promiscuous mode [ 69.870333][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 69.876178][ T5836] Cannot create hsr debugfs directory [ 70.229988][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.242549][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.257892][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.277030][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.333801][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.344650][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.369350][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.380381][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.430429][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.446960][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.456780][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.473323][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.590626][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.603822][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.633159][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.643469][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.690966][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.741451][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.753160][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.769332][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.784103][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.801362][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.828688][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.836035][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.864428][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.871572][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.901058][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.919816][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.971381][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.994491][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.001683][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.031373][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.054341][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.061510][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.074723][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.081969][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.120156][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.127277][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.168322][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.223913][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.248202][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.255393][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.264747][ T5826] Bluetooth: hci0: command tx timeout [ 71.288460][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.313383][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.323073][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.330214][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.335225][ T5826] Bluetooth: hci2: command tx timeout [ 71.342801][ T5828] Bluetooth: hci3: command tx timeout [ 71.344833][ T5820] Bluetooth: hci1: command tx timeout [ 71.357955][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.419612][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426378][ T5820] Bluetooth: hci4: command tx timeout [ 71.431917][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.456709][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.476774][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.492109][ T5833] veth0_vlan: entered promiscuous mode [ 71.512144][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.519284][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.539942][ T5833] veth1_vlan: entered promiscuous mode [ 71.569088][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.576281][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.614407][ T5832] veth0_vlan: entered promiscuous mode [ 71.642219][ T5832] veth1_vlan: entered promiscuous mode [ 71.663577][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.691920][ T5833] veth0_macvtap: entered promiscuous mode [ 71.713384][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.726782][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.747310][ T5833] veth1_macvtap: entered promiscuous mode [ 71.789314][ T5832] veth0_macvtap: entered promiscuous mode [ 71.814660][ T5834] veth0_vlan: entered promiscuous mode [ 71.827555][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.842700][ T5832] veth1_macvtap: entered promiscuous mode [ 71.856051][ T5834] veth1_vlan: entered promiscuous mode [ 71.878788][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.898448][ T5835] veth0_vlan: entered promiscuous mode [ 71.927691][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.937849][ T1054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.956557][ T5835] veth1_vlan: entered promiscuous mode [ 71.966479][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.974707][ T1054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.984579][ T1054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.000024][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.009782][ T5834] veth0_macvtap: entered promiscuous mode [ 72.020770][ T1054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.050526][ T1054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.062945][ T5834] veth1_macvtap: entered promiscuous mode [ 72.086261][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.095873][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.108297][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.168515][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.219465][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.232498][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.236988][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.273449][ T5835] veth0_macvtap: entered promiscuous mode [ 72.284123][ T1054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.307654][ T1054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.323094][ T5835] veth1_macvtap: entered promiscuous mode [ 72.332982][ T1054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.342183][ T1054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.391702][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.402866][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.418035][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.424943][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.428141][ T5836] veth0_vlan: entered promiscuous mode [ 72.469020][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.498182][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.522442][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.535863][ T5836] veth1_vlan: entered promiscuous mode [ 72.554646][ T3582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.576011][ T3582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.606705][ T3582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.610737][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.623542][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.634200][ T3582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.641993][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.666059][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.733061][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.742208][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.884698][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.896393][ T5836] veth0_macvtap: entered promiscuous mode [ 72.902988][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.948897][ T5836] veth1_macvtap: entered promiscuous mode [ 73.048373][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.068302][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.081178][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.098451][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.134717][ T798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.161749][ T798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.216636][ T798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.248288][ T5921] FAULT_INJECTION: forcing a failure. [ 73.248288][ T5921] name failslab, interval 1, probability 0, space 0, times 1 [ 73.264234][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 73.264262][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.264277][ T5921] Call Trace: [ 73.264284][ T5921] [ 73.264292][ T5921] dump_stack_lvl+0xe8/0x150 [ 73.264325][ T5921] should_fail_ex+0x412/0x560 [ 73.264352][ T5921] should_failslab+0xa8/0x100 [ 73.264375][ T5921] __kvmalloc_node_noprof+0x178/0x8a0 [ 73.264396][ T5921] ? alloc_netdev_mqs+0xa6/0x11b0 [ 73.264423][ T5921] alloc_netdev_mqs+0xa6/0x11b0 [ 73.264440][ T5921] ? __pfx_vlan_setup+0x10/0x10 [ 73.264469][ T5921] rtnl_create_link+0x31f/0xd70 [ 73.264494][ T5921] rtnl_newlink_create+0x277/0xb70 [ 73.264523][ T5921] ? __mutex_lock+0x5ac/0x1300 [ 73.264543][ T5921] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 73.264569][ T5921] ? __pfx___mutex_lock+0x10/0x10 [ 73.264594][ T5921] ? full_name_hash+0x89/0xe0 [ 73.264616][ T5921] ? __dev_get_by_name+0x36/0x140 [ 73.264640][ T5921] rtnl_newlink+0x1666/0x1be0 [ 73.264675][ T5921] ? __pfx_rtnl_newlink+0x10/0x10 [ 73.264695][ T5921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.264747][ T5921] ? kasan_quarantine_put+0xbb/0x1f0 [ 73.264765][ T5921] ? lockdep_hardirqs_on+0x7a/0x110 [ 73.264795][ T5921] ? kmem_cache_free+0x187/0x630 [ 73.264812][ T5921] ? nlmon_xmit+0xb0/0x100 [ 73.264850][ T5921] ? __lock_acquire+0x6b5/0x2cf0 [ 73.264875][ T5921] ? __local_bh_enable_ip+0xd0/0x130 [ 73.264903][ T5921] ? lockdep_hardirqs_on+0x7a/0x110 [ 73.264925][ T5921] ? __dev_queue_xmit+0x277/0x3890 [ 73.264942][ T5921] ? __local_bh_enable_ip+0xd0/0x130 [ 73.264961][ T5921] ? __dev_queue_xmit+0x277/0x3890 [ 73.265002][ T5921] ? __pfx_rtnl_newlink+0x10/0x10 [ 73.265024][ T5921] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 73.265050][ T5921] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 73.265071][ T5921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.265088][ T5921] ? ref_tracker_free+0x693/0x840 [ 73.265104][ T5921] ? __copy_skb_header+0xa3/0x4a0 [ 73.265118][ T5921] ? __pfx_ref_tracker_free+0x10/0x10 [ 73.265134][ T5921] ? __skb_clone+0x63/0x7a0 [ 73.265153][ T5921] netlink_rcv_skb+0x232/0x4b0 [ 73.265172][ T5921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.265190][ T5921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.265215][ T5921] ? netlink_deliver_tap+0x2e/0x1b0 [ 73.265238][ T5921] netlink_unicast+0x80f/0x9b0 [ 73.265260][ T5921] ? __pfx_netlink_unicast+0x10/0x10 [ 73.265283][ T5921] ? netlink_sendmsg+0x650/0xb40 [ 73.265300][ T5921] ? skb_put+0x11b/0x210 [ 73.265322][ T5921] netlink_sendmsg+0x813/0xb40 [ 73.265346][ T5921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.265367][ T5921] ? aa_sock_msg_perm+0xf1/0x1b0 [ 73.265388][ T5921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 73.265405][ T5921] ____sys_sendmsg+0x972/0x9f0 [ 73.265427][ T5921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.265450][ T5921] ? import_iovec+0x73/0xa0 [ 73.265476][ T5921] ___sys_sendmsg+0x2a5/0x360 [ 73.265495][ T5921] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.265544][ T5921] ? __fget_files+0x2a/0x420 [ 73.265568][ T5921] ? __fget_files+0x3a0/0x420 [ 73.265601][ T5921] __x64_sys_sendmsg+0x1bd/0x2a0 [ 73.265621][ T5921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 73.265646][ T5921] ? __pfx_ksys_write+0x10/0x10 [ 73.265675][ T5921] do_syscall_64+0x14d/0xf80 [ 73.265691][ T5921] ? trace_irq_disable+0x3b/0x150 [ 73.265713][ T5921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.265727][ T5921] ? clear_bhb_loop+0x40/0x90 [ 73.265748][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.265765][ T5921] RIP: 0033:0x7f8b01b9c799 [ 73.265794][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.265809][ T5921] RSP: 002b:00007f8b029c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.265828][ T5921] RAX: ffffffffffffffda RBX: 00007f8b01e15fa0 RCX: 00007f8b01b9c799 [ 73.265840][ T5921] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 73.265851][ T5921] RBP: 00007f8b029c2090 R08: 0000000000000000 R09: 0000000000000000 [ 73.265862][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.265872][ T5921] R13: 00007f8b01e16038 R14: 00007f8b01e15fa0 R15: 00007f8b01f3fa48 [ 73.265909][ T5921] [ 73.686342][ T5820] Bluetooth: hci1: command tx timeout [ 73.691778][ T5820] Bluetooth: hci4: command tx timeout [ 73.697232][ T5820] Bluetooth: hci0: command tx timeout [ 73.702630][ T5820] Bluetooth: hci3: command tx timeout [ 73.708146][ T5820] Bluetooth: hci2: command tx timeout [ 73.789450][ T3582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.954707][ T5934] Zero length message leads to an empty skb [ 73.985691][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.011625][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.034111][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.054600][ T10] IPVS: starting estimator thread 0... [ 74.185295][ T5937] IPVS: using max 57 ests per chain, 136800 per kthread [ 74.211685][ T5888] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 74.235332][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 74.254393][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.267079][ T5888] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 74.295700][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.303741][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.393030][ T5888] usb 2-1: Product: syz [ 74.406726][ T5888] usb 2-1: Manufacturer: syz [ 74.417456][ T5888] usb 2-1: SerialNumber: syz [ 74.435020][ T795] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.479198][ T5888] usb 2-1: config 0 descriptor?? [ 74.556144][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 74.597699][ T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.605470][ T5946] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.623417][ T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.692229][ T795] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 74.708679][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.741469][ T795] usb 5-1: config 0 descriptor?? [ 74.967962][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.105074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.124909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.172207][ T795] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 75.224969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.235115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.357271][ T795] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 75.505841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.534958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.557923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.566756][ T795] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 75.595072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.634946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.659784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.712371][ T5888] gspca_sunplus: reg_r err -110 [ 75.728870][ T5888] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 75.796251][ T5828] Bluetooth: hci2: command tx timeout [ 75.796306][ T5820] Bluetooth: hci3: command tx timeout [ 75.801793][ T5828] Bluetooth: hci0: command tx timeout [ 75.816023][ T5828] Bluetooth: hci4: command tx timeout [ 75.820375][ T5826] Bluetooth: hci1: command tx timeout [ 76.243580][ T795] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 76.290117][ T795] usb 5-1: USB disconnect, device number 2 [ 76.560518][ T5911] usb 2-1: USB disconnect, device number 2 [ 76.705891][ T5969] syzkaller0: entered promiscuous mode [ 76.715072][ T5969] syzkaller0: entered allmulticast mode [ 76.885062][ T795] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.995041][ T5911] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.025008][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.036756][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.047781][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.057744][ T795] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.067017][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.084999][ T5856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.086087][ T795] usb 4-1: config 0 descriptor?? [ 77.155802][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 77.163554][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.173050][ T5911] usb 3-1: config 6 has an invalid interface number: 236 but max is 0 [ 77.181883][ T5911] usb 3-1: config 6 has no interface number 0 [ 77.189155][ T5911] usb 3-1: config 6 interface 236 has no altsetting 0 [ 77.189411][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.199736][ T5911] usb 3-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=e4.e9 [ 77.214287][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.226782][ T5911] usb 3-1: Product: syz [ 77.231571][ T5911] usb 3-1: Manufacturer: syz [ 77.238302][ T5911] usb 3-1: SerialNumber: syz [ 77.250043][ T10] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 77.259177][ T5856] usb 5-1: config 1 has an invalid interface number: 90 but max is 0 [ 77.260054][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.283546][ T5856] usb 5-1: config 1 has no interface number 0 [ 77.291754][ T10] usb 1-1: Product: syz [ 77.296293][ T10] usb 1-1: Manufacturer: syz [ 77.302596][ T10] usb 1-1: SerialNumber: syz [ 77.307421][ T5856] usb 5-1: config 1 interface 90 altsetting 178 has an invalid descriptor for endpoint zero, skipping [ 77.307453][ T5856] usb 5-1: config 1 interface 90 altsetting 178 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 77.307480][ T5856] usb 5-1: config 1 interface 90 altsetting 178 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 77.307505][ T5856] usb 5-1: config 1 interface 90 altsetting 178 has an invalid descriptor for endpoint zero, skipping [ 77.307549][ T5856] usb 5-1: config 1 interface 90 altsetting 178 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 77.307575][ T5856] usb 5-1: config 1 interface 90 altsetting 178 has a duplicate endpoint with address 0x5, skipping [ 77.307600][ T5856] usb 5-1: config 1 interface 90 has no altsetting 0 [ 77.387891][ T795] usbhid 4-1:0.0: can't add hid device: -71 [ 77.389362][ T5856] usb 5-1: New USB device found, idVendor=1199, idProduct=6850, bcdDevice=1d.d4 [ 77.394178][ T795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 77.407936][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.419289][ T795] usb 4-1: USB disconnect, device number 2 [ 77.430513][ T5856] usb 5-1: Product: ᠌ [ 77.436713][ T5856] usb 5-1: Manufacturer: 䠲﾿䩗좾恉쇗忟ฉᲵ耩༿嗡ụ㌪╂棟ᥦꥵ濥՛狓乃ᒸבֿ溮䝾䏍뇏๋ꍃ坻쏲䙍鋜밴噄鬒鳌뾯ꖝꄕ핛噘胳⓫୬췞뵇ഓ๬泏癘ﴏ䃫ꎋ辦투 嶐湛灾 [ 77.469613][ T5856] usb 5-1: SerialNumber: 䀁 [ 77.549787][ T5973] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 77.728279][ T5911] usb 3-1: USB disconnect, device number 2 [ 77.772600][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.782272][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.854066][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.865479][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 77.875818][ T795] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.971205][ T5856] sierra 5-1:1.90: Sierra USB modem converter detected [ 77.985039][ T10] usb 1-1: USB disconnect, device number 2 [ 77.992003][ T5856] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 78.028080][ T5856] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 78.034960][ T795] usb 4-1: Using ep0 maxpacket: 16 [ 78.043139][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.093978][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.100523][ T5856] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 78.109040][ T795] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 78.132655][ T5856] usb 5-1: Sierra USB modem converter now attached to ttyUSB3 [ 78.148403][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.179603][ T5856] usb 5-1: USB disconnect, device number 3 [ 78.196976][ T795] usb 4-1: config 0 descriptor?? [ 78.273821][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.528681][ T5856] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 78.585088][ T5856] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 78.672043][ T5856] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 78.685837][ T795] usbhid 4-1:0.0: can't add hid device: -71 [ 78.692292][ T795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 78.719648][ T795] usb 4-1: USB disconnect, device number 3 [ 78.733457][ T5856] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 78.764687][ T5992] FAULT_INJECTION: forcing a failure. [ 78.764687][ T5992] name failslab, interval 1, probability 0, space 0, times 0 [ 78.770320][ T5856] sierra 5-1:1.90: device disconnected [ 78.795398][ T5995] FAULT_INJECTION: forcing a failure. [ 78.795398][ T5995] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.881171][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 78.881195][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.881206][ T5992] Call Trace: [ 78.881213][ T5992] [ 78.881220][ T5992] dump_stack_lvl+0xe8/0x150 [ 78.881250][ T5992] should_fail_ex+0x412/0x560 [ 78.881277][ T5992] should_failslab+0xa8/0x100 [ 78.881301][ T5992] __kmalloc_noprof+0xe8/0x760 [ 78.881321][ T5992] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 78.881349][ T5992] tomoyo_realpath_from_path+0xe3/0x5d0 [ 78.881383][ T5992] tomoyo_check_open_permission+0x229/0x470 [ 78.881404][ T5992] ? tomoyo_check_open_permission+0x1d3/0x470 [ 78.881435][ T5992] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 78.881485][ T5992] security_file_open+0xa9/0x240 [ 78.881503][ T5992] do_dentry_open+0x384/0x14e0 [ 78.881528][ T5992] ? vfs_open+0x31/0x340 [ 78.881553][ T5992] vfs_open+0x3b/0x340 [ 78.881571][ T5992] ? path_openat+0x2df0/0x3860 [ 78.881591][ T5992] path_openat+0x2e08/0x3860 [ 78.881624][ T5992] ? __pfx_stack_trace_save+0x10/0x10 [ 78.881646][ T5992] ? stack_depot_save_flags+0x33/0x810 [ 78.881675][ T5992] ? __pfx_path_openat+0x10/0x10 [ 78.881691][ T5992] ? __x64_sys_openat+0x138/0x170 [ 78.881713][ T5992] ? do_syscall_64+0x14d/0xf80 [ 78.881728][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.881751][ T5992] ? __lock_acquire+0x6b5/0x2cf0 [ 78.881777][ T5992] do_file_open+0x23e/0x4a0 [ 78.881800][ T5992] ? __pfx_do_file_open+0x10/0x10 [ 78.881837][ T5992] ? _raw_spin_unlock+0x28/0x50 [ 78.881859][ T5992] ? alloc_fd+0x64b/0x6c0 [ 78.881890][ T5992] do_sys_openat2+0x113/0x200 [ 78.881923][ T5992] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.881947][ T5992] ? exc_page_fault+0x6a/0xc0 [ 78.881976][ T5992] ? do_user_addr_fault+0xc6f/0x1340 [ 78.882000][ T5992] __x64_sys_openat+0x138/0x170 [ 78.882028][ T5992] do_syscall_64+0x14d/0xf80 [ 78.882043][ T5992] ? trace_irq_disable+0x3b/0x150 [ 78.882066][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.882082][ T5992] ? clear_bhb_loop+0x40/0x90 [ 78.882102][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.882119][ T5992] RIP: 0033:0x7f8b01b5cfce [ 78.882137][ T5992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.882150][ T5992] RSP: 002b:00007f8b029c1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.882167][ T5992] RAX: ffffffffffffffda RBX: 00007f8b029c26c0 RCX: 00007f8b01b5cfce [ 78.882179][ T5992] RDX: 0000000000101301 RSI: 00007f8b029c1c00 RDI: ffffffffffffff9c [ 78.882190][ T5992] RBP: 00007f8b029c1c00 R08: 0000000000000000 R09: 0000000000000000 [ 78.882201][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 78.882211][ T5992] R13: 00007f8b01e16038 R14: 00007f8b01e15fa0 R15: 00007f8b01f3fa48 [ 78.882235][ T5992] [ 78.882357][ T5992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.905189][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz.4.26 Not tainted syzkaller #0 PREEMPT(full) [ 78.905216][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.905226][ T5995] Call Trace: [ 78.905233][ T5995] [ 78.905239][ T5995] dump_stack_lvl+0xe8/0x150 [ 78.905268][ T5995] should_fail_ex+0x412/0x560 [ 78.905295][ T5995] _copy_from_iter+0x1d3/0x1670 [ 78.905321][ T5995] ? rcu_is_watching+0x15/0xb0 [ 78.905349][ T5995] ? __pfx__copy_from_iter+0x10/0x10 [ 78.905378][ T5995] ? netlink_sendmsg+0x650/0xb40 [ 78.905401][ T5995] ? skb_put+0x11b/0x210 [ 78.905428][ T5995] netlink_sendmsg+0x6c0/0xb40 [ 78.905458][ T5995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.905519][ T5995] ? aa_sock_msg_perm+0xf1/0x1b0 [ 78.905542][ T5995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 78.905564][ T5995] ____sys_sendmsg+0x972/0x9f0 [ 78.905588][ T5995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.905612][ T5995] ? import_iovec+0x73/0xa0 [ 78.905639][ T5995] ___sys_sendmsg+0x2a5/0x360 [ 78.905660][ T5995] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.905704][ T5995] ? __fget_files+0x2a/0x420 [ 78.905727][ T5995] ? __fget_files+0x3a0/0x420 [ 78.905758][ T5995] __x64_sys_sendmsg+0x1bd/0x2a0 [ 78.905777][ T5995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 78.905798][ T5995] ? __pfx_ksys_write+0x10/0x10 [ 78.905829][ T5995] do_syscall_64+0x14d/0xf80 [ 78.905843][ T5995] ? trace_irq_disable+0x3b/0x150 [ 78.905864][ T5995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.905880][ T5995] ? clear_bhb_loop+0x40/0x90 [ 78.905901][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.905918][ T5995] RIP: 0033:0x7fea2fb9c799 [ 78.905934][ T5995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.905947][ T5995] RSP: 002b:00007fea309d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.905966][ T5995] RAX: ffffffffffffffda RBX: 00007fea2fe15fa0 RCX: 00007fea2fb9c799 [ 78.905978][ T5995] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 78.905988][ T5995] RBP: 00007fea309d6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.905999][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.906009][ T5995] R13: 00007fea2fe16038 R14: 00007fea2fe15fa0 R15: 00007fea2ff3fa48 [ 78.906035][ T5995] [ 80.799920][ T6016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.30'. [ 81.375170][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 81.725029][ T795] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.791431][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.914930][ T795] usb 3-1: Using ep0 maxpacket: 32 [ 81.934819][ T795] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 81.949153][ T795] usb 3-1: config 0 has no interface number 0 [ 81.970425][ T795] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 82.020334][ T795] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 82.065041][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.208870][ T6034] FAULT_INJECTION: forcing a failure. [ 82.208870][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 82.264133][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.293944][ T5911] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.339168][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.353486][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.363899][ T9] IPVS: starting estimator thread 0... [ 82.370579][ T5911] usb 4-1: Product: syz [ 82.383533][ T5911] usb 4-1: Manufacturer: syz [ 82.392034][ T5911] usb 4-1: SerialNumber: syz [ 82.405703][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT(full) [ 82.405718][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.405724][ T6034] Call Trace: [ 82.405729][ T6034] [ 82.405733][ T6034] dump_stack_lvl+0xe8/0x150 [ 82.405753][ T6034] should_fail_ex+0x412/0x560 [ 82.405769][ T6034] should_failslab+0xa8/0x100 [ 82.405781][ T6034] ? ip_vs_conn_new+0x9a/0x12a0 [ 82.405791][ T6034] kmem_cache_alloc_noprof+0x87/0x650 [ 82.405806][ T6034] ip_vs_conn_new+0x9a/0x12a0 [ 82.405821][ T6034] ip_vs_schedule+0x1377/0x1d80 [ 82.405841][ T6034] ? __pfx_ip_vs_schedule+0x10/0x10 [ 82.405854][ T6034] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 82.405874][ T6034] ? ip_vs_conn_in_get_proto+0x3d3/0x560 [ 82.405888][ T6034] ? ip_vs_service_find+0xd4f/0xf10 [ 82.405901][ T6034] ? __pfx_ip_vs_conn_in_get_proto+0x10/0x10 [ 82.405918][ T6034] udp_conn_schedule+0x359/0x750 [ 82.405935][ T6034] ? __pfx_udp_conn_schedule+0x10/0x10 [ 82.405954][ T6034] ip_vs_in_hook+0x1005/0x22d0 [ 82.405972][ T6034] ? ip_vs_out_hook+0xcbf/0x13d0 [ 82.405983][ T6034] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 82.405998][ T6034] ? __pfx_ip_vs_out_hook+0x10/0x10 [ 82.406010][ T6034] ? ipt_do_table+0x2b2/0x1630 [ 82.406029][ T6034] ? iptable_mangle_hook+0x2c7/0x4c0 [ 82.406042][ T6034] ? nf_nat_ipv4_local_fn+0x1de/0x540 [ 82.406054][ T6034] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 82.406066][ T6034] nf_hook_slow+0xc5/0x220 [ 82.406081][ T6034] ? __pfx_dst_output+0x10/0x10 [ 82.406094][ T6034] nf_hook+0x22a/0x3a0 [ 82.406106][ T6034] ? dst_release+0x72/0x1b0 [ 82.406118][ T6034] ? nf_hook+0xa1/0x3a0 [ 82.406130][ T6034] ? __pfx_nf_hook+0x10/0x10 [ 82.406144][ T6034] ? __pfx_dst_output+0x10/0x10 [ 82.406158][ T6034] ? __ip_local_out+0x152/0x6a0 [ 82.406172][ T6034] __ip_local_out+0x558/0x6a0 [ 82.406184][ T6034] ? __pfx_dst_output+0x10/0x10 [ 82.406199][ T6034] ip_local_out+0x2a/0x190 [ 82.406213][ T6034] ip_send_skb+0x45/0xc0 [ 82.406227][ T6034] udp_send_skb+0xb04/0x1510 [ 82.406246][ T6034] udp_sendmsg+0x1a35/0x22f0 [ 82.406263][ T6034] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 82.406279][ T6034] ? __pfx_udp_sendmsg+0x10/0x10 [ 82.406291][ T6034] ? tomoyo_supervisor+0x4cb/0x1570 [ 82.406309][ T6034] ? register_lock_class+0x31/0x2e0 [ 82.406324][ T6034] ? __lock_acquire+0x6b5/0x2cf0 [ 82.406341][ T6034] ? get_random_u32+0x4ce/0x8b0 [ 82.406355][ T6034] udpv6_sendmsg+0xd1c/0x2560 [ 82.406374][ T6034] ? __lock_acquire+0x6b5/0x2cf0 [ 82.406388][ T6034] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 82.406414][ T6034] ? inet_send_prepare+0x1b9/0x270 [ 82.406424][ T6034] ? inet_send_prepare+0x1b9/0x270 [ 82.406435][ T6034] ? inet_send_prepare+0x1b9/0x270 [ 82.406443][ T6034] ? __local_bh_enable_ip+0xd0/0x130 [ 82.406456][ T6034] ? inet_send_prepare+0x1b9/0x270 [ 82.406466][ T6034] ? inet6_sendmsg+0xe4/0x120 [ 82.406486][ T6034] ____sys_sendmsg+0x5c7/0x9f0 [ 82.406501][ T6034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.406514][ T6034] ? import_iovec+0x73/0xa0 [ 82.406531][ T6034] ___sys_sendmsg+0x2a5/0x360 [ 82.406544][ T6034] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.406574][ T6034] ? __fget_files+0x2a/0x420 [ 82.406588][ T6034] ? __fget_files+0x3a0/0x420 [ 82.406606][ T6034] __x64_sys_sendmsg+0x1bd/0x2a0 [ 82.406620][ T6034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 82.406636][ T6034] ? __pfx_ksys_write+0x10/0x10 [ 82.406653][ T6034] do_syscall_64+0x14d/0xf80 [ 82.406662][ T6034] ? trace_irq_disable+0x3b/0x150 [ 82.406676][ T6034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.406685][ T6034] ? clear_bhb_loop+0x40/0x90 [ 82.406697][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.406706][ T6034] RIP: 0033:0x7f52ec19c799 [ 82.406720][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.406732][ T6034] RSP: 002b:00007f52ed0bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.406750][ T6034] RAX: ffffffffffffffda RBX: 00007f52ec415fa0 RCX: 00007f52ec19c799 [ 82.406761][ T6034] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 82.406772][ T6034] RBP: 00007f52ed0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 82.406781][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.406791][ T6034] R13: 00007f52ec416038 R14: 00007f52ec415fa0 R15: 00007f52ec53fa48 [ 82.406815][ T6034] [ 82.406964][ T6034] IPVS: ip_vs_conn_new(): no memory [ 82.869626][ T5911] cdc_mbim 4-1:1.0: skipping garbage [ 82.959769][ T795] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 83.021727][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.044232][ T795] usb 3-1: Product: syz [ 83.054927][ T795] usb 3-1: Manufacturer: syz [ 83.071663][ T795] usb 3-1: SerialNumber: syz [ 83.076594][ T6030] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 83.104959][ T6035] IPVS: using max 37 ests per chain, 88800 per kthread [ 83.118835][ T795] usb 3-1: config 0 descriptor?? [ 83.205305][ T5856] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 83.377183][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.461241][ T5856] usb 1-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 83.480787][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.511092][ T5856] usb 1-1: config 0 descriptor?? [ 83.690913][ T6030] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 83.705462][ T5911] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 83.780944][ T6044] FAULT_INJECTION: forcing a failure. [ 83.780944][ T6044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.809908][ T6044] CPU: 0 UID: 0 PID: 6044 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) [ 83.809933][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.809944][ T6044] Call Trace: [ 83.809951][ T6044] [ 83.809956][ T6044] dump_stack_lvl+0xe8/0x150 [ 83.809975][ T6044] should_fail_ex+0x412/0x560 [ 83.809998][ T6044] _copy_to_user+0x31/0xb0 [ 83.810026][ T6044] simple_read_from_buffer+0xe1/0x170 [ 83.810056][ T6044] proc_fail_nth_read+0x1bb/0x230 [ 83.810082][ T6044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.810099][ T6044] ? rw_verify_area+0x2a6/0x4d0 [ 83.810109][ T6044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.810123][ T6044] vfs_read+0x20c/0xa70 [ 83.810132][ T6044] ? fdget_pos+0x246/0x320 [ 83.810152][ T6044] ? __pfx___mutex_lock+0x10/0x10 [ 83.810171][ T6044] ? __pfx_vfs_read+0x10/0x10 [ 83.810190][ T6044] ? __fget_files+0x2a/0x420 [ 83.810218][ T6044] ? __fget_files+0x3a0/0x420 [ 83.810239][ T6044] ? __fget_files+0x2a/0x420 [ 83.810270][ T6044] ksys_read+0x150/0x270 [ 83.810290][ T6044] ? __pfx_ksys_read+0x10/0x10 [ 83.810318][ T6044] do_syscall_64+0x14d/0xf80 [ 83.810335][ T6044] ? trace_irq_disable+0x3b/0x150 [ 83.810358][ T6044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.810376][ T6044] ? clear_bhb_loop+0x40/0x90 [ 83.810393][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.810407][ T6044] RIP: 0033:0x7f52ec15cfce [ 83.810421][ T6044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.810432][ T6044] RSP: 002b:00007f52ed0befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.810446][ T6044] RAX: ffffffffffffffda RBX: 00007f52ed0bf6c0 RCX: 00007f52ec15cfce [ 83.810456][ T6044] RDX: 000000000000000f RSI: 00007f52ed0bf0a0 RDI: 0000000000000006 [ 83.810464][ T6044] RBP: 00007f52ed0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 83.810472][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.810480][ T6044] R13: 00007f52ec416038 R14: 00007f52ec415fa0 R15: 00007f52ec53fa48 [ 83.810507][ T6044] [ 83.826697][ T5911] wwan wwan0: port wwan0mbim0 attached [ 84.070692][ T5856] usb 1-1: string descriptor 0 read error: -71 [ 84.135105][ T30] audit: type=1400 audit(1773073506.859:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6048 comm="syz.1.40" [ 84.155400][ T5856] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 84.168675][ T5856] usb 1-1: USB disconnect, device number 3 [ 84.309535][ T5911] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 86:10:af:ce:7a:fb [ 84.385112][ T5911] usb 4-1: USB disconnect, device number 4 [ 84.407343][ T5911] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 84.721711][ T5911] wwan wwan0: port wwan0mbim0 disconnected [ 84.739100][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 84.812547][ T6064] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 84.819775][ T6067] FAULT_INJECTION: forcing a failure. [ 84.819775][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 84.860021][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.3.44 Not tainted syzkaller #0 PREEMPT(full) [ 84.860045][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.860054][ T6067] Call Trace: [ 84.860060][ T6067] [ 84.860067][ T6067] dump_stack_lvl+0xe8/0x150 [ 84.860096][ T6067] should_fail_ex+0x412/0x560 [ 84.860121][ T6067] ? __d_alloc+0x37/0x6f0 [ 84.860139][ T6067] should_failslab+0xa8/0x100 [ 84.860161][ T6067] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 84.860187][ T6067] __d_alloc+0x37/0x6f0 [ 84.860207][ T6067] d_alloc+0x4b/0x190 [ 84.860222][ T6067] ? lookup_one_qstr_excl+0xc8/0x360 [ 84.860247][ T6067] lookup_one_qstr_excl+0xdc/0x360 [ 84.860269][ T6067] ? lookup_noperm_common+0x245/0x430 [ 84.860296][ T6067] start_dirop+0x5c/0x90 [ 84.860321][ T6067] simple_start_creating+0xcc/0x110 [ 84.860347][ T6067] ? __pfx_simple_start_creating+0x10/0x10 [ 84.860373][ T6067] ? do_raw_spin_unlock+0xf5/0x210 [ 84.860390][ T6067] ? mntput+0x65/0xc0 [ 84.860414][ T6067] debugfs_start_creating+0xdb/0x1a0 [ 84.860441][ T6067] __debugfs_create_file+0x6f/0x400 [ 84.860468][ T6067] debugfs_create_file_full+0x3f/0x60 [ 84.860494][ T6067] kvm_create_vm_debugfs+0x471/0x8f0 [ 84.860529][ T6067] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 84.860563][ T6067] kvm_dev_ioctl+0x11ce/0x1590 [ 84.860594][ T6067] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 84.860615][ T6067] ? __fget_files+0x2a/0x420 [ 84.860640][ T6067] ? bpf_lsm_file_ioctl+0x9/0x20 [ 84.860661][ T6067] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 84.860686][ T6067] __se_sys_ioctl+0xfc/0x170 [ 84.860707][ T6067] do_syscall_64+0x14d/0xf80 [ 84.860726][ T6067] ? trace_irq_disable+0x3b/0x150 [ 84.860750][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.860769][ T6067] ? clear_bhb_loop+0x40/0x90 [ 84.860789][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.860806][ T6067] RIP: 0033:0x7f61b519c799 [ 84.860821][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.860834][ T6067] RSP: 002b:00007f61b6024028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.860850][ T6067] RAX: ffffffffffffffda RBX: 00007f61b5415fa0 RCX: 00007f61b519c799 [ 84.860863][ T6067] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 84.860873][ T6067] RBP: 00007f61b6024090 R08: 0000000000000000 R09: 0000000000000000 [ 84.860892][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.860902][ T6067] R13: 00007f61b5416038 R14: 00007f61b5415fa0 R15: 00007f61b553fa48 [ 84.860929][ T6067] [ 85.628942][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.646813][ T6068] veth0_virt_wifi: mtu less than device minimum [ 85.656959][ T795] usb 3-1: USB disconnect, device number 3 [ 86.262661][ T6090] netlink: 76 bytes leftover after parsing attributes in process `syz.0.51'. [ 86.848277][ T24] cfg80211: failed to load regulatory.db [ 88.264958][ T795] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.424978][ T795] usb 1-1: Using ep0 maxpacket: 16 [ 88.431748][ T795] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.447376][ T795] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.485410][ T795] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 88.512113][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.959992][ T795] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 89.307229][ T5902] usb 1-1: USB disconnect, device number 4 [ 89.376115][ T6143] netlink: 'syz.1.70': attribute type 10 has an invalid length. [ 89.464378][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 89.486276][ T6146] loop5: detected capacity change from 0 to 7 [ 89.511884][ T5998] Dev loop5: unable to read RDB block 7 [ 89.528918][ T5998] loop5: unable to read partition table [ 89.551461][ T5998] loop5: partition table beyond EOD, truncated [ 89.606458][ T6143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.70'. [ 89.627207][ T6146] Dev loop5: unable to read RDB block 7 [ 89.632793][ T6146] loop5: unable to read partition table [ 89.652514][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 89.686790][ T6146] loop5: partition table beyond EOD, truncated [ 89.723750][ T6146] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 90.047330][ T6153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.087168][ T6155] FAULT_INJECTION: forcing a failure. [ 90.087168][ T6155] name failslab, interval 1, probability 0, space 0, times 0 [ 90.230962][ T5826] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 90.319035][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(full) [ 90.319061][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.319070][ T6155] Call Trace: [ 90.319077][ T6155] [ 90.319085][ T6155] dump_stack_lvl+0xe8/0x150 [ 90.319113][ T6155] should_fail_ex+0x412/0x560 [ 90.319143][ T6155] should_failslab+0xa8/0x100 [ 90.319168][ T6155] __kmalloc_noprof+0xe8/0x760 [ 90.319188][ T6155] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 90.319217][ T6155] tomoyo_realpath_from_path+0xe3/0x5d0 [ 90.319249][ T6155] ? tomoyo_path_number_perm+0x219/0x630 [ 90.319275][ T6155] tomoyo_path_number_perm+0x246/0x630 [ 90.319297][ T6155] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.319317][ T6155] ? __lock_acquire+0x6b5/0x2cf0 [ 90.319349][ T6155] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 90.319385][ T6155] ? __fget_files+0x2a/0x420 [ 90.319413][ T6155] ? __fget_files+0x2a/0x420 [ 90.319448][ T6155] ? __fget_files+0x3a0/0x420 [ 90.319471][ T6155] ? __fget_files+0x2a/0x420 [ 90.319499][ T6155] security_file_ioctl+0xc3/0x2a0 [ 90.319521][ T6155] __se_sys_ioctl+0x47/0x170 [ 90.319543][ T6155] do_syscall_64+0x14d/0xf80 [ 90.319559][ T6155] ? trace_irq_disable+0x3b/0x150 [ 90.319583][ T6155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.319601][ T6155] ? clear_bhb_loop+0x40/0x90 [ 90.319622][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.319640][ T6155] RIP: 0033:0x7f8b01b9c799 [ 90.319656][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.319669][ T6155] RSP: 002b:00007f8b029a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.319688][ T6155] RAX: ffffffffffffffda RBX: 00007f8b01e16090 RCX: 00007f8b01b9c799 [ 90.319701][ T6155] RDX: 0000200000000780 RSI: 0000000000003b8c RDI: 0000000000000003 [ 90.319711][ T6155] RBP: 00007f8b029a1090 R08: 0000000000000000 R09: 0000000000000000 [ 90.319722][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.319731][ T6155] R13: 00007f8b01e16128 R14: 00007f8b01e16090 R15: 00007f8b01f3fa48 [ 90.319759][ T6155] [ 90.321304][ T6155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.925009][ T795] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 91.115718][ T795] usb 3-1: not running at top speed; connect to a high speed hub [ 91.174512][ T795] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 91.189226][ T795] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.200134][ T5902] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.209284][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.217125][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 91.249265][ T795] usb 3-1: Product: 娭沊噈谡့药꧒広蚗῞봟횟௏쎺퓘ᳫ⬂熥邆ᆅæ㹦魾傋뵥ᑹꋘ觛鷲佗㓬跫唛ꅢບ嗕᎑꺕⍍䃔飶蘌姢㟹䒬蛮㽀쵎 [ 91.249649][ T6165] xt_hashlimit: size too large, truncated to 1048576 [ 91.278274][ T795] usb 3-1: Manufacturer: ఌ [ 91.298075][ T795] usb 3-1: SerialNumber: syz [ 91.409152][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 91.421015][ T5902] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 91.565280][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.689665][ T5902] usb 1-1: Product: syz [ 91.693904][ T5902] usb 1-1: Manufacturer: syz [ 91.743441][ T5902] usb 1-1: SerialNumber: syz [ 91.772729][ T5902] usb 1-1: config 0 descriptor?? [ 91.849883][ T5902] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 91.864982][ T5902] usb 1-1: Detected FT-X [ 92.058638][ T5902] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 92.083023][ T5902] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 92.290587][ T5902] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 92.312641][ T795] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 92.322537][ T795] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 92.374197][ T5902] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.514201][ T5902] usb 1-1: USB disconnect, device number 5 [ 92.545284][ T5902] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.588554][ T5902] ftdi_sio 1-1:0.0: device disconnected [ 92.597542][ T795] usb 3-1: USB disconnect, device number 4 [ 93.635070][ T795] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.706209][ T6192] netlink: 'syz.3.83': attribute type 5 has an invalid length. [ 93.721031][ T6192] binder: BINDER_SET_CONTEXT_MGR already set [ 93.727778][ T6192] binder: 6191:6192 ioctl 4018620d 200000004a80 returned -16 [ 93.795063][ T795] usb 3-1: Using ep0 maxpacket: 32 [ 93.811968][ T795] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 93.847633][ T795] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 93.884676][ T795] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.925865][ T795] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 93.969152][ T795] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 94.008691][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.019843][ T795] usb 3-1: Product: syz [ 94.024047][ T795] usb 3-1: Manufacturer: syz [ 94.029128][ T795] usb 3-1: SerialNumber: syz [ 94.074470][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 94.109301][ T795] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input5 [ 94.308775][ T795] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 94.340473][ T795] (id 0x00) [ 94.480448][ T795] rc_core: IR keymap rc-imon-pad not found [ 94.493041][ T795] Registered IR keymap rc-empty [ 94.516142][ T795] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 94.565505][ T795] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 94.626876][ T795] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 94.675143][ T795] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input6 [ 94.904319][ T795] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:5> initialized [ 95.029122][ T6213] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.90'. [ 95.489684][ T6189] macvtap1: entered promiscuous mode [ 95.525708][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.839068][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 95.850247][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 95.879129][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 95.901127][ T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 95.927471][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.949943][ T24] usb 1-1: Product: syz [ 95.954328][ T24] usb 1-1: Manufacturer: syz [ 95.959840][ T24] usb 1-1: SerialNumber: syz [ 95.968940][ T24] usb 1-1: config 0 descriptor?? [ 95.976884][ T6213] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.984173][ T6213] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.014756][ T24] usb 1-1: ucan: probing device on interface #0 [ 96.224833][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.257367][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.300182][ T24] usb 1-1: ucan: device protocol version 786435 is not supported [ 96.309520][ T24] usb 1-1: ucan: probe failed; try to update the device firmware [ 96.516938][ T6213] syzkaller0: entered promiscuous mode [ 96.522440][ T6213] syzkaller0: entered allmulticast mode [ 96.531967][ T6213] tipc: Started in network mode [ 96.537394][ T6213] tipc: Node identity d2be60097fcb, cluster identity 4711 [ 96.546109][ T6213] tipc: Enabled bearer , priority 0 [ 96.597481][ T6213] tipc: Resetting bearer [ 96.617972][ T6238] block device autoloading is deprecated and will be removed. [ 96.740654][ T6213] tipc: Disabling bearer [ 96.763779][ T6238] netlink: 'syz.4.95': attribute type 4 has an invalid length. [ 96.832616][ T6238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.923304][ T24] usb 1-1: USB disconnect, device number 6 [ 97.273081][ T29] usb 3-1: USB disconnect, device number 5 [ 97.814826][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'. [ 98.316448][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 99.485054][ T795] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.845758][ T795] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 99.867147][ T795] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 99.893700][ T795] usb 4-1: Product: syz [ 99.909325][ T795] usb 4-1: SerialNumber: syz [ 99.950678][ T795] usb 4-1: config 0 descriptor?? [ 100.735076][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.215065][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.350067][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.361141][ T5911] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 101.379231][ T5911] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.436156][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 101.458260][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.474924][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 101.486784][ T5911] usb 3-1: SerialNumber: syz [ 101.492675][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 101.506531][ T9] usb 1-1: config 0 has no interface number 0 [ 101.513243][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.572302][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 101.582960][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.604996][ T9] usb 1-1: Product: syz [ 101.608695][ T5911] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 101.617685][ T9] usb 1-1: Manufacturer: syz [ 101.631248][ T9] usb 1-1: SerialNumber: syz [ 101.631730][ T5911] usb-storage 3-1:1.0: USB Mass Storage device detected [ 101.681266][ T9] usb 1-1: config 0 descriptor?? [ 101.698973][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 101.714371][ T5911] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 101.731966][ T6299] sctp: [Deprecated]: syz.2.109 (pid 6299) Use of int in max_burst socket option. [ 101.731966][ T6299] Use struct sctp_assoc_value instead [ 101.767119][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 101.939549][ T6299] tipc: Started in network mode [ 101.949359][ T6299] tipc: Node identity 3e1a8933ab38, cluster identity 4711 [ 101.960403][ T6299] tipc: Enabled bearer , priority 0 [ 101.972303][ T6299] syzkaller0: entered promiscuous mode [ 101.980110][ T6299] syzkaller0: entered allmulticast mode [ 102.091763][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.093176][ T795] usb 4-1: USB disconnect, device number 5 [ 102.113153][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (48) [ 102.128017][ T6299] tipc: Resetting bearer [ 102.148706][ T6299] netlink: 96 bytes leftover after parsing attributes in process `syz.2.109'. [ 102.184241][ T6296] tipc: Resetting bearer [ 102.224746][ T6296] tipc: Disabling bearer [ 102.287308][ T5902] usb 3-1: USB disconnect, device number 6 [ 102.302150][ T5911] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 102.314940][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.350344][ T5911] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 102.381100][ T5911] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 102.408674][ T5911] usb 2-1: Manufacturer: syz [ 102.428066][ T5911] usb 2-1: config 0 descriptor?? [ 102.468510][ T5911] igorplugusb 2-1:0.0: incorrect number of endpoints [ 102.716903][ T9] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 102.755180][ T9] em28xx 1-1:0.132: board has no eeprom [ 102.935326][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 102.943356][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 102.952104][ T5902] em28xx 1-1:0.132: Registering V4L2 extension [ 103.313785][ T6306] net veth1_virt_wifi : renamed from virt_wifi0 [ 103.334437][ T5911] usb 1-1: USB disconnect, device number 7 [ 103.341404][ T5911] em28xx 1-1:0.132: Disconnecting em28xx [ 103.355133][ T5902] em28xx 1-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 103.381194][ T9] usb 2-1: USB disconnect, device number 3 [ 103.566199][ T5902] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 103.582690][ T5902] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 103.600222][ T5902] em28xx 1-1:0.132: No AC97 audio processor [ 103.624520][ T5902] usb 1-1: Decoder not found [ 103.651052][ T5902] em28xx 1-1:0.132: failed to create media graph [ 103.669368][ T5902] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 103.684995][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.720380][ T5902] em28xx 1-1:0.132: Remote control support is not available for this card. [ 103.739783][ T5911] em28xx 1-1:0.132: Closing input extension [ 103.791912][ T5911] em28xx 1-1:0.132: Freeing device [ 103.824953][ T10] usb 3-1: device descriptor read/64, error -71 [ 104.061160][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 104.200305][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.367973][ T10] usb 3-1: device descriptor read/64, error -71 [ 104.524975][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.571921][ T10] usb usb3-port1: attempt power cycle [ 104.774954][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 104.782872][ T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 104.791051][ T9] usb 1-1: config 0 has no interface number 0 [ 104.797474][ T9] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.809368][ T9] usb 1-1: config 0 interface 89 has no altsetting 0 [ 104.827500][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 104.847785][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.865116][ T9] usb 1-1: Product: syz [ 104.869496][ T9] usb 1-1: Manufacturer: syz [ 104.884553][ T9] usb 1-1: SerialNumber: syz [ 104.965007][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.976601][ T9] usb 1-1: config 0 descriptor?? [ 104.988007][ T10] usb 3-1: device descriptor read/8, error -71 [ 105.026371][ T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 105.037293][ T9] em28xx 1-1:0.89: Video interface 89 found: [ 105.261464][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 105.300368][ T10] usb 3-1: device descriptor read/8, error -71 [ 105.425486][ T10] usb usb3-port1: unable to enumerate USB device [ 105.575098][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.613700][ T6367] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 105.624629][ T9] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 105.632325][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.676851][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.746428][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 105.756665][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 105.769395][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 105.781507][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 105.790731][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.798811][ T10] usb 4-1: Product: syz [ 105.803014][ T10] usb 4-1: Manufacturer: syz [ 105.807906][ T10] usb 4-1: SerialNumber: syz [ 105.815963][ T10] usb 4-1: config 0 descriptor?? [ 105.846457][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 105.854386][ T5903] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.866418][ T6363] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 105.875952][ T6363] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 105.883347][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.892247][ T10] usb 4-1: ucan: probing device on interface #0 [ 105.898961][ T5903] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 105.908748][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.927026][ T5903] usb 5-1: config 0 descriptor?? [ 105.996906][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'. [ 106.302932][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.319722][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.358444][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.368954][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.389940][ T10] usb 4-1: ucan: failed to retrieve device info [ 106.405393][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 106.419081][ T6363] fuse: Bad value for 'user_id' [ 106.430733][ T6363] fuse: Bad value for 'user_id' [ 106.439857][ T5903] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 106.497901][ T10] usb 4-1: USB disconnect, device number 6 [ 106.643201][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.683215][ T9] em28xx 1-1:0.89: board has no eeprom [ 106.693525][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.935312][ T9] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 106.948453][ T9] em28xx 1-1:0.89: analog set to bulk mode. [ 106.961537][ T10] em28xx 1-1:0.89: Registering V4L2 extension [ 106.983083][ T9] usb 1-1: USB disconnect, device number 8 [ 107.005109][ T5903] usb 5-1: USB disconnect, device number 4 [ 107.017311][ T9] em28xx 1-1:0.89: Disconnecting em28xx [ 107.126609][ T10] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 107.137334][ T10] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 107.144641][ T10] em28xx 1-1:0.89: No AC97 audio processor [ 107.183720][ T10] usb 1-1: Decoder not found [ 107.190996][ T10] em28xx 1-1:0.89: failed to create media graph [ 107.202362][ T10] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 107.214656][ T6389] ======================================================= [ 107.214656][ T6389] WARNING: The mand mount option has been deprecated and [ 107.214656][ T6389] and is ignored by this kernel. Remove the mand [ 107.214656][ T6389] option from the mount to silence this warning. [ 107.214656][ T6389] ======================================================= [ 107.262283][ T10] em28xx 1-1:0.89: Registering snapshot button... [ 107.282675][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input7 [ 107.316462][ T10] em28xx 1-1:0.89: Remote control support is not available for this card. [ 107.325927][ T9] em28xx 1-1:0.89: Closing input extension [ 107.365744][ T9] em28xx 1-1:0.89: Deregistering snapshot button [ 107.432636][ T9] em28xx 1-1:0.89: Freeing device [ 107.465078][ T5903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.545293][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.635131][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 107.761256][ T5903] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 107.872438][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 107.883570][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 107.902811][ T5903] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 107.928358][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 107.942696][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 107.943543][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.961079][ T5903] usb 5-1: Product: ﳿ [ 107.965230][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 107.965258][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.965275][ T24] usb 4-1: Product: syz [ 107.965289][ T24] usb 4-1: Manufacturer: syz [ 107.965302][ T24] usb 4-1: SerialNumber: syz [ 107.969065][ T24] usb 4-1: config 0 descriptor?? [ 108.049145][ T6389] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.057626][ T6389] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.139879][ T5903] usb 5-1: SerialNumber: Ѝ [ 108.146416][ T24] usb 4-1: ucan: probing device on interface #0 [ 108.492952][ T24] usb 4-1: ucan: device reported invalid tx-fifo size [ 108.499961][ T24] usb 4-1: ucan: probe failed; try to update the device firmware [ 108.575530][ T5903] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 108.698711][ T24] usb 4-1: USB disconnect, device number 7 [ 108.798886][ T5903] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.858080][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.877180][ T5903] usb 5-1: USB disconnect, device number 5 [ 109.215034][ T5903] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.416531][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 109.453753][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.453784][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.453797][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.453821][ T5903] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.453834][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.456052][ T5903] usb 5-1: config 0 descriptor?? [ 109.858426][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.920124][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.986022][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 110.100311][ T6442] syz.3.149 uses obsolete (PF_INET,SOCK_PACKET) [ 110.247945][ T5903] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.269870][ T5903] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 110.311072][ T5903] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 110.422374][ T5903] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 110.434235][ T5903] microsoft 0003:045E:07DA.0004: no inputs found [ 110.443966][ T5903] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 111.271314][ T5903] usb 5-1: USB disconnect, device number 6 [ 111.557410][ T6462] netlink: 56 bytes leftover after parsing attributes in process `syz.4.153'. [ 112.127005][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 112.177603][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.155'. [ 112.345790][ T5903] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.524069][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 112.554530][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 112.576765][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 112.589961][ T5903] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 112.605082][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.613329][ T5903] usb 1-1: Product: syz [ 112.618132][ T5903] usb 1-1: Manufacturer: syz [ 112.623396][ T5903] usb 1-1: SerialNumber: syz [ 112.643755][ T5903] usb 1-1: config 0 descriptor?? [ 112.673899][ T6465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.688487][ T6465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.710621][ T5903] usb 1-1: ucan: probing device on interface #0 [ 113.137410][ T5903] usb 1-1: ucan: device reported invalid tx-fifo size [ 113.158292][ T5903] usb 1-1: ucan: probe failed; try to update the device firmware [ 113.264954][ T5931] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.310308][ T6505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.166'. [ 113.389469][ T5903] usb 1-1: USB disconnect, device number 9 [ 113.497279][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.508113][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.534040][ T5931] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.543599][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.568506][ T5931] usb 5-1: SerialNumber: syz [ 113.777717][ T6523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.865873][ T6523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.963955][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.990042][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.019137][ T6525] netlink: 'syz.4.162': attribute type 4 has an invalid length. [ 114.224971][ T5912] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.380463][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 114.392947][ T5912] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 114.402502][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.412741][ T5912] usb 1-1: Product: syz [ 114.419118][ T5912] usb 1-1: Manufacturer: syz [ 114.423872][ T5912] usb 1-1: SerialNumber: syz [ 114.432092][ T5912] usb 1-1: config 0 descriptor?? [ 114.586074][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 114.758404][ T24] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 114.790331][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.817862][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.833043][ T24] usb 3-1: config 1 has no interface number 0 [ 114.845036][ T24] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.857550][ T24] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.870426][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.881097][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.889661][ T24] usb 3-1: Product: syz [ 114.895037][ T24] usb 3-1: Manufacturer: syz [ 114.904949][ T24] usb 3-1: SerialNumber: syz [ 114.928467][ T24] cdc_wdm 3-1:1.128: skipping garbage [ 114.942309][ T24] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 114.953313][ T24] cdc_wdm 3-1:1.128: Unknown control protocol [ 115.054998][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.151062][ T9] usb 3-1: USB disconnect, device number 11 [ 115.254960][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 115.269924][ T5912] usbserial_generic 1-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 115.291961][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 115.319664][ T5912] usbserial_generic 1-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 115.330890][ T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 115.356084][ T5912] usbserial_generic 1-1:0.0: device has no bulk endpoints [ 115.370830][ T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.376006][ T5912] usb 1-1: USB disconnect, device number 10 [ 115.405353][ T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 115.450545][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 115.483299][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.497663][ T6543] trusted_key: syz.0.177 sent an empty control message without MSG_MORE. [ 115.515702][ T10] usb 4-1: Product: syz [ 115.527567][ T10] usb 4-1: Manufacturer: syz [ 115.541071][ T10] usb 4-1: SerialNumber: syz [ 115.562928][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 115.632295][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input10 [ 115.784965][ T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 115.793576][ T10] (id 0x00) [ 115.885871][ T10] rc_core: IR keymap rc-imon-pad not found [ 115.891826][ T10] Registered IR keymap rc-empty [ 115.905125][ T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 115.940723][ T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 115.992191][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 116.021196][ T5931] usb 5-1: 0:2 : does not exist [ 116.029372][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input11 [ 116.082907][ T10] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:8> initialized [ 116.221700][ T5931] usb 5-1: USB disconnect, device number 7 [ 116.734352][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.651378][ T6562] macvtap1: entered promiscuous mode [ 117.786530][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 118.337281][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.349196][ T6581] netlink: 7 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.359423][ T6581] netlink: 7 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.783793][ T10] usb 4-1: USB disconnect, device number 8 [ 119.255928][ T5912] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.664962][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 119.719884][ T5912] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 119.728426][ T5912] usb 2-1: config 0 has no interface number 0 [ 119.734550][ T5912] usb 2-1: config 0 interface 246 altsetting 249 bulk endpoint 0x9 has invalid maxpacket 1023 [ 119.782941][ T5912] usb 2-1: config 0 interface 246 has no altsetting 0 [ 119.814745][ T5912] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=27.0a [ 119.826216][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.855000][ T5912] usb 2-1: Product: syz [ 119.861648][ T5912] usb 2-1: Manufacturer: syz [ 119.868233][ T5912] usb 2-1: SerialNumber: syz [ 119.877767][ T5912] usb 2-1: config 0 descriptor?? [ 119.883519][ T6601] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.024985][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.158734][ T5912] usb 2-1: USB disconnect, device number 4 [ 120.198379][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.231606][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.277401][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 120.320699][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.328222][ T6616] veth1_to_bond: entered allmulticast mode [ 120.368870][ T10] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 120.378925][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.395038][ T10] usb 5-1: Product: syz [ 120.399251][ T10] usb 5-1: Manufacturer: syz [ 120.408816][ T10] usb 5-1: SerialNumber: syz [ 120.603692][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 120.630496][ T6618] netlink: 7 bytes leftover after parsing attributes in process `syz.2.199'. [ 120.654525][ T6618] netlink: 7 bytes leftover after parsing attributes in process `syz.2.199'. [ 120.732912][ T6625] tipc: Enabled bearer , priority 0 [ 120.741389][ T6625] syzkaller0: entered promiscuous mode [ 120.773857][ T6625] syzkaller0: entered allmulticast mode [ 120.867602][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 120.979510][ T6625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.202'. [ 121.040513][ T6627] tipc: Resetting bearer [ 121.305004][ T5931] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 121.384948][ T5903] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 121.429209][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 121.440263][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 121.462129][ T6638] bridge0: entered promiscuous mode [ 121.480949][ T6638] ip6gretap0: entered promiscuous mode [ 121.560023][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 121.576773][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.609689][ T5931] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 121.629581][ T5903] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7 [ 121.652056][ T5931] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1023 [ 121.677003][ T5903] usb 3-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice= 0.40 [ 121.686296][ T5931] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.699524][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.708295][ T5931] usb 4-1: config 1 interface 0 has no altsetting 0 [ 121.746670][ T795] tipc: Node number set to 2502068531 [ 121.760627][ T5903] usb 3-1: Product: syz [ 121.771513][ T5903] usb 3-1: Manufacturer: syz [ 121.797554][ T5903] usb 3-1: SerialNumber: syz [ 121.808060][ T5931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.819154][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.845158][ T5931] usb 4-1: Product: syz [ 121.850208][ T5931] usb 4-1: Manufacturer: Н [ 121.857017][ T5931] usb 4-1: SerialNumber: syz [ 121.872227][ T6634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.885203][ T6634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.094179][ T6624] tipc: Resetting bearer [ 122.106926][ T5903] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 122.132508][ T6624] tipc: Disabling bearer [ 122.150273][ T5931] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 122.169582][ T5903] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 122.183636][ T5903] usb 3-1: unit 9 not found! [ 122.220515][ T5931] usb 4-1: USB disconnect, device number 9 [ 122.226490][ T5903] usb 3-1: unit 5 not found! [ 122.320398][ T5903] usb 3-1: USB disconnect, device number 12 [ 122.937166][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 123.029088][ T10] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 123.369650][ T10] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 123.398335][ T10] usb 5-1: USB disconnect, device number 8 [ 123.595695][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.238619][ T6673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.768277][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 124.838149][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'. [ 125.255920][ T6679] IPv6: Can't replace route, no match found [ 125.555191][ T5931] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.758539][ T5931] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 125.775560][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.879436][ T5931] usb 3-1: Product: syz [ 125.883647][ T5931] usb 3-1: Manufacturer: syz [ 125.889716][ T5931] usb 3-1: SerialNumber: syz [ 125.909639][ T5931] usb 3-1: config 0 descriptor?? [ 125.992507][ T5931] hub 3-1:0.0: bad descriptor, ignoring hub [ 125.999618][ T5931] hub 3-1:0.0: probe with driver hub failed with error -5 [ 126.126733][ T6693] netlink: 7 bytes leftover after parsing attributes in process `syz.0.223'. [ 126.182439][ T5931] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 126.212220][ T6697] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20003 [ 126.214092][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.477755][ T5931] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 126.514285][ T5931] usb 3-1: media controller created [ 126.534412][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.010043][ T5931] DVB: Unable to find symbol dib7000p_attach() [ 127.031649][ T5931] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 127.157461][ T5931] rc_core: IR keymap rc-dib0700-rc5 not found [ 127.268405][ T5931] Registered IR keymap rc-empty [ 127.286567][ T5931] dvb-usb: could not initialize remote control. [ 127.316143][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 127.586390][ T5931] usb 3-1: USB disconnect, device number 13 [ 127.711378][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 128.168638][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 129.793306][ T30] audit: type=1800 audit(1773073552.539:3): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.235" name="bus" dev="ramfs" ino=13979 res=0 errno=0 [ 131.643713][ T6786] xt_hashlimit: size too large, truncated to 1048576 [ 132.090876][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 132.137765][ T6792] netlink: 7 bytes leftover after parsing attributes in process `syz.0.250'. [ 132.173420][ T6792] netlink: 7 bytes leftover after parsing attributes in process `syz.0.250'. [ 132.204989][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 132.272093][ T5826] ================================================================== [ 132.280283][ T5826] BUG: KASAN: stack-out-of-bounds in l2cap_send_cmd+0x2a3/0xb90 [ 132.287951][ T5826] Read of size 26 at addr ffffc90003a67500 by task kworker/u9:4/5826 [ 132.296032][ T5826] [ 132.298382][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.298413][ T5826] Tainted: [L]=SOFTLOCKUP [ 132.298420][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.298434][ T5826] Workqueue: hci0 hci_rx_work [ 132.298479][ T5826] Call Trace: [ 132.298487][ T5826] [ 132.298496][ T5826] dump_stack_lvl+0xe8/0x150 [ 132.298525][ T5826] print_report+0xba/0x230 [ 132.298548][ T5826] ? l2cap_send_cmd+0x2a3/0xb90 [ 132.298565][ T5826] kasan_report+0x117/0x150 [ 132.298588][ T5826] ? trace_kmem_cache_alloc+0x29/0xf0 [ 132.298609][ T5826] ? l2cap_send_cmd+0x2a3/0xb90 [ 132.298630][ T5826] kasan_check_range+0x264/0x2c0 [ 132.298661][ T5826] ? l2cap_send_cmd+0x2a3/0xb90 [ 132.298679][ T5826] __asan_memcpy+0x29/0x70 [ 132.298698][ T5826] l2cap_send_cmd+0x2a3/0xb90 [ 132.298721][ T5826] l2cap_recv_frame+0xc032/0x10240 [ 132.298744][ T5826] ? lock_release+0x4b/0x3d0 [ 132.298768][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 132.298797][ T5826] ? unwind_next_frame+0xa5/0x23c0 [ 132.298824][ T5826] ? rcu_is_watching+0x15/0xb0 [ 132.298851][ T5826] ? lock_release+0x4b/0x3d0 [ 132.298873][ T5826] ? unwind_next_frame+0x1aaf/0x23c0 [ 132.298904][ T5826] ? unwind_next_frame+0xa5/0x23c0 [ 132.298930][ T5826] ? unwind_next_frame+0x1aaf/0x23c0 [ 132.298960][ T5826] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 132.298980][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 132.299005][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 132.299032][ T5826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.299055][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 132.299085][ T5826] ? stack_trace_save+0xa9/0x100 [ 132.299104][ T5826] ? __pfx_stack_trace_save+0x10/0x10 [ 132.299125][ T5826] ? check_path+0x21/0x40 [ 132.299150][ T5826] ? check_noncircular+0xda/0x150 [ 132.299178][ T5826] ? add_lock_to_list+0xc7/0x100 [ 132.299207][ T5826] ? lockdep_unlock+0x5d/0xd0 [ 132.299228][ T5826] ? __lock_acquire+0x146e/0x2cf0 [ 132.299261][ T5826] ? __mutex_trylock_common+0x158/0x260 [ 132.299292][ T5826] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.299322][ T5826] ? rcu_is_watching+0x15/0xb0 [ 132.299349][ T5826] ? trace_contention_end+0x3d/0x150 [ 132.299379][ T5826] ? __mutex_lock+0x319/0x1300 [ 132.299400][ T5826] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 132.299423][ T5826] ? l2cap_recv_acldata+0x30b/0x13e0 [ 132.299444][ T5826] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 132.299464][ T5826] ? __pfx___mutex_lock+0x10/0x10 [ 132.299482][ T5826] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.299500][ T5826] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 132.299523][ T5826] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 132.299558][ T5826] ? l2cap_recv_acldata+0x41/0x13e0 [ 132.299581][ T5826] l2cap_recv_acldata+0x7e9/0x13e0 [ 132.299605][ T5826] hci_rx_work+0x4f9/0x1030 [ 132.299670][ T5826] ? process_scheduled_works+0xa25/0x1830 [ 132.299697][ T5826] process_scheduled_works+0xb02/0x1830 [ 132.299733][ T5826] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.299761][ T5826] ? assign_work+0x3d5/0x5e0 [ 132.299786][ T5826] worker_thread+0xa50/0xfc0 [ 132.299823][ T5826] kthread+0x388/0x470 [ 132.299842][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 132.299865][ T5826] ? __pfx_kthread+0x10/0x10 [ 132.299883][ T5826] ret_from_fork+0x51e/0xb90 [ 132.299909][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 132.299933][ T5826] ? __switch_to+0xc7d/0x1450 [ 132.299955][ T5826] ? __pfx_kthread+0x10/0x10 [ 132.299973][ T5826] ret_from_fork_asm+0x1a/0x30 [ 132.300009][ T5826] [ 132.300016][ T5826] [ 132.646890][ T5826] The buggy address belongs to stack of task kworker/u9:4/5826 [ 132.654445][ T5826] and is located at offset 128 in frame: [ 132.660339][ T5826] l2cap_recv_frame+0x0/0x10240 [ 132.665197][ T5826] [ 132.667600][ T5826] This frame has 26 objects: [ 132.672186][ T5826] [32, 34) 'rsp.i241.i.i' [ 132.672200][ T5826] [48, 88) 'chan.i.i.i' [ 132.676692][ T5826] [128, 146) 'pdu_u.i.i.i' [ 132.680936][ T5826] [192, 202) 'rsp.i94.i.i' [ 132.685423][ T5826] [224, 226) 'rsp.i.i.i111' [ 132.689913][ T5826] [240, 242) 'rej.i' [ 132.694490][ T5826] [256, 258) 'rej.i145.i' [ 132.698466][ T5826] [272, 274) 'rej.i143.i' [ 132.702873][ T5826] [288, 290) 'req.i229.i.i' [ 132.707373][ T5826] [304, 312) 'buf.i222.i.i' [ 132.711959][ T5826] [336, 348) 'buf29.i.i.i' [ 132.716534][ T5826] [368, 372) 'rsp49.i.i.i' [ 132.721021][ T5826] [384, 393) 'rfc.i.i118.i.i' [ 132.725512][ T5826] [416, 480) 'buf.i119.i.i' [ 132.730377][ T5826] [512, 576) 'req.i120.i.i' [ 132.734988][ T5826] [608, 617) 'rfc.i.i.i.i' [ 132.739656][ T5826] [640, 656) 'efs.i.i.i.i' [ 132.744237][ T5826] [672, 678) 'rej.i371.i.i.i' [ 132.748768][ T5826] [704, 710) 'rej.i.i.i.i' [ 132.753516][ T5826] [736, 800) 'rsp.i.i.i' [ 132.758006][ T5826] [832, 896) 'buf.i.i.i' [ 132.762328][ T5826] [928, 1056) 'req.i.i.i' [ 132.766707][ T5826] [1088, 1096) 'rsp.i.i.i.i' [ 132.771151][ T5826] [1120, 1122) 'info.i.i.i.i' [ 132.775860][ T5826] [1136, 1264) 'buf.i.i.i.i' [ 132.780673][ T5826] [1296, 1298) 'rej.i.i' [ 132.785341][ T5826] [ 132.792055][ T5826] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003a60000 allocated at copy_process+0x508/0x3cf0 [ 132.805014][ T5826] The buggy address belongs to the physical page: [ 132.811440][ T5826] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x679af [ 132.820283][ T5826] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.827405][ T5826] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 132.835987][ T5826] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 132.844558][ T5826] page dumped because: kasan: bad access detected [ 132.850981][ T5826] page_owner tracks the page as allocated [ 132.856697][ T5826] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 67023525297, free_ts 66975418192 [ 132.875456][ T5826] post_alloc_hook+0x231/0x280 [ 132.880230][ T5826] get_page_from_freelist+0x24dc/0x2580 [ 132.885784][ T5826] __alloc_frozen_pages_noprof+0x18d/0x380 [ 132.891608][ T5826] __alloc_pages_noprof+0xa/0x30 [ 132.896568][ T5826] __vmalloc_node_range_noprof+0x7be/0x1730 [ 132.902895][ T5826] __vmalloc_node_noprof+0xc2/0x100 [ 132.908098][ T5826] dup_task_struct+0x228/0x9a0 [ 132.912866][ T5826] copy_process+0x508/0x3cf0 [ 132.917456][ T5826] kernel_clone+0x248/0x8e0 [ 132.921964][ T5826] kernel_thread+0x13f/0x1b0 [ 132.926552][ T5826] kthreadd+0x4ec/0x6e0 [ 132.930706][ T5826] ret_from_fork+0x51e/0xb90 [ 132.935298][ T5826] ret_from_fork_asm+0x1a/0x30 [ 132.940063][ T5826] page last free pid 5819 tgid 5819 stack trace: [ 132.946374][ T5826] __free_frozen_pages+0xc2b/0xdb0 [ 132.951482][ T5826] __slab_free+0x263/0x2b0 [ 132.955895][ T5826] qlist_free_all+0x97/0x100 [ 132.960475][ T5826] kasan_quarantine_reduce+0x148/0x160 [ 132.965929][ T5826] __kasan_slab_alloc+0x22/0x80 [ 132.970858][ T5826] __kmalloc_cache_noprof+0x2ba/0x660 [ 132.976321][ T5826] kcov_open+0x25/0x90 [ 132.980390][ T5826] open_proxy_open+0x346/0x4a0 [ 132.985147][ T5826] do_dentry_open+0x785/0x14e0 [ 132.989997][ T5826] vfs_open+0x3b/0x340 [ 132.994506][ T5826] path_openat+0x2e08/0x3860 [ 132.999208][ T5826] do_file_open+0x23e/0x4a0 [ 133.003712][ T5826] do_sys_openat2+0x113/0x200 [ 133.008567][ T5826] __x64_sys_openat+0x138/0x170 [ 133.013423][ T5826] do_syscall_64+0x14d/0xf80 [ 133.018006][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.023894][ T5826] [ 133.026220][ T5826] Memory state around the buggy address: [ 133.031932][ T5826] ffffc90003a67400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.039992][ T5826] ffffc90003a67480: f1 f1 f1 f1 f8 f2 f8 f8 f8 f8 f8 f2 f2 f2 f2 f2 [ 133.048047][ T5826] >ffffc90003a67500: 00 00 02 f2 f2 f2 f2 f2 f8 f8 f2 f2 f8 f2 f8 f2 [ 133.056113][ T5826] ^ [ 133.060687][ T5826] ffffc90003a67580: f8 f2 f8 f2 f8 f2 f8 f2 f2 f2 f8 f8 f2 f2 f8 f2 [ 133.068739][ T5826] ffffc90003a67600: f8 f8 f2 f2 f8 f8 f8 f8 f8 f8 f8 f8 f2 f2 f2 f2 [ 133.076787][ T5826] ================================================================== [ 133.096429][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.102878][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.112244][ T5826] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 133.119625][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.130773][ T5826] Tainted: [L]=SOFTLOCKUP [ 133.135104][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.145166][ T5826] Workqueue: hci0 hci_rx_work [ 133.149884][ T5826] Call Trace: [ 133.153160][ T5826] [ 133.156098][ T5826] vpanic+0x56c/0xa60 [ 133.160124][ T5826] ? __pfx_vpanic+0x10/0x10 [ 133.164654][ T5826] panic+0xc5/0xd0 [ 133.168393][ T5826] ? __pfx_panic+0x10/0x10 [ 133.172827][ T5826] ? preempt_schedule_thunk+0x16/0x30 [ 133.178214][ T5826] ? preempt_schedule_thunk+0x16/0x30 [ 133.183596][ T5826] ? l2cap_send_cmd+0x2a3/0xb90 [ 133.188454][ T5826] check_panic_on_warn+0x89/0xb0 [ 133.193499][ T5826] ? l2cap_send_cmd+0x2a3/0xb90 [ 133.198373][ T5826] end_report+0x73/0x180 [ 133.202650][ T5826] ? l2cap_send_cmd+0x2a3/0xb90 [ 133.207522][ T5826] kasan_report+0x128/0x150 [ 133.212055][ T5826] ? trace_kmem_cache_alloc+0x29/0xf0 [ 133.217450][ T5826] ? l2cap_send_cmd+0x2a3/0xb90 [ 133.222416][ T5826] kasan_check_range+0x264/0x2c0 [ 133.227386][ T5826] ? l2cap_send_cmd+0x2a3/0xb90 [ 133.232545][ T5826] __asan_memcpy+0x29/0x70 [ 133.236988][ T5826] l2cap_send_cmd+0x2a3/0xb90 [ 133.241695][ T5826] l2cap_recv_frame+0xc032/0x10240 [ 133.246832][ T5826] ? lock_release+0x4b/0x3d0 [ 133.251441][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 133.256396][ T5826] ? unwind_next_frame+0xa5/0x23c0 [ 133.261530][ T5826] ? rcu_is_watching+0x15/0xb0 [ 133.266318][ T5826] ? lock_release+0x4b/0x3d0 [ 133.271192][ T5826] ? unwind_next_frame+0x1aaf/0x23c0 [ 133.276515][ T5826] ? unwind_next_frame+0xa5/0x23c0 [ 133.281652][ T5826] ? unwind_next_frame+0x1aaf/0x23c0 [ 133.286945][ T5826] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 133.292852][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 133.297791][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 133.302729][ T5826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.308880][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 133.313856][ T5826] ? stack_trace_save+0xa9/0x100 [ 133.318879][ T5826] ? __pfx_stack_trace_save+0x10/0x10 [ 133.324261][ T5826] ? check_path+0x21/0x40 [ 133.328588][ T5826] ? check_noncircular+0xda/0x150 [ 133.333618][ T5826] ? add_lock_to_list+0xc7/0x100 [ 133.338560][ T5826] ? lockdep_unlock+0x5d/0xd0 [ 133.343241][ T5826] ? __lock_acquire+0x146e/0x2cf0 [ 133.348282][ T5826] ? __mutex_trylock_common+0x158/0x260 [ 133.353835][ T5826] ? __pfx___mutex_trylock_common+0x10/0x10 [ 133.359724][ T5826] ? rcu_is_watching+0x15/0xb0 [ 133.364484][ T5826] ? trace_contention_end+0x3d/0x150 [ 133.369772][ T5826] ? __mutex_lock+0x319/0x1300 [ 133.374555][ T5826] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 133.379839][ T5826] ? l2cap_recv_acldata+0x30b/0x13e0 [ 133.385120][ T5826] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 133.390742][ T5826] ? __pfx___mutex_lock+0x10/0x10 [ 133.395756][ T5826] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.401722][ T5826] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 133.407695][ T5826] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 133.414016][ T5826] ? l2cap_recv_acldata+0x41/0x13e0 [ 133.419211][ T5826] l2cap_recv_acldata+0x7e9/0x13e0 [ 133.424319][ T5826] hci_rx_work+0x4f9/0x1030 [ 133.428915][ T5826] ? process_scheduled_works+0xa25/0x1830 [ 133.434634][ T5826] process_scheduled_works+0xb02/0x1830 [ 133.440208][ T5826] ? __pfx_process_scheduled_works+0x10/0x10 [ 133.446284][ T5826] ? assign_work+0x3d5/0x5e0 [ 133.450869][ T5826] worker_thread+0xa50/0xfc0 [ 133.455634][ T5826] kthread+0x388/0x470 [ 133.459696][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 133.464809][ T5826] ? __pfx_kthread+0x10/0x10 [ 133.469392][ T5826] ret_from_fork+0x51e/0xb90 [ 133.473980][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 133.479088][ T5826] ? __switch_to+0xc7d/0x1450 [ 133.483767][ T5826] ? __pfx_kthread+0x10/0x10 [ 133.488344][ T5826] ret_from_fork_asm+0x1a/0x30 [ 133.493115][ T5826] [ 133.496422][ T5826] Kernel Offset: disabled [ 133.500998][ T5826] Rebooting in 86400 seconds..