last executing test programs: 12m2.768624908s ago: executing program 4 (id=1323): r0 = socket(0x2b, 0x80801, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x3ec, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xcb, 0x6, "34650bb8a7b97da9312920e0d3bce84782282df536c15eba4c2252fb9ae429db59e57641e2e95bb0ebe5eb5e7a0dcbaaea129402ca940926143665a68199de16974082dce00dcebfc9a01d1f1f2f0a691a15fe427a57f046ea1dc71b675a298318c27400c0b094d69c1e54b406f0b116f33c8018bf1066a2b0b09a957702999a18bfd1b75b7293c16f00052ca0cbf67f63600ee4a9cd286f6913befe10cfc16066e1dfa467c2f7e6b177f52739f9f6b813092b955a8ff5fe184f1922dee28e3a6453e85fa73a28"}, @NFTA_TABLE_USERDATA={0xea, 0x6, "5fcb01904c04919dc7bc0b5964f41a85dfc291235c221ff95b23608e08a753aec74cda30c641f27c1dede6bf4d41b058a59403645eb5405e50e5e6ed891c0f03596c8b545066b6bad4350b6773ed50288363af69a53bccfaebc8e5447140276f86da935531ac243443e30347d7dc187e6358b74af2e25657856219f3466417c6d1c161485672aa2e03403522ac5bf3e6889dc81c5a032c1581a38b780442bbf8389dfdb4e9a277c311819ed383d17b1f3391047572ac187605a80175d543ac6ea2a4a9ff851e1479d50a4afbf997e90f9bb89ab650c566b210112aa46ea5d3488084f41b6ac1"}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0xd3, 0x6, "4e1ee07b8e15be32e78867c99e9ea138f4203b4f4986423cac729381b9a6ad10e31d8944c1f522f1cb1a747bfc0be2505e2b4f635098cc7d54cb54042f279d7386ae91671705266d01fd2b28d7356955028017db2d0bc5f51190c48bcfcec6de749e27e5d3928273f6cb8cd273fc668a31fedf47c91da498783c41229d19de661c56dc8a853ae52cdc662ce3389faa671a19c6f378b6cd98f8cb1d56f8fb2ef1c0d6fffdcb9947691b2b71b6e2818c5164c9383a19c1e5308fa4c7d82af2f0299eb3c3994897cb454f059a86709e3b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5c, 0x6, "1a35b5b836cc51919c25e932be969268e3ca30920e84f4f754fc2a339429a5e91514268f95b2ead3a35a77d3b7b8005de39cdc4352a89b3fdd746b31de8ab054b512381f9b0daec066e8b4201a00cfb577433e674a7c43a0"}, @NFTA_TABLE_USERDATA={0xc1, 0x6, "84b70d25ca341cae4ce6823b9e879530236dc157c20eff4f9041d2279b25e09efa847332347bce389bc84d300b92ef823880550f23e0e96bcc1d3758dda71bcd802b68c56d4a22653ef2965163637f7090ba9a356cbb16355a7ae56c42aa967fba15f790ed9d147f5af837421f9ac07fd43e761e1617b9419aad53041d2d16eea4f02f055e4d56aaf09fd876c8f5651d037adfc5b0b07993fbb4efe1acb8f30e3e1076b33540b25b1190aef677ce2581d37e80b22fb37b9568cbc25a07"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xec8c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}, @NFT_MSG_DELRULE={0xf4, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}]}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0xcc8, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc7c, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x4}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xca, 0x1, "2c930a35ecee394342af50175617e47605054fa415ac658d2b3ac64601ad4fea61bc476a0b6b926786b97197aa24f19f2d238768072c754f2a63aeaf035f67a1f3f3f941b3a16348277f57223633af680251ecd4709b8859b8546cab94e2a69688a9b925f6e89469c0ad7cde9607a30810b4c96abd77d6ed9794d6f054e6a9ce054ac091282cdd7eb7e484448ea6ea6dda547d9ae6ffcd76d1ee832748af4cc5d8d1b3e347b30bc4ef1e736cd4e887bbd1e0ec1506fa0f58327975cc111001999e110d926b35"}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x198, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "99cf12725e432a23978bd4cfdd01042235428d58b01e32e37de6f7b19b2fe8dce956076d97e42298c033fae838afcc9a14e47192b7c26d85f82d27517591fe54e5ff04b586220c48afd3ab00437feefab5975f2310b724bf4260d83a861ed2033514ca6c1647f178bf580f29de88d3e860f6083dcca66c00c0fed22e413f2d86390bd53a8b9f5774e87eb74473dbc14b4b3d8508cab3b82463e3efb469adc434a5de4a2b8712489da4166d1150dec820bf3dc188e97b90df436b07421c24723c4582eca645c5f109696a9ecebec175b9c776655bcd80aba0f7"}, @NFTA_DATA_VALUE={0x60, 0x1, "600623bd7b52b83d0bc837fac4ac183cb74fc62e6020e3ece6fddbba8394138918c415da1b75a4f4f03df5f0ccbd32c14943597c8f50f54bce2ba8409d399a78da10cdd663490405dbb18231b743c45cc65ba03b8cb2268b0d069a87"}, @NFTA_DATA_VALUE={0x14, 0x1, "e6d3f4b9ff72b94ad0ffda34bd440a18"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x28c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "46a957a11ff8b01dbec1dc041fe8f4be90471583dc38b28f90b53620230825535989821aa43be84ddbb3ec08471c6abc8f9f32922a62269766d1e1ecb555efcbb0bb8c1aa5cc6936b095814e0f1c996661ed79116654f3efa60e1d46660fc14ee27a406f9ec02ec5a83eaeaa657be66247ce86a3ad34dad193c50d7abe2a9cc7e850b72408a67e9c813c8a752867149c6570cbaeb067c4af8b9b0dcfa33c65812654ebbb012f6540beb2d14d3ad02201bc810ea0f13a15ca4adfbad0d8d1323ea2644a055414556929c3a7e8b3dcd825bd43968c228cde2aa826d2742515aabbc5aaf251ecffd78da3f00dfe1f10d662d8045187f5"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xed, 0x1, "d5c88961d625173c1beb896341dea7232664852452df8e8eeaeb8eab0f68b6b843aec1c330f306854662ed9042087f08a0e86472198996210842060489bc88d55993fced4651000f0147951a1ee826599717f0702539b885ba9dea3db89051b2a798d2db345561cd7628c1b98fe9fe7a3d808e4858c2475b2dec2bd411c8aa2ec470c2fa589cc99b9026f4ff336cef02ac145664af5c3a9d43b72df24fe8f3bba107cf08c8e68ac6bfc95933cffe6de369da16bb0a7d7fafcf382a988c129388195b1ab648091159a80d44d952620900247a1bc660d27df56776557cf6c842c0985f03f4c0b511637a"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "a3e6fbcbdcae5980e336ea09f3c563608f9242dc5922015c0a53c695a72184772abf4a7deaf3ff77683869519ed7e287d58d4d424e1e17c5ff5306b460e8a7b425e71857cf79d5c8b813f50710377e449e22bb0a6c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "ef0cf2ef1a995b3b8d3ebc030afb580c1bc25b21d84db6eeec78b28f6b2733844635c112c7f7366c04bba48c9f302461bb9100d7b962228b9dc555d49879ffbcf4459d30bf1e67a87e76eed54ac1c817ca37841a3d65bcef74d9b65a03eafd0b0d29075ce0d4686b22eba0af847f652f4b5ee8d9424f806b91759f7ede1534022d7b76e10b988baa828d4a4b22368a71c18ba5078c4fe2a4ce72cddb1f6b0c11f2ab914c"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xdc, 0x6, 0x1, 0x0, "21ea43d2f49a9a34158e63fdd643094fb38f525a7fa44e941b939150eb665ce3d67d5d119c93f5ec967b2b576bf1f057fa5319769e84fe6dbef3b0276fa6cb5e90d89a974cd5623bc2f294fd3a6d3827ffe01deb69e8b46a5c4d0c69ae28f15b487e8ef788300550e6efdfadda21c355b4272445f262b7c0bdb93a50584310fe7f8fc8ac4a95b89fd2c403f20f2a8a19eb75d7c403ca7cb39d8a83e62cf5e88cfd2c13a892ada9759cf344e184bf0373fcdcb863635a0085fdd8bed8334bce1a0f7cdb7d497dd9992d5f16e31c082c23b754ec5adc43163c"}]}, {0x424, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf0, 0x6, 0x1, 0x0, "5994cc91ee7fca7177dfcaf7c30e164b83b4d843662f8f8270a7d52a2b156f6bcc97bcdd6887514fb5016bd74a7ef496998942bcb88db82348532efc4f2bf78ac3d0432676a2691f9d2eb57bfa9b7db01751f4dd944aa11370c3c0692dc30c2d6ba59536ec0291d3e27a1393007910b3cd40095301022918bbb07cd36706b9de28c56fc45a5fccb14a69466d85643d23ddd365e28a2cdcc951c92db545cec17f8080a173c3c7b4925d74066c2058dc7f9a360e6b2f3eeb3676565f4b2cb26c0e310786203f3dbaa847e787e864b68e36332f73fe49346d449d7905a0a3bcfa200ce1d0ee5a479a86effd8352"}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "f3304914ef29323480972955c5fe2fb7ebbea96ad0bb607a61ac62cbc1ea096c0fcc94fe74a45a40d8cea6a2f50541238f89651af431327b32b765510f9a0a89b987f25e60a8acfc23e467117ee73945f8f24decf4eb79263428f5c3cc2c455c19208a112ae0d87bef8f574546de9eb5c930bf7d0cec9555f661a49af684abbcf8a975b7e597c3357e434c044e6874"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x12c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "6560cfbac8c801ed83c3a18da79598f2ca00fb03e1fdfa2c2d265d2954f722583e79431da9575c2c1f42b1cc416fa4d55fb8485da67454f4796b5fa66053ad19be7717571d91320a"}, @NFTA_DATA_VALUE={0x2b, 0x1, "619865c24b42f70d35aecfe93438e9cf6b0f678dcc6350103e43559423726ffd92beee8774e339"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "485389c04f5a5a442309c69dd02dc10a4de5cd2347b968938c2babb0544700c9f30b7aab4eeb158cb0059ab5da62f848d29e4dbdd210556ebd695d5073d387dcf7d62083e466e528c69b65aacc423afdf1d217a7c834a4158beacc1b0a86cbf23412931514888948826d243765555c28f666d06c1b5bbe7d94623b918d683f2e99af9ec46fd01665"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xba, 0x6, 0x1, 0x0, "7d33cdaff577501d10504f23b6f0b8d3352ebe4912d710aed96bca607a84077dd5e0a1cfa2af8faf8334b056ae83d7b02d6a62823b165c5abc25dd7c32d8d38738bbd650e69ec61eab3df4f003b7f2f215991f3492aba97fcc5eaac979c00914ac7633bb1e73cce94c015b849dda4580611f3867b1d64be7d292d40cef51a365d2492cfef0b96eec5c73a589d03eb164e82600b7089fc24c11c0a44759d2bd16fdac617ee083150535018e5a8b7a1f889f5091ecf67e"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x238, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x14e8}, 0x1, 0x0, 0x0, 0x8100}, 0x240000c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x0, 0x0, 0x0, 0x67, 0xfffffffffffffffd, 0x44}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000500)={0x2c, &(0x7f0000000a80)={0x40, 0xc117fd282b409c3b, 0x2, {0x2, 0x1}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, 0x0, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x6, 0x7, "58592b03", "663854da"}}, 0x0}, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x7}, 0x0, &(0x7f0000000780)={0x40, 0xb, 0x2, '<7'}, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x19, 0x2, "b3cb"}, 0x0, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x1}, 0x0, 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = syz_io_uring_setup(0x1ec3, 0x0, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f00000034c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xab, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000000)=0xf1c1, 0x4) 12m1.156638463s ago: executing program 4 (id=1329): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x4, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x2}, @period={0x59, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}}}}]}, 0x3c}}, 0x0) close(r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x80, 0x4, 0x221}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 11m57.455959553s ago: executing program 4 (id=1338): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x100, 0x0, 0x0) 11m56.911878038s ago: executing program 4 (id=1342): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f01005f09643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r7, @ANYRESDEC=r7, @ANYRESDEC=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES64=r7, @ANYRES8=r7], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x3, 0xfffffffd, 0x10001, 0x3, "0040001e10113c0a00401000f6ffffff00"}) r9 = syz_open_pts(r7, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000002c0)=0x1) 11m56.695245986s ago: executing program 4 (id=1343): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6000000000000000, 0x8, 0x3, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_open_dev$usbmon(0x0, 0x0, 0xc0ec0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000083"]) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r5, 0x0, 0x10001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="000128bd7000fcdbdf250800010001000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4040000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000070a01050000000000000000020000000c00064000000000000000010900010073797a300000000008000b40000000040900020073797a32"], 0x40}}, 0x40000) sendmsg$inet(r6, 0x0, 0x41) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) semget$private(0x0, 0x4000000009, 0x42a) 11m56.370448837s ago: executing program 4 (id=1345): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_targets\x00') read$dsp(r5, &(0x7f00000000c0)=""/229, 0xe5) preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0x7, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40010) connect$unix(r5, &(0x7f0000000080)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 11m55.998912189s ago: executing program 32 (id=1345): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_targets\x00') read$dsp(r5, &(0x7f00000000c0)=""/229, 0xe5) preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0x7, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40010) connect$unix(r5, &(0x7f0000000080)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 12.560996513s ago: executing program 1 (id=4092): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x13000}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x20000}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x4, 0x0, 0x6, 0x0, 0xabf}]}]}, 0x1bc}}, 0x0) 12.146705469s ago: executing program 1 (id=4095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32, @ANYRESOCT=r1], 0x38}}, 0x400c805) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28eeb1f8", @ANYRES16=r3, @ANYBLOB="100025bd7000fbdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000080) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket(0x28, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r9, 0x8ffb1b6e737b168f, 0x7, 0x25, 0xfffffffe, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8000, 0x1, 0x0, 0x2}}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r8) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e80000004e557d7e6fb3846d1a39a28f5480a057666f33e820e56d55e7fe7ba2eb3d6c8c4dd74ec56b6dc74a1f356a40cd", @ANYRES16=r10], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) dup(r0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r10, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x48810}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100ac141400080002007f0000010c000280040001"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r12, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 11.181095603s ago: executing program 1 (id=4100): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, 0x0, 0x0, 0x10, 0x0, 0x6, 0x280}) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100100000008c50f80b040000102030109024001030100100921019587d6dd5e2bd0397c43ca0002012283a0ce0cfca758f8c7db5bb8c1307080f7c722f5274d59f74faf1668d6cbcabcd5e3f8362b6f5077298dbd260ed2c178466a777ad2c978"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r7, r6}) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000340)={r7}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.590576761s ago: executing program 2 (id=4115): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pselect6(0xfffffffffffffef7, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000340)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x5, 0x3ff, 0x4, 0x8, 0x2, 0x10, 0x9, 0x4, 0x8, 0x1, 0xfffffa08, 0xa38, 0x8, 0x9c0, 0x3, 0x3, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0x839, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x5, 0x8, 0x7f, 0x6, 0xc8, 0x406, 0x0, 0xc3, 0x4, 0x0, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0x200cf, 0x10, 0x401, 0xc, 0x7, 0x2a, 0x71cd, 0x4, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x4, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x200, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100], "7ef9d6b62df5fa99764a4ed1bc7c490c1a7d3ac1eb788ce9776cc556121ec11cb394ee9f03f0bec619c9a221d747314211a7cb7118a5658999682ef1834cb24a10bcaf8c672860cb66e20d8ffba0cb262f9fd01eb165f89c88b7"}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000180001000015301c2000000002000000000100090000000006001500050000001800168014000100000000000000000000000400003004009da228acaa343f51bc0725aa4c"], 0x3c}}, 0x0) close(r8) 6.15616493s ago: executing program 0 (id=4116): ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006", @ANYRESOCT=r3, @ANYRESDEC, @ANYBLOB="24e583f84aba355c3a008d904e2dc0fa22153e1e2bf529"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x4, 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYRES8=0x0], 0x0) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002ac0)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r8, 0x6}, &(0x7f0000000180)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c000540864070"], 0xec}}, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) 6.0996818s ago: executing program 1 (id=4117): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x4, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}}}}]}, 0x3c}}, 0x0) close(r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x28}}, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x80, 0x4, 0x221}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 5.234787726s ago: executing program 3 (id=4119): socket$netlink(0x10, 0x3, 0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = msgget(0x0, 0x542) msgrcv(r5, &(0x7f00000011c0)={0x0, ""/4096}, 0x1008, 0x3, 0x5000) r6 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x5, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x4, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x7d4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x5, 0x4f}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x7f, 0x2d}}]}}}]}}]}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) unshare(0x50030480) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) sendfile(r9, r9, &(0x7f0000000040)=0x8, 0x1) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0031110000001110fd98e43722bce7679db701dbac908a63863c9bb3dfd7da46562093ff230a5deb396f030f275100809c7810314d121dafd9fd0c4e050038741f98ed6d1d6ea4ce87ee8cdb6c849cf5a22205ded3a3452636f99e4357242336df19ecd953b302b334af55e8394f4cd005df8f5212a25f17315ec75da47ea461219c7d70b243ebc6b724305c09edaae987ea9c6449ba3057a003774299b8d4bcc086258b5a92e673141cdff294712c0cc7da215adae05d7478af7bd9e3c173affff18a93f3cc3b00"/210], &(0x7f00000000c0)=ANY=[@ANYBLOB="c800"], 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x9, 0x47, {0x47, 0xe, "1ddd9f0c201f552328ec17f302e56115f8d35ef3d4a4cdc0f8232a65bd2d1ee56de5aafd0e130e3ec1cf6f11d38003ba4618618a1278d8a0695bb36382906047a7e8a7b2c7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x2000000) 4.386632664s ago: executing program 5 (id=4120): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000010000200000000000000", @ANYRES32], 0x1fc}}, 0x4000) 4.103764992s ago: executing program 5 (id=4121): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) timer_delete(r0) 3.918561604s ago: executing program 0 (id=4122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x24004040) 3.683269082s ago: executing program 5 (id=4123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000001a00000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.667247917s ago: executing program 0 (id=4124): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="1100800000000109"], 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000380)={0x8, 0x2, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x1, 0x4, 0x20, 0x800, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "bc60c7f6"}, 0x1ad, 0x4, {&(0x7f00000003c0)=[{0x5, 0x9683, {}, 0xfffffff8}, {0x5, 0x6, {}, 0xfffffff7}]}, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc0, 0x11cfa, 0x0, 0x8000008, 0x2, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x1, 0x4000e1d9, 0x5, 0x102}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) 3.406725682s ago: executing program 5 (id=4125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff02000000000000000000000003fb014e224e21009c90"], 0xd2) 2.541232967s ago: executing program 5 (id=4126): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="1100800000000109"], 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000380)={0x8, 0x2, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x1, 0x4, 0x20, 0x800, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "bc60c7f6"}, 0x1ad, 0x4, {&(0x7f00000003c0)=[{0x5, 0x9683, {}, 0xfffffff8}, {0x5, 0x6, {}, 0xfffffff7}]}, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc0, 0x11cfa, 0x0, 0x8000008, 0x2, 0x4, 0x1, 0x0, 0x2}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) 1.879526662s ago: executing program 3 (id=4127): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e", 0x2e, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.599374515s ago: executing program 3 (id=4128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4061}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x96}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2b5e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3d5a}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x24004040) 1.317293628s ago: executing program 3 (id=4129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) (async) dup(r3) 1.114781016s ago: executing program 2 (id=4130): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006911a30000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x2000000, {0x7, 0x0, 0x0, r0, 0x0, 0x8008}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 929.684593ms ago: executing program 1 (id=4131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r5, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x10000, 0x14000}) close(r1) 919.191474ms ago: executing program 3 (id=4132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000080ff0000ac1414bb00000000000000000000000000000000ffff00000a008000"], 0x1bc}}, 0x0) 759.464575ms ago: executing program 5 (id=4133): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="1100800000000109"], 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000380)={0x8, 0x2, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x1, 0x4, 0x20, 0x800, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "bc60c7f6"}, 0x1ad, 0x4, {&(0x7f00000003c0)=[{0x5, 0x9683, {}, 0xfffffff8}, {0x5, 0x6, {}, 0xfffffff7}]}, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc0, 0x11cfa, 0x0, 0x8000008, 0x2, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x1, 0x4000e1d9, 0x5, 0x102}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) 702.836863ms ago: executing program 2 (id=4134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x24004040) 696.168599ms ago: executing program 0 (id=4135): sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000005001c005a8018000180140003"], 0x4c}}, 0x0) 685.346558ms ago: executing program 3 (id=4136): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "04b18b7c"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r0) 506.742274ms ago: executing program 2 (id=4137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x11e, 0x41, 0x0, 0x64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022abd7001000000250f0000002a000e0068"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) 435.630487ms ago: executing program 0 (id=4138): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc670", 0x36, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 203.812121ms ago: executing program 2 (id=4139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4061}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x96}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2b5e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3d5a}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x24004040) 183.308217ms ago: executing program 0 (id=4140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xb, {"a2e3ad21ed9b52f91b5d310987f70e06d038e7ff7fc6e5539b3247298b089b3408356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0xfffc, 0x0, 0xf8b2, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0xc040400) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020400001f00a4002d41accd0800000000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0xffff, r11}, 0x38) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x20000000, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x1000, 0x0, r8, r9, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00', 0x4e22, 0xfb, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x2c, 0x0, r8}, {0x2, 0x7fffffffffffffff, 0x6, 0x100, 0x2, 0x5, 0x1ff, 0x7}, {0x1c0000000000, 0x9, 0x0, 0xefe}, 0x4, 0x6e6bbd, 0x1, 0x1, 0x1, 0x4}, {{@in=@multicast1, 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3505, 0x2, 0x0, 0xc8, 0x7, 0x7, 0xf93}}, 0xe8) 121.743264ms ago: executing program 1 (id=4141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000004c0)={0x1, 0x80000000, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000002a80)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="35010000000000000000010000001400020077673200000000000000000000000000040008809c010880980100802400020083990b371e3089e900aa99c98a6222e6491e56c866240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e220000dc99fe88000000000000000000000000010106000000240002000b4a54c23d7ab197ebea8bd2e6a403643971299983f73616a5051c8e03a2087408010980ac000080060001000a0000001400020000000000000000000000ffff7f0000010500030001000000060001000a00000014000200ff0100000000000000000002000000010500030001000000060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200fc00000000000000000000000000000105000300000000000400008028000080060001000a0000001400020020010000000000000000000000000002050003000300000028000080060001000a00000014000200ff010000000000000000000000000001050003000200000004000080"], 0x1c8}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x10000, 0x1, [], [0x8, 0x9ac, 0x8, 0xb], [0x1, 0x2, 0x7, 0x2], [0x5, 0x6, 0xf1a, 0x4]}) 0s ago: executing program 2 (id=4142): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4c, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000500)={{0x0, 0x0, 0x80}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a4", 0x7b}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553e", 0x48}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11a2cd1b83edf4ee89f557882a6e115f6f313802bf3c797417d7b969c918598823448ed396000e44f8cc6a7a99db9bc97830b2df7971360f878a6cb35677e337e3ea1f6828196b30e485f2213ad567c62cc1bb174800513c5f9c8df2d028d2545768e3883524e866353a61ccfc0de4d4afadc9c31c23565915074b6680d902c662f768443bbe764577569ba8cd8ff4b63dc9e0aa67139b4b8120da451c19db9b86e9f7647857d646893d7774ec70d5d6c3783b04ad92cf39e91a45833c96aa1006aa133f9e5e", 0xdc}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa", 0xc2}, {&(0x7f0000000740)="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", 0x1f8}, {&(0x7f0000000d80)="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", 0x12d}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) timer_create(0x7, 0x0, &(0x7f00000007c0)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000840)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000c80)='map_files\x00') getdents64(r6, &(0x7f0000000cc0)=""/4096, 0x1000) getdents64(r6, 0x0, 0x43) timerfd_gettime(r6, &(0x7f0000000100)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') lseek(r7, 0x1000000, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000080)={0x7f, 0x8, 0x5, 0xd1c20000, 0x400, 0x7}) futex(&(0x7f0000000240)=0x6, 0xb, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x2, 0x1) timer_gettime(r3, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x40, 0x8000, 0x7b, 0x0, {{0x5, 0x2, 0x0, 0x6, 0x14, 0x800, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x64010102}}}}) arch_prctl$ARCH_GET_CPUID(0x1011) fsopen(&(0x7f0000000040)='smb3\x00', 0x1) kernel console output (not intermixed with test programs): [ 970.402125][ T5890] usb 2-1: SerialNumber: syz [ 970.454024][ T5890] usb 2-1: config 0 descriptor?? [ 970.464675][T18375] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 970.524455][T18390] bridge3: entered promiscuous mode [ 970.814950][T18403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.827970][T18403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.453424][T14199] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 971.633064][T14199] usb 1-1: Using ep0 maxpacket: 16 [ 971.647993][T14199] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 971.656506][T14199] usb 1-1: config 0 has no interface number 0 [ 971.668940][T14199] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.744678][T14199] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 59138, setting to 1024 [ 971.761767][T14199] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 971.771549][T14199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.788064][T14199] usb 1-1: Product: syz [ 971.792372][T14199] usb 1-1: Manufacturer: syz [ 971.801989][T14199] usb 1-1: SerialNumber: syz [ 971.830791][T14199] usb 1-1: config 0 descriptor?? [ 971.852423][T18406] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 971.874756][T14199] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 972.102797][ T5894] usb 1-1: USB disconnect, device number 5 [ 972.108891][ T7328] usb 1-1: Failed to submit usb control message: -71 [ 972.130170][ T7328] usb 1-1: unable to send the bmi data to the device: -71 [ 972.181721][ T7328] usb 1-1: unable to get target info from device [ 972.202190][ T7328] usb 1-1: could not get target info (-71) [ 972.220016][ T7328] usb 1-1: could not probe fw (-71) [ 972.842515][T18403] delete_channel: no stack [ 972.851851][ T5894] usb 2-1: USB disconnect, device number 15 [ 973.271905][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3506'. [ 973.693368][T18438] netdevsim netdevsim0 netdevsim0: Device is already in use. [ 973.934283][T18450] hsr0: entered promiscuous mode [ 975.063307][ T5894] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 975.221931][ T5894] usb 2-1: config 0 has no interfaces? [ 975.230722][ T5894] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 975.239948][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.271160][ T5894] usb 2-1: Product: syz [ 975.288774][ T5894] usb 2-1: Manufacturer: syz [ 975.327110][ T5894] usb 2-1: SerialNumber: syz [ 975.363655][ T5890] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 975.391242][ T5894] usb 2-1: config 0 descriptor?? [ 975.536437][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 975.570303][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.607472][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.658082][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 975.688272][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.712724][ T5890] usb 3-1: config 0 descriptor?? [ 975.737438][ T5890] hub 3-1:0.0: USB hub found [ 975.928166][ T5890] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 976.142543][ T5890] hid-generic 0003:046D:C31C.0025: item fetching failed at offset 0/1 [ 976.152566][ T5890] hid-generic 0003:046D:C31C.0025: probe with driver hid-generic failed with error -22 [ 976.401950][T18482] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3525'. [ 976.453597][ T10] usb 3-1: USB disconnect, device number 7 [ 976.673589][ T5894] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 976.845335][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 976.868327][ T5894] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 976.913284][ T5894] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 976.922673][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 976.931208][ T5894] usb 1-1: Product: syz [ 976.935912][ T5894] usb 1-1: Manufacturer: syz [ 976.949152][ T5894] usb 1-1: SerialNumber: syz [ 976.970025][ T5894] usb 1-1: config 0 descriptor?? [ 976.993784][T18482] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 977.490039][ T10] usb 1-1: USB disconnect, device number 6 [ 978.222687][ T5890] usb 2-1: USB disconnect, device number 16 [ 978.921067][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3532'. [ 978.934675][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3532'. [ 978.996745][T18486] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 978.998171][T18445] hsr0: left promiscuous mode [ 979.187195][ T5890] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 979.403468][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 979.425665][ T5890] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 979.515078][ T5890] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 979.525223][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 979.548239][ T5890] usb 1-1: Product: syz [ 979.552550][ T5890] usb 1-1: Manufacturer: syz [ 979.564396][ T5890] usb 1-1: SerialNumber: syz [ 979.588981][ T5890] usb 1-1: config 0 descriptor?? [ 979.600535][T18503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 980.043330][ T5890] usb 6-1: new low-speed USB device number 80 using dummy_hcd [ 980.226971][T16780] usb 1-1: USB disconnect, device number 7 [ 980.293368][ T5890] usb 6-1: device descriptor read/64, error -71 [ 980.342249][T18528] netlink: 'syz.2.3538': attribute type 12 has an invalid length. [ 980.543275][ T5890] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 980.559964][T18528] netlink: 'syz.2.3538': attribute type 29 has an invalid length. [ 980.571274][T18528] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3538'. [ 980.584849][T18528] netlink: 'syz.2.3538': attribute type 2 has an invalid length. [ 980.633569][T18528] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3538'. [ 980.768164][ T5890] usb 6-1: device descriptor read/64, error -71 [ 980.895215][ T5890] usb usb6-port1: attempt power cycle [ 981.057973][ T7328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.153984][T18531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 981.214480][T18531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 981.253939][ T5890] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 981.285113][ T5890] usb 6-1: device descriptor read/8, error -71 [ 981.411734][ T7328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.455115][T18535] netlink: 'syz.1.3544': attribute type 9 has an invalid length. [ 981.462947][T18535] netlink: 212160 bytes leftover after parsing attributes in process `syz.1.3544'. [ 981.523318][T16780] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 981.553399][ T5890] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 981.635340][ T5890] usb 6-1: device descriptor read/8, error -71 [ 981.673390][T16780] usb 1-1: Using ep0 maxpacket: 32 [ 981.685346][T16780] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 981.743690][T16780] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 981.745412][ T7328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.760231][T16780] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 981.763910][ T5890] usb usb6-port1: unable to enumerate USB device [ 981.823815][T16780] usb 1-1: Product: syz [ 982.269366][ T7328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.276042][T16780] usb 1-1: Manufacturer: syz [ 982.303321][T16780] usb 1-1: SerialNumber: syz [ 982.334950][T16780] usb 1-1: config 0 descriptor?? [ 982.361098][T18532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 982.605534][T12586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 982.627572][T12586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 982.638108][T12586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 982.648902][T12586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 982.659960][T12586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 982.667845][ T7328] bridge_slave_1: left allmulticast mode [ 982.681868][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 982.690504][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 982.702324][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 982.719762][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 982.731565][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 982.754772][ T7328] bridge_slave_1: left promiscuous mode [ 982.760611][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.917338][ T47] usb 1-1: USB disconnect, device number 8 [ 982.995201][ T7328] bridge_slave_0: left allmulticast mode [ 983.036385][ T7328] bridge_slave_0: left promiscuous mode [ 983.061748][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.093324][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 983.251276][ T10] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 983.305300][ T10] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 983.359132][ T10] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 983.388535][ T10] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 983.412836][ T10] usb 3-1: Manufacturer: syz [ 983.448589][ T10] usb 3-1: SerialNumber: syz [ 983.671804][T18555] openvswitch: netlink: Actions may not be safe on all matching packets [ 983.686097][ T10] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 983.703494][ T10] usb 3-1: USB disconnect, device number 8 [ 983.760241][ T7338] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 984.520379][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.589485][ T7328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.605840][ T7328] bond0 (unregistering): Released all slaves [ 984.763561][T12586] Bluetooth: hci4: command tx timeout [ 984.968305][T18588] netlink: 'syz.5.3554': attribute type 10 has an invalid length. [ 985.157501][T18588] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 985.217963][T18588] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 985.267960][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'. [ 985.859107][T18610] pim6reg: entered allmulticast mode [ 985.923376][T18611] pim6reg: left allmulticast mode [ 986.183329][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 986.243605][T18552] chnl_net:caif_netlink_parms(): no params data found [ 986.335333][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 986.358091][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 986.367268][ T10] usb 1-1: config 0 has no interface number 0 [ 986.377892][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 986.428852][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 986.438210][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.453290][ T10] usb 1-1: Product: syz [ 986.459589][ T10] usb 1-1: Manufacturer: syz [ 986.480979][ T10] usb 1-1: SerialNumber: syz [ 986.523016][ T10] usb 1-1: config 0 descriptor?? [ 986.554906][ T10] smsc75xx v1.0.0 [ 986.664830][T18628] xt_nat: multiple ranges no longer supported [ 986.874777][ T5839] Bluetooth: hci4: command tx timeout [ 987.153351][T14199] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 987.283271][T14199] usb 3-1: device descriptor read/64, error -71 [ 987.309804][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 987.334734][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 987.415004][ T7328] hsr_slave_0: left promiscuous mode [ 987.430981][ T7328] hsr_slave_1: left promiscuous mode [ 987.444780][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.452517][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.470835][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.519440][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.543389][T14199] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 987.620514][ T7328] veth1_macvtap: left promiscuous mode [ 987.626764][ T7328] veth0_macvtap: left promiscuous mode [ 987.632860][ T7328] veth1_vlan: left promiscuous mode [ 987.644121][ T7328] veth0_vlan: left promiscuous mode [ 987.693758][T14199] usb 3-1: device descriptor read/64, error -71 [ 987.746480][ T5888] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 987.809074][ T12] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 987.809121][T14199] usb usb3-port1: attempt power cycle [ 987.829211][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 987.875428][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 987.895213][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 987.914249][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 987.958339][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 987.968678][ T5888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.980334][ T5888] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 988.007151][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.013824][ T10] usb 1-1: USB disconnect, device number 9 [ 988.044864][ T5888] usb 6-1: config 0 descriptor?? [ 988.079099][ T5888] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 988.233330][T14199] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 988.255732][T14199] usb 3-1: device descriptor read/8, error -71 [ 988.533383][T14199] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 988.564185][T14199] usb 3-1: device descriptor read/8, error -71 [ 988.693653][T14199] usb usb3-port1: unable to enumerate USB device [ 988.923639][ T5839] Bluetooth: hci4: command tx timeout [ 988.934680][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 989.049085][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 989.160435][ T5888] gspca_vc032x: reg_r err -32 [ 989.165710][ T5888] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 989.888486][ T5888] usb 6-1: USB disconnect, device number 84 [ 989.898716][T18552] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.933649][T18552] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.002956][T18552] bridge_slave_0: entered allmulticast mode [ 990.044049][T18552] bridge_slave_0: entered promiscuous mode [ 990.130660][T18654] pim6reg: entered allmulticast mode [ 990.191331][T18653] pim6reg: left allmulticast mode [ 990.259916][T18552] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.287228][T18552] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.338932][T18552] bridge_slave_1: entered allmulticast mode [ 990.370859][T18552] bridge_slave_1: entered promiscuous mode [ 990.683092][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3572'. [ 990.920038][T18552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.940446][T18668] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3574'. [ 991.004184][ T5839] Bluetooth: hci4: command tx timeout [ 991.011103][T18552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.375382][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3577'. [ 991.392451][T18552] team0: Port device team_slave_0 added [ 991.454761][T18552] team0: Port device team_slave_1 added [ 991.623708][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 991.795529][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 991.820591][T18552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.829506][ T10] usb 3-1: config index 0 descriptor too short (expected 320, got 36) [ 991.884578][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.911510][ T10] usb 3-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 991.938089][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 992.028905][ T10] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 992.041688][T18552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.073363][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.081472][ T10] usb 3-1: Product: syz [ 992.108591][T18552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.115731][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.146899][ T10] usb 3-1: Manufacturer: syz [ 992.156845][ T10] usb 3-1: SerialNumber: syz [ 992.252400][T18552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.527334][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'. [ 993.024857][T18552] hsr_slave_0: entered promiscuous mode [ 993.043980][T18552] hsr_slave_1: entered promiscuous mode [ 993.097434][T18552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 993.105782][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.120994][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.143232][T18552] Cannot create hsr debugfs directory [ 994.243927][T18718] xt_nat: multiple ranges no longer supported [ 994.402154][T18721] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3585'. [ 994.514882][ T5888] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 994.653532][ T5888] usb 2-1: device descriptor read/64, error -71 [ 994.786855][ T5894] usb 3-1: USB disconnect, device number 13 [ 994.924068][ T5888] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 995.123241][ T5888] usb 2-1: device descriptor read/64, error -71 [ 995.140242][ T10] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 995.165530][T18738] bridge4: entered promiscuous mode [ 995.256842][ T5888] usb usb2-port1: attempt power cycle [ 995.332225][ T10] usb 6-1: config 0 has no interfaces? [ 995.349498][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 995.358922][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.462503][ T10] usb 6-1: Product: syz [ 995.529515][ T10] usb 6-1: Manufacturer: syz [ 995.603261][ T5888] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 995.619717][ T10] usb 6-1: SerialNumber: syz [ 995.654030][ T10] usb 6-1: config 0 descriptor?? [ 995.661625][ T5888] usb 2-1: device descriptor read/8, error -71 [ 995.953980][ T5888] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 996.013487][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 996.065516][T18552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 996.186995][ T10] usb 3-1: config 0 has no interfaces? [ 996.197478][ T5888] usb 2-1: device descriptor read/8, error -71 [ 996.215016][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 996.224297][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.232296][ T10] usb 3-1: Product: syz [ 996.252532][ T10] usb 3-1: Manufacturer: syz [ 996.263387][ T10] usb 3-1: SerialNumber: syz [ 996.280770][T18552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 996.281500][ T10] usb 3-1: config 0 descriptor?? [ 996.503296][ T5888] usb usb2-port1: unable to enumerate USB device [ 996.640523][T18552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 996.709501][T18552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 997.080449][T18552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.216690][T18552] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.347419][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.354666][ T7344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.394414][T18770] binder: BINDER_SET_CONTEXT_MGR already set [ 997.402539][T18770] binder: 18767:18770 ioctl 4018620d 200000000040 returned -16 [ 997.446220][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3596'. [ 997.485421][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.492632][ T7344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.720809][T18768] syzkaller1: entered promiscuous mode [ 997.742947][T18768] syzkaller1: entered allmulticast mode [ 997.799202][T18552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.818471][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3596'. [ 997.985453][ T12] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 998.230348][ T10] usb 6-1: USB disconnect, device number 85 [ 998.240490][T18552] veth0_vlan: entered promiscuous mode [ 998.517218][T18552] veth1_vlan: entered promiscuous mode [ 998.789747][T18552] veth0_macvtap: entered promiscuous mode [ 999.141648][T18552] veth1_macvtap: entered promiscuous mode [ 999.437224][T18789] bridge_slave_0: left allmulticast mode [ 999.453782][T18789] bridge_slave_0: left promiscuous mode [ 999.487812][T18789] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.569147][T18789] bridge_slave_1: left allmulticast mode [ 999.636871][T18789] bridge_slave_1: left promiscuous mode [ 999.677277][T18789] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.811908][T16780] usb 3-1: USB disconnect, device number 14 [ 999.830221][T18789] bond0: (slave bond_slave_0): Releasing backup interface [ 999.904309][T18789] bond0: (slave bond_slave_1): Releasing backup interface [ 999.945179][ T5894] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1000.065080][T18789] team0: Failed to send options change via netlink (err -105) [ 1000.086778][T18789] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1000.159446][T18789] team0: Port device team_slave_0 removed [ 1000.211553][T18789] team0: Failed to send options change via netlink (err -105) [ 1000.254972][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.265374][T18789] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1000.292338][T18789] team0: Port device team_slave_1 removed [ 1000.299344][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.332759][T18789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.340965][ T5894] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1000.365499][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1000.379124][T18789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.388890][ T5894] usb 2-1: SerialNumber: syz [ 1000.407958][T18789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.419614][T18789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.458744][T18552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.630074][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1000.630095][ T30] audit: type=1326 audit(1748044743.048:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1000.671245][ T30] audit: type=1326 audit(1748044743.048:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1000.690232][T18552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.716858][ T5894] usb 2-1: 0:2 : does not exist [ 1000.751597][ T30] audit: type=1326 audit(1748044743.048:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1000.759783][T18552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.801104][ T5894] usb 2-1: USB disconnect, device number 21 [ 1000.822999][T18552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.866643][ T6272] udevd[6272]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1000.872614][ T30] audit: type=1326 audit(1748044743.048:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1000.886200][T18552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.960912][T18552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.977713][ T30] audit: type=1326 audit(1748044743.058:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c8ff2ab39 code=0x7ffc0000 [ 1001.055348][ T30] audit: type=1326 audit(1748044743.058:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c8ff2ab39 code=0x7ffc0000 [ 1001.148010][ T30] audit: type=1326 audit(1748044743.058:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c8ff2ab39 code=0x7ffc0000 [ 1001.223627][ T30] audit: type=1326 audit(1748044743.058:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c8ff2ab39 code=0x7ffc0000 [ 1001.277815][ T30] audit: type=1326 audit(1748044743.058:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c8ff2ab39 code=0x7ffc0000 [ 1001.343226][T18821] netlink: 'syz.0.3603': attribute type 12 has an invalid length. [ 1001.394449][T18821] netlink: 'syz.0.3603': attribute type 29 has an invalid length. [ 1001.402756][T18821] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3603'. [ 1001.415443][T18821] netlink: 'syz.0.3603': attribute type 2 has an invalid length. [ 1001.435481][T18821] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3603'. [ 1001.458574][ T30] audit: type=1326 audit(1748044743.058:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.5.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c8ff2ab39 code=0x7ffc0000 [ 1001.509642][ T7338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.527294][ T7338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.703632][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.731407][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.490686][T18841] batman_adv: batadv0: Adding interface: dummy0 [ 1002.497312][T18841] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.523541][ T5890] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1002.612511][T18841] batman_adv: batadv0: Interface activated: dummy0 [ 1002.942316][ T5890] usb 2-1: config 0 has no interfaces? [ 1002.964352][ T5890] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1002.973617][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.981614][ T5890] usb 2-1: Product: syz [ 1003.037216][ T5890] usb 2-1: Manufacturer: syz [ 1003.041927][ T5890] usb 2-1: SerialNumber: syz [ 1003.064333][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1003.100140][ T5890] usb 2-1: config 0 descriptor?? [ 1003.223473][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1003.236934][ T10] usb 4-1: config index 0 descriptor too short (expected 320, got 36) [ 1003.253428][ T10] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1003.315716][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1003.641842][ T10] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1003.659349][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.675619][ T10] usb 4-1: Product: syz [ 1003.680025][ T10] usb 4-1: Manufacturer: syz [ 1003.692457][ T10] usb 4-1: SerialNumber: syz [ 1004.737519][T18857] pim6reg: entered allmulticast mode [ 1004.753766][T18857] pim6reg: left allmulticast mode [ 1004.883301][T14199] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1005.055537][T14199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.067416][T14199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.078176][T14199] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1005.087903][T14199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.102546][T14199] usb 3-1: config 0 descriptor?? [ 1005.522656][T14199] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 1005.539726][T14199] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 1005.567922][T14199] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0026/input/input54 [ 1005.669680][T14199] cm6533_jd 0003:0D8C:0022.0026: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1005.801061][T14199] usb 3-1: USB disconnect, device number 15 [ 1006.129201][T18871] netlink: 'syz.5.3610': attribute type 1 has an invalid length. [ 1006.179382][T18872] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3610'. [ 1006.242658][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3611'. [ 1006.340156][T18865] fido_id[18865]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1006.399121][T18871] bond1: entered promiscuous mode [ 1006.502596][T18871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1006.522834][ T5888] usb 2-1: USB disconnect, device number 22 [ 1006.978159][T14199] usb 4-1: USB disconnect, device number 28 [ 1007.232237][T18900] netlink: 'syz.0.3614': attribute type 10 has an invalid length. [ 1007.262628][T18900] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1007.292030][T18900] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1007.753368][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1008.123785][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1008.131572][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1008.141376][ T10] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 1008.163244][ T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.213308][ T10] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 1008.263297][ T10] usb 3-1: config 8 has no interface number 0 [ 1008.283210][ T10] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 1008.394420][ T10] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1008.658874][ T10] usb 3-1: config 8 interface 24 has no altsetting 0 [ 1008.737357][ T10] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1008.858438][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.937363][ T10] usb 3-1: Product: syz [ 1009.027872][ T10] usb 3-1: Manufacturer: syz [ 1009.188856][ T10] usb 3-1: SerialNumber: syz [ 1009.614717][T18934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.625694][T18934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.427027][T18942] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.652332][T18950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3625'. [ 1010.693611][T18950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3625'. [ 1011.005020][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1011.185869][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 1011.237705][ T5890] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1011.282445][ T5890] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1011.313231][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1011.353269][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1011.443367][ T5890] usb 1-1: Product: syz [ 1011.473252][ T5890] usb 1-1: Manufacturer: syz [ 1011.485792][ T5890] usb 1-1: SerialNumber: syz [ 1011.517091][ T5890] usb 1-1: config 0 descriptor?? [ 1011.574340][T18953] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1011.588180][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.660499][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.673296][T14199] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1011.694737][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1011.707583][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1011.914646][T14199] usb 4-1: config 0 has no interfaces? [ 1011.940988][ T9] usb 2-1: SerialNumber: syz [ 1012.075866][T14199] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1012.172558][T14199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.189628][ T5890] usb 1-1: USB disconnect, device number 10 [ 1012.226093][T14199] usb 4-1: Product: syz [ 1012.237996][T14199] usb 4-1: Manufacturer: syz [ 1012.242708][T14199] usb 4-1: SerialNumber: syz [ 1012.276062][T14199] usb 4-1: config 0 descriptor?? [ 1012.535036][ T5887] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1012.705150][ T5887] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1012.717478][ T5887] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.748083][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1012.768725][ T5887] usb 6-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1012.810412][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.885031][ T5887] usb 6-1: config 0 descriptor?? [ 1013.005064][ T9] usb 2-1: 0:2 : does not exist [ 1013.010660][ T9] usb 2-1: unit 5 not found! [ 1013.163785][ T9] usb 2-1: USB disconnect, device number 23 [ 1013.365650][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3630'. [ 1013.381696][ T9462] udevd[9462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.627545][ T10] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 1013.670692][ T5890] usb 6-1: USB disconnect, device number 86 [ 1013.697445][ T10] vmk80xx 3-1:8.24: probe with driver vmk80xx failed with error -22 [ 1013.758071][ T10] usb 3-1: USB disconnect, device number 16 [ 1014.533295][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1014.707014][ T10] usb 1-1: config 0 has no interfaces? [ 1014.717417][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1014.743216][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.802243][ T10] usb 1-1: Product: syz [ 1014.886791][ T10] usb 1-1: Manufacturer: syz [ 1014.891466][ T10] usb 1-1: SerialNumber: syz [ 1014.933813][ T5888] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1015.343906][ T10] usb 1-1: config 0 descriptor?? [ 1016.388380][ T5894] usb 4-1: USB disconnect, device number 29 [ 1016.603459][T16780] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1016.731042][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'. [ 1016.771186][T19037] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1016.773278][T16780] usb 3-1: Using ep0 maxpacket: 32 [ 1016.822430][T19037] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1016.838038][T16780] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1016.878657][T16780] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.979568][T16780] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1017.059238][T16780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.295706][T16780] usb 3-1: config 0 descriptor?? [ 1017.345965][ T5888] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1017.378236][ T10] usb 1-1: USB disconnect, device number 11 [ 1017.383234][ T5888] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1017.513715][ T5888] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1017.522981][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.717153][T16780] usbhid 3-1:0.0: can't add hid device: -71 [ 1017.740883][T16780] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1017.768369][ T5888] usb 6-1: can't set config #27, error -71 [ 1017.779099][T16780] usb 3-1: USB disconnect, device number 17 [ 1017.791874][ T5888] usb 6-1: USB disconnect, device number 87 [ 1017.798752][T19049] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1017.964771][ T47] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1018.165271][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.187291][ T47] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1018.212095][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.253472][ T5890] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1018.264291][ T47] usb 1-1: config 0 descriptor?? [ 1018.289637][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 1018.423527][T19056] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1018.437414][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 1018.493417][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1018.523291][ T5890] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1018.530939][ T5890] usb 2-1: can't read configurations, error -71 [ 1018.689142][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1018.721956][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 1018.733301][ T5888] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1018.752392][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1018.849217][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1018.878765][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 1018.898221][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 1018.908062][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 1018.915534][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 1018.922935][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 1018.932953][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 1018.940252][ T47] pwc: recv_control_msg error -32 req 02 val 2500 [ 1018.947408][ T47] pwc: recv_control_msg error -32 req 02 val 2400 [ 1018.954699][ T47] pwc: recv_control_msg error -32 req 02 val 2600 [ 1018.986296][ T5888] usb 3-1: config 22 has too many interfaces: 77, using maximum allowed: 32 [ 1018.995285][ T5888] usb 3-1: config 22 has an invalid descriptor of length 30, skipping remainder of the config [ 1019.019023][ T5888] usb 3-1: config 22 has 0 interfaces, different from the descriptor's value: 77 [ 1019.031948][ T5888] usb 3-1: New USB device found, idVendor=1000, idProduct=1540, bcdDevice=b7.5a [ 1019.041655][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.071750][ T5888] usb 3-1: Product: syz [ 1019.099567][ T5888] usb 3-1: Manufacturer: syz [ 1019.143339][ T5888] usb 3-1: SerialNumber: syz [ 1019.163626][ T47] pwc: recv_control_msg error -71 req 02 val 2800 [ 1019.170948][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 1019.179285][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 1019.257609][ T47] pwc: Registered as video103. [ 1019.327744][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 1019.373653][ T47] usb 1-1: USB disconnect, device number 12 [ 1019.597607][ T5888] usb 3-1: USB disconnect, device number 18 [ 1019.781840][ T5890] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1020.048802][ T5890] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 1020.057125][ T5890] usb 2-1: config 0 has no interface number 0 [ 1020.063587][ T5890] usb 2-1: config 0 interface 113 has no altsetting 0 [ 1020.074026][ T5890] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1020.083327][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.092868][ T5890] usb 2-1: Product: syz [ 1020.106329][ T5890] usb 2-1: Manufacturer: syz [ 1020.139021][ T5890] usb 2-1: SerialNumber: syz [ 1020.167055][ T5890] usb 2-1: config 0 descriptor?? [ 1020.731814][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 1021.612000][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1022.000275][T19100] netlink: 'syz.2.3657': attribute type 12 has an invalid length. [ 1022.008633][T19100] netlink: 'syz.2.3657': attribute type 29 has an invalid length. [ 1022.016703][T19100] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1022.027943][T19100] netlink: 'syz.2.3657': attribute type 2 has an invalid length. [ 1022.037589][T19100] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1024.203330][ T47] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1024.364341][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 1024.388032][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.401081][ T47] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1024.449617][ T47] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1024.504901][ T47] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1024.514522][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.565095][ T47] usb 6-1: Product: syz [ 1024.569329][ T47] usb 6-1: Manufacturer: syz [ 1024.653572][ T47] usb 6-1: SerialNumber: syz [ 1024.694619][ T47] usb 6-1: config 0 descriptor?? [ 1024.774306][ T47] gs_usb 6-1:0.0: Required endpoints not found [ 1026.074800][T19122] pim6reg: entered allmulticast mode [ 1026.081596][T19122] pim6reg: left allmulticast mode [ 1026.964215][ T30] kauditd_printk_skb: 523 callbacks suppressed [ 1026.964235][ T30] audit: type=1326 audit(1748044769.388:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19131 comm="syz.3.3664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effff78e969 code=0x0 [ 1028.024270][T19140] pim6reg1: entered promiscuous mode [ 1028.033439][T19140] pim6reg1: entered allmulticast mode [ 1028.075459][T19143] netlink: 'syz.0.3666': attribute type 1 has an invalid length. [ 1028.101941][ T10] usb 6-1: USB disconnect, device number 88 [ 1028.126200][T19143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1028.177012][T19142] bridge2: entered promiscuous mode [ 1028.240484][T19145] netlink: 324 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1028.703763][ T47] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1028.886322][ T47] usb 4-1: config 0 has no interfaces? [ 1028.909777][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1028.927215][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.955882][ T47] usb 4-1: Product: syz [ 1028.960111][ T47] usb 4-1: Manufacturer: syz [ 1028.993169][ T47] usb 4-1: SerialNumber: syz [ 1029.025153][ T47] usb 4-1: config 0 descriptor?? [ 1029.261004][T19168] netlink: 'syz.0.3675': attribute type 12 has an invalid length. [ 1029.270423][T19168] netlink: 'syz.0.3675': attribute type 29 has an invalid length. [ 1029.279281][T19168] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3675'. [ 1029.292940][T19168] netlink: 'syz.0.3675': attribute type 2 has an invalid length. [ 1029.302815][T19168] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3675'. [ 1029.427711][T19167] FAULT_INJECTION: forcing a failure. [ 1029.427711][T19167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.486965][T19167] CPU: 0 UID: 0 PID: 19167 Comm: syz.5.3676 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 1029.486989][T19167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1029.487002][T19167] Call Trace: [ 1029.487009][T19167] [ 1029.487017][T19167] dump_stack_lvl+0x189/0x250 [ 1029.487042][T19167] ? __lock_acquire+0xaac/0xd20 [ 1029.487065][T19167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.487086][T19167] ? __pfx__printk+0x10/0x10 [ 1029.487100][T19167] ? __might_fault+0xb0/0x130 [ 1029.487128][T19167] should_fail_ex+0x414/0x560 [ 1029.487148][T19167] _copy_from_user+0x2d/0xb0 [ 1029.487170][T19167] ___sys_sendmsg+0x158/0x2a0 [ 1029.487193][T19167] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.487239][T19167] ? __fget_files+0x2a/0x420 [ 1029.487258][T19167] ? __fget_files+0x3a0/0x420 [ 1029.487284][T19167] __x64_sys_sendmsg+0x19b/0x260 [ 1029.487307][T19167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.487339][T19167] ? do_syscall_64+0xba/0x210 [ 1029.487371][T19167] do_syscall_64+0xf6/0x210 [ 1029.487399][T19167] ? clear_bhb_loop+0x60/0xb0 [ 1029.487425][T19167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.487446][T19167] RIP: 0033:0x7f0c8ff8e969 [ 1029.487460][T19167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.487473][T19167] RSP: 002b:00007f0c90dc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.487489][T19167] RAX: ffffffffffffffda RBX: 00007f0c901b5fa0 RCX: 00007f0c8ff8e969 [ 1029.487499][T19167] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000c [ 1029.487509][T19167] RBP: 00007f0c90dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.487518][T19167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.487527][T19167] R13: 0000000000000000 R14: 00007f0c901b5fa0 R15: 00007f0c902dfa28 [ 1029.487548][T19167] [ 1029.679175][ C0] vkms_vblank_simulate: vblank timer overrun [ 1029.685184][ C0] hrtimer: interrupt took 192091046 ns [ 1029.785200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.153414][ T9] usb 4-1: USB disconnect, device number 30 [ 1032.978224][T19220] netlink: 'syz.2.3690': attribute type 10 has an invalid length. [ 1033.047455][T19220] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1033.803620][ T47] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1034.054487][ T47] usb 4-1: config 0 has no interfaces? [ 1034.069183][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1034.078699][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.090138][ T47] usb 4-1: Product: syz [ 1034.105503][ T47] usb 4-1: Manufacturer: syz [ 1034.129328][ T47] usb 4-1: SerialNumber: syz [ 1034.161292][ T47] usb 4-1: config 0 descriptor?? [ 1036.258799][T19259] netdevsim netdevsim0 netdevsim0: Device is already in use. [ 1036.671870][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1036.761346][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1036.968453][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1037.264313][T14199] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1037.453462][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1037.462059][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1037.506810][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1037.539811][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1037.558584][ T9] usb 1-1: Product: syz [ 1037.602577][ T9] usb 1-1: Manufacturer: syz [ 1037.622616][ T9] usb 1-1: SerialNumber: syz [ 1037.644035][T14199] usb 6-1: config 0 has no interfaces? [ 1037.686253][ T9] usb 1-1: config 0 descriptor?? [ 1037.695913][T14199] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1037.705968][T19266] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1037.731170][T14199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.757335][T14199] usb 6-1: Product: syz [ 1037.771800][T14199] usb 6-1: Manufacturer: syz [ 1037.809935][T14199] usb 6-1: SerialNumber: syz [ 1037.825103][T19275] FAULT_INJECTION: forcing a failure. [ 1037.825103][T19275] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.857007][T14199] usb 6-1: config 0 descriptor?? [ 1037.872385][T19275] CPU: 0 UID: 0 PID: 19275 Comm: syz.1.3707 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 1037.872416][T19275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1037.872429][T19275] Call Trace: [ 1037.872437][T19275] [ 1037.872446][T19275] dump_stack_lvl+0x189/0x250 [ 1037.872490][T19275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1037.872520][T19275] ? __pfx__printk+0x10/0x10 [ 1037.872544][T19275] ? __pfx___might_resched+0x10/0x10 [ 1037.872566][T19275] ? fs_reclaim_acquire+0x7d/0x100 [ 1037.872604][T19275] should_fail_ex+0x414/0x560 [ 1037.872631][T19275] should_failslab+0xa8/0x100 [ 1037.872661][T19275] __kmalloc_noprof+0xcb/0x4f0 [ 1037.872688][T19275] ? sock_kmalloc+0xd6/0x160 [ 1037.872725][T19275] sock_kmalloc+0xd6/0x160 [ 1037.872759][T19275] ____sys_sendmsg+0x1b5/0x830 [ 1037.872795][T19275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1037.872835][T19275] ? import_iovec+0x74/0xa0 [ 1037.872870][T19275] ___sys_sendmsg+0x21f/0x2a0 [ 1037.872902][T19275] ? __pfx____sys_sendmsg+0x10/0x10 [ 1037.872970][T19275] ? __fget_files+0x2a/0x420 [ 1037.872997][T19275] ? __fget_files+0x3a0/0x420 [ 1037.873037][T19275] __x64_sys_sendmsg+0x19b/0x260 [ 1037.873070][T19275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1037.873115][T19275] ? do_syscall_64+0xba/0x210 [ 1037.873146][T19275] do_syscall_64+0xf6/0x210 [ 1037.873175][T19275] ? clear_bhb_loop+0x60/0xb0 [ 1037.873200][T19275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.873228][T19275] RIP: 0033:0x7f3bb4b8e969 [ 1037.873247][T19275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.873266][T19275] RSP: 002b:00007f3bb59b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.873289][T19275] RAX: ffffffffffffffda RBX: 00007f3bb4db5fa0 RCX: 00007f3bb4b8e969 [ 1037.873305][T19275] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000c [ 1037.873319][T19275] RBP: 00007f3bb59b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.873332][T19275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.873346][T19275] R13: 0000000000000000 R14: 00007f3bb4db5fa0 R15: 00007f3bb4edfa28 [ 1037.873378][T19275] [ 1038.751507][ T5888] usb 1-1: USB disconnect, device number 13 [ 1039.039846][ T5894] usb 4-1: USB disconnect, device number 31 [ 1039.474134][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 1040.223258][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1040.704468][ T9] usb 1-1: config 0 has no interfaces? [ 1040.745161][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1040.767175][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.917857][ T9] usb 1-1: Product: syz [ 1041.115282][ T47] usb 6-1: USB disconnect, device number 89 [ 1041.140049][ T9] usb 1-1: Manufacturer: syz [ 1041.170831][ T9] usb 1-1: SerialNumber: syz [ 1041.664953][ T9] usb 1-1: config 0 descriptor?? [ 1042.489836][T14199] hid-generic 0000:0005:0009.0028: unknown main item tag 0x0 [ 1042.498736][T14199] hid-generic 0000:0005:0009.0028: unknown main item tag 0x0 [ 1042.507183][T14199] hid-generic 0000:0005:0009.0028: unknown main item tag 0x0 [ 1042.522979][T14199] hid-generic 0000:0005:0009.0028: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1042.578580][ T9] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1042.646486][T19332] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1042.773962][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1042.814875][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1042.837140][ T9] usb 6-1: config 0 has no interface number 0 [ 1042.877252][ T9] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1042.925989][ T9] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1042.995689][T19335] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3721'. [ 1042.998270][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1043.017247][T19333] fido_id[19333]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1043.031108][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.051400][ T9] usb 6-1: Product: syz [ 1043.056057][ T9] usb 6-1: Manufacturer: syz [ 1043.065103][ T9] usb 6-1: SerialNumber: syz [ 1043.084893][ T9] usb 6-1: config 0 descriptor?? [ 1043.090915][T19329] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1043.106549][T19329] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1043.317652][T19324] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1043.325478][T19324] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1043.736050][T19339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.755798][T19339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.015770][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1044.162422][T19344] tap0: tun_chr_ioctl cmd 1074025677 [ 1044.170503][ T10] usb 1-1: USB disconnect, device number 14 [ 1044.176291][T19344] tap0: linktype set to 780 [ 1044.531055][T19351] netlink: 'syz.2.3724': attribute type 12 has an invalid length. [ 1044.641468][T19351] netlink: 'syz.2.3724': attribute type 29 has an invalid length. [ 1044.667297][T19351] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3724'. [ 1044.679724][T19351] netlink: 'syz.2.3724': attribute type 2 has an invalid length. [ 1044.698620][T19351] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3724'. [ 1044.715882][T19352] netlink: 'syz.3.3726': attribute type 4 has an invalid length. [ 1044.733229][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1044.895943][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1044.910453][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1044.930863][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.185782][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.215805][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1045.218402][T19356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 1045.225479][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.242745][ T10] usb 1-1: Product: syz [ 1045.347940][ T10] usb 1-1: Manufacturer: syz [ 1045.357701][ T10] usb 1-1: SerialNumber: syz [ 1045.775351][T19324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3719'. [ 1045.787357][ T10] usb 1-1: 0:2 : does not exist [ 1046.675544][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1046.775396][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1046.834368][ T9] asix 6-1:0.251: probe with driver asix failed with error -5 [ 1046.857952][ T9] usb 6-1: USB disconnect, device number 90 [ 1047.002041][T19369] pim6reg: entered allmulticast mode [ 1047.011593][T19369] pim6reg: left allmulticast mode [ 1047.063855][T19367] tap0: tun_chr_ioctl cmd 1074025677 [ 1047.069444][T19367] tap0: linktype set to 780 [ 1048.374823][ T10] usb 1-1: 1:0: cannot get min/max values for control 6 (id 1) [ 1048.440829][ T10] usb 1-1: USB disconnect, device number 15 [ 1048.634462][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3733'. [ 1048.973399][ T47] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1049.331616][ T47] usb 6-1: config 0 has no interfaces? [ 1049.350040][ T47] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1049.423268][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.753217][ T47] usb 6-1: Product: syz [ 1049.757463][ T47] usb 6-1: Manufacturer: syz [ 1049.762096][ T47] usb 6-1: SerialNumber: syz [ 1049.864826][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1049.983715][ T47] usb 6-1: config 0 descriptor?? [ 1050.025949][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1050.060205][ T10] usb 1-1: can't read configurations, error -22 [ 1050.243286][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1050.798212][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1050.814329][ T10] usb 1-1: can't read configurations, error -22 [ 1050.844224][ T10] usb usb1-port1: attempt power cycle [ 1051.193257][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1051.291313][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1051.360685][ T10] usb 1-1: can't read configurations, error -22 [ 1051.629675][T19409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.639717][T19409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.663232][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1051.726573][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1051.790395][ T10] usb 1-1: can't read configurations, error -22 [ 1051.950906][ T10] usb usb1-port1: unable to enumerate USB device [ 1052.967898][ T5894] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1053.051270][ T47] usb 6-1: USB disconnect, device number 91 [ 1053.137136][ T5894] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1053.153918][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.222177][ T5894] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1053.266587][ T5894] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1053.311396][ T5894] usb 3-1: Manufacturer: syz [ 1053.353261][ T5894] usb 3-1: config 0 descriptor?? [ 1053.429596][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3746'. [ 1053.777696][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1054.053215][ T5894] rc_core: IR keymap rc-hauppauge not found [ 1054.082510][ T5894] Registered IR keymap rc-empty [ 1054.206597][ T5894] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1054.236245][ T5894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input56 [ 1054.537283][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.563271][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.939156][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1055.243665][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1055.252810][ T10] usb 1-1: config 0 has an invalid interface number: 44 but max is 0 [ 1055.294019][ T10] usb 1-1: config 0 has no interface number 0 [ 1055.300612][ T10] usb 1-1: too many endpoints for config 0 interface 44 altsetting 30: 160, using maximum allowed: 30 [ 1055.348553][ T10] usb 1-1: config 0 interface 44 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 160 [ 1055.400849][ T10] usb 1-1: config 0 interface 44 has no altsetting 0 [ 1055.429778][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1055.620200][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.696350][ T10] usb 1-1: config 0 descriptor?? [ 1057.225292][T19421] syz.2.3744 (19421): drop_caches: 3 [ 1057.373836][ T5894] usb 3-1: USB disconnect, device number 19 [ 1057.439089][ T10] usb 1-1: string descriptor 0 read error: -71 [ 1057.496544][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1057.609890][ T10] gspca_sq930x: reg_r 001f failed -71 [ 1057.643592][ T10] sq930x 1-1:0.44: probe with driver sq930x failed with error -71 [ 1057.794131][ T10] usb 1-1: USB disconnect, device number 20 [ 1057.910013][T19486] netlink: 324 bytes leftover after parsing attributes in process `syz.5.3752'. [ 1058.509588][T19497] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1059.399410][T19512] netlink: 'syz.2.3759': attribute type 1 has an invalid length. [ 1059.424297][T19510] netlink: 'syz.3.3758': attribute type 10 has an invalid length. [ 1059.438225][T19510] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1059.453495][T19510] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1059.475756][T19510] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1059.807231][T14199] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1059.829393][T19512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1060.012096][T19514] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1060.065906][T14199] usb 6-1: config 0 has no interfaces? [ 1060.076413][T19517] batman_adv: batadv0: Interface deactivated: dummy0 [ 1060.171277][T19523] xt_nat: multiple ranges no longer supported [ 1060.199994][T19517] batman_adv: batadv0: Removing interface: dummy0 [ 1060.248873][T14199] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1060.253727][T19517] bond1: (slave dummy0): making interface the new active one [ 1060.292615][T19517] dummy0: entered promiscuous mode [ 1060.308825][T19517] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1060.326078][T14199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.453285][ T5894] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1060.542790][T14199] usb 6-1: Product: syz [ 1060.567542][T14199] usb 6-1: Manufacturer: syz [ 1060.591207][ T5894] usb 4-1: device descriptor read/64, error -71 [ 1060.696462][T14199] usb 6-1: SerialNumber: syz [ 1060.746195][T14199] usb 6-1: config 0 descriptor?? [ 1060.844044][ T5894] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1060.984024][ T5894] usb 4-1: device descriptor read/64, error -71 [ 1061.058992][T19537] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.065112][T19537] binder: 19534:19537 ioctl 4018620d 200000000280 returned -16 [ 1061.075852][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1061.113896][ T5894] usb usb4-port1: attempt power cycle [ 1061.465965][ T5894] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1061.524399][ T5894] usb 4-1: device descriptor read/8, error -71 [ 1061.783893][ T5894] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1061.815269][ T5894] usb 4-1: device descriptor read/8, error -71 [ 1061.893206][ T47] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1061.923929][ T5894] usb usb4-port1: unable to enumerate USB device [ 1062.056313][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1062.138960][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1062.212804][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1062.250772][ T47] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1062.260251][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.273078][ T47] usb 1-1: Product: syz [ 1062.313277][ T47] usb 1-1: Manufacturer: syz [ 1062.326801][ T47] usb 1-1: SerialNumber: syz [ 1062.354585][ T47] usb 1-1: config 0 descriptor?? [ 1062.376650][T19544] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1062.387694][T19544] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1062.399810][ T47] usb 1-1: ucan: probing device on interface #0 [ 1063.058631][ T47] ucan 1-1:0.0 can0: registered device [ 1063.214512][ T47] ucan 1-1:0.0 can0: firmware string: Á [ 1063.243995][T16780] usb 6-1: USB disconnect, device number 92 [ 1064.700704][ T47] usb 1-1: USB disconnect, device number 21 [ 1064.747692][T19580] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1065.682919][T19593] netlink: 368 bytes leftover after parsing attributes in process `syz.2.3783'. [ 1065.805385][T19593] geneve2: entered promiscuous mode [ 1065.811554][T19593] geneve2: entered allmulticast mode [ 1066.294056][T19601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.358671][T19601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.243341][ T47] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1067.464407][ T47] usb 4-1: config 0 has no interfaces? [ 1067.483453][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1067.492636][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.513316][ T47] usb 4-1: Product: syz [ 1067.517578][ T47] usb 4-1: Manufacturer: syz [ 1067.522200][ T47] usb 4-1: SerialNumber: syz [ 1067.562360][ T47] usb 4-1: config 0 descriptor?? [ 1067.721401][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1067.917693][T19634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.960629][T19634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.061502][T19657] pim6reg: entered allmulticast mode [ 1070.068700][T19659] pim6reg: left allmulticast mode [ 1071.123396][ T5894] usb 4-1: USB disconnect, device number 36 [ 1071.228877][T19666] tap0: tun_chr_ioctl cmd 1074025677 [ 1071.246469][T19666] tap0: linktype set to 780 [ 1071.332197][T19671] FAULT_INJECTION: forcing a failure. [ 1071.332197][T19671] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.382266][T19669] wg2: entered promiscuous mode [ 1071.399396][T19669] wg2: entered allmulticast mode [ 1071.406834][T19671] CPU: 1 UID: 0 PID: 19671 Comm: syz.3.3800 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 1071.406864][T19671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1071.406878][T19671] Call Trace: [ 1071.406888][T19671] [ 1071.406898][T19671] dump_stack_lvl+0x189/0x250 [ 1071.406937][T19671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1071.406967][T19671] ? __pfx__printk+0x10/0x10 [ 1071.406994][T19671] ? __pfx___might_resched+0x10/0x10 [ 1071.407020][T19671] should_fail_ex+0x414/0x560 [ 1071.407048][T19671] should_failslab+0xa8/0x100 [ 1071.407078][T19671] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1071.407105][T19671] ? __kasan_kmalloc+0x93/0xb0 [ 1071.407127][T19671] ? ip6_setup_cork+0x599/0x11c0 [ 1071.407159][T19671] kmemdup_noprof+0x2b/0x70 [ 1071.407184][T19671] ip6_setup_cork+0x599/0x11c0 [ 1071.407221][T19671] ip6_make_skb+0x1bd/0x410 [ 1071.407246][T19671] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1071.407281][T19671] ? __pfx_ip6_make_skb+0x10/0x10 [ 1071.407323][T19671] ? ip6_dst_hoplimit+0x96/0x350 [ 1071.407341][T19671] ? ip6_dst_hoplimit+0x96/0x350 [ 1071.407363][T19671] udpv6_sendmsg+0x1c06/0x2700 [ 1071.407390][T19671] ? lockdep_hardirqs_on+0x9c/0x150 [ 1071.407426][T19671] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1071.407459][T19671] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1071.407512][T19671] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1071.407532][T19671] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1071.407567][T19671] ? inet_send_prepare+0x1b9/0x270 [ 1071.407603][T19671] ? inet_send_prepare+0x1b9/0x270 [ 1071.407638][T19671] ? inet6_sendmsg+0xe4/0x120 [ 1071.407660][T19671] __sock_sendmsg+0xe5/0x270 [ 1071.407686][T19671] ____sys_sendmsg+0x505/0x830 [ 1071.407721][T19671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1071.407761][T19671] ? import_iovec+0x74/0xa0 [ 1071.407794][T19671] ___sys_sendmsg+0x21f/0x2a0 [ 1071.407826][T19671] ? __pfx____sys_sendmsg+0x10/0x10 [ 1071.407900][T19671] ? __fget_files+0x2a/0x420 [ 1071.407926][T19671] ? __fget_files+0x3a0/0x420 [ 1071.407965][T19671] __x64_sys_sendmsg+0x19b/0x260 [ 1071.407998][T19671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1071.408046][T19671] ? do_syscall_64+0xba/0x210 [ 1071.408078][T19671] do_syscall_64+0xf6/0x210 [ 1071.408105][T19671] ? clear_bhb_loop+0x60/0xb0 [ 1071.408131][T19671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.408152][T19671] RIP: 0033:0x7effff78e969 [ 1071.408171][T19671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.408189][T19671] RSP: 002b:00007f000055a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.408211][T19671] RAX: ffffffffffffffda RBX: 00007effff9b5fa0 RCX: 00007effff78e969 [ 1071.408227][T19671] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000c [ 1071.408241][T19671] RBP: 00007f000055a090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.408255][T19671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.408268][T19671] R13: 0000000000000000 R14: 00007effff9b5fa0 R15: 00007effffadfa28 [ 1071.408301][T19671] [ 1071.950027][ T9] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1072.173231][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1072.460644][ T9] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1072.478029][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.520461][ T9] usb 6-1: Product: syz [ 1072.528388][ T9] usb 6-1: Manufacturer: syz [ 1072.549157][ T9] usb 6-1: SerialNumber: syz [ 1072.574479][ T9] usb 6-1: config 0 descriptor?? [ 1072.606008][ T9] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1072.817920][T19676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.826827][T19676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.971801][T19697] netlink: 'syz.1.3807': attribute type 11 has an invalid length. [ 1073.057576][ T9] usb 6-1: USB disconnect, device number 93 [ 1073.145993][T14335] dummy0: left promiscuous mode [ 1075.419743][T19723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.443814][T19723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.572652][T19725] tap0: tun_chr_ioctl cmd 1074025677 [ 1075.580667][T19725] tap0: linktype set to 780 [ 1075.900315][T19732] netlink: 'syz.2.3814': attribute type 12 has an invalid length. [ 1075.909199][T19732] netlink: 'syz.2.3814': attribute type 29 has an invalid length. [ 1075.917682][T19732] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1075.926892][T19732] netlink: 'syz.2.3814': attribute type 2 has an invalid length. [ 1075.934879][T19732] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1076.013512][ T5894] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1076.216276][ T5894] usb 4-1: config 0 has no interfaces? [ 1076.284585][ T5894] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1076.302874][T19735] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3817'. [ 1076.329502][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.563237][ T5894] usb 4-1: Product: syz [ 1076.593639][ T5894] usb 4-1: Manufacturer: syz [ 1076.598302][ T5894] usb 4-1: SerialNumber: syz [ 1076.659260][ T5894] usb 4-1: config 0 descriptor?? [ 1076.983310][ T9] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1077.165343][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.245640][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1077.462157][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1077.508035][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1077.585609][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1077.603267][ T5894] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1077.650506][ T9] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1077.663293][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1077.681850][ T9] usb 6-1: Product: syz [ 1077.689675][ T9] usb 6-1: Manufacturer: syz [ 1077.702723][ T9] usb 6-1: SerialNumber: syz [ 1077.728701][ T9] usb 6-1: config 0 descriptor?? [ 1077.909998][ T5894] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1077.923225][ T5894] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1077.935393][ T5894] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1077.954431][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.974160][ T5894] usb 1-1: Product: syz [ 1077.981373][ T5894] usb 1-1: Manufacturer: syz [ 1077.986691][ T9] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1078.011978][ T5894] usb 1-1: SerialNumber: syz [ 1078.046374][ T5894] usb 1-1: config 0 descriptor?? [ 1078.070474][ T5894] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1078.088087][ T5894] keyspan 1-1:0.0: unsupported endpoint type 0 [ 1078.114445][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1078.141454][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1078.162203][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1078.183616][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1078.201226][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1078.260707][ T9] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1078.292095][ T9] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 1078.308749][T19747] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3822'. [ 1078.321663][ T9] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1078.328481][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1078.358147][ T9] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1078.450961][ T5894] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1078.501898][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1078.517179][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 1078.544730][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1078.548843][ T9] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 1078.561992][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1078.677095][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1078.750827][ T5894] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1078.874348][ T5894] usb 1-1: USB disconnect, device number 22 [ 1078.954613][ T5894] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1078.977164][T19740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.004335][T19740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.054216][ T5894] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1079.133314][T16780] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1079.184150][ T5894] keyspan 1-1:0.0: device disconnected [ 1079.333205][T16780] usb 3-1: Using ep0 maxpacket: 16 [ 1079.355151][T16780] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.396744][T16780] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.427198][T16780] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1079.443669][ T5894] usb 4-1: USB disconnect, device number 37 [ 1079.477092][T16780] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1079.496806][ T9] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1079.499007][T16780] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1079.563837][ T9] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 1079.577272][T16780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.623564][ T9] usb 6-1: USB disconnect, device number 94 [ 1079.624501][T16780] usb 3-1: config 0 descriptor?? [ 1079.675812][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'. [ 1079.894390][T19753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.906834][T19753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.117783][T19768] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1080.137517][T19769] netdevsim netdevsim0 netdevsim0: Device is already in use. [ 1080.469549][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3832'. [ 1080.514045][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3832'. [ 1080.532320][T19781] tap0: tun_chr_ioctl cmd 1074025677 [ 1080.554504][T19781] tap0: linktype set to 780 [ 1080.580612][T16780] usbhid 3-1:0.0: can't add hid device: -71 [ 1080.593239][T19778] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.3832'. [ 1080.596555][T16780] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1080.676876][T16780] usb 3-1: USB disconnect, device number 20 [ 1080.789124][T19785] netlink: 'syz.0.3833': attribute type 12 has an invalid length. [ 1080.797736][T19785] netlink: 'syz.0.3833': attribute type 29 has an invalid length. [ 1080.809909][T19785] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1080.873450][T19785] netlink: 'syz.0.3833': attribute type 2 has an invalid length. [ 1080.938709][T19785] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1081.132753][T19791] binder: 19790:19791 ioctl c0306201 2000000001c0 returned -14 [ 1081.135966][T19789] xt_nat: multiple ranges no longer supported [ 1081.256781][T19789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.336971][T19789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.194314][T19800] tipc: Started in network mode [ 1082.199461][T19800] tipc: Node identity ac1414aa, cluster identity 4711 [ 1082.217786][T19800] tipc: Enabling of bearer rejected, failed to enable media [ 1082.335495][T19806] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3840'. [ 1084.514943][T19831] netdevsim netdevsim0 netdevsim0: Device is already in use. [ 1085.760899][T19846] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1085.950274][T19848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.016761][T19848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.297253][T19856] IPVS: length: 4096 != 8 [ 1086.399754][T19859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.563840][T19859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.363778][T14199] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1088.613339][ T10] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1088.642898][T14199] usb 4-1: config 0 has no interfaces? [ 1088.657281][T14199] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1088.667003][T14199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.675458][T14199] usb 4-1: Product: syz [ 1088.689748][T14199] usb 4-1: Manufacturer: syz [ 1088.715436][T14199] usb 4-1: SerialNumber: syz [ 1088.732607][T14199] usb 4-1: config 0 descriptor?? [ 1088.973699][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1089.044819][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.113330][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1089.353895][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1089.373309][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1089.383181][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.398418][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1089.407841][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1089.416279][ T10] usb 6-1: Manufacturer: syz [ 1089.434718][ T10] usb 6-1: config 0 descriptor?? [ 1090.013372][ T10] rc_core: IR keymap rc-hauppauge not found [ 1090.029932][ T10] Registered IR keymap rc-empty [ 1090.052205][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.104614][T19892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1090.116769][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.146791][T19892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1090.162114][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1090.211403][T19895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.260748][T19895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.370063][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input57 [ 1090.398325][T19894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.410514][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.454805][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.473821][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.503454][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.524533][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.543526][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.583471][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.623428][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.673462][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.693343][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1090.755305][ T10] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1090.782688][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1090.836282][ T10] usb 6-1: USB disconnect, device number 95 [ 1090.940233][T19901] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3864'. [ 1091.445142][T16780] usb 4-1: USB disconnect, device number 38 [ 1091.766538][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1091.986328][ T10] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1092.003317][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.022947][ T10] usb 3-1: config 0 has no interface number 0 [ 1092.030447][ T10] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 1092.052769][ T10] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1092.106955][T19924] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3872'. [ 1092.130324][ T10] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 1092.320123][ T10] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1092.329775][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.337949][ T10] usb 3-1: Product: syz [ 1092.342355][ T10] usb 3-1: Manufacturer: syz [ 1092.351161][ T10] usb 3-1: SerialNumber: syz [ 1092.378670][ T10] usb 3-1: config 0 descriptor?? [ 1092.442665][ T10] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 1092.780240][ T5888] usb 3-1: USB disconnect, device number 21 [ 1093.477724][T19944] fuse: Bad value for 'fd' [ 1093.487251][T19946] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3880'. [ 1094.032126][T16780] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1094.203478][T16780] usb 4-1: Using ep0 maxpacket: 32 [ 1094.225462][T16780] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1094.253859][T16780] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1094.318443][T16780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.331398][T19963] IPVS: set_ctl: invalid protocol: 51 172.20.20.66:20002 [ 1094.340875][T16780] usb 4-1: Product: syz [ 1094.352110][T16780] usb 4-1: Manufacturer: â ‰ [ 1094.356733][T19963] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 1094.403198][T16780] usb 4-1: SerialNumber: syz [ 1094.705024][T16780] cdc_ncm 4-1:1.0: bind() failure [ 1094.746579][T16780] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1094.781577][T19970] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3887'. [ 1094.793201][T16780] cdc_ncm 4-1:1.1: bind() failure [ 1094.821737][T16780] usb 4-1: USB disconnect, device number 39 [ 1095.883469][T16780] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1096.093422][T16780] usb 6-1: Using ep0 maxpacket: 32 [ 1096.243569][T16780] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1096.428856][T16780] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1096.608280][T16780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1096.658187][T16780] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1096.678033][T19995] batman_adv: batadv0: Adding interface: dummy0 [ 1096.684697][T19995] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.723330][T16780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1096.742713][T16780] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1096.759609][T19995] batman_adv: batadv0: Interface activated: dummy0 [ 1096.787691][T16780] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1096.900243][T16780] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 1096.953343][T16780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.961391][T16780] usb 6-1: Product: syz [ 1097.010136][T16780] usb 6-1: Manufacturer: syz [ 1097.021033][T16780] usb 6-1: SerialNumber: syz [ 1097.053864][T16780] usb 6-1: config 0 descriptor?? [ 1097.108880][T19981] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1097.316671][T20003] xt_nat: multiple ranges no longer supported [ 1097.336546][T16780] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 1097.369395][T16780] hdpvr 6-1:0.0: device init failed [ 1097.404986][T16780] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1097.481343][T16780] usb 6-1: USB disconnect, device number 96 [ 1097.643290][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1097.773255][ T10] usb 1-1: device descriptor read/64, error -71 [ 1098.083143][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1098.273354][ T10] usb 1-1: device descriptor read/64, error -71 [ 1098.405407][ T10] usb usb1-port1: attempt power cycle [ 1098.773359][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1098.822761][ T10] usb 1-1: device descriptor read/8, error -71 [ 1098.854641][T20026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.911439][T20026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.944391][T14199] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1099.114041][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1099.150940][T14199] usb 6-1: device descriptor read/all, error -61 [ 1099.164126][ T10] usb 1-1: device descriptor read/8, error -71 [ 1099.273828][ T10] usb usb1-port1: unable to enumerate USB device [ 1099.301790][T14199] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1100.033328][T14199] usb 6-1: device descriptor read/64, error -71 [ 1100.143712][T14199] usb usb6-port1: attempt power cycle [ 1100.573322][T20041] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1100.584569][T20041] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1100.598461][T14199] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1100.633998][T14199] usb 6-1: device descriptor read/8, error -71 [ 1100.820293][T20048] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3912'. [ 1100.891230][T20049] netlink: 'syz.3.3911': attribute type 12 has an invalid length. [ 1100.899551][T20049] netlink: 'syz.3.3911': attribute type 29 has an invalid length. [ 1100.931861][T20049] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1100.942745][T20049] netlink: 'syz.3.3911': attribute type 2 has an invalid length. [ 1100.950960][T20049] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1100.991741][T14199] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1101.063998][T14199] usb 6-1: device descriptor read/8, error -71 [ 1101.173864][T14199] usb usb6-port1: unable to enumerate USB device [ 1101.380245][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3913'. [ 1101.390433][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3913'. [ 1101.404087][T20051] No such timeout policy "syz0" [ 1102.456496][T20074] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3920'. [ 1102.611197][T20082] netdevsim netdevsim5 netdevsim0: Device is already in use. [ 1102.874824][T20086] batman_adv: batadv0: Adding interface: dummy0 [ 1102.882420][T20086] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.912750][T20086] batman_adv: batadv0: Interface activated: dummy0 [ 1103.112393][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1103.561552][T20103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.213271][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 1104.291477][ T5888] usb 3-1: config index 0 descriptor too short (expected 320, got 36) [ 1104.403440][ T5888] usb 3-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1104.410336][T20108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3929'. [ 1104.440735][ T5888] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1104.483505][ T5888] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1104.492617][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.671743][ T5888] usb 3-1: Product: syz [ 1104.706583][ T5888] usb 3-1: Manufacturer: syz [ 1104.711262][ T5888] usb 3-1: SerialNumber: syz [ 1105.320381][T20122] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3932'. [ 1106.977412][T20130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.053765][T20130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.211292][T20137] netlink: 'syz.0.3935': attribute type 12 has an invalid length. [ 1107.219630][T20137] netlink: 'syz.0.3935': attribute type 29 has an invalid length. [ 1107.228068][T20137] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1107.238127][T20137] netlink: 'syz.0.3935': attribute type 2 has an invalid length. [ 1107.246254][T20137] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1107.883446][T12586] Bluetooth: hci4: command 0x0406 tx timeout [ 1108.001149][T14199] usb 3-1: USB disconnect, device number 22 [ 1108.805240][ T30] audit: type=1326 audit(1748044851.228:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20142 comm="syz.1.3938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bb4b8e969 code=0x7ff70000 [ 1109.194679][T20158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1109.205902][T20160] netlink: 324 bytes leftover after parsing attributes in process `syz.5.3941'. [ 1109.544469][T20162] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3944'. [ 1110.544845][T20176] netlink: 'syz.2.3949': attribute type 1 has an invalid length. [ 1110.558248][T14199] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1110.765104][T14199] usb 1-1: Using ep0 maxpacket: 8 [ 1110.792601][T14199] usb 1-1: config index 0 descriptor too short (expected 320, got 36) [ 1110.801618][T14199] usb 1-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1110.875552][T14199] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1110.999607][T14199] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1111.019057][T14199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.037809][T14199] usb 1-1: Product: syz [ 1111.047110][T14199] usb 1-1: Manufacturer: syz [ 1111.061406][T14199] usb 1-1: SerialNumber: syz [ 1112.133374][ T47] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1112.351209][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1112.411115][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1112.456574][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1112.511883][ T47] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1112.532383][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.586638][ T47] usb 4-1: Product: syz [ 1112.627549][ T47] usb 4-1: Manufacturer: syz [ 1112.657106][ T47] usb 4-1: SerialNumber: syz [ 1112.743879][ T47] usb 4-1: config 0 descriptor?? [ 1112.777278][T20189] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1112.858938][T20189] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1112.979772][ T47] usb 4-1: ucan: probing device on interface #0 [ 1113.759494][ T47] ucan 4-1:0.0 can0: registered device [ 1113.834449][ T47] ucan 4-1:0.0 can0: firmware string: Á [ 1114.417478][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1114.480098][T20216] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1114.903336][T14199] usb 1-1: USB disconnect, device number 27 [ 1115.218275][T16780] usb 4-1: USB disconnect, device number 40 [ 1115.656824][T20245] netlink: 368 bytes leftover after parsing attributes in process `syz.2.3969'. [ 1115.675999][T20245] geneve2: entered promiscuous mode [ 1115.681467][T20245] geneve2: entered allmulticast mode [ 1115.744686][T20246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.765448][T20247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.803572][T20249] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3973'. [ 1115.837343][T20247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.853318][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1115.978197][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.984895][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.059465][ T10] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 1116.142032][ T10] usb 1-1: config 0 has no interface number 0 [ 1116.143480][T16780] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1116.199145][T20257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.208698][T20257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.240489][ T10] usb 1-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1116.315192][ T10] usb 1-1: config 0 interface 11 has no altsetting 0 [ 1116.347456][T16780] usb 6-1: Using ep0 maxpacket: 32 [ 1116.375956][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1116.377882][T16780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1116.425653][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.456844][ T10] usb 1-1: config 0 descriptor?? [ 1116.486651][T20236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1116.501344][T16780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1116.561053][T16780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1116.611361][ T10] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 1116.616686][T16780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1116.702740][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 1116.725975][T16780] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1116.735633][T16780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.763758][T16780] usb 6-1: Product: syz [ 1116.775973][T16780] usb 6-1: Manufacturer: syz [ 1116.797160][T16780] usb 6-1: SerialNumber: syz [ 1116.861153][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 1116.905888][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 1116.914087][T16780] usb 6-1: config 0 descriptor?? [ 1116.924834][T16780] cypress_m8 6-1:0.0: HID->COM RS232 Adapter converter detected [ 1116.977254][T16780] cyphidcom ttyUSB2: required endpoint is missing [ 1116.989832][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 1117.051470][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 1117.129659][T20246] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1117.152608][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 1117.219134][ T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1117.317894][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 1117.460430][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 1117.538619][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 1117.559654][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 1117.832310][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 1117.852808][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 1117.950799][ T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1118.082540][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1118.381785][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1118.547812][ T10] usb 1-1: USB disconnect, device number 28 [ 1118.603720][ T9] usb 4-1: config index 0 descriptor too short (expected 320, got 36) [ 1118.662791][ T9] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1118.728911][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1118.769834][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1118.825875][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1118.884642][ T9] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1118.917988][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.929705][ T10] keyspan 1-1:0.11: device disconnected [ 1118.943148][ T9] usb 4-1: Product: syz [ 1118.963810][ T9] usb 4-1: Manufacturer: syz [ 1119.179787][ T9] usb 4-1: SerialNumber: syz [ 1119.271752][ T47] usb 6-1: USB disconnect, device number 101 [ 1119.300170][ T47] cypress_m8 6-1:0.0: device disconnected [ 1120.002957][T20294] bridge8: entered promiscuous mode [ 1120.625630][T20301] netlink: 'syz.2.3982': attribute type 12 has an invalid length. [ 1120.634757][T20301] netlink: 'syz.2.3982': attribute type 29 has an invalid length. [ 1120.645958][T20301] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3982'. [ 1120.657851][T20301] netlink: 'syz.2.3982': attribute type 2 has an invalid length. [ 1120.669447][T20301] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3982'. [ 1121.928438][ T9] usb 4-1: USB disconnect, device number 41 [ 1122.033165][T20326] netlink: 368 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1122.125500][T20326] geneve2: entered promiscuous mode [ 1122.131013][T20326] geneve2: entered allmulticast mode [ 1122.321368][T20329] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3992'. [ 1123.472833][T20354] bridge1: entered promiscuous mode [ 1123.882168][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1123.923821][T19269] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1123.959992][T20364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1124.113215][T19269] usb 4-1: Using ep0 maxpacket: 8 [ 1124.122192][T19269] usb 4-1: config index 0 descriptor too short (expected 320, got 36) [ 1124.131280][T19269] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1124.151343][T19269] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1124.239625][T19269] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1124.253350][T19269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.282975][T19269] usb 4-1: Product: syz [ 1124.300197][T19269] usb 4-1: Manufacturer: syz [ 1124.306200][T19269] usb 4-1: SerialNumber: syz [ 1125.005662][T20382] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1125.037829][T20383] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4007'. [ 1125.335695][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4009'. [ 1125.366054][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4009'. [ 1125.408501][T20388] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.4009'. [ 1127.381668][T20414] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4016'. [ 1127.781662][T20421] pim6reg: entered allmulticast mode [ 1127.823752][ T5888] usb 4-1: USB disconnect, device number 42 [ 1128.220823][T20421] pim6reg: left allmulticast mode [ 1128.504016][T20424] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4019'. [ 1128.650535][T20426] geneve2: entered promiscuous mode [ 1128.659696][T20426] geneve2: entered allmulticast mode [ 1131.250035][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4031'. [ 1131.343361][ T47] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1131.503847][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 1131.516208][ T47] usb 1-1: config index 0 descriptor too short (expected 320, got 36) [ 1131.593969][ T47] usb 1-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1131.782815][ T47] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1131.799355][T20472] pim6reg: entered allmulticast mode [ 1131.868192][ T47] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1131.878556][T20474] pim6reg: left allmulticast mode [ 1131.943160][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.962880][ T47] usb 1-1: Product: syz [ 1131.972212][ T47] usb 1-1: Manufacturer: syz [ 1132.079647][ T47] usb 1-1: SerialNumber: syz [ 1134.007632][T20489] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4038'. [ 1135.250282][T19269] usb 1-1: USB disconnect, device number 29 [ 1135.661524][T20505] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4041'. [ 1135.682085][T20505] geneve2: entered promiscuous mode [ 1135.687517][T20505] geneve2: entered allmulticast mode [ 1135.802409][T20506] netlink: 'syz.0.4042': attribute type 12 has an invalid length. [ 1135.813730][T20506] netlink: 'syz.0.4042': attribute type 29 has an invalid length. [ 1135.822005][T20506] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1135.834191][T20506] netlink: 'syz.0.4042': attribute type 2 has an invalid length. [ 1135.842222][T20506] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1140.683534][T16780] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1140.703803][T20551] netlink: 324 bytes leftover after parsing attributes in process `syz.5.4056'. [ 1140.862761][T16780] usb 1-1: Using ep0 maxpacket: 8 [ 1140.881899][T16780] usb 1-1: config index 0 descriptor too short (expected 320, got 36) [ 1140.898750][T16780] usb 1-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1140.939696][T16780] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1141.001910][T16780] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1141.024345][T16780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.047426][T16780] usb 1-1: Product: syz [ 1141.051644][T16780] usb 1-1: Manufacturer: syz [ 1141.067631][T16780] usb 1-1: SerialNumber: syz [ 1141.146164][T20561] pim6reg: entered allmulticast mode [ 1141.161919][T20564] pim6reg: left allmulticast mode [ 1141.243332][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1141.407682][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.418194][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1141.435910][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1141.471967][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.493887][ T9] usb 3-1: Product: syz [ 1141.504521][ T9] usb 3-1: Manufacturer: syz [ 1141.511713][ T9] usb 3-1: SerialNumber: syz [ 1141.577861][T20568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4060'. [ 1141.935059][ T9] usb 3-1: cannot find UAC_HEADER [ 1142.115114][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1142.403315][ T9462] udevd[9462]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.496277][T16780] usb 3-1: USB disconnect, device number 23 [ 1142.592569][ T47] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1143.013737][ T47] usb 6-1: config 0 has no interfaces? [ 1143.024759][ T47] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1143.045041][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.078202][ T47] usb 6-1: Product: syz [ 1143.122589][ T47] usb 6-1: Manufacturer: syz [ 1143.173658][ T47] usb 6-1: SerialNumber: syz [ 1143.248779][ T47] usb 6-1: config 0 descriptor?? [ 1143.433750][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1143.452629][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1143.506256][T20592] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1143.563634][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1143.914699][ T10] usb 4-1: config 0 has no interfaces? [ 1143.929414][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1143.939077][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.969555][ T10] usb 4-1: Product: syz [ 1144.018213][ T10] usb 4-1: Manufacturer: syz [ 1144.035435][ T10] usb 4-1: SerialNumber: syz [ 1144.061207][ T10] usb 4-1: config 0 descriptor?? [ 1145.546454][ T10] usb 1-1: USB disconnect, device number 30 [ 1146.430800][ T10] usb 6-1: USB disconnect, device number 102 [ 1146.493960][T20612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.540686][T20612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.593293][ T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1146.672442][T20614] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1146.845966][ T47] usb 3-1: config 0 has no interfaces? [ 1146.851860][ T47] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1146.913336][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.953920][ T47] usb 3-1: config 0 descriptor?? [ 1146.980452][ T47] usb 4-1: USB disconnect, device number 43 [ 1147.181704][T20609] 8021q: VLANs not supported on nlmon0 [ 1147.207579][ T5894] usb 3-1: USB disconnect, device number 24 [ 1147.283424][ T10] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1147.433171][ T47] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1147.470258][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.550013][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.565042][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1147.579707][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1147.591925][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.605541][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.607114][ T10] usb 6-1: config 0 descriptor?? [ 1147.643356][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.671159][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1147.716083][ T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1147.753800][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.781845][ T47] usb 4-1: config 0 descriptor?? [ 1148.070157][T20620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.096015][T20620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.311007][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1148.352000][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1148.441501][ T10] usb 6-1: USB disconnect, device number 103 [ 1148.983415][ T10] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1149.193274][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1149.326192][ T10] usb 6-1: config index 0 descriptor too short (expected 320, got 36) [ 1149.346798][ T10] usb 6-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1149.402340][ T10] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1149.448018][ T10] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1149.458596][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.518937][ T10] usb 6-1: Product: syz [ 1149.530227][ T10] usb 6-1: Manufacturer: syz [ 1149.544112][ T10] usb 6-1: SerialNumber: syz [ 1149.819062][T20647] netlink: 'syz.5.4079': attribute type 61 has an invalid length. [ 1151.533974][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 1151.540064][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1151.684664][ T47] usb 4-1: USB disconnect, device number 44 [ 1152.056428][ T53] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 1152.360958][T20672] bond1: (slave dummy0): Releasing active interface [ 1152.386471][T20672] batman_adv: batadv0: Adding interface: dummy0 [ 1152.393936][T20672] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.542950][T20655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.574383][T20672] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1152.621356][T20655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.444340][ T9] usb 6-1: USB disconnect, device number 104 [ 1154.236367][T20687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4090'. [ 1155.100270][T20700] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4097'. [ 1155.184538][T20706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1155.352356][T20706] netlink: 'syz.1.4095': attribute type 1 has an invalid length. [ 1155.393719][T20696] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1155.483551][T16780] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1155.689734][T16780] usb 1-1: config 0 has no interfaces? [ 1155.706915][T16780] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1155.719145][T16780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.732242][T16780] usb 1-1: Product: syz [ 1155.749831][T16780] usb 1-1: Manufacturer: syz [ 1155.769593][T16780] usb 1-1: SerialNumber: syz [ 1155.802883][T16780] usb 1-1: config 0 descriptor?? [ 1157.070275][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.082808][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.191750][T20722] netlink: 'syz.1.4100': attribute type 61 has an invalid length. [ 1157.344089][T20727] program syz.3.4103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1157.813185][T16780] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1158.015886][T16780] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1158.027816][T16780] usb 3-1: config 0 has no interface number 0 [ 1158.043530][T16780] usb 3-1: config 0 interface 235 has no altsetting 0 [ 1158.065726][T16780] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1158.091680][T16780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.117562][T16780] usb 3-1: Product: syz [ 1158.131617][T16780] usb 3-1: Manufacturer: syz [ 1158.145599][T16780] usb 3-1: SerialNumber: syz [ 1158.226143][T16780] usb 3-1: config 0 descriptor?? [ 1158.247383][T16780] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 1158.256432][T16780] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 1158.271814][T16780] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 1158.368973][T16780] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 1158.394457][T16780] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 1158.437989][T16780] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 1158.546741][T16780] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1158.639812][T16780] usb 3-1: USB disconnect, device number 25 [ 1158.737400][ T7338] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 1158.755909][T14199] usb 1-1: USB disconnect, device number 31 [ 1158.773234][ T10] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1158.815643][T16780] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1158.864293][T16780] keyspan 3-1:0.235: device disconnected [ 1158.885208][T20743] netdevsim netdevsim0 netdevsim0: Device is already in use. [ 1158.952539][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1158.993650][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.060284][ T10] usb 6-1: Product: syz [ 1159.084688][ T10] usb 6-1: Manufacturer: syz [ 1159.090363][T20745] netlink: 'syz.0.4109': attribute type 12 has an invalid length. [ 1159.129870][ T10] usb 6-1: SerialNumber: syz [ 1159.196816][ T10] usb 6-1: config 0 descriptor?? [ 1159.229835][ T10] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1159.756632][ T10] sonixb 6-1:0.0: Error reading register 00: -110 [ 1160.050131][T20762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1160.111834][T20764] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4114'. [ 1160.911377][ T47] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1161.029502][T20771] sctp: [Deprecated]: syz.0.4116 (pid 20771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1161.029502][T20771] Use struct sctp_sack_info instead [ 1161.142596][T20737] block device autoloading is deprecated and will be removed. [ 1161.156328][T20737] syz.5.4106: attempt to access beyond end of device [ 1161.156328][T20737] md2: rw=2048, sector=3656, nr_sectors = 8 limit=0 [ 1161.227884][ T47] usb 3-1: config 0 has no interfaces? [ 1161.248905][ T9] usb 6-1: USB disconnect, device number 105 [ 1161.376361][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1161.395104][T20777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.406898][T20777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.528117][T16780] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1161.546942][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.568404][ T47] usb 3-1: Product: syz [ 1161.588837][ T47] usb 3-1: Manufacturer: syz [ 1161.602717][ T47] usb 3-1: SerialNumber: syz [ 1161.669498][ T47] usb 3-1: config 0 descriptor?? [ 1161.747636][T16780] usb 1-1: config index 0 descriptor too short (expected 8192, got 441) [ 1161.760028][T16780] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.801728][T16780] usb 1-1: config 0 has no interfaces? [ 1161.820968][T16780] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1161.848478][T16780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.968800][T16780] usb 1-1: config 0 descriptor?? [ 1162.193930][T16780] usb 1-1: string descriptor 0 read error: -71 [ 1162.215136][T16780] usb 1-1: USB disconnect, device number 32 [ 1162.484512][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1162.684821][ T9] usb 4-1: device descriptor read/64, error -71 [ 1162.776399][T20785] netlink: 324 bytes leftover after parsing attributes in process `syz.5.4120'. [ 1162.933827][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1163.075324][ T30] audit: type=1326 audit(1748044905.498:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.106709][ T9] usb 4-1: device descriptor read/64, error -71 [ 1163.140965][ T30] audit: type=1326 audit(1748044905.528:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.245050][ T30] audit: type=1326 audit(1748044905.528:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.255225][ T9] usb usb4-port1: attempt power cycle [ 1163.433226][ T30] audit: type=1326 audit(1748044905.528:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.523654][ T30] audit: type=1326 audit(1748044905.528:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.553311][ T30] audit: type=1326 audit(1748044905.528:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.582653][ T30] audit: type=1326 audit(1748044905.528:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.606853][ T30] audit: type=1326 audit(1748044905.538:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.732302][ T30] audit: type=1326 audit(1748044905.538:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.763394][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1163.779777][ T30] audit: type=1326 audit(1748044905.538:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c8ff8e969 code=0x7ffc0000 [ 1163.926894][T20800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1164.017646][ T9] usb 4-1: device descriptor read/8, error -71 [ 1164.423640][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1164.465933][ T9] usb 4-1: device descriptor read/8, error -71 [ 1164.593936][ T9] usb usb4-port1: unable to enumerate USB device [ 1164.969705][T20807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.771410][ T5888] usb 3-1: USB disconnect, device number 26 [ 1165.820719][T20815] netlink: 'syz.3.4129': attribute type 11 has an invalid length. [ 1166.170694][T20821] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4132'. [ 1166.616338][T20835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1166.704513][ T9] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1166.877841][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1166.922590][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.994696][ T9] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1166.994732][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.065371][ T9] usb 4-1: config 0 descriptor?? [ 1167.426810][T20847] netlink: 368 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1167.560563][T20847] geneve2: entered promiscuous mode [ 1167.561421][T20847] geneve2: entered allmulticast mode [ 1168.015681][ T31] INFO: task kworker/0:5:5890 blocked for more than 143 seconds. [ 1168.015716][ T31] Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 [ 1168.015731][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1168.015743][ T31] task:kworker/0:5 state:D stack:20776 pid:5890 tgid:5890 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1168.015833][ T31] Workqueue: usb_hub_wq hub_event [ 1168.015880][ T31] Call Trace: [ 1168.015890][ T31] [ 1168.015906][ T31] __schedule+0x16e2/0x4cd0 [ 1168.015982][ T31] ? schedule+0x165/0x360 [ 1168.016014][ T31] ? __pfx___schedule+0x10/0x10 [ 1168.016057][ T31] ? schedule+0x91/0x360 [ 1168.016114][ T31] schedule+0x165/0x360 [ 1168.016144][ T31] schedule_timeout+0x9a/0x270 [ 1168.016167][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1168.016206][ T31] ? wait_for_completion+0x267/0x5d0 [ 1168.016263][ T31] wait_for_completion+0x2bf/0x5d0 [ 1168.016305][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1168.016347][ T31] pn533_usb_send_frame+0x2d8/0x560 [ 1168.016424][ T31] ? __pfx_pn533_usb_send_frame+0x10/0x10 [ 1168.016462][ T31] ? pn533_std_tx_frame_finish+0x303/0x3b0 [ 1168.016498][ T31] __pn533_send_async+0x41c/0x5f0 [ 1168.016564][ T31] pn533_finalize_setup+0x231/0x760 [ 1168.016593][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.016622][ T31] ? __pfx_pn533_finalize_setup+0x10/0x10 [ 1168.016649][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1168.016705][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1168.016745][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1168.016776][ T31] ? pn53x_common_init+0x95b/0xa90 [ 1168.016809][ T31] pn533_usb_probe+0xe56/0x1150 [ 1168.016897][ T31] ? __pfx_pn533_usb_probe+0x10/0x10 [ 1168.016932][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1168.016958][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1168.017021][ T31] ? __update_runtime_status+0x1b3/0x390 [ 1168.017054][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1168.017091][ T31] usb_probe_interface+0x644/0xbc0 [ 1168.017128][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1168.017178][ T31] really_probe+0x26d/0x9a0 [ 1168.017218][ T31] __driver_probe_device+0x18c/0x2f0 [ 1168.017252][ T31] driver_probe_device+0x4f/0x430 [ 1168.017315][ T31] __device_attach_driver+0x2ce/0x530 [ 1168.017353][ T31] bus_for_each_drv+0x24e/0x2e0 [ 1168.017378][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1168.017409][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1168.017474][ T31] __device_attach+0x2b8/0x400 [ 1168.017507][ T31] ? __pfx___device_attach+0x10/0x10 [ 1168.017539][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1168.036370][ T31] bus_probe_device+0x185/0x260 [ 1168.036413][ T31] device_add+0x7b6/0xb50 [ 1168.036478][ T31] usb_set_configuration+0x1a87/0x20e0 [ 1168.036544][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1168.036580][ T31] usb_probe_device+0x1c1/0x390 [ 1168.036638][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1168.036660][ T31] really_probe+0x26d/0x9a0 [ 1168.036697][ T31] __driver_probe_device+0x18c/0x2f0 [ 1168.036732][ T31] driver_probe_device+0x4f/0x430 [ 1168.036797][ T31] __device_attach_driver+0x2ce/0x530 [ 1168.036834][ T31] bus_for_each_drv+0x24e/0x2e0 [ 1168.036873][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1168.036934][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1168.036971][ T31] __device_attach+0x2b8/0x400 [ 1168.037003][ T31] ? __pfx___device_attach+0x10/0x10 [ 1168.037038][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1168.037099][ T31] bus_probe_device+0x185/0x260 [ 1168.037127][ T31] device_add+0x7b6/0xb50 [ 1168.037160][ T31] usb_new_device+0xa39/0x16c0 [ 1168.037232][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1168.037265][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.037291][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.037322][ T31] hub_event+0x2941/0x4a00 [ 1168.037438][ T31] ? __pfx_hub_event+0x10/0x10 [ 1168.037471][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1168.037529][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.037554][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1168.037576][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1168.037600][ T31] process_scheduled_works+0xadb/0x17a0 [ 1168.037682][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1168.037738][ T31] worker_thread+0x8a0/0xda0 [ 1168.037830][ T31] kthread+0x70e/0x8a0 [ 1168.037872][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1168.037895][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.037953][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.037980][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.038005][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.038033][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.038086][ T31] ret_from_fork+0x4b/0x80 [ 1168.038111][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.038138][ T31] ret_from_fork_asm+0x1a/0x30 [ 1168.038178][ T31] [ 1168.038263][ T31] [ 1168.038263][ T31] Showing all locks held in the system: [ 1168.038275][ T31] 5 locks held by kworker/0:0/9: [ 1168.038290][ T31] #0: ffff8880212a6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1168.038381][ T31] #1: ffffc900000e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1168.038441][ T31] #2: ffff888027ba6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1168.038535][ T31] #3: ffff88805a737198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1168.038598][ T31] #4: ffff88806b09d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1168.038689][ T31] 3 locks held by kworker/u8:0/12: [ 1168.038707][ T31] 1 lock held by khungtaskd/31: [ 1168.038720][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1168.038791][ T31] 2 locks held by kworker/u8:3/53: [ 1168.038861][ T31] 2 locks held by getty/5587: [ 1168.038876][ T31] #0: ffff88802fc7f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1168.038937][ T31] #1: ffffc900030062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1168.039036][ T31] 6 locks held by kworker/0:5/5890: [ 1168.039050][ T31] #0: ffff8880212a6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1168.039135][ T31] #1: ffffc90004b2fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1168.039193][ T31] #2: ffff888145386198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1168.039287][ T31] #3: ffff88804616e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1168.039350][ T31] #4: ffff88806b0ab160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1168.039440][ T31] #5: ffff88806b0ae438 (&priv->cmd_lock){+.+.}-{4:4}, at: __pn533_send_async+0x25a/0x5f0 [ 1168.039507][ T31] 4 locks held by udevd/6272: [ 1168.039548][ T31] #0: ffff8880757130a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1168.039609][ T31] #1: ffff88802f4b0488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 1168.039705][ T31] #2: ffff8880327050f8 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 1168.039772][ T31] #3: ffff88804616e198 (&dev->mutex){....}-{4:4}, at: product_show+0x26/0xa0 [ 1168.039871][ T31] 3 locks held by kworker/u8:12/7332: [ 1168.039886][ T31] 2 locks held by kworker/u8:18/7344: [ 1168.039905][ T31] 2 locks held by kworker/u8:8/19476: [ 1168.039920][ T31] 2 locks held by syz.3.4136/20827: [ 1168.039934][ T31] 6 locks held by syz.0.4140/20843: [ 1168.039948][ T31] 3 locks held by syz.1.4141/20847: [ 1168.039961][ T31] #0: ffffffff8f7f75b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1168.040060][ T31] #1: ffffffff8f2fab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1168.040147][ T31] #2: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 1168.040208][ T31] 2 locks held by syz.2.4142/20852: [ 1168.040222][ T31] [ 1168.040230][ T31] ============================================= [ 1168.040230][ T31] [ 1168.040249][ T31] NMI backtrace for cpu 0 [ 1168.040267][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 1168.040292][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1168.040305][ T31] Call Trace: [ 1168.040313][ T31] [ 1168.040322][ T31] dump_stack_lvl+0x189/0x250 [ 1168.040351][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1168.040379][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.040408][ T31] ? __pfx__printk+0x10/0x10 [ 1168.040442][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1168.040467][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1168.040486][ T31] ? _printk+0xcf/0x120 [ 1168.040512][ T31] ? __pfx__printk+0x10/0x10 [ 1168.040534][ T31] ? debug_show_all_locks+0x2e/0x180 [ 1168.040563][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1168.040588][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1168.040613][ T31] watchdog+0xfee/0x1030 [ 1168.040642][ T31] ? watchdog+0x1de/0x1030 [ 1168.040677][ T31] kthread+0x70e/0x8a0 [ 1168.040705][ T31] ? __pfx_watchdog+0x10/0x10 [ 1168.040729][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.040756][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.040780][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.040802][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.040828][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.040858][ T31] ret_from_fork+0x4b/0x80 [ 1168.040878][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.040903][ T31] ret_from_fork_asm+0x1a/0x30 [ 1168.040938][ T31] [ 1168.040973][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1168.041004][ C1] NMI backtrace for cpu 1 [ 1168.041018][ C1] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 1168.041039][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1168.041051][ C1] Workqueue: bat_events batadv_nc_worker [ 1168.041072][ C1] RIP: 0010:batadv_nc_purge_paths+0x97/0x3b0 [ 1168.041097][ C1] Code: 48 89 4c 24 30 48 89 c1 48 c1 e9 03 48 89 4c 24 28 48 89 44 24 10 4c 89 74 24 40 4c 89 7c 24 38 48 8b 4c 24 30 42 80 3c 29 00 <74> 0d 4c 89 f7 e8 5f f6 fc f6 48 8b 44 24 10 48 8b 4c 24 18 4c 8d [ 1168.041114][ C1] RSP: 0000:ffffc90000bf7a28 EFLAGS: 00000246 [ 1168.041129][ C1] RAX: ffff88807d256a08 RBX: ffffffff8b24f9b0 RCX: 1ffff1100fa4ad40 [ 1168.041144][ C1] RDX: 0000000000000000 RSI: ffffffff8d74e2cc RDI: ffffffff8bc1f640 [ 1168.041156][ C1] RBP: 0000000000000000 R08: ffffffff8f7f3577 R09: 1ffffffff1efe6ae [ 1168.041169][ C1] R10: dffffc0000000000 R11: fffffbfff1efe6af R12: ffff888031f0fab0 [ 1168.041183][ C1] R13: dffffc0000000000 R14: ffff88807d256a00 R15: ffff88807d256a10 [ 1168.041197][ C1] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 1168.041211][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.041224][ C1] CR2: 0000200000292030 CR3: 0000000043d7a000 CR4: 00000000003526f0 [ 1168.041257][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1168.041268][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1168.041279][ C1] Call Trace: [ 1168.041286][ C1] [ 1168.041300][ C1] batadv_nc_worker+0x328/0x610 [ 1168.041320][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1168.041337][ C1] process_scheduled_works+0xadb/0x17a0 [ 1168.041368][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1168.041409][ C1] worker_thread+0x8a0/0xda0 [ 1168.041438][ C1] kthread+0x70e/0x8a0 [ 1168.041459][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1168.041476][ C1] ? __pfx_kthread+0x10/0x10 [ 1168.041496][ C1] ? __pfx_kthread+0x10/0x10 [ 1168.041517][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.041539][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.041560][ C1] ? __pfx_kthread+0x10/0x10 [ 1168.041578][ C1] ret_from_fork+0x4b/0x80 [ 1168.041595][ C1] ? __pfx_kthread+0x10/0x10 [ 1168.041620][ C1] ret_from_fork_asm+0x1a/0x30 [ 1168.041644][ C1] [ 1168.042004][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1168.042020][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 1168.042045][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1168.042060][ T31] Call Trace: [ 1168.042069][ T31] [ 1168.042079][ T31] dump_stack_lvl+0x99/0x250 [ 1168.042108][ T31] ? __asan_memcpy+0x40/0x70 [ 1168.042131][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.042160][ T31] ? __pfx__printk+0x10/0x10 [ 1168.042194][ T31] panic+0x2db/0x790 [ 1168.042220][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.042251][ T31] ? __pfx_panic+0x10/0x10 [ 1168.042277][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1168.042296][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1168.042329][ T31] ? irq_work_queue+0xc3/0x140 [ 1168.042364][ T31] watchdog+0x102d/0x1030 [ 1168.042391][ T31] ? watchdog+0x1de/0x1030 [ 1168.042423][ T31] kthread+0x70e/0x8a0 [ 1168.042449][ T31] ? __pfx_watchdog+0x10/0x10 [ 1168.042475][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.042501][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.042526][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.042549][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.042574][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.042597][ T31] ret_from_fork+0x4b/0x80 [ 1168.042619][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.042644][ T31] ret_from_fork_asm+0x1a/0x30 [ 1168.042679][ T31] [ 1168.043103][ T31] Kernel Offset: disabled