last executing test programs: 21m46.250364546s ago: executing program 1 (id=114): open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = io_uring_setup(0x1782, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x36, &(0x7f0000002600)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000002680)=""/188, 0xba) read$char_usb(r2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002740)='/sys/kernel/kexec_loaded', 0x901000, 0x25) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004800)=ANY=[], 0x50) select(0x40, &(0x7f0000004880)={0xf, 0x100000001, 0x7ff, 0xb, 0x4, 0x9, 0x40000000, 0x800006}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000048c0), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000004900)={'vxcan1\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000004940)='veth0:0\x00\x00\x00\x00\x00\x00\x00\x00\x00') r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_setup(0x3ff, &(0x7f0000000300)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xfffe, r7, 0x0}]) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000004bc0)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r9, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="e6", 0xfffd}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, 0x0) 21m44.873757711s ago: executing program 1 (id=119): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r4, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4040001) 21m44.758018493s ago: executing program 1 (id=121): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000300), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000340)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000380)=0x40, 0x4) recvmmsg(r0, &(0x7f00000003c0), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 21m44.11511482s ago: executing program 1 (id=124): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000ac0)="06c3", 0x2}, {&(0x7f0000000b00)="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", 0x615}, {&(0x7f0000001240)="4c7911315ed07e13be5391e38b475840b64c877cee504724dd2da16f11b6", 0x1e}], 0x3) 21m43.730318159s ago: executing program 1 (id=128): syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup\x00', 0x9801) move_mount(r0, &(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) chroot(&(0x7f00000005c0)='./file0\x00') umount2(&(0x7f0000000600)='./file0\x00', 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5421, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000640), 0x2, 0x0) connect$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10001) syz_usb_connect(0x5, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a020009050000000000faff0705d3"], 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x140) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x40a5) io_uring_enter(0xffffffffffffffff, 0x44de, 0x6d90, 0x8, 0x0, 0x0) statx(r5, &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000140)=@md0, r7, &(0x7f00000002c0)='./file0\x00') r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x5ba8, 0xfffffffffffffffd) keyctl$revoke(0x3, r8) sendmsg$NFT_BATCH(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000140b4d3c8fa9cc51ebf93c00050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000c0002400000000000000004140600000000010000000000020000000000000a"], 0x74}}, 0x8040) 21m42.622059335s ago: executing program 1 (id=135): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000480)=0x10) getpeername$packet(r0, 0x0, 0x0) 21m27.402683748s ago: executing program 32 (id=135): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000480)=0x10) getpeername$packet(r0, 0x0, 0x0) 22.614743288s ago: executing program 4 (id=6699): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x4, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0x0, 0x5, 0x8, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0xffffffff]}}) socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x15, 0x0, "989d7ce4b2b678b7e4aa15e117ef791431e1e50a5be89ff9923805e0db6c221ceb1ec214b0b2fdb7cb483a41332228ca6180c6bb46089fc156d8b09fdd69130ea21165abcac67cb66fc3ad58bdd6394f"}, 0xd8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff0000000039000000080003001d793a5c3c8f8385f0ca710f6c4021eacb8e068c8c0c7fe765219295dab26600f1679969b2e3fac3af574d6f78cfe13c6a52dcee7ba6570786a1ecdb7d9ae20193cd880f7ac5e618ab4f87ed4c2b847549eabd1630629b97fbb5da083bd4c9888b053205ce3b154e0fc694937d4eb96e4d4aadaccc58a076c21fef600fb6d62ff7b4b5c4d4191acc1442f96787ed5c59", @ANYRES32, @ANYBLOB="10005a800c0001800400020004000100"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2004b884}, 0x84) 20.740889919s ago: executing program 4 (id=6713): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x15, 0x0, "989d7ce4b2b678b7e4aa15e117ef791431e1e50a5be89ff9923805e0db6c221ceb1ec214b0b2fdb7cb483a41332228ca6180c6bb46089fc156d8b09fdd69130ea21165abcac67cb66fc3ad58bdd6394f"}, 0xd8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic="31f9e05e2f"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004b884}, 0x84) 18.818747623s ago: executing program 4 (id=6720): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0, 0xfdfd}) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000200000040cd0c80000001010203010902200001010080000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000108000000ebaa55"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000002c0)={0x28, 0x7, 0x0, r2, 0xa0, 0x6fff, 0x3ffe}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000880)={r4, 0x300000000000, 0x0, 0x8}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000900)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f00000008c0)}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="aaaaaaaaaaaa94c681000000080049b40038f204000000000000ac1414bbac1414aa070f09e00000027f00000100000000004e2240016f3079e22728be124376e5f6e869b7808d73f0f3632b857ae8f3d63876a946a85604202e7f5054b1e0e9909936a3d9285f52728d851ea906c4fccf02138b99f0f1a7af57793fac17a3332ce2e68c317f07c028d0dbda078fd7da3becb6dd93463dd882f5f1c8786b2829002513da670f5b9d1cf9e71067adad11586bb883edad8098182c381ef5934011a7b592b506a58ee68c63bd3224c2ecd49c259ee9d7", @ANYRES32=r0, @ANYRES8=r8, @ANYBLOB="e4ab20f75faf9963f85d68361cf3d517b5ba", @ANYRES8=0x0], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x10) write$apparmor_current(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x20004884) 15.646519148s ago: executing program 4 (id=6740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') pread64(r1, &(0x7f0000008e00)=""/102400, 0x19000, 0x80000000000000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000021e00)={&(0x7f0000021e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000021e80)={&(0x7f0000021ec0)={0x24, 0x0, 0x27d24e37c6fca91e, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x8050) sendmsg$nl_route(r0, &(0x7f0000021f00)={0x0, 0x0, &(0x7f0000021f40)={&(0x7f0000021f80)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fcdbdf250a808000a6"], 0x1c}}, 0x20000050) accept4(r0, &(0x7f0000021fc0)=@x25, &(0x7f0000022040)=0x80, 0x180800) syz_usb_connect(0x0, 0x62, &(0x7f0000022080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000022100)={0x0, 0x0, &(0x7f0000022140)={&(0x7f0000022180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000221c0)={0x0, 0x0, &(0x7f0000022200)={&(0x7f0000022240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0xa, 0x3, 0xff) r4 = syz_open_dev$evdev(&(0x7f0000022340), 0xfffb, 0x802) readv(r4, &(0x7f0000022380)=[{&(0x7f00000223c0)=""/230, 0xe6}], 0x1) socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f00000228c0)={&(0x7f0000022900)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c, &(0x7f0000022940)=[{&(0x7f0000022980)="671723d7c60133", 0x7}, {&(0x7f00000229c0)="9e91d91a92dc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f0000022a00)="dcdd61e53a41", 0x6}], 0x3}, 0x20008b88) 12.585135423s ago: executing program 2 (id=6756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') pread64(r1, &(0x7f0000008e00)=""/102400, 0x19000, 0x80000000000000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000021e00)={&(0x7f0000021e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000021e80)={&(0x7f0000021ec0)={0x24, 0x0, 0x27d24e37c6fca91e, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x8050) sendmsg$nl_route(r0, &(0x7f0000021f00)={0x0, 0x0, &(0x7f0000021f40)={&(0x7f0000021f80)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fcdbdf250a808000a6"], 0x1c}}, 0x20000050) accept4(r0, &(0x7f0000021fc0)=@x25, &(0x7f0000022040)=0x80, 0x180800) syz_usb_connect(0x0, 0x62, &(0x7f0000022080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000022100)={0x0, 0x0, &(0x7f0000022140)={&(0x7f0000022180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0xa, 0x3, 0xff) r4 = syz_open_dev$evdev(&(0x7f0000022340), 0xfffb, 0x802) readv(r4, &(0x7f0000022380)=[{&(0x7f00000223c0)=""/230, 0xe6}], 0x1) socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f00000228c0)={&(0x7f0000022900)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c, &(0x7f0000022940)=[{&(0x7f0000022980)="671723d7c60133", 0x7}, {&(0x7f00000229c0)="9e91d91a92dc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f0000022a00)="dcdd61e53a41", 0x6}], 0x3}, 0x20008b88) 12.538554896s ago: executing program 4 (id=6757): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts={{0x100, 0x29, 0x37, {0x33, 0x1c, '\x00', [@ra={0x5, 0x2, 0x80}, @generic={0x80, 0xdc, "0adfe16462bf404493a13904253f912ed92f17b1d6460f3275cf516507489338ead846dba6bd083e1c05d3ad46e155266dcb18a11bf5d4baf9d05465d1b8881d416042ec1b7e0443a873516fdfda6cdb3d1c38017821aeb5e89863563785fc3340fa7ce642392bb199132eba60b5a6b6defbdcd94ddb31df107edc6e7209072898da400b473083816a88b00adf56a8b095edc13e4b442858566791f53efd25042be7b7942dadc7bb03ac412b3268d0a3ebc9c54b3e8086f413c5d7417435b4986b7dbcecf7e04664c5472efee6f36521f868854c3db09586758f1091"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x2, 0x1}}}], 0x118}, 0x10) 12.426936563s ago: executing program 4 (id=6759): r0 = getpgrp(0x0) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x0, 0x7, 0x6, 0xe84, 0x6, 0x4f4}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141101) (rerun: 32) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x120b41) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)='#', 0x1}], 0x1) (async) r3 = dup(r1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x38}}, 0x0) (async) fcntl$setstatus(r3, 0x4, 0x4000) (async) write$6lowpan_enable(r3, &(0x7f0000000240)='0', 0xfffffd2c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x7, 0xffa, &(0x7f0000001b00)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffffd}, 0x94) 9.018199685s ago: executing program 2 (id=6768): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000340)}, 0x400000}) madvise(&(0x7f0000abd000/0x3000)=nil, 0x3000, 0xf) r2 = syz_clone(0x15000800, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x18, 0x80000, 0x0, &(0x7f0000000000)) ptrace$cont(0x1f, r2, 0xf658, 0xf) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000fc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000001080)=@abs={0x0, 0x0, 0x804e20}, 0x6e) recvmmsg(r3, &(0x7f0000000080), 0x0, 0x40000022, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f00000011c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000001200)={r7, r4}) sendmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="1a", 0x100000}], 0x1}, 0x0) close(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x805) 8.719414573s ago: executing program 0 (id=6769): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts={{0x100, 0x29, 0x37, {0x33, 0x1c, '\x00', [@ra={0x5, 0x2, 0x80}, @generic={0x80, 0xdc, "0adfe16462bf404493a13904253f912ed92f17b1d6460f3275cf516507489338ead846dba6bd083e1c05d3ad46e155266dcb18a11bf5d4baf9d05465d1b8881d416042ec1b7e0443a873516fdfda6cdb3d1c38017821aeb5e89863563785fc3340fa7ce642392bb199132eba60b5a6b6defbdcd94ddb31df107edc6e7209072898da400b473083816a88b00adf56a8b095edc13e4b442858566791f53efd25042be7b7942dadc7bb03ac412b3268d0a3ebc9c54b3e8086f413c5d7417435b4986b7dbcecf7e04664c5472efee6f36521f868854c3db09586758f1091"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x2, 0x1}}}], 0x118}, 0x10) 8.467194538s ago: executing program 0 (id=6770): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000200)={0x0, 0xa584, 0x100, 0xfffffffe, 0x1e8}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000840)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0xeeee0000, 0x65, &(0x7f0000000080)=""/101}, {0x30000, 0x6b, &(0x7f0000000180)=""/107}, {0x41000, 0xf9, &(0x7f0000000680)=""/249}, {0x0, 0x8e, &(0x7f00000003c0)=""/142}, {0xdddd0000, 0xb0, &(0x7f0000000480)=""/176}, {0x54000, 0x20, &(0x7f0000000040)=""/32}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000100)=0x1) 8.367820466s ago: executing program 0 (id=6771): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/88, 0x58) syslog(0x4, &(0x7f0000000e40)=""/170, 0xaa) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000f00)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r3, 0x26, &(0x7f0000000f40)={0x1, 0x1, 0x7, 0x5}) write(0xffffffffffffffff, &(0x7f0000000f80)='.', 0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000001000)={0x1, 0x2, 0x8, 0x73e9}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2008080}, 0x24008805) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_usb_connect$uac2(0x4, 0xa2, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x10, 0x50, 0xf7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x8, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe982, 0xff, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfffa, 0x7f, 0x7, "506d9ecd24bb"}, @as_header={0x10, 0x24, 0x1, 0x3f, 0x4, 0x2, 0x1, 0x4, 0x2, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x5, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x9, 0x4, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf1, 0xf}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x447}}, {0x36, &(0x7f0000000800)=ANY=[@ANYRESHEX=r1]}, {0x3, &(0x7f0000000840)=@string={0x3, 0x3, "cf"}}, {0x0, 0x0}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x411}}, {0xea, &(0x7f0000000900)=@string={0xea, 0x3, "2670437016feed2068959e5b046aed9745e159277ea676c267181ea6a178ab799d299ac2cc802b016c60f93fdfdcf1c38733f666805d52e8bb339690caf2ddb3dcb20846c80ba6e08a213e629146b3323fe93de5b5c4ad1efe322a60056cfc789932f19a25b403a82c7dd52fd00af44a75c19671c5ae7df20b2295fb90014eb36cb5c4fd093e012c2c6401d67a1656f7fcf5ff37960e7865014642f4acf5eb0d92b3c1099528d671dc980d3658e24f0588c5c302b7916f0eee72edeb0e9f7345af88549a31d6aee02676d2910d590ee32758353232c729ec6db7231625890b3333f8ac4c1613cac6"}}]}) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB="03e02824e65bf824fea000d8bf3ff2c470"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) syz_usb_control_io$printer(r0, 0x0, 0x0) 7.98994555s ago: executing program 5 (id=6773): clock_nanosleep(0x0, 0x1, &(0x7f0000000000), 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000140), 0x80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="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", 0xfc, r0}, 0x68) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x80080, 0x0) recvmsg$unix(r1, &(0x7f0000001580)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/24, 0x18}, {&(0x7f0000001400)=""/220, 0xdc}], 0x5}, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000015c0)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000001640)="bdc4d43a031151ca5fdf630449f9c1e64a9666ddfff39cdd994c3055be1088d31c3e89f0d3b6a55c9b8ec2b20af5a5c071ee38f14e94a4669a7d3b6ba76b036c6013e8f72ce8935e3eb8d95f890be4611b04ffb05aa1c7a717e0252f9fbfafae95546611fd59749ed1955fd5053f30f4dcb2b4958b55c5e173707a9d3d5c73328f6f3dcd5414222861b67b6ad0b81aabd64cce403a678efc713d80824d", 0x9d) landlock_restrict_self(r2, 0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001700)={{0x0, 0x0, 0xfb, 0x3ff, 0x8, 0x101, 0x10001, 0x8001, 0x1, 0x3, 0x200, 0xfffffffffffffff7, 0x7, 0x101, 0x3}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001780)={{r3, 0x4, 0xfff, 0x1, 0x3, 0x4e8, 0x1000, 0x3, 0xffffffe3, 0x7, 0x38, 0x5, 0x7, 0xfffffffffffffffb, 0x80000001}}) syz_usb_connect(0x1, 0x4cb, &(0x7f0000002780)={{0x12, 0x1, 0x201, 0x2d, 0x7a, 0x13, 0x8, 0xdb7, 0x2, 0xdc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b9, 0x1, 0xc7, 0x9, 0x10, 0x7f, "", [{{0x9, 0x4, 0x68, 0x3, 0xb, 0x88, 0x7c, 0xf8, 0xf7, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "21091de3ac"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x9, 0x3}, [@acm={0x4}]}, @hid_hid={0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x267}}], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x0, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xded2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0xc, 0x8, 0x15, [@generic={0x75, 0xb, "70f633377ed5b94b1f0957cfefc7f3e23f9191159199369747912965b1dc6515a785a9bc4f4235d9ef9c90c410953aebfcfd0ea892e1e3552cb1cc447938a763ed9b4959ac1d1f978afad85e09fcad6a58c1f27c37b3638bbbc41eed6a6435caf5e1ff7fd32e939bc3b27e2b76069a431d436f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0xb, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x5, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0x0, 0x49, [@generic={0xf9, 0xf, "04b759dd9ec581f764a910d4992950b2e399c3a5fd479267fdea51d07af99512c288ac2beb2b6a4443ee8d9cef7ea94bac8dfdee898c6787cd3bebf8851bd79cfe0e63d8340c601ea11b8efc505f7cf6d5dd6c2ab44a65ef9f78ca5b694e6540e9b44a1f448a114565a389476632b8e59a0f931eedd9daeb5871f5fc3b28ece485e9e414bcdb8bda89ae9be49eddc781156a537c02ab792f30b9280d63716d226eb8b12717345137a75ca1ba065fb07d1224bed7064b1779d1815f8994d0d27da58a71b69f25d785203a26d80b9ea51d7c362e99c07569f9604ef4ed4dec02b7431e507df165aa65e1890eda954e923d0e488404c58cbe"}, @generic={0x46, 0x10, "ff753c0bcfb5449b84dd2556674028d35780b1069d326b8893635534c68043ec5b8bb6f92668d21b707d5c313cc1f770472620c16c56727ec863f5b3304ce15688bdcb14"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x1, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x0, 0xbb, [@generic={0x8d, 0xf, "7ae4a026189aef15dd65faae090de2459bb6097b64a543ab58d1ea7ae5299737239f018be34e8443ac254ec2bbbc5e072b28c833daaba94420fcf0f5181d7fe76434ad67ae38aaaee4e6cbce21ef8fcaec5bad7cfb0180177e67929911545c19bcd9dc30eb70890de6a1ed5e9fee407225eb98ed155d74f0bc8019d58d72771399b7291d96f2515eb0d1ee"}]}}, {{0x9, 0x5, 0x80, 0x14, 0x400, 0x3, 0x9e, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x80, 0x3, 0x0, 0x8, 0x5, 0x57, [@generic={0x2, 0x10}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x4, 0x9, 0x10, [@generic={0xfd, 0xf, "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"}, @generic={0xaa, 0x2, "05bf219df960e0a146c8871d45d426abe8754a0bfe357dbbae693f567c4e1ef55d40336b767e5a3df61a98f1f3e7d9c7895d08619be288f0dc7c45c26e770baa0f3a03577dac8f91b7b347ab89edca0a9bbe0bc1d5f5acaf0c5fe69cf69fc3596f8f3fd94c18e613d7f8684320727bd7daab8aa955ef7536a828792d6c7a02bc7935272c2bbc335177ebe6e0e437f9377f55f702ecbf0f60137cc93d3794fb88ba41318acce6cc0e"}]}}]}}]}}]}}, &(0x7f0000002f40)={0xa, &(0x7f0000002c80)={0xa, 0x6, 0x110, 0x6, 0x81, 0x97, 0x40, 0x3}, 0x76, &(0x7f0000002cc0)={0x5, 0xf, 0x76, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x87, 0x0, 0x88}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "024605e5b950332dcfdb4c70cc85080b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x1, 0x5, 0x5}, @generic={0x1e, 0x10, 0x2, "831830699d930477566cdaf110c8f576574bbbdf83f9f31466f215"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x6, 0x7700, 0x5, [0xff003f, 0x30, 0x0, 0xc0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0xea, 0xa00}]}, 0x3, [{0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0x1c2d}}, {0x9b, &(0x7f0000002d80)=@string={0x9b, 0x3, "4fad13dc7def03b34d44e586471f42b206106151fe0bbb4000a93aed2bb244f1ac9b4e4a0d9cf6556adc2965a2695fbf2feb1468cc26a1f5bfe8592af6b48288591447aaf5ce7dcda504f64c3364caf0cbd93d1f732e93b44e4b0acd6e1385e43597859e49c11e05fd4b563c2ab494760fc048e392f45a77acc9bc38a181d6d4d83c4a23858ad6c4393a53889c45106388df3bb36b4e1d84ce"}}, {0xe3, &(0x7f0000002e40)=@string={0xe3, 0x3, "754aa81183c8ddc28d8d2d60562fe86169014d328585c75f036b915bee8aa26773cff73c5146a7ea90684d43c86427e3d5f83dc92359904765306cd1ee06ba5790ddb189e287df88eec50ef9858330c25348ac42f12af95e3da3732b58491250222a0cf3fa65f386f6ab440b26c5e37c1de4e6bc281598f7242be0780119d8bf0b2992eb475b887d60b242ec694a4e3f2e0e2ee32f4ad3c8de27df37c3f6743296dad2b7670dd0a801cef8cd4a48bb832299e7ff5baeaacab4c03c39dc56d1ceba7e038f9e14e0a13896fc5b4aa57cd0ef3b6fa298c54adf2c3452e4297e7d84d8"}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000002fc0)=""/18, &(0x7f0000003000)=0x12) (async) recvfrom$l2tp(r2, &(0x7f0000003040)=""/161, 0xa1, 0x2000, &(0x7f0000003100)={0x2, 0x0, @initdev}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000003140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) (async) pwrite64(r0, &(0x7f0000003180)="fd6db8f378edb3783448b27de25c8c53bbbc9f22aa4fe6c1263883f1b80a7f1313f3ed32832212a38fc9a248566b9379d35b9853729e9120412d1d96f7789034a16040c50c776d57a1a0f66dc50b1d50bf358b43ca8442196d1f3eb04e7a5f95841ef73662bd6742353c1f35fb6962bbd31358f144b605477a1d3c273c7147fadbd89dae7e020522c023751381c18f64e09c209ce1393f36487557c0c19cd7beeda662403596117c49cbe7dd4307e9a8f895385f0bfeda8fcb4272012fc0a46cb65fe87c9fa1a7418f79ed560207156479884b57a8b34371310fc6f86b", 0xdd, 0x2) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000003280)={0xbc, 0x0, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x28, 0x4, 0x8, 0x801, 0x0, 0x0, {0x459f968ad235ead4, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) (async) sendto$l2tp(r1, &(0x7f0000003400)="bbbfe15a846910f28f3442b48e32a7a6f578495c5d5cf7864a769500d89ebe7909d97ec79d9de192", 0x28, 0x4000, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000003440)={0x0, 0x0, "9a4f9d88c22c0c5d99590c232d6f1074"}) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000003480)={0x2, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x2}, &(0x7f0000003540)=0x90) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000003580)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000035c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000003680)={&(0x7f0000003600)=[r8, r9], &(0x7f0000003640)=[0x4, 0x2, 0x9, 0x5, 0x7], 0x2}) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000036c0)='team0\x00', 0x10) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000003880)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xe0, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x25, 0x3, "46261f94a9f07da410dad9e2d7c950bc77c069c9f09aa4ff208f9a9c780ecf43ad"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "90e3adf3812fb9b8190ced2ea903592af490d19c58cfd05139dc3a47b51ca73207a98c5b"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3d92c8bf4703002e85042500f7d1fdcf57031092"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x400c004}, 0x800) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003900), r6) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000003c40)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003940)={0x2b4, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8f1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x43c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdca}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4779}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcd08}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff7ae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x7c7bd53b046fe884}, 0x91) 7.109951795s ago: executing program 2 (id=6774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xaf) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_connect(0x0, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b80f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f00000046c0)={0x1, [{0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0xfffffffc, 0x0}, {0x1, 0x10, 0xbda, &(0x7f0000002000)="4e84"}, {0xb87392a8c0a4475f, 0x0, 0x6, 0x0}, {0x2, 0x0, 0xfffffff7, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x2629538a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa5000000, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xfffffffc, 0x0}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0d00000001000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="525224b1e1a5ba780a40bf43d871d76be6a21262272af25c30491282a2924c4caffe140616543d36e8f006bc28e79829d5d0bfe6718983c61a8cfb0dfa76a18f0153bdf3e4808e57010ea52a034023044d95d7609279d0159dbb855861a7151c5e26334c280937f227004e2bc8282d1d395e949d3cbc273a", @ANYRES64=0x0], 0x20) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c041}, 0x80c0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.396769167s ago: executing program 0 (id=6776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0x4}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}}, 0x4000010) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x489, 0x0, 0x100000005}]}) r3 = socket(0x10, 0x803, 0x0) ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f00000001c0)={0x45, 0x80, 0x99, 0x4, 0xc4e580b04c7deace, 0x9}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r4, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0xfc0, &(0x7f0000000c80)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf8a, 0x0, 0xff, @private2, @local, {[@routing={0x84}, @dstopts={0x3c, 0x1ee, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x5, 0xf6b, "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"}]}], "22e7"}}}}}, 0x0) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x46, 0xa, 0x2feb) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c40)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') io_submit(0x0, 0xfffffffffffffead, 0x0) io_setup(0xc, &(0x7f0000000040)) 5.290870865s ago: executing program 2 (id=6777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b80)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f00000005c0)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000600)=[{0x3e39, 0x0, 0x0}, {0x200, 0x0, 0x0}, {0x1, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x389, 0x0, 0x0}, {0x8001, 0x0, 0x0}, {0x1, 0x0, &(0x7f00000006c0)=[{0x0}]}, {0x7304, 0x0, 0x0}, {0x2, 0x0, 0x0}], 0x9) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000700)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffff, 0x200, 0x1006, 0x15a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000a00)={0x2e, 0x51, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x8003, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ptrace(0x10, r5) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x1, 0x5004) r13 = fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) file_setattr(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8090, 0x4, 0x5, 0x7, 0x6}, 0x18, 0x400) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) fsconfig$FSCONFIG_SET_FLAG(r13, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r13, 0x7, 0x0, 0x0, 0x0) 5.28848261s ago: executing program 3 (id=6778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020605060000000000000000020000ce2841b55d57048b71f651c6cc2c94d9000900020073797a7000000000110003004d6173683a69702c6d61726b0000000005000400030000000580050002000000822b38dbb6753ea69317f4f151feae1a362a7f99246e16c21eb192fb07c1b830cfa6ff409fcf58a85dee71d1afa50117db3d1393da955d2bd240fc4bb194a5f221e2230626007b135481baecec6c9335af0a13fe64fd47701655c6041d5c9116f954079f8574ea02331dcc9f1791eeb3dd1bd83aa1e64241118318930282f355045671ff55afa0ad37859fc0826db1168793bc5488cfa3eb5f559237f4472691bbfeef9c"], 0x44}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2040) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002640), 0x2) r3 = memfd_create(&(0x7f0000002680)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r3, 0x2000000) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x8, 0x10, 0xffffffffffffffff, 0x0) fcntl$addseals(r3, 0x409, 0x7) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000002780)={r3, 0x1f, 0x0, 0x1000000}) syz_usb_control_io(r1, 0x0, &(0x7f00000027c0)={0x84, &(0x7f0000002880)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000028c0)=@assoc_value={0x0}, &(0x7f0000002900)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002940)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r4}, 0x20) syz_usb_control_io(r1, 0x0, &(0x7f0000002980)={0x84, &(0x7f0000002a40)=ANY=[@ANYBLOB="20110300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000a06050600000000000000000200000005000100070000000900020073797a3000000000240007800c00018008000140ac1414bb0c000280080001400000800008000a"], 0x4c}}, 0x0) 4.674455952s ago: executing program 5 (id=6779): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts={{0x100, 0x29, 0x37, {0x33, 0x1c, '\x00', [@ra={0x5, 0x2, 0x80}, @generic={0x80, 0xdc, "0adfe16462bf404493a13904253f912ed92f17b1d6460f3275cf516507489338ead846dba6bd083e1c05d3ad46e155266dcb18a11bf5d4baf9d05465d1b8881d416042ec1b7e0443a873516fdfda6cdb3d1c38017821aeb5e89863563785fc3340fa7ce642392bb199132eba60b5a6b6defbdcd94ddb31df107edc6e7209072898da400b473083816a88b00adf56a8b095edc13e4b442858566791f53efd25042be7b7942dadc7bb03ac412b3268d0a3ebc9c54b3e8086f413c5d7417435b4986b7dbcecf7e04664c5472efee6f36521f868854c3db09586758f1091"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x2, 0x1}}}], 0x118}, 0x10) 4.397304505s ago: executing program 5 (id=6780): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x1f, &(0x7f0000000200)={0x0, 0xa584, 0x100, 0xfffffffe, 0x1e8}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0xeeee0000, 0x65, &(0x7f0000000080)=""/101}, {0x30000, 0x6b, &(0x7f0000000180)=""/107}, {0x41000, 0xf9, &(0x7f0000000680)=""/249}, {0x0, 0x8e, &(0x7f00000003c0)=""/142}, {0xdddd0000, 0xb0, &(0x7f0000000480)=""/176}, {0x54000, 0x20, &(0x7f0000000040)=""/32}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000100)=0x1) 4.267594486s ago: executing program 5 (id=6781): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x4, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0x0, 0x5, 0x8, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0xffffffff]}}) socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x15, 0x0, "989d7ce4b2b678b7e4aa15e117ef791431e1e50a5be89ff9923805e0db6c221ceb1ec214b0b2fdb7cb483a41332228ca6180c6bb46089fc156d8b09fdd69130ea21165abcac67cb66fc3ad58bdd6394f"}, 0xd8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff0000000039000000080003001d793a5c3c8f8385f0ca710f6c4021eacb8e068c8c0c7fe765219295dab26600f1679969b2e3fac3af574d6f78cfe13c6a52dcee7ba6570786a1ecdb7d9ae20193cd880f7ac5e618ab4f87ed4c2b847549eabd1630629b97fbb5da083bd4c9888b053205ce3b154e0fc694937d4eb96e4d4aadaccc58a076c21fef600fb6d62ff7b4b5c4d4191acc1442f96787ed5c59", @ANYRES32, @ANYBLOB="10005a800c0001800400020004000100"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x11, 0x0, 0x1, [@generic]}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004b884}, 0x84) 3.740160483s ago: executing program 2 (id=6782): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r1 = io_uring_setup(0xc56, 0x0) io_uring_setup(0x781d, &(0x7f00000001c0)={0x0, 0x402a, 0x80a0, 0x1, 0x1f, 0x0, r1}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0xc000, 0x1000007, 0x12, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwritev(r5, &(0x7f0000000440)=[{&(0x7f00000003c0)='/', 0x1}], 0x1, 0x7, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}, @generic={0xb7}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0xe, &(0x7f00000003c0)='\x00'/14, &(0x7f0000000400)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@wr_drn={0x68, 0x20, {0x1, 0xffffffffffffffff}}], 0x20}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x65a681, 0x0) ioctl$SW_SYNC_IOC_INC(r8, 0xc0105702, &(0x7f00000000c0)) r9 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x40) ioctl$EVIOCSKEYCODE_V2(r10, 0x40284504, &(0x7f0000000000)={0xfe, 0x1f, 0x0, 0xc0, "d57ba4b0cef17e817d96b58200bd40ed0000240ec7dc1d0000000000004f24b3"}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r3) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000000040)="db5687740b7696dabbcee56565001982380f54dca60a1464146eeca5baf06137d3846e4fef48c5f3366c5653333a5d51ed3e230daf8a324f60775b45fc46c8130a72a381176b72074441ac6d2c4cdb234c7a0c23985a6ec0789082d8ddeef998d9a8e1b98ce9f451304307d1221ffaf8dc86c057d614ff3f892ec2f4883c618030fe2a3e53a8c661884bce96295797f2209f571b705b47ec9d0cdac465e5c82526bc706368396ce830d5a17f139ad2a9d93fcd35feec0798d2a5b0c7be188a99ce64bed542ce2ec39209f7df41712b3edc82c0002630fb46a1e255fcf7c45fb7b70b76fbcb4096b43e1546") 3.331035532s ago: executing program 0 (id=6783): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x75c740, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x98000, 0x0) write$ppp(r1, &(0x7f00000000c0)="4a28e1977b1c456d2fce43e1da62ef465dc8a768f8c2eaf5912761ff4817e89c561aa33b20fe92f5d7092230a6914f6dd52404f0c0102e94e672f86b9ee996b3ead0377a7806042b206df6e5d1d16c84f60f793c503dfde13bbc95119e456bd41938372304f56427416a13b74b30eaa5413ece7f7e5b1fbe35e52efe074107651df592dfaf4633e0b5c12c60f2dbdb87e9188f454c5d5ca306c6bcdb1aaef0bcd388a6c0e26b8b5dbf5e1f836f6f5cd904d78a3ed91091a5f74d371b499dd608d3b441f5b184ffec8216475f87c0e3360c37a1acb01ae4d062d50b358bfd0b8626d914af5e5abaa8c5d92f5722e916a6399ff4e894", 0xf5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) write$ppp(r0, 0x0, 0x0) 3.287725919s ago: executing program 3 (id=6784): rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8) r0 = openat$kvm(0x0, &(0x7f0000002ac0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x104, 0x104}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000002b00)={0x1, 0x0, [{0x586, 0x0, 0x1a7}]}) 3.089489028s ago: executing program 2 (id=6785): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) r1 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000007c0)={r0, &(0x7f00000005c0)='-}]\x00', 0x2, &(0x7f0000000700)={@align=0x3, {0x3, 0x1, 0x3198, 0x9}}, 0x6, &(0x7f0000000740), &(0x7f0000000780)=0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10810c00}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x66}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "9d52c8d9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1805419915cdc13f18a110a645"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000003c0)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='file0\x00', 0x0, 0x0) read(r5, &(0x7f00000005c0), 0x12) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000600), 0x4) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f0000000280)={0x14, &(0x7f0000000640)={0x40, 0xe, 0xb9, {0xb9, 0x18, "3eac9ed235f47b65cc1c966dc3b539e345767b96f73622f750050b69077ccae6431c2689ab73815c3789b9afa91973236bedb501b80a13bd6797a1b723f9fa47d00ebb4c59b8b161b1ee33759ff915979f2b38fbfc3eca4caf50ac72440a7385eebdcac5dee8c4bbb8de4ff50426f0501469d9b555a2e2242ca0d7489b7893c22495ad3f0ba997bc60bdc7fddb9c760d0816e4f28985d42cc60b70f7b700000000000000000000000000000000c766b9ffad90c0792738"}}, &(0x7f00000001c0)={0x0, 0x3, 0x83, @string={0x83, 0x3, "ee8f6f9d5200c3420a600943e0a6791b9661d037eb0ff49d440e8328e28493d57be544288c4ba3cee160b91142789516e7030a5b787a48dc076258a7ad06357bf32866ecef147c78fb3f244b62aefb160db5db1f6fb18d5ef6fd429a1b92619338ce4693acf1f08218e9ac2665ab337cd414c30ffe561f1876202e3bca49b60c14"}}}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x40, 0x12, 0xd2, "983a112c3dc7eee09106e2f53addd7c84b14359a8b467e0f98936de16350e41250ff2a1242fa09dbb94d72d7996a0e6bdb6fb8fe32880b625075c7143893eb0d3c46cef2e373ddf3883824eb3ca88ef8bee4bff4dcc457750e250453b8306e80d3e981a14ffa036c6c11746cb0a36506bd45c2ea637204ebcb98270043caad9b4521d6f14a7de06358d534e3a6146d592c693c65cd3bfa179c6f56ee4af25c20c0ca8da5141cfadfef8c7a86979289f712b2a4c096892b8ed0ea07625cda072e940b9a285091892da2514a94cff1ad753a7b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x697c}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "ccd50ae8567e084d4bc30375bd25cd38c1b12d460ae8916a47c7249c17b374c03009579517aebcaa202b265620b916"}}) 3.089054705s ago: executing program 0 (id=6786): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/88, 0x58) syslog(0x4, &(0x7f0000000e40)=""/170, 0xaa) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x8}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000f00)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x26, &(0x7f0000000f40)={0x1, 0x1, 0x7, 0x5}) write(0xffffffffffffffff, &(0x7f0000000f80)='.', 0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000001000)={0x1, 0x2, 0x8, 0x73e9}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2008080}, 0x24008805) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_usb_connect$uac2(0x4, 0xa2, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x10, 0x50, 0xf7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x8, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe982, 0xff, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfffa, 0x7f, 0x7, "506d9ecd24bb"}, @as_header={0x10, 0x24, 0x1, 0x3f, 0x4, 0x2, 0x1, 0x4, 0x2, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x5, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x9, 0x4, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf1, 0xf}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x447}}, {0x36, &(0x7f0000000800)=ANY=[@ANYRESHEX=r1]}, {0x3, &(0x7f0000000840)=@string={0x3, 0x3, "cf"}}, {0x0, 0x0}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x411}}, {0xea, &(0x7f0000000900)=@string={0xea, 0x3, "2670437016feed2068959e5b046aed9745e159277ea676c267181ea6a178ab799d299ac2cc802b016c60f93fdfdcf1c38733f666805d52e8bb339690caf2ddb3dcb20846c80ba6e08a213e629146b3323fe93de5b5c4ad1efe322a60056cfc789932f19a25b403a82c7dd52fd00af44a75c19671c5ae7df20b2295fb90014eb36cb5c4fd093e012c2c6401d67a1656f7fcf5ff37960e7865014642f4acf5eb0d92b3c1099528d671dc980d3658e24f0588c5c302b7916f0eee72edeb0e9f7345af88549a31d6aee02676d2910d590ee32758353232c729ec6db7231625890b3333f8ac4c1613cac6"}}]}) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB="03e02824e65bf824fea000d8bf3ff2c470"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.498599378s ago: executing program 5 (id=6787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xaf) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_connect(0x0, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b80f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f00000046c0)={0x1, [{0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0xfffffffc, 0x0}, {0x1, 0x10, 0xbda, &(0x7f0000002000)="4e84"}, {0xb87392a8c0a4475f, 0x0, 0x6, 0x0}, {0x2, 0x0, 0xfffffff7, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x2629538a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa5000000, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xfffffffc, 0x0}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0d00000001000000", @ANYRES32, @ANYBLOB, @ANYBLOB="525224b1e1a5ba780a40bf43d871d76be6a21262272af25c30491282a2924c4caffe140616543d36e8f006bc28e79829d5d0bfe6718983c61a8cfb0dfa76a18f0153bdf3e4808e57010ea52a034023044d95d7609279d0159dbb855861a7151c5e26334c280937f227004e2bc8282d1d395e949d3cbc273a73", @ANYRES64=0x0], 0x20) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c041}, 0x80c0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.498381942s ago: executing program 3 (id=6788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = timerfd_create(0x7, 0x80000) unshare(0x22020600) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000080)) write$tun(r0, &(0x7f0000000240)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.900576396s ago: executing program 3 (id=6789): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x1, 0x0, [@local]}}}], 0x28}, 0x10) 1.743459927s ago: executing program 3 (id=6790): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40c0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524"], 0x0) r0 = syz_open_procfs(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={r0, 0x0, 0x0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c1}, 0x20000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044804) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000880), 0xf504, r2}, 0x38) (fail_nth: 2) sysfs$1(0x1, &(0x7f0000000480)='/dev/fuse\x00') bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r2}, 0x38) 345.60953ms ago: executing program 3 (id=6791): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xffffffff, @mcast1}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x40, 0x9, 0xd8, {0xd8, 0x31, "30302b95bd8daa45ebdd60d96c7d7e8b2357de9761ba483159f948b054518f6d0fe6e3dbbb249575750eebbbd2d54b2e1f2e18a47438348a7147b91f1492448d0985614a6aef05a75319679838ded834edf8e9aaa21406be2f6b55fb735994f9a1dd07c13759ce598e0bf10895ea92e406902e306ffd353bd4a1e9218705fda88fffd242a0481a00e82fd6c22fc7d9b8ef862c3d80286aedd6a56a2e62f720705d56d0c691bd8ba86a2437999b460931ac4e761faee1ba23c6169cf5987be90455516a96965fe7409a157e26c0f8f6b01b8f87951ec7"}}, &(0x7f0000000280)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "827ca44ac296a4c66b5b8b69bab33398d04be9f9cfee907862b81c97856f419b882d699bf3beaf2c10aafad0226853c74a45d4bb42af8cb2c72a3cd44aaf9e8af8dfbf25915aedbe5b8c52154e297fee7842c8952cecc52924838122bdc7da7d49486d9fe5efe69c349aea18cb352cec34081482bb8987379834faa02613b970966f5ef1b2f329c9027c09ccb8d6a396975963ba0543efa5684b247d44bdd356"}}, &(0x7f0000000340)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x2, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x87, 0x7, 0x6, 0x40, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x6, 0x80, "d2542c44", '9O4~'}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x10, 0x0, 0x9, 0x81, 0x7c2b, 0x3}}}, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x20, 0x16, 0xd0, "e909b6a1f4e275121179adb9dbd19436160d1891441f6bad5aa1eca08f22b02f1d03cfbc65c6d214b2ebb51cf526df408c037493dd14edea150ad1c02abcc43a25b21f54ebe9e8d0c9eb26ca608ce099f352a98f29585114a17b8f6f4a9d1ff90a364fdbdc1a21e260bab69cfa574124518dd21d92e443f1dc696bacc888e8f81f73778962d9e218d8201ee4b2e2eeec8824dd8249ed5e3e18ab0bcafca6b4e56ea6cf60b759ad739f05c8195a7a4480df975988cade80081558f88c4fb9a39f78f51b2e687fa11a4b2c4b33c755bba1"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8d}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x800, 0x20}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "4b89"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xd1b4}, &(0x7f0000000740)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "7cd1"}, &(0x7f0000000800)={0x40, 0x1a, 0x2}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x81}}) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x1, 0x802) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f00000009c0)=@assoc_value={0x0}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000a40)={r6, 0x1, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000a80)={r6, 0x502}, 0x8) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/../file0/../file0\x00', &(0x7f0000000bc0), 0x6000) 0s ago: executing program 5 (id=6792): fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, &(0x7f0000000900)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000940)={0x43, 0x3, 0x3, 0x3}, 0x10) close(0x3) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@nullb, r0, &(0x7f0000000140)) io_submit(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r3 = landlock_create_ruleset(&(0x7f0000000700)={0x15020, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0xb) landlock_restrict_self(r3, 0x11) landlock_restrict_self(0xffffffffffffffff, 0x5) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000740)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000800), 0x208e24b) r6 = landlock_create_ruleset(&(0x7f0000000840)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000880)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_control_io(r2, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$kcm(0x11, 0x200000000000002, 0x300) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000d40)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000d80)='{', 0x1, 0x2404c850, &(0x7f0000000dc0)={0xa, 0x4e20, 0x7fffffff, @empty}, 0x1c) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) kernel console output (not intermixed with test programs): strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.196748][T25162] usb 4-1: Product: syz [ 1380.196764][T25162] usb 4-1: Manufacturer: syz [ 1380.196780][T25162] usb 4-1: SerialNumber: syz [ 1380.260638][T25162] usb 4-1: config 0 descriptor?? [ 1380.380419][T26042] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 1380.517599][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1380.536309][T25162] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input436 [ 1380.557748][T25079] usb 3-1: USB disconnect, device number 12 [ 1380.602272][T25162] imon:send_packet: packet tx failed (-71) [ 1380.621109][T25162] imon 4-1:0.0: panel buttons/knobs setup failed [ 1380.738294][T25162] rc_core: IR keymap rc-imon-pad not found [ 1380.738319][T25162] Registered IR keymap rc-empty [ 1380.738398][T25162] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1380.738426][T25162] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1380.738763][T25162] imon:send_packet: packet tx failed (-71) [ 1380.760023][T25162] imon 4-1:0.0: remote input dev register failed [ 1380.760497][T25162] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1380.782153][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1380.867233][T25162] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1380.867260][T25162] imon:imon_probe: failed to initialize context! [ 1380.867274][T25162] imon 4-1:0.0: unable to register, err -19 [ 1380.896773][T25162] usb 4-1: USB disconnect, device number 31 [ 1381.068919][T25079] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1381.218290][T25079] usb 6-1: Using ep0 maxpacket: 8 [ 1381.219075][T25079] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1381.221606][T25079] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1381.221627][T25079] usb 6-1: config 0 has no interface number 0 [ 1381.223706][T25079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.223727][T25079] usb 6-1: Product: syz [ 1381.223738][T25079] usb 6-1: Manufacturer: syz [ 1381.223749][T25079] usb 6-1: SerialNumber: syz [ 1381.293223][T25079] usb 6-1: config 0 descriptor?? [ 1381.747857][T26094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.748291][T26094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.138379][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 1382.154061][T26094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.187167][T26094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.349786][T26118] ip_tables: iptables: counters copy to user failed while replacing table [ 1382.588211][T26106] syzkaller1: entered promiscuous mode [ 1382.588238][T26106] syzkaller1: entered allmulticast mode [ 1382.771975][T26107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.797948][T26107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.911341][T26107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.004916][T26107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.005054][T26107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.036383][T26107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.036574][T26107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.106068][T26107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.118034][T26107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.144327][T26107] veth1_vlan: left promiscuous mode [ 1383.145524][T26107] veth0_vlan: left promiscuous mode [ 1383.147946][T26107] veth0_vlan: entered promiscuous mode [ 1383.165365][T26107] veth1_vlan: entered promiscuous mode [ 1383.182657][T26107] veth1_macvtap: left promiscuous mode [ 1383.184075][T26107] veth0_macvtap: left promiscuous mode [ 1383.186877][T26107] veth0_macvtap: entered promiscuous mode [ 1383.194520][T26107] veth1_macvtap: entered promiscuous mode [ 1383.217332][T26107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1383.226987][T26107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1383.231753][T26107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1383.237309][T26107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1383.271724][T25079] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1383.271794][T25079] uvcvideo 6-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1383.271909][T25079] uvcvideo 6-1:0.31: Failed to create links for entity 5 [ 1383.271928][T25079] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 1383.313913][T25079] usb 6-1: USB disconnect, device number 18 [ 1383.387523][T26128] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1383.412423][T26128] input: syz0 as /devices/virtual/input/input438 [ 1383.495595][ T8832] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1383.929826][T12319] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1383.950234][T26140] FAULT_INJECTION: forcing a failure. [ 1383.950234][T26140] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.950276][T26140] CPU: 0 UID: 0 PID: 26140 Comm: syz.5.6596 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.950309][T26140] Tainted: [L]=SOFTLOCKUP [ 1383.950318][T26140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1383.950333][T26140] Call Trace: [ 1383.950344][T26140] [ 1383.950355][T26140] dump_stack_lvl+0xe8/0x150 [ 1383.950399][T26140] should_fail_ex+0x410/0x560 [ 1383.950440][T26140] should_failslab+0xa8/0x100 [ 1383.950478][T26140] __kmalloc_noprof+0xfe/0x720 [ 1383.950511][T26140] ? tomoyo_encode+0x2ad/0x570 [ 1383.950535][T26140] ? tomoyo_encode+0x2ad/0x570 [ 1383.950567][T26140] tomoyo_encode+0x2ad/0x570 [ 1383.950599][T26140] tomoyo_realpath_from_path+0x5fa/0x640 [ 1383.950636][T26140] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1383.950671][T26140] tomoyo_path_number_perm+0x246/0x5f0 [ 1383.950708][T26140] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1383.950741][T26140] ? __lock_acquire+0x747/0x2de0 [ 1383.950786][T26140] ? hook_file_ioctl+0x1f2/0x600 [ 1383.950844][T26140] ? __fget_files+0x2a/0x420 [ 1383.950881][T26140] ? __fget_files+0x2a/0x420 [ 1383.950901][T26140] ? __fget_files+0x3a2/0x420 [ 1383.950922][T26140] ? __fget_files+0x2a/0x420 [ 1383.950958][T26140] security_file_ioctl+0xc3/0x2a0 [ 1383.950995][T26140] __se_sys_ioctl+0x47/0x170 [ 1383.951028][T26140] do_syscall_64+0x166/0x520 [ 1383.951059][T26140] ? trace_irq_disable+0x3b/0x140 [ 1383.951086][T26140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.951112][T26140] ? clear_bhb_loop+0x70/0xc0 [ 1383.951142][T26140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.951166][T26140] RIP: 0033:0x7ff8c5d9e559 [ 1383.951188][T26140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.951209][T26140] RSP: 002b:00007ff8c6c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.951233][T26140] RAX: ffffffffffffffda RBX: 00007ff8c6025fa0 RCX: 00007ff8c5d9e559 [ 1383.951251][T26140] RDX: 0000000000000000 RSI: 0000000000005101 RDI: 0000000000000003 [ 1383.951266][T26140] RBP: 00007ff8c6c94090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.951282][T26140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.951296][T26140] R13: 00007ff8c6026038 R14: 00007ff8c6025fa0 R15: 00007ff8c614fa48 [ 1383.951334][T26140] [ 1383.958793][T26140] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1384.158984][T12319] usb 3-1: Using ep0 maxpacket: 16 [ 1384.176421][T12319] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1384.194905][T12319] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1384.194947][T12319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1384.257887][T12319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.257931][T12319] usb 3-1: Product: syz [ 1384.257950][T12319] usb 3-1: Manufacturer: syz [ 1384.257967][T12319] usb 3-1: SerialNumber: syz [ 1384.286666][T12319] usb 3-1: config 0 descriptor?? [ 1384.519068][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1384.526163][T12319] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input439 [ 1384.566351][T12319] imon:send_packet: packet tx failed (-71) [ 1384.579709][T26137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1384.579740][T26137] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1384.595782][T12319] imon 3-1:0.0: panel buttons/knobs setup failed [ 1384.655340][T26137] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1384.657530][T26137] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1384.779409][T12319] rc_core: IR keymap rc-imon-pad not found [ 1384.779430][T12319] Registered IR keymap rc-empty [ 1384.779515][T12319] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1384.779536][T12319] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1384.779868][T12319] imon:send_packet: packet tx failed (-71) [ 1384.815038][T12319] imon 3-1:0.0: remote input dev register failed [ 1384.815499][T12319] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1384.856807][T12319] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1384.856833][T12319] imon:imon_probe: failed to initialize context! [ 1384.856848][T12319] imon 3-1:0.0: unable to register, err -19 [ 1384.880540][T26137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1384.880571][T26137] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1384.880730][T12319] usb 3-1: USB disconnect, device number 13 [ 1385.008471][T25163] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1385.169228][T25163] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1385.170634][T25163] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1385.170880][T25163] usb 4-1: config 0 has no interface number 0 [ 1385.173411][T25163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.173441][T25163] usb 4-1: Product: syz [ 1385.173458][T25163] usb 4-1: Manufacturer: syz [ 1385.173475][T25163] usb 4-1: SerialNumber: syz [ 1385.177164][T25163] usb 4-1: config 0 descriptor?? [ 1385.420882][T25163] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1385.441371][T25163] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1385.441780][T25163] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1385.441833][T25163] usb 4-1: media controller created [ 1385.483932][T25163] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1385.556529][T26162] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6602'. [ 1385.737736][T26167] IPVS: length: 248 != 24 [ 1385.763481][T26171] ip_tables: iptables: counters copy to user failed while replacing table [ 1386.163294][T26180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1386.177396][T26179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1386.177593][T26179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1386.566376][T25163] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1386.888583][T12323] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1386.948336][T25162] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1387.038223][T12323] usb 1-1: Using ep0 maxpacket: 16 [ 1387.039012][T12323] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1387.040111][T12323] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1387.040145][T12323] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1387.044030][T12323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.044053][T12323] usb 1-1: Product: syz [ 1387.044064][T12323] usb 1-1: Manufacturer: syz [ 1387.044076][T12323] usb 1-1: SerialNumber: syz [ 1387.102580][T12323] usb 1-1: config 0 descriptor?? [ 1387.112440][T25162] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1387.112495][T25162] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1387.113550][T25162] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.113575][T25162] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1387.116419][T25162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.116450][T25162] usb 3-1: Product: syz [ 1387.116467][T25162] usb 3-1: Manufacturer: syz [ 1387.116484][T25162] usb 3-1: SerialNumber: syz [ 1387.205478][T25162] usb 3-1: selecting invalid altsetting 1 [ 1387.207596][T25162] usb 3-1: unit 6 not found! [ 1387.258748][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1387.356446][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1387.373609][T12323] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input441 [ 1387.396696][T12323] imon:send_packet: packet tx failed (-71) [ 1387.412996][T12323] imon 1-1:0.0: panel buttons/knobs setup failed [ 1387.528287][T12319] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1387.544200][T12323] rc_core: IR keymap rc-imon-pad not found [ 1387.544263][T12323] Registered IR keymap rc-empty [ 1387.544610][T12323] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1387.544657][T12323] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1387.547553][T12323] imon:send_packet: packet tx failed (-71) [ 1387.570648][T12323] imon 1-1:0.0: remote input dev register failed [ 1387.571141][T12323] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 1387.631986][T12323] imon 1-1:0.0: unable to initialize intf0, err 0 [ 1387.632013][T12323] imon:imon_probe: failed to initialize context! [ 1387.632026][T12323] imon 1-1:0.0: unable to register, err -19 [ 1387.669340][T12323] usb 1-1: USB disconnect, device number 13 [ 1387.679004][T12319] usb 6-1: Using ep0 maxpacket: 16 [ 1387.690890][T12319] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1387.713095][T12319] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1387.713123][T12319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1387.736351][T12319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.736452][T12319] usb 6-1: Product: syz [ 1387.736498][T12319] usb 6-1: Manufacturer: syz [ 1387.736541][T12319] usb 6-1: SerialNumber: syz [ 1387.771769][T12319] usb 6-1: config 0 descriptor?? [ 1387.785014][T25162] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1387.797266][T12319] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1387.797312][T12319] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1387.922979][T25162] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1387.942415][T25162] usb 3-1: USB disconnect, device number 14 [ 1388.000924][T26195] fuse: Unknown parameter 'user_i00000000000000000000' [ 1388.018477][T16279] udevd[16279]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1388.021127][T26195] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1388.438721][T12319] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1388.439169][T12319] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1388.439555][T12319] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1388.439575][T12319] em28xx 6-1:0.0: No AC97 audio processor [ 1388.447186][T12319] usb 6-1: USB disconnect, device number 19 [ 1388.464796][T12319] em28xx 6-1:0.0: Disconnecting em28xx [ 1388.499490][T25163] usb 4-1: USB disconnect, device number 32 [ 1388.499510][T12319] em28xx: Freeing device [ 1388.627893][T26208] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6616'. [ 1388.667000][T26208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6616'. [ 1389.029121][T26215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6619'. [ 1389.039009][T12319] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1389.180019][T12319] usb 4-1: device descriptor read/64, error -71 [ 1389.419490][T12319] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1389.528396][T25179] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1389.548432][T12319] usb 4-1: device descriptor read/64, error -71 [ 1389.658985][T12319] usb usb4-port1: attempt power cycle [ 1389.678587][T25179] usb 1-1: Using ep0 maxpacket: 16 [ 1389.680636][T25179] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1389.681538][T25179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1389.681563][T25179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1389.684974][T25179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.685016][T25179] usb 1-1: Product: syz [ 1389.685028][T25179] usb 1-1: Manufacturer: syz [ 1389.685039][T25179] usb 1-1: SerialNumber: syz [ 1389.697292][T25179] usb 1-1: config 0 descriptor?? [ 1390.010273][T25179] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input443 [ 1390.029887][T12319] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1390.051921][T12319] usb 4-1: device descriptor read/8, error -71 [ 1390.166403][T26228] fuse: Bad value for 'fd' [ 1390.301219][T12319] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1390.321799][T12319] usb 4-1: device descriptor read/8, error -71 [ 1390.353000][T25179] rc_core: IR keymap rc-imon-pad not found [ 1390.353023][T25179] Registered IR keymap rc-empty [ 1390.353158][T25179] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1390.353178][T25179] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1390.422868][T25179] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1390.427083][T25179] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input444 [ 1390.429702][T12319] usb usb4-port1: unable to enumerate USB device [ 1390.491649][T25179] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:14> initialized [ 1390.587581][T26237] FAULT_INJECTION: forcing a failure. [ 1390.587581][T26237] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.587622][T26237] CPU: 1 UID: 0 PID: 26237 Comm: syz.5.6626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.587653][T26237] Tainted: [L]=SOFTLOCKUP [ 1390.587662][T26237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1390.587679][T26237] Call Trace: [ 1390.587689][T26237] [ 1390.587700][T26237] dump_stack_lvl+0xe8/0x150 [ 1390.587742][T26237] should_fail_ex+0x410/0x560 [ 1390.587782][T26237] should_failslab+0xa8/0x100 [ 1390.587819][T26237] __kvmalloc_node_noprof+0x176/0x820 [ 1390.587847][T26237] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1390.587876][T26237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.587902][T26237] ? translate_table+0x1a2/0x2010 [ 1390.587933][T26237] ? translate_table+0x1a2/0x2010 [ 1390.587969][T26237] translate_table+0x1a2/0x2010 [ 1390.588024][T26237] ? __pfx_translate_table+0x10/0x10 [ 1390.588078][T26237] ? _copy_from_user+0x94/0xb0 [ 1390.588111][T26237] do_arpt_set_ctl+0x81a/0xb50 [ 1390.588139][T26237] ? trace_contention_end+0x3d/0x140 [ 1390.588186][T26237] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1390.588215][T26237] ? nf_setsockopt+0x221/0x290 [ 1390.588246][T26237] ? __mutex_unlock_slowpath+0x731/0x900 [ 1390.588302][T26237] nf_setsockopt+0x26f/0x290 [ 1390.588330][T26237] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1390.588366][T26237] smc_setsockopt+0x232/0xb00 [ 1390.588483][T26237] ? __pfx_smc_setsockopt+0x10/0x10 [ 1390.588512][T26237] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1390.588547][T26237] ? __pfx_smc_setsockopt+0x10/0x10 [ 1390.588573][T26237] do_sock_setsockopt+0x17c/0x1b0 [ 1390.588604][T26237] __x64_sys_setsockopt+0x13d/0x1b0 [ 1390.588632][T26237] do_syscall_64+0x166/0x520 [ 1390.588658][T26237] ? trace_irq_disable+0x3b/0x140 [ 1390.588683][T26237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.588707][T26237] ? clear_bhb_loop+0x70/0xc0 [ 1390.588737][T26237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.588760][T26237] RIP: 0033:0x7ff8c5d9e559 [ 1390.588783][T26237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.588803][T26237] RSP: 002b:00007ff8c6c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1390.588828][T26237] RAX: ffffffffffffffda RBX: 00007ff8c6025fa0 RCX: 00007ff8c5d9e559 [ 1390.588845][T26237] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1390.588860][T26237] RBP: 00007ff8c6c94090 R08: 0000000000000460 R09: 0000000000000000 [ 1390.588875][T26237] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1390.588890][T26237] R13: 00007ff8c6026038 R14: 00007ff8c6025fa0 R15: 00007ff8c614fa48 [ 1390.588926][T26237] [ 1391.019285][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 1391.150613][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1391.151202][T25163] usb 1-1: USB disconnect, device number 14 [ 1391.448603][T12319] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1391.598318][T12319] usb 3-1: Using ep0 maxpacket: 16 [ 1391.599218][T12319] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1391.600303][T12319] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1391.600326][T12319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1391.603381][T12319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.603412][T12319] usb 3-1: Product: syz [ 1391.603424][T12319] usb 3-1: Manufacturer: syz [ 1391.603436][T12319] usb 3-1: SerialNumber: syz [ 1391.607757][T12319] usb 3-1: config 0 descriptor?? [ 1391.653689][T12319] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1391.653804][T12319] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1391.862089][T26248] fuse: Unknown parameter 'user_i00000000000000000000' [ 1391.865865][T26254] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1391.866464][T26248] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1392.865901][T26260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6633'. [ 1392.930768][T26259] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1393.018678][T12319] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1393.019616][T12319] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1393.019984][T12319] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1393.020000][T12319] em28xx 3-1:0.0: No AC97 audio processor [ 1393.385553][T12319] usb 3-1: USB disconnect, device number 15 [ 1393.386888][T12319] em28xx 3-1:0.0: Disconnecting em28xx [ 1393.515845][T12319] em28xx: Freeing device [ 1394.145259][T26275] netlink: 'syz.5.6638': attribute type 2 has an invalid length. [ 1394.145290][T26275] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6638'. [ 1394.433560][T20672] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1394.538862][T25079] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1394.579212][T20672] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1394.580403][T20672] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1394.580433][T20672] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.580455][T20672] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1394.580499][T20672] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.582357][T20672] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1394.582379][T20672] usb 6-1: Product: syz [ 1394.582391][T20672] usb 6-1: Manufacturer: syz [ 1394.668766][T20672] cdc_wdm 6-1:1.0: skipping garbage [ 1394.668785][T20672] cdc_wdm 6-1:1.0: skipping garbage [ 1394.672417][T20672] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1394.672442][T20672] cdc_wdm 6-1:1.0: Unknown control protocol [ 1394.708284][T25079] usb 4-1: Using ep0 maxpacket: 8 [ 1394.709218][T25079] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1394.711274][T25079] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1394.711309][T25079] usb 4-1: config 0 has no interface number 0 [ 1394.715644][T25079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.715676][T25079] usb 4-1: Product: syz [ 1394.715691][T25079] usb 4-1: Manufacturer: syz [ 1394.715715][T25079] usb 4-1: SerialNumber: syz [ 1394.772269][T25079] usb 4-1: config 0 descriptor?? [ 1394.823119][T25163] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1394.859712][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1394.968288][T25163] usb 1-1: Using ep0 maxpacket: 32 [ 1394.969015][T25163] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1394.970398][T25163] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1394.970431][T25163] usb 1-1: config 0 has no interfaces? [ 1394.973332][T25163] usb 1-1: New USB device strings: Mfr=254, Product=1, SerialNumber=3 [ 1394.973362][T25163] usb 1-1: Product: syz [ 1394.973404][T25163] usb 1-1: Manufacturer: syz [ 1394.973425][T25163] usb 1-1: SerialNumber: syz [ 1395.043951][T25163] usb 1-1: config 0 descriptor?? [ 1395.473569][T26289] loop5: detected capacity change from 0 to 7 [ 1395.496730][T26289] Dev loop5: unable to read RDB block 7 [ 1395.496782][T26289] loop5: unable to read partition table [ 1395.497694][T26289] loop5: partition table beyond EOD, truncated [ 1395.499181][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 1395.526434][T26289] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1395.906851][T26282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.907161][T26282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.194944][T26299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6644'. [ 1396.446130][T26304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.461404][T26304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.831076][T26282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.964344][T26282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.219025][T25163] usb 6-1: USB disconnect, device number 20 [ 1397.552472][T26307] fuse: Bad value for 'fd' [ 1397.798331][T25080] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1397.948230][T25080] usb 6-1: Using ep0 maxpacket: 16 [ 1397.949027][T25080] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1397.950408][T25080] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1397.950445][T25080] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1397.953513][T25080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.953569][T25080] usb 6-1: Product: syz [ 1397.953587][T25080] usb 6-1: Manufacturer: syz [ 1397.953604][T25080] usb 6-1: SerialNumber: syz [ 1397.958017][T25080] usb 6-1: config 0 descriptor?? [ 1398.156831][T26288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.165640][T26288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.177523][T26288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.203675][T26315] netlink: 'syz.4.6647': attribute type 8 has an invalid length. [ 1398.220064][T26288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.220190][T26288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.223901][T26288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.223998][T26288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.271284][T26288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.274659][T26288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.302296][T26288] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1398.342902][T26311] syz_tun: entered allmulticast mode [ 1398.362729][T26312] dvmrp6: entered allmulticast mode [ 1398.374447][T25079] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1398.374779][T25079] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1398.375282][T25079] uvcvideo 4-1:0.31: Failed to create links for entity 5 [ 1398.375335][T25079] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 1398.380106][T24574] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.400547][T24577] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.400734][T24577] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.400776][T24577] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.460875][T25079] usb 4-1: USB disconnect, device number 37 [ 1398.475228][ T5622] usb 1-1: USB disconnect, device number 15 [ 1398.584223][T26309] syz_tun: left allmulticast mode [ 1398.731980][T26323] sctp: [Deprecated]: syz.4.6650 (pid 26323) Use of int in max_burst socket option. [ 1398.731980][T26323] Use struct sctp_assoc_value instead [ 1398.818864][ T5622] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1399.022104][ T5622] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1399.145298][T26337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6654'. [ 1399.291805][T26339] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 1399.291831][T26339] CPU: 1 UID: 0 PID: 26339 Comm: syz.2.6653 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.291856][T26339] Tainted: [L]=SOFTLOCKUP [ 1399.291862][T26339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1399.291873][T26339] Call Trace: [ 1399.291880][T26339] [ 1399.291891][T26339] dump_stack_lvl+0xe8/0x150 [ 1399.291924][T26339] sysfs_warn_dup+0x8e/0xa0 [ 1399.291945][T26339] sysfs_do_create_link_sd+0xc0/0x110 [ 1399.291967][T26339] device_add_class_symlinks+0x1cf/0x240 [ 1399.291997][T26339] device_add+0x467/0xb80 [ 1399.292023][T26339] wiphy_register+0x1fc8/0x2ff0 [ 1399.292063][T26339] ? __pfx_wiphy_register+0x10/0x10 [ 1399.292089][T26339] ? __pfx_netdev_run_todo+0x10/0x10 [ 1399.292112][T26339] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1399.292142][T26339] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1399.292206][T26339] ieee80211_register_hw+0x3dbb/0x4b00 [ 1399.292249][T26339] ? ieee80211_register_hw+0x1a11/0x4b00 [ 1399.292306][T26339] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1399.292337][T26339] ? __asan_memset+0x22/0x50 [ 1399.292364][T26339] ? __hrtimer_setup+0x1b7/0x260 [ 1399.292411][T26339] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1399.292456][T26339] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 1399.292528][T26339] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1399.292563][T26339] ? kstrndup+0xbd/0x160 [ 1399.292599][T26339] ? kstrndup+0xbd/0x160 [ 1399.292630][T26339] hwsim_new_radio_nl+0xd8b/0xf90 [ 1399.292684][T26339] genl_family_rcv_msg_doit+0x233/0x340 [ 1399.292719][T26339] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1399.292760][T26339] ? bpf_lsm_capable+0x9/0x20 [ 1399.292786][T26339] ? security_capable+0x7e/0x2c0 [ 1399.292832][T26339] genl_rcv_msg+0x614/0x7a0 [ 1399.292863][T26339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1399.292885][T26339] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1399.292925][T26339] ? __asan_memcpy+0x40/0x70 [ 1399.292950][T26339] ? __skb_clone+0x5c/0x6c0 [ 1399.292985][T26339] netlink_rcv_skb+0x226/0x4a0 [ 1399.293018][T26339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1399.293043][T26339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1399.293090][T26339] ? down_read+0x2be/0x330 [ 1399.293128][T26339] genl_rcv+0x28/0x40 [ 1399.293164][T26339] netlink_unicast+0x8ef/0xa80 [ 1399.293214][T26339] netlink_sendmsg+0x813/0xb40 [ 1399.293258][T26339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1399.293300][T26339] ? apparmor_socket_sendmsg+0x98/0x360 [ 1399.293337][T26339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1399.293368][T26339] sock_sendmsg_nosec+0x13a/0x180 [ 1399.293423][T26339] ____sys_sendmsg+0x54e/0x850 [ 1399.293454][T26339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1399.293481][T26339] ? import_iovec+0x73/0xa0 [ 1399.293501][T26339] ___sys_sendmsg+0x2a5/0x360 [ 1399.293519][T26339] ? __lock_acquire+0x747/0x2de0 [ 1399.293543][T26339] ? __pfx____sys_sendmsg+0x10/0x10 [ 1399.293565][T26339] ? futex_wait+0x2a2/0x390 [ 1399.293606][T26339] ? __fget_files+0x2a/0x420 [ 1399.293622][T26339] ? __fget_files+0x3a2/0x420 [ 1399.293645][T26339] __x64_sys_sendmsg+0x1b1/0x290 [ 1399.293667][T26339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1399.293703][T26339] do_syscall_64+0x166/0x520 [ 1399.293724][T26339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.293741][T26339] ? clear_bhb_loop+0x70/0xc0 [ 1399.293788][T26339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.293811][T26339] RIP: 0033:0x7f3cbcb9e559 [ 1399.293835][T26339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.293856][T26339] RSP: 002b:00007f3cbdadc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1399.293882][T26339] RAX: ffffffffffffffda RBX: 00007f3cbce26090 RCX: 00007f3cbcb9e559 [ 1399.293901][T26339] RDX: 0000000000000084 RSI: 0000200000000180 RDI: 0000000000000009 [ 1399.293918][T26339] RBP: 00007f3cbcc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1399.293938][T26339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.293949][T26339] R13: 00007f3cbce26128 R14: 00007f3cbce26090 R15: 00007f3cbcf4fa48 [ 1399.293976][T26339] [ 1399.768180][T25078] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1399.958656][T25079] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1400.418253][T25078] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1400.505168][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1400.516022][T25080] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input445 [ 1400.532561][T25080] imon:send_packet: packet tx failed (-71) [ 1400.548649][T25080] imon 6-1:0.0: panel buttons/knobs setup failed [ 1400.568227][T25078] usb 1-1: Using ep0 maxpacket: 16 [ 1400.572146][T25078] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1400.572202][T25078] usb 1-1: New USB device found, idVendor=1614, idProduct=0407, bcdDevice=fc.b5 [ 1400.573546][T25078] usb 1-1: config 127 has an invalid interface number: 19 but max is 0 [ 1400.573576][T25078] usb 1-1: config 127 has no interface number 0 [ 1400.573609][T25078] usb 1-1: config 127 interface 19 has no altsetting 0 [ 1400.576976][T25078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.577005][T25078] usb 1-1: Product: syz [ 1400.577022][T25078] usb 1-1: Manufacturer: syz [ 1400.577040][T25078] usb 1-1: SerialNumber: syz [ 1400.688302][T25080] rc_core: IR keymap rc-imon-pad not found [ 1400.688319][T25080] Registered IR keymap rc-empty [ 1400.688404][T25080] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1400.688419][T25080] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1400.688681][T25080] imon:send_packet: packet tx failed (-71) [ 1400.708877][T25080] imon 6-1:0.0: remote input dev register failed [ 1400.709239][T25080] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1400.769223][T25080] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1400.769248][T25080] imon:imon_probe: failed to initialize context! [ 1400.769258][T25080] imon 6-1:0.0: unable to register, err -19 [ 1400.786386][T25080] usb 6-1: USB disconnect, device number 21 [ 1401.358214][T12337] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1401.508245][T12337] usb 3-1: Using ep0 maxpacket: 8 [ 1401.510478][T12337] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1401.511910][T12337] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1401.511939][T12337] usb 3-1: config 0 has no interface number 0 [ 1401.516193][T12337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.516223][T12337] usb 3-1: Product: syz [ 1401.516240][T12337] usb 3-1: Manufacturer: syz [ 1401.516257][T12337] usb 3-1: SerialNumber: syz [ 1401.586531][T12337] usb 3-1: config 0 descriptor?? [ 1401.603066][T25080] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1401.695114][T25078] usb 1-1: USB disconnect, device number 16 [ 1401.759081][T25080] usb 4-1: Using ep0 maxpacket: 16 [ 1401.761249][T25080] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1401.765711][T25080] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1401.765731][T25080] usb 4-1: config 0 has no interface number 0 [ 1401.813572][T25080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.813596][T25080] usb 4-1: Product: syz [ 1401.813608][T25080] usb 4-1: Manufacturer: syz [ 1401.813621][T25080] usb 4-1: SerialNumber: syz [ 1401.848948][T25080] usb 4-1: config 0 descriptor?? [ 1401.880981][T25080] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1402.353116][T26350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.353631][T26350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.488393][T26354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.489297][T26354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.878496][T20673] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1403.029450][T20673] usb 6-1: Using ep0 maxpacket: 16 [ 1403.031678][T20673] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1403.061888][T20673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.061958][T20673] usb 6-1: Product: syz [ 1403.061971][T20673] usb 6-1: Manufacturer: syz [ 1403.061982][T20673] usb 6-1: SerialNumber: syz [ 1403.191721][T25080] gspca_spca1528: reg_w err -71 [ 1403.191813][T25080] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1403.222706][T25080] usb 4-1: USB disconnect, device number 38 [ 1403.574842][T26350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.696454][T26350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.744099][T26377] fuse: Bad value for 'fd' [ 1404.501879][T26384] input: syz1 as /devices/virtual/input/input447 [ 1404.900897][T26358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.902806][T26358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.913251][T26358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.966617][T26358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.966763][T26358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.978834][T26358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.979155][T26358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.008966][T26358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.012465][T26358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.044033][T26358] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1405.115295][T12337] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1405.115380][T12337] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1405.115532][T12337] uvcvideo 3-1:0.31: Failed to create links for entity 5 [ 1405.115960][T12337] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1405.188331][T24652] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.188716][T12337] usb 3-1: USB disconnect, device number 16 [ 1405.278553][T24652] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.278616][T24652] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.278657][T24652] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.797154][T20673] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1405.806646][T20673] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1405.916762][T20673] usb 6-1: USB disconnect, device number 22 [ 1406.016329][T16277] udevd[16277]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.180623][T26390] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1406.406643][T25079] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1406.568982][T25079] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1406.570018][T25079] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1406.570038][T25079] usb 4-1: config 0 has no interface number 0 [ 1406.570068][T25079] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1406.571947][T25079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.571965][T25079] usb 4-1: Product: syz [ 1406.571976][T25079] usb 4-1: Manufacturer: syz [ 1406.571988][T25079] usb 4-1: SerialNumber: syz [ 1406.574717][T25079] usb 4-1: config 0 descriptor?? [ 1406.918411][T12321] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1407.068463][T12321] usb 6-1: Using ep0 maxpacket: 16 [ 1407.121005][T26408] fuse: Invalid gid '0x0000000000000004' [ 1407.202278][T26415] lo: entered promiscuous mode [ 1407.207759][T26415] tunl0: entered promiscuous mode [ 1407.258285][T25162] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1407.258874][T26415] gre0: entered promiscuous mode [ 1407.307576][T26415] gretap0: entered promiscuous mode [ 1407.421250][T25162] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1407.432413][T25162] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1407.432445][T25162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.432459][T25162] usb 3-1: config 0 has no interface number 0 [ 1407.432511][T25162] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1407.432540][T25162] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1407.432563][T25162] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1407.505279][T26415] erspan0: entered promiscuous mode [ 1407.506302][T25162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.506330][T25162] usb 3-1: Product: syz [ 1407.506345][T25162] usb 3-1: Manufacturer: syz [ 1407.506365][T25162] usb 3-1: SerialNumber: syz [ 1407.565712][T25162] usb 3-1: config 0 descriptor?? [ 1407.626820][T26415] ip_vti0: entered promiscuous mode [ 1407.672080][T26415] ip6_vti0: entered promiscuous mode [ 1407.721458][T26415] sit0: entered promiscuous mode [ 1407.785392][T26415] ip6tnl0: entered promiscuous mode [ 1408.203487][T25162] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1408.234986][T26415] ip6gre0: entered promiscuous mode [ 1408.252245][T25162] usb 3-1: USB disconnect, device number 17 [ 1408.296143][T26415] syz_tun: entered promiscuous mode [ 1408.338388][T26415] ip6gretap0: entered promiscuous mode [ 1408.377830][T26415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.378230][T26415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.386600][T26415] bridge0: entered promiscuous mode [ 1408.409914][T26415] vcan0: entered promiscuous mode [ 1408.418376][T25080] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1408.435233][T12321] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1408.435288][T12321] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1408.435896][T26415] bond0: entered promiscuous mode [ 1408.435916][T26415] bond_slave_0: entered promiscuous mode [ 1408.436136][T26415] bond_slave_1: entered promiscuous mode [ 1408.436334][T12321] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1408.436370][T12321] usb 6-1: can't read configurations, error -71 [ 1408.487360][T26415] team0: entered promiscuous mode [ 1408.487433][T26415] team_slave_0: entered promiscuous mode [ 1408.487932][T26415] team_slave_1: entered promiscuous mode [ 1408.505442][T26415] dummy0: entered promiscuous mode [ 1408.520294][T26415] nlmon0: entered promiscuous mode [ 1408.568015][T26415] batadv0: entered promiscuous mode [ 1408.578227][T25080] usb 1-1: Using ep0 maxpacket: 16 [ 1408.587849][T26428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.588757][T26415] vxcan0: entered promiscuous mode [ 1408.609700][T26415] vxcan1: entered promiscuous mode [ 1408.616137][T26415] veth0: entered promiscuous mode [ 1408.618044][T26428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.644003][T26415] veth1: entered promiscuous mode [ 1408.646789][T26428] fuse: Invalid gid '0x0000000000000005' [ 1408.661339][T26415] wg0: entered promiscuous mode [ 1408.699222][T26415] wg1: entered promiscuous mode [ 1408.713726][T26415] wg2: entered promiscuous mode [ 1408.717777][T26415] veth0_to_bridge: entered promiscuous mode [ 1408.743193][T26415] veth1_to_bridge: entered promiscuous mode [ 1408.822159][T26415] veth0_to_bond: entered promiscuous mode [ 1408.904492][T26415] veth1_to_bond: entered promiscuous mode [ 1408.975362][T26415] veth0_to_team: entered promiscuous mode [ 1409.087149][T26415] veth1_to_team: entered promiscuous mode [ 1409.176752][T25080] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1409.176806][T25080] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1409.177860][T25080] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1409.177897][T25080] usb 1-1: can't read configurations, error -71 [ 1409.259611][T26415] veth0_to_batadv: entered promiscuous mode [ 1409.289499][T26415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.289581][T26415] batadv_slave_0: entered promiscuous mode [ 1409.322307][T26415] veth1_to_batadv: entered promiscuous mode [ 1409.327671][T26439] FAULT_INJECTION: forcing a failure. [ 1409.327671][T26439] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.327739][T26439] CPU: 1 UID: 0 PID: 26439 Comm: syz.2.6686 Tainted: G L syzkaller #0 PREEMPT(full) [ 1409.327772][T26439] Tainted: [L]=SOFTLOCKUP [ 1409.327782][T26439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1409.327797][T26439] Call Trace: [ 1409.327808][T26439] [ 1409.327819][T26439] dump_stack_lvl+0xe8/0x150 [ 1409.327864][T26439] should_fail_ex+0x410/0x560 [ 1409.327906][T26439] should_failslab+0xa8/0x100 [ 1409.327942][T26439] __kmalloc_cache_noprof+0xa3/0x600 [ 1409.327972][T26439] ? stack_trace_save+0xa9/0x100 [ 1409.327995][T26439] ? kvm_hv_vcpu_init+0x16a/0xcb0 [ 1409.328023][T26439] ? kvm_hv_vcpu_init+0x16a/0xcb0 [ 1409.328059][T26439] kvm_hv_vcpu_init+0x16a/0xcb0 [ 1409.328092][T26439] kvm_hv_set_msr_common+0xe0/0x4290 [ 1409.328119][T26439] ? memdup_user+0x2b/0xd0 [ 1409.328149][T26439] ? kvm_arch_vcpu_ioctl+0x712/0x23a0 [ 1409.328203][T26439] ? kvm_vcpu_ioctl+0x7e3/0xfd0 [ 1409.328254][T26439] ? __se_sys_ioctl+0xfc/0x170 [ 1409.328354][T26439] ? __pfx_kvm_hv_set_msr_common+0x10/0x10 [ 1409.328449][T26439] ? __lock_acquire+0x747/0x2de0 [ 1409.328523][T26439] kvm_set_msr_common+0x1f14/0x4310 [ 1409.328628][T26439] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 1409.328727][T26439] vmx_set_msr+0x15b3/0x27f0 [ 1409.328812][T26439] __kvm_set_msr+0x60c/0xab0 [ 1409.328879][T26439] ? __pfx___kvm_set_msr+0x10/0x10 [ 1409.328966][T26439] ? __pfx_do_set_msr+0x10/0x10 [ 1409.329041][T26439] kvm_set_msr_ignored_check+0x2a/0x390 [ 1409.329100][T26439] ? __pfx_do_set_msr+0x10/0x10 [ 1409.329174][T26439] msr_io+0x3f5/0x8b0 [ 1409.329248][T26439] ? __pfx_do_set_msr+0x10/0x10 [ 1409.329325][T26439] ? __pfx_msr_io+0x10/0x10 [ 1409.329422][T26439] ? __srcu_check_read_flavor+0x117/0x260 [ 1409.329504][T26439] ? kvm_set_msrs+0x68/0x100 [ 1409.329579][T26439] kvm_set_msrs+0x9c/0x100 [ 1409.329656][T26439] kvm_arch_vcpu_ioctl+0x712/0x23a0 [ 1409.329757][T26439] ? lock_acquire+0x115/0x350 [ 1409.329835][T26439] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1409.329922][T26439] ? lock_acquire+0x115/0x350 [ 1409.330015][T26439] ? is_bpf_text_address+0x26/0x2b0 [ 1409.330150][T26439] ? is_bpf_text_address+0x292/0x2b0 [ 1409.330224][T26439] ? is_bpf_text_address+0x26/0x2b0 [ 1409.330316][T26439] ? kernel_text_address+0xa5/0xe0 [ 1409.330390][T26439] ? __kernel_text_address+0xd/0x30 [ 1409.330447][T26439] ? unwind_get_return_address+0x4d/0x90 [ 1409.330522][T26439] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1409.330596][T26439] ? arch_stack_walk+0xfb/0x150 [ 1409.330705][T26439] ? stack_trace_save+0xa9/0x100 [ 1409.330769][T26439] ? __pfx_stack_trace_save+0x10/0x10 [ 1409.330824][T26439] ? kasan_save_track+0x4f/0x80 [ 1409.330910][T26439] ? stack_depot_save_flags+0x33/0x7f0 [ 1409.331014][T26439] ? __lock_acquire+0x747/0x2de0 [ 1409.331074][T26439] ? kfree+0x1c5/0x650 [ 1409.331144][T26439] ? __se_sys_ioctl+0x47/0x170 [ 1409.331216][T26439] ? do_syscall_64+0x166/0x520 [ 1409.331289][T26439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.331406][T26439] ? __mutex_trylock_common+0x15f/0x270 [ 1409.331490][T26439] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1409.331584][T26439] ? rcu_is_watching+0x16/0xb0 [ 1409.331665][T26439] ? trace_contention_end+0x3d/0x140 [ 1409.331750][T26439] ? __mutex_lock+0x30b/0x1550 [ 1409.331834][T26439] ? kasan_quarantine_put+0xbb/0x1f0 [ 1409.331918][T26439] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 1409.331992][T26439] ? __pfx___mutex_lock+0x10/0x10 [ 1409.332064][T26439] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1409.332153][T26439] ? do_vfs_ioctl+0x116f/0x1530 [ 1409.332237][T26439] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1409.332322][T26439] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 1409.332407][T26439] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1409.332471][T26439] ? hook_file_ioctl+0x1f2/0x600 [ 1409.332648][T26439] ? __fget_files+0x2a/0x420 [ 1409.332712][T26439] ? __fget_files+0x2a/0x420 [ 1409.332765][T26439] ? __fget_files+0x3a2/0x420 [ 1409.332817][T26439] ? __fget_files+0x2a/0x420 [ 1409.332883][T26439] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1409.332939][T26439] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1409.333005][T26439] __se_sys_ioctl+0xfc/0x170 [ 1409.333095][T26439] do_syscall_64+0x166/0x520 [ 1409.333163][T26439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.333220][T26439] ? clear_bhb_loop+0x70/0xc0 [ 1409.333292][T26439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.333354][T26439] RIP: 0033:0x7f3cbcb9e559 [ 1409.333409][T26439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.333459][T26439] RSP: 002b:00007f3cbdafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.333525][T26439] RAX: ffffffffffffffda RBX: 00007f3cbce25fa0 RCX: 00007f3cbcb9e559 [ 1409.333561][T26439] RDX: 000020000003c140 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1409.333604][T26439] RBP: 00007f3cbdafd090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.333645][T26439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.333678][T26439] R13: 00007f3cbce26038 R14: 00007f3cbce25fa0 R15: 00007f3cbcf4fa48 [ 1409.333773][T26439] [ 1409.540289][T12321] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1409.690366][T12321] usb 6-1: Using ep0 maxpacket: 8 [ 1409.693892][T12321] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1409.737791][T12321] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1409.737933][T12321] usb 6-1: config 179 has no interface number 0 [ 1409.741102][T12321] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1409.741258][T12321] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1409.741398][T12321] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1409.741472][T12321] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1409.741619][T12321] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1409.741705][T12321] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1409.741788][T12321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.870435][T26415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.870619][T26415] batadv_slave_1: entered promiscuous mode [ 1409.892144][T26415] xfrm0: entered promiscuous mode [ 1409.907207][T26415] veth0_to_hsr: entered promiscuous mode [ 1410.003527][T26415] veth1_to_hsr: entered promiscuous mode [ 1410.071065][T12321] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input449 [ 1410.127043][T26415] hsr0: entered promiscuous mode [ 1410.128831][ T4970] input input449: unable to receive magic message: -110 [ 1410.147052][T26415] veth1_virt_wifi: entered promiscuous mode [ 1410.156805][ T4970] input input449: unable to receive magic message: -32 [ 1410.177502][T26415] veth0_virt_wifi: entered promiscuous mode [ 1410.187532][ T4970] input input449: unable to receive magic message: -32 [ 1410.203358][T26415] virt_wifi0: entered promiscuous mode [ 1410.203847][T26415] vlan0: entered promiscuous mode [ 1410.206509][ T4970] input input449: unable to receive magic message: -32 [ 1410.213261][T26415] vlan1: entered promiscuous mode [ 1410.214017][T26415] macvlan0: entered promiscuous mode [ 1410.219287][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1410.219901][T26415] macvlan1: entered promiscuous mode [ 1410.220082][T26415] ipvlan0: entered promiscuous mode [ 1410.220236][T26415] ipvlan1: entered promiscuous mode [ 1410.220718][T26415] macvtap0: entered promiscuous mode [ 1410.220871][T26415] macsec0: entered promiscuous mode [ 1410.221072][T26415] geneve0: entered promiscuous mode [ 1410.237945][T26415] geneve1: entered promiscuous mode [ 1410.262328][T26415] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1410.262856][T26415] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1410.263125][T26415] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1410.270605][T26415] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1410.270779][T26415] mac80211_hwsim hwsim129 wlan0: entered promiscuous mode [ 1410.270979][T26415] mac80211_hwsim hwsim130 wlan1: entered promiscuous mode [ 1410.271244][T26415] mac80211_hwsim hwsim131 wlan2: entered promiscuous mode [ 1410.271511][T26415] M: entered promiscuous mode [ 1410.271863][T26415] bridge1: entered promiscuous mode [ 1410.281986][T26415] bridge2: entered promiscuous mode [ 1410.408889][T16254] input input449: unable to receive magic message: -32 [ 1410.458448][ T4970] input input449: unable to receive magic message: -32 [ 1410.484544][ T4970] input input449: unable to receive magic message: -32 [ 1410.502098][ T4970] input input449: unable to receive magic message: -32 [ 1410.531314][ T4970] input input449: unable to receive magic message: -32 [ 1410.556142][T26434] input input449: unable to receive magic message: -32 [ 1410.556811][T25079] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1410.584827][T25079] usb 4-1: USB disconnect, device number 39 [ 1410.682663][T25170] usb 6-1: USB disconnect, device number 25 [ 1410.682797][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1410.825165][T26446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6688'. [ 1410.914419][T26445] binder: 26442:26445 ioctl c0306201 0 returned -14 [ 1410.916579][ T31] kauditd_printk_skb: 71 callbacks suppressed [ 1410.916599][ T31] audit: type=1326 audit(1792367536.431:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26442 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fc879e559 code=0x0 [ 1411.108424][T20672] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1411.268251][T20672] usb 4-1: Using ep0 maxpacket: 8 [ 1411.268999][T20672] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1411.272087][T20672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.278463][T20672] usb 4-1: config 0 descriptor?? [ 1411.312042][T20672] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1411.487045][T20672] cxusb: set interface failed [ 1411.487063][T20672] dvb-usb: bulk message failed: -22 (1/0) [ 1411.507874][T20672] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1411.509585][T20672] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1411.509644][T20672] usb 4-1: media controller created [ 1411.580375][T20672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1411.684702][T24652] IPVS: starting estimator thread 0... [ 1411.685582][T26456] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6691'. [ 1411.693866][T26459] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1411.768452][T26458] IPVS: using max 31 ests per chain, 74400 per kthread [ 1411.847789][T20672] DVB: Unable to find symbol lgdt330x_attach() [ 1411.847804][T20672] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1411.861114][T20672] dvb-usb: bulk message failed: -22 (1/0) [ 1411.861197][T20672] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1411.881367][T20672] usb 4-1: USB disconnect, device number 40 [ 1412.059863][ T31] audit: type=1326 audit(1792367537.581:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.059924][ T31] audit: type=1326 audit(1792367537.581:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.062341][ T31] audit: type=1326 audit(1792367537.581:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.062623][ T31] audit: type=1326 audit(1792367537.581:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.067517][ T31] audit: type=1326 audit(1792367537.581:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.067577][ T31] audit: type=1326 audit(1792367537.581:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.134521][T20672] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1412.174161][ T31] audit: type=1326 audit(1792367537.671:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.199089][ T31] audit: type=1326 audit(1792367537.701:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.224997][ T31] audit: type=1326 audit(1792367537.721:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.5.6692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c5d9e559 code=0x7ffc0000 [ 1412.269493][T25170] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1412.421454][T25170] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1412.424628][T25170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.424663][T25170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.424686][T25170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1412.424728][T25170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.441080][T26472] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6696'. [ 1412.443258][T25170] usb 3-1: config 0 descriptor?? [ 1412.537949][T26464] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6692'. [ 1412.720481][T26480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1412.740333][T26483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1412.743248][T26485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1412.802976][T26486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6697'. [ 1412.842256][T26486] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 1412.842281][T26486] CPU: 0 UID: 0 PID: 26486 Comm: syz.3.6697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1412.842315][T26486] Tainted: [L]=SOFTLOCKUP [ 1412.842325][T26486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1412.842341][T26486] Call Trace: [ 1412.842351][T26486] [ 1412.842363][T26486] dump_stack_lvl+0xe8/0x150 [ 1412.842412][T26486] sysfs_warn_dup+0x8e/0xa0 [ 1412.842439][T26486] sysfs_do_create_link_sd+0xc0/0x110 [ 1412.842476][T26486] device_add_class_symlinks+0x1cf/0x240 [ 1412.842518][T26486] device_add+0x467/0xb80 [ 1412.842555][T26486] wiphy_register+0x1fc8/0x2ff0 [ 1412.842622][T26486] ? __pfx_wiphy_register+0x10/0x10 [ 1412.842660][T26486] ? __pfx_netdev_run_todo+0x10/0x10 [ 1412.842693][T26486] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1412.842738][T26486] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1412.842783][T26486] ieee80211_register_hw+0x3dbb/0x4b00 [ 1412.842827][T26486] ? ieee80211_register_hw+0x1a11/0x4b00 [ 1412.842886][T26486] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1412.842918][T26486] ? __asan_memset+0x22/0x50 [ 1412.842946][T26486] ? __hrtimer_setup+0x1b7/0x260 [ 1412.842980][T26486] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1412.843022][T26486] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 1412.843092][T26486] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1412.843127][T26486] ? kstrndup+0xbd/0x160 [ 1412.843162][T26486] ? kstrndup+0xbd/0x160 [ 1412.843194][T26486] hwsim_new_radio_nl+0xd8b/0xf90 [ 1412.843246][T26486] genl_family_rcv_msg_doit+0x233/0x340 [ 1412.843281][T26486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1412.843321][T26486] ? bpf_lsm_capable+0x9/0x20 [ 1412.843347][T26486] ? security_capable+0x7e/0x2c0 [ 1412.843390][T26486] genl_rcv_msg+0x614/0x7a0 [ 1412.843420][T26486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1412.843443][T26486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1412.843495][T26486] netlink_rcv_skb+0x226/0x4a0 [ 1412.843528][T26486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1412.843553][T26486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1412.843610][T26486] ? down_read+0x2be/0x330 [ 1412.843649][T26486] genl_rcv+0x28/0x40 [ 1412.843684][T26486] netlink_unicast+0x8ef/0xa80 [ 1412.843733][T26486] netlink_sendmsg+0x813/0xb40 [ 1412.843777][T26486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1412.843820][T26486] ? apparmor_socket_sendmsg+0x98/0x360 [ 1412.843856][T26486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1412.843888][T26486] sock_sendmsg_nosec+0x13a/0x180 [ 1412.843925][T26486] ____sys_sendmsg+0x54e/0x850 [ 1412.843960][T26486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1412.843997][T26486] ? import_iovec+0x73/0xa0 [ 1412.844024][T26486] ___sys_sendmsg+0x2a5/0x360 [ 1412.844048][T26486] ? __lock_acquire+0x747/0x2de0 [ 1412.844079][T26486] ? __pfx____sys_sendmsg+0x10/0x10 [ 1412.844109][T26486] ? futex_wait+0x2a2/0x390 [ 1412.844168][T26486] ? __fget_files+0x2a/0x420 [ 1412.844190][T26486] ? __fget_files+0x3a2/0x420 [ 1412.844225][T26486] __x64_sys_sendmsg+0x1b1/0x290 [ 1412.844257][T26486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1412.844311][T26486] do_syscall_64+0x166/0x520 [ 1412.844339][T26486] ? trace_irq_disable+0x3b/0x140 [ 1412.844366][T26486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.844391][T26486] ? clear_bhb_loop+0x70/0xc0 [ 1412.844422][T26486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.844446][T26486] RIP: 0033:0x7f1fcbf9e559 [ 1412.844471][T26486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.844492][T26486] RSP: 002b:00007f1fcce21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1412.844518][T26486] RAX: ffffffffffffffda RBX: 00007f1fcc226090 RCX: 00007f1fcbf9e559 [ 1412.844535][T26486] RDX: 0000000000000084 RSI: 0000200000000180 RDI: 0000000000000008 [ 1412.844550][T26486] RBP: 00007f1fcc035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1412.844565][T26486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.844579][T26486] R13: 00007f1fcc226128 R14: 00007f1fcc226090 R15: 00007f1fcc34fa48 [ 1412.844637][T26486] [ 1413.437589][T25170] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1413.674058][T26495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6699'. [ 1413.808863][T26500] vlan1: entered promiscuous mode [ 1413.809059][T26500] vlan1: entered allmulticast mode [ 1413.809074][T26500] veth0_vlan: entered allmulticast mode [ 1413.841298][T26500] netlink: 'syz.5.6702': attribute type 30 has an invalid length. [ 1413.841752][T26500] IPVS: length: 240 != 8 [ 1413.844543][T25170] usb 3-1: USB disconnect, device number 18 [ 1414.305726][T26511] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6706'. [ 1414.508370][T25170] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1414.588223][T14161] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1414.659676][T25170] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1414.661066][T25170] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.661124][T25170] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1414.663937][T25170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.663963][T25170] usb 1-1: Product: syz [ 1414.663976][T25170] usb 1-1: Manufacturer: syz [ 1414.663989][T25170] usb 1-1: SerialNumber: syz [ 1414.748360][T14161] usb 4-1: Using ep0 maxpacket: 16 [ 1414.749858][T14161] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1414.751072][T14161] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1414.751120][T14161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1414.753974][T14161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.754020][T14161] usb 4-1: Product: syz [ 1414.754032][T14161] usb 4-1: Manufacturer: syz [ 1414.754049][T14161] usb 4-1: SerialNumber: syz [ 1414.758012][T14161] usb 4-1: config 0 descriptor?? [ 1414.829679][T26527] FAULT_INJECTION: forcing a failure. [ 1414.829679][T26527] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.829742][T26527] CPU: 0 UID: 0 PID: 26527 Comm: syz.2.6712 Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.829765][T26527] Tainted: [L]=SOFTLOCKUP [ 1414.829771][T26527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1414.829782][T26527] Call Trace: [ 1414.829789][T26527] [ 1414.829796][T26527] dump_stack_lvl+0xe8/0x150 [ 1414.829826][T26527] should_fail_ex+0x410/0x560 [ 1414.829858][T26527] should_failslab+0xa8/0x100 [ 1414.829883][T26527] __kmalloc_noprof+0xfe/0x720 [ 1414.829903][T26527] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1414.829934][T26527] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1414.829957][T26527] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1414.829980][T26527] genl_family_rcv_msg_doit+0xda/0x340 [ 1414.830002][T26527] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1414.830025][T26527] ? apparmor_capable+0x126/0x170 [ 1414.830047][T26527] ? bpf_lsm_capable+0x9/0x20 [ 1414.830064][T26527] ? security_capable+0x7e/0x2c0 [ 1414.830093][T26527] genl_rcv_msg+0x614/0x7a0 [ 1414.830114][T26527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1414.830135][T26527] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1414.830232][T26527] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1414.830269][T26527] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1414.830298][T26527] ? __asan_memcpy+0x40/0x70 [ 1414.830315][T26527] ? __skb_clone+0x5c/0x6c0 [ 1414.830339][T26527] netlink_rcv_skb+0x226/0x4a0 [ 1414.830366][T26527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1414.830388][T26527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1414.830422][T26527] ? down_read+0x2be/0x330 [ 1414.830448][T26527] genl_rcv+0x28/0x40 [ 1414.830472][T26527] netlink_unicast+0x8ef/0xa80 [ 1414.830505][T26527] netlink_sendmsg+0x813/0xb40 [ 1414.830534][T26527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.830562][T26527] ? apparmor_socket_sendmsg+0x98/0x360 [ 1414.830587][T26527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.830607][T26527] sock_sendmsg_nosec+0x13a/0x180 [ 1414.830632][T26527] ____sys_sendmsg+0x54e/0x850 [ 1414.830655][T26527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1414.830680][T26527] ? import_iovec+0x73/0xa0 [ 1414.830698][T26527] ___sys_sendmsg+0x2a5/0x360 [ 1414.830715][T26527] ? __lock_acquire+0x747/0x2de0 [ 1414.830737][T26527] ? __pfx____sys_sendmsg+0x10/0x10 [ 1414.830782][T26527] ? __fget_files+0x2a/0x420 [ 1414.830796][T26527] ? __fget_files+0x3a2/0x420 [ 1414.830819][T26527] __x64_sys_sendmsg+0x1b1/0x290 [ 1414.830839][T26527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1414.830874][T26527] do_syscall_64+0x166/0x520 [ 1414.830893][T26527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.830916][T26527] ? clear_bhb_loop+0x70/0xc0 [ 1414.830937][T26527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.830953][T26527] RIP: 0033:0x7f3cbcb9e559 [ 1414.830969][T26527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.830984][T26527] RSP: 002b:00007f3cbdafd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1414.831002][T26527] RAX: ffffffffffffffda RBX: 00007f3cbce25fa0 RCX: 00007f3cbcb9e559 [ 1414.831015][T26527] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 1414.831025][T26527] RBP: 00007f3cbdafd090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.831036][T26527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.831046][T26527] R13: 00007f3cbce26038 R14: 00007f3cbce25fa0 R15: 00007f3cbcf4fa48 [ 1414.831072][T26527] [ 1414.832608][T14161] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1414.832650][T14161] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1415.090970][T25170] usb 1-1: Limiting number of CPorts to U8_MAX [ 1415.202399][T25170] usb 1-1: Not enough endpoints found in device, aborting! [ 1415.292676][T26513] fuse: Unknown parameter 'user_id00000000000000000000' [ 1415.324880][T26513] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1415.434957][T26531] overlayfs: missing 'lowerdir' [ 1415.605013][T26536] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 1415.605040][T26536] CPU: 0 UID: 0 PID: 26536 Comm: syz.4.6713 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.605078][T26536] Tainted: [L]=SOFTLOCKUP [ 1415.605089][T26536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1415.605105][T26536] Call Trace: [ 1415.605115][T26536] [ 1415.605126][T26536] dump_stack_lvl+0xe8/0x150 [ 1415.605169][T26536] sysfs_warn_dup+0x8e/0xa0 [ 1415.605199][T26536] sysfs_do_create_link_sd+0xc0/0x110 [ 1415.605230][T26536] device_add_class_symlinks+0x1cf/0x240 [ 1415.605271][T26536] device_add+0x467/0xb80 [ 1415.605309][T26536] wiphy_register+0x1fc8/0x2ff0 [ 1415.605377][T26536] ? __pfx_wiphy_register+0x10/0x10 [ 1415.605414][T26536] ? __pfx_netdev_run_todo+0x10/0x10 [ 1415.605446][T26536] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1415.605488][T26536] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1415.605533][T26536] ieee80211_register_hw+0x3dbb/0x4b00 [ 1415.605576][T26536] ? ieee80211_register_hw+0x1a11/0x4b00 [ 1415.605632][T26536] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1415.605663][T26536] ? __asan_memset+0x22/0x50 [ 1415.605690][T26536] ? __hrtimer_setup+0x1b7/0x260 [ 1415.605726][T26536] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1415.605769][T26536] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 1415.605840][T26536] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1415.605877][T26536] ? kstrndup+0xbd/0x160 [ 1415.605913][T26536] ? kstrndup+0xbd/0x160 [ 1415.605945][T26536] hwsim_new_radio_nl+0xd8b/0xf90 [ 1415.606000][T26536] genl_family_rcv_msg_doit+0x233/0x340 [ 1415.606036][T26536] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1415.606077][T26536] ? bpf_lsm_capable+0x9/0x20 [ 1415.606103][T26536] ? security_capable+0x7e/0x2c0 [ 1415.606147][T26536] genl_rcv_msg+0x614/0x7a0 [ 1415.606180][T26536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1415.606203][T26536] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1415.606257][T26536] netlink_rcv_skb+0x226/0x4a0 [ 1415.606290][T26536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1415.606316][T26536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1415.606375][T26536] ? down_read+0x2be/0x330 [ 1415.606414][T26536] genl_rcv+0x28/0x40 [ 1415.606449][T26536] netlink_unicast+0x8ef/0xa80 [ 1415.606499][T26536] netlink_sendmsg+0x813/0xb40 [ 1415.606542][T26536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1415.606585][T26536] ? apparmor_socket_sendmsg+0x98/0x360 [ 1415.606622][T26536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1415.606653][T26536] sock_sendmsg_nosec+0x13a/0x180 [ 1415.606692][T26536] ____sys_sendmsg+0x54e/0x850 [ 1415.606726][T26536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1415.606765][T26536] ? import_iovec+0x73/0xa0 [ 1415.606793][T26536] ___sys_sendmsg+0x2a5/0x360 [ 1415.606819][T26536] ? __lock_acquire+0x747/0x2de0 [ 1415.606850][T26536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1415.606883][T26536] ? futex_wake+0x51b/0x5f0 [ 1415.606943][T26536] ? __fget_files+0x2a/0x420 [ 1415.606965][T26536] ? __fget_files+0x3a2/0x420 [ 1415.607001][T26536] __x64_sys_sendmsg+0x1b1/0x290 [ 1415.607033][T26536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1415.607087][T26536] do_syscall_64+0x166/0x520 [ 1415.607115][T26536] ? trace_irq_disable+0x3b/0x140 [ 1415.607142][T26536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.607167][T26536] ? clear_bhb_loop+0x70/0xc0 [ 1415.607197][T26536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.607222][T26536] RIP: 0033:0x7fe2dd19e559 [ 1415.607245][T26536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.607265][T26536] RSP: 002b:00007fe2de012028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1415.607291][T26536] RAX: ffffffffffffffda RBX: 00007fe2dd426090 RCX: 00007fe2dd19e559 [ 1415.607309][T26536] RDX: 0000000000000084 RSI: 0000200000000180 RDI: 0000000000000008 [ 1415.607326][T26536] RBP: 00007fe2dd235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1415.607351][T26536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.607366][T26536] R13: 00007fe2dd426128 R14: 00007fe2dd426090 R15: 00007fe2dd54fa48 [ 1415.607407][T26536] [ 1415.914009][T26537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6715'. [ 1416.440307][T14161] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1416.440746][T14161] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1416.441152][T14161] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1416.441171][T14161] em28xx 4-1:0.0: No AC97 audio processor [ 1416.597652][T14161] usb 4-1: USB disconnect, device number 41 [ 1416.608025][T14161] em28xx 4-1:0.0: Disconnecting em28xx [ 1416.647238][T14161] em28xx: Freeing device [ 1416.695530][T26544] FAULT_INJECTION: forcing a failure. [ 1416.695530][T26544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.695560][T26544] CPU: 0 UID: 0 PID: 26544 Comm: syz.2.6717 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.695582][T26544] Tainted: [L]=SOFTLOCKUP [ 1416.695588][T26544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1416.695599][T26544] Call Trace: [ 1416.695606][T26544] [ 1416.695613][T26544] dump_stack_lvl+0xe8/0x150 [ 1416.695643][T26544] should_fail_ex+0x410/0x560 [ 1416.695671][T26544] _copy_to_user+0x31/0xb0 [ 1416.695689][T26544] simple_read_from_buffer+0xe1/0x170 [ 1416.695720][T26544] proc_fail_nth_read+0x1bb/0x230 [ 1416.695738][T26544] ? common_file_perm+0x20e/0x2b0 [ 1416.695765][T26544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1416.695786][T26544] ? rw_verify_area+0x24a/0x4c0 [ 1416.695805][T26544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1416.695825][T26544] vfs_read+0x213/0xa80 [ 1416.695846][T26544] ? __pfx___mutex_lock+0x10/0x10 [ 1416.695868][T26544] ? __pfx_vfs_read+0x10/0x10 [ 1416.695886][T26544] ? __fget_files+0x2a/0x420 [ 1416.695924][T26544] ? __fget_files+0x3a2/0x420 [ 1416.695945][T26544] ? __fget_files+0x2a/0x420 [ 1416.695976][T26544] ksys_read+0x150/0x270 [ 1416.696003][T26544] ? __pfx_ksys_read+0x10/0x10 [ 1416.696041][T26544] do_syscall_64+0x166/0x520 [ 1416.696060][T26544] ? trace_irq_disable+0x3b/0x140 [ 1416.696078][T26544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.696095][T26544] ? clear_bhb_loop+0x70/0xc0 [ 1416.696116][T26544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.696132][T26544] RIP: 0033:0x7f3cbcb5ed8e [ 1416.696147][T26544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1416.696161][T26544] RSP: 002b:00007f3cbdafcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1416.696179][T26544] RAX: ffffffffffffffda RBX: 00007f3cbdafd6c0 RCX: 00007f3cbcb5ed8e [ 1416.696191][T26544] RDX: 000000000000000f RSI: 00007f3cbdafd0a0 RDI: 0000000000000004 [ 1416.696201][T26544] RBP: 00007f3cbdafd090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.696212][T26544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.696222][T26544] R13: 00007f3cbce26038 R14: 00007f3cbce25fa0 R15: 00007f3cbcf4fa48 [ 1416.696247][T26544] [ 1417.218381][T25079] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1417.276202][ T30] usb 1-1: USB disconnect, device number 19 [ 1417.369259][T25079] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1417.370277][T25079] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1417.370304][T25079] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.370325][T25079] usb 3-1: config 0 has no interface number 0 [ 1417.370375][T25079] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1417.370403][T25079] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1417.370427][T25079] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1417.372787][T25079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.372823][T25079] usb 3-1: Product: syz [ 1417.372840][T25079] usb 3-1: Manufacturer: syz [ 1417.372856][T25079] usb 3-1: SerialNumber: syz [ 1417.377338][T25079] usb 3-1: config 0 descriptor?? [ 1417.406256][T25080] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1417.568304][T25080] usb 6-1: Using ep0 maxpacket: 16 [ 1417.596570][T26548] fuse: Invalid gid '0x0000000000000004' [ 1417.738236][ T30] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1417.794237][T25079] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1417.820507][T25079] usb 3-1: USB disconnect, device number 19 [ 1417.888429][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 1417.889239][ T30] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1417.890647][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1417.890680][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1417.894119][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.894147][ T30] usb 1-1: Product: syz [ 1417.894197][ T30] usb 1-1: Manufacturer: syz [ 1417.894215][ T30] usb 1-1: SerialNumber: syz [ 1417.960621][ T30] usb 1-1: config 0 descriptor?? [ 1418.134882][T26570] fuse: Unknown parameter 'f' [ 1418.235198][ T30] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input451 [ 1418.268587][T25080] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1418.268647][T25080] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1418.269548][T25080] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1418.269596][T25080] usb 6-1: can't read configurations, error -71 [ 1418.448401][T14161] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1418.518595][ T30] rc_core: IR keymap rc-imon-pad not found [ 1418.518617][ T30] Registered IR keymap rc-empty [ 1418.518725][ T30] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1418.518747][ T30] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1418.599069][T14161] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 1418.600275][T14161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1418.600306][T14161] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1418.602539][T14161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.602576][T14161] usb 4-1: Product: syz [ 1418.602593][T14161] usb 4-1: Manufacturer: syz [ 1418.602610][T14161] usb 4-1: SerialNumber: syz [ 1418.637178][T14161] digi_acceleport 4-1:1.0: Digi 2 port USB adapter converter detected [ 1418.654934][T14161] digi_acceleport 4-1:1.0: probe with driver digi_acceleport failed with error -22 [ 1418.700818][ T30] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1418.719377][ T30] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input452 [ 1418.734958][ T30] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:20> initialized [ 1418.856730][T14161] usb 4-1: USB disconnect, device number 42 [ 1418.982802][T26578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6727'. [ 1419.132683][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1419.139382][T25170] usb 1-1: USB disconnect, device number 20 [ 1419.440096][T26592] FAULT_INJECTION: forcing a failure. [ 1419.440096][T26592] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.440137][T26592] CPU: 1 UID: 0 PID: 26592 Comm: syz.5.6732 Tainted: G L syzkaller #0 PREEMPT(full) [ 1419.440165][T26592] Tainted: [L]=SOFTLOCKUP [ 1419.440173][T26592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1419.440185][T26592] Call Trace: [ 1419.440194][T26592] [ 1419.440204][T26592] dump_stack_lvl+0xe8/0x150 [ 1419.440241][T26592] should_fail_ex+0x410/0x560 [ 1419.440280][T26592] should_failslab+0xa8/0x100 [ 1419.440308][T26592] ? ptlock_alloc+0x20/0x70 [ 1419.440327][T26592] kmem_cache_alloc_noprof+0xa1/0x600 [ 1419.440353][T26592] ? ptlock_alloc+0x20/0x70 [ 1419.440377][T26592] ptlock_alloc+0x20/0x70 [ 1419.440396][T26592] pte_alloc_one+0x7a/0x370 [ 1419.440422][T26592] __pte_alloc+0x25/0x1a0 [ 1419.440449][T26592] do_pte_missing+0x2db7/0x34b0 [ 1419.440480][T26592] ? do_raw_spin_unlock+0xf5/0x200 [ 1419.440522][T26592] ? __pmd_alloc+0x40a/0x5c0 [ 1419.440554][T26592] handle_mm_fault+0x1a53/0x3750 [ 1419.440594][T26592] ? handle_mm_fault+0xf1/0x3750 [ 1419.440633][T26592] ? __pfx_handle_mm_fault+0x10/0x10 [ 1419.440675][T26592] ? __lock_acquire+0x747/0x2de0 [ 1419.440701][T26592] ? lock_mm_and_find_vma+0xa7/0x340 [ 1419.440725][T26592] do_user_addr_fault+0x746/0x1340 [ 1419.440761][T26592] exc_page_fault+0x6a/0xc0 [ 1419.440785][T26592] asm_exc_page_fault+0x26/0x30 [ 1419.440805][T26592] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1419.440836][T26592] Code: 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 68 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1419.440858][T26592] RSP: 0018:ffffc90006fefbf8 EFLAGS: 00050202 [ 1419.440876][T26592] RAX: 00007ffffffff001 RBX: 0000000000000050 RCX: 0000000000000050 [ 1419.440890][T26592] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: ffffc90006fefd30 [ 1419.440904][T26592] RBP: ffffc90006fefdf0 R08: ffffc90006fefd7f R09: 1ffff92000dfdfaf [ 1419.440918][T26592] R10: dffffc0000000000 R11: fffff52000dfdfb0 R12: 1ffff92000dfdf90 [ 1419.440933][T26592] R13: ffffc90006fefd30 R14: ffffc90006fefd30 R15: 00002000000003c0 [ 1419.440964][T26592] _copy_from_user+0x7a/0xb0 [ 1419.440985][T26592] do_arpt_set_ctl+0x65e/0xb50 [ 1419.441011][T26592] ? trace_contention_end+0x3d/0x140 [ 1419.441047][T26592] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1419.441073][T26592] ? nf_setsockopt+0x221/0x290 [ 1419.441098][T26592] ? __mutex_unlock_slowpath+0x731/0x900 [ 1419.441145][T26592] nf_setsockopt+0x26f/0x290 [ 1419.441166][T26592] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1419.441197][T26592] do_sock_setsockopt+0x17c/0x1b0 [ 1419.441222][T26592] __x64_sys_setsockopt+0x13d/0x1b0 [ 1419.441248][T26592] do_syscall_64+0x166/0x520 [ 1419.441270][T26592] ? trace_irq_disable+0x3b/0x140 [ 1419.441291][T26592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.441311][T26592] ? clear_bhb_loop+0x70/0xc0 [ 1419.441335][T26592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.441354][T26592] RIP: 0033:0x7ff8c5d9e559 [ 1419.441372][T26592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.441388][T26592] RSP: 002b:00007ff8c6c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1419.441408][T26592] RAX: ffffffffffffffda RBX: 00007ff8c6025fa0 RCX: 00007ff8c5d9e559 [ 1419.441422][T26592] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1419.441434][T26592] RBP: 00007ff8c6c94090 R08: 0000000000000418 R09: 0000000000000000 [ 1419.441510][T26592] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1419.441530][T26592] R13: 00007ff8c6026038 R14: 00007ff8c6025fa0 R15: 00007ff8c614fa48 [ 1419.441562][T26592] [ 1419.445687][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 1419.445710][ T31] audit: type=1326 audit(1792367544.961:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.445956][ T31] audit: type=1326 audit(1792367544.961:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.465356][ T31] audit: type=1326 audit(1792367544.981:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.465992][ T31] audit: type=1326 audit(1792367544.981:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.473845][ T31] audit: type=1326 audit(1792367544.991:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.496584][ T31] audit: type=1326 audit(1792367545.011:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.519742][ T31] audit: type=1326 audit(1792367545.041:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.529465][ T31] audit: type=1326 audit(1792367545.051:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.540566][ T31] audit: type=1326 audit(1792367545.061:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1419.540748][ T31] audit: type=1326 audit(1792367545.061:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26589 comm="syz.2.6731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbcb9e559 code=0x7ffc0000 [ 1420.115914][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6734'. [ 1420.246519][T26609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6736'. [ 1420.261213][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6735'. [ 1420.296301][T26613] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6737'. [ 1420.314297][T26614] IPVS: Error connecting to the multicast addr [ 1420.365228][T26617] IPVS: Error connecting to the multicast addr [ 1420.638332][T25170] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 1420.789041][T25170] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1420.790338][T25170] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.790366][T25170] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1420.790413][T25170] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1420.793829][T25170] usb 6-1: string descriptor 0 read error: -22 [ 1420.793965][T25170] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1420.852402][T25170] usb 6-1: 0:2 : does not exist [ 1420.903792][T25170] usb-storage 6-1:1.1: USB Mass Storage device detected [ 1421.119441][T26627] syz.0.6742(26627): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1421.159309][T26630] fuse: Unknown parameter 'f' [ 1421.187679][T26627] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1421.489024][T25080] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1421.525553][T26644] syz_tun: entered allmulticast mode [ 1421.538253][T26644] dvmrp6: entered allmulticast mode [ 1421.556702][T26643] syz_tun: left allmulticast mode [ 1421.558296][ T30] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1421.639339][T25080] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 1421.641110][T25080] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1421.641142][T25080] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1421.643833][T25080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.643863][T25080] usb 4-1: Product: syz [ 1421.643880][T25080] usb 4-1: Manufacturer: syz [ 1421.643898][T25080] usb 4-1: SerialNumber: syz [ 1421.715349][T25080] digi_acceleport 4-1:1.0: Digi 2 port USB adapter converter detected [ 1421.719696][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 1421.725832][ T30] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1421.726731][T25080] digi_acceleport 4-1:1.0: probe with driver digi_acceleport failed with error -22 [ 1421.731820][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1421.731918][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1421.752711][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.752797][ T30] usb 1-1: Product: syz [ 1421.752840][ T30] usb 1-1: Manufacturer: syz [ 1421.752885][ T30] usb 1-1: SerialNumber: syz [ 1421.781426][ T30] usb 1-1: config 0 descriptor?? [ 1421.840350][T25170] usb 6-1: us122l: couldn't allocate write buffer [ 1421.840897][T25170] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1421.844011][T25170] usb 6-1: USB disconnect, device number 28 [ 1421.923030][T25080] usb 4-1: USB disconnect, device number 43 [ 1421.989148][T26650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1421.996124][T26650] input: syz0 as /devices/virtual/input/input453 [ 1422.043133][ T30] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input454 [ 1422.183150][T26652] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6752'. [ 1422.200684][T14161] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1422.338417][ T30] rc_core: IR keymap rc-imon-pad not found [ 1422.338441][ T30] Registered IR keymap rc-empty [ 1422.338549][ T30] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1422.338569][ T30] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1422.363011][T14161] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1422.368798][T14161] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.378601][T14161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.378692][T14161] usb 3-1: Product: syz [ 1422.378722][T14161] usb 3-1: Manufacturer: syz [ 1422.378765][T14161] usb 3-1: SerialNumber: syz [ 1422.460534][ T30] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1422.464197][ T30] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input455 [ 1422.468661][ T30] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:21> initialized [ 1422.559352][T25079] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1422.612665][T14161] snd-usb-6fire 3-1:1.0: unknown device firmware state received from device: [ 1422.612691][T14161] eb aa 55 00 00 00 00 00 [ 1422.612770][T14161] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1422.719904][T25079] usb 6-1: device descriptor read/64, error -71 [ 1422.849367][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1422.849895][T14161] usb 1-1: USB disconnect, device number 21 [ 1422.855037][T20672] usb 3-1: USB disconnect, device number 20 [ 1422.988309][T25079] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1423.118239][T25079] usb 6-1: device descriptor read/64, error -71 [ 1423.239102][T25079] usb usb6-port1: attempt power cycle [ 1423.568345][T25079] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1423.588900][T25079] usb 6-1: device descriptor read/8, error -71 [ 1423.808367][T25080] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1423.838209][T25079] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1423.859293][T25079] usb 6-1: device descriptor read/8, error -71 [ 1423.978751][T25079] usb usb6-port1: unable to enumerate USB device [ 1423.979281][T25080] usb 3-1: Using ep0 maxpacket: 8 [ 1423.980121][T25080] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1423.981503][T25080] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1423.981532][T25080] usb 3-1: config 0 has no interface number 0 [ 1424.030785][T25080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.030824][T25080] usb 3-1: Product: syz [ 1424.030857][T25080] usb 3-1: Manufacturer: syz [ 1424.030883][T25080] usb 3-1: SerialNumber: syz [ 1424.045775][T26683] trusted_key: encrypted_key: insufficient parameters specified [ 1424.069629][T25080] usb 3-1: config 0 descriptor?? [ 1424.415628][T26688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1424.415666][T26688] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1424.416035][T26688] vhci_hcd vhci_hcd.0: Device attached [ 1424.680628][T25079] usb 34-1: SetAddress Request (2) to port 0 [ 1424.680727][T25079] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1425.089675][T26689] vhci_hcd: connection reset by peer [ 1425.092112][ T8832] vhci_hcd vhci_hcd.0: stop threads [ 1425.092144][ T8832] vhci_hcd vhci_hcd.0: release socket [ 1425.099819][ T8832] vhci_hcd vhci_hcd.0: disconnect device [ 1425.264354][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1425.269839][T26670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.270300][T26670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.304891][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1425.315710][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1425.325402][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1425.347839][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1425.448783][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1425.468546][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1425.472732][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1425.495023][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1425.499235][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1425.958323][ T30] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1426.123484][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 1426.129490][ T30] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1426.134804][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1426.134904][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1426.156564][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.157216][ T30] usb 6-1: Product: syz [ 1426.157262][ T30] usb 6-1: Manufacturer: syz [ 1426.157369][ T30] usb 6-1: SerialNumber: syz [ 1426.178886][ T30] usb 6-1: config 0 descriptor?? [ 1426.407801][ T30] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input456 [ 1426.556316][T26670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.602096][T26670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.616252][T26710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6767'. [ 1426.798816][ T30] rc_core: IR keymap rc-imon-pad not found [ 1426.798842][ T30] Registered IR keymap rc-empty [ 1426.800748][ T30] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1426.800772][ T30] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1426.852882][ T30] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1426.856076][ T30] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input457 [ 1426.866160][ T30] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:33> initialized [ 1426.908561][T26688] syzkaller0: entered promiscuous mode [ 1427.005391][T25080] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1427.005498][T25080] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1427.005648][T25080] uvcvideo 3-1:0.31: Failed to create links for entity 5 [ 1427.005685][T25080] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1427.053709][T25080] usb 3-1: USB disconnect, device number 21 [ 1427.436386][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1427.438823][T20672] usb 6-1: USB disconnect, device number 33 [ 1427.480730][ T60] dvmrp6: left allmulticast mode [ 1427.589521][ T5620] Bluetooth: hci2: command tx timeout [ 1427.902921][ T60] bond0 (unregistering): Released all slaves [ 1427.911957][ T60] bond1 (unregistering): Released all slaves [ 1427.978556][T25080] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1428.057500][ T60] tipc: Disabling bearer [ 1428.067314][ T60] tipc: Left network mode [ 1428.098188][T20672] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1428.153132][T25080] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1428.170553][T25080] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1428.170638][T25080] usb 1-1: config 0 has no interface number 0 [ 1428.170751][T25080] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1428.211086][T25080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.211116][T25080] usb 1-1: Product: syz [ 1428.211131][T25080] usb 1-1: Manufacturer: syz [ 1428.211158][T25080] usb 1-1: SerialNumber: syz [ 1428.227576][T25080] usb 1-1: config 0 descriptor?? [ 1428.249225][T20672] usb 4-1: Using ep0 maxpacket: 8 [ 1428.255165][T20672] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1428.266815][T20672] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1428.266845][T20672] usb 4-1: config 0 has no interface number 0 [ 1428.284442][T20672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.284473][T20672] usb 4-1: Product: syz [ 1428.284489][T20672] usb 4-1: Manufacturer: syz [ 1428.284506][T20672] usb 4-1: SerialNumber: syz [ 1428.312483][T20672] usb 4-1: config 0 descriptor?? [ 1428.440224][T12341] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 1428.571867][T26728] lo: left promiscuous mode [ 1428.574829][T26728] tunl0: left promiscuous mode [ 1428.576645][T26728] gre0: left promiscuous mode [ 1428.630332][T26728] gretap0: left promiscuous mode [ 1428.637455][T26728] erspan0: left promiscuous mode [ 1428.648389][T26728] ip_vti0: left promiscuous mode [ 1428.667511][T26728] ip6_vti0: left promiscuous mode [ 1428.673410][T12341] usb 6-1: New USB device found, idVendor=0db7, idProduct=0002, bcdDevice= 0.dc [ 1428.677727][T26728] sit0: left promiscuous mode [ 1428.703762][T12341] usb 6-1: config 199 has an invalid interface number: 104 but max is 0 [ 1428.703796][T12341] usb 6-1: config 199 contains an unexpected descriptor of type 0x2, skipping [ 1428.703844][T12341] usb 6-1: config 199 has no interface number 0 [ 1428.703891][T12341] usb 6-1: config 199 interface 104 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 1428.703922][T12341] usb 6-1: config 199 interface 104 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 1428.703952][T12341] usb 6-1: config 199 interface 104 altsetting 3 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 1428.704009][T12341] usb 6-1: config 199 interface 104 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 1428.704038][T12341] usb 6-1: config 199 interface 104 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1428.704062][T12341] usb 6-1: config 199 interface 104 altsetting 3 endpoint 0x7 has invalid maxpacket 16, setting to 0 [ 1428.704090][T12341] usb 6-1: config 199 interface 104 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1428.704114][T12341] usb 6-1: config 199 interface 104 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1428.704163][T12341] usb 6-1: config 199 interface 104 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1428.704187][T12341] usb 6-1: config 199 interface 104 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1428.704211][T12341] usb 6-1: config 199 interface 104 has no altsetting 0 [ 1428.860409][T26728] ip6tnl0: left promiscuous mode [ 1428.877728][T26728] ip6gre0: left promiscuous mode [ 1428.893074][T26728] syz_tun: left promiscuous mode [ 1428.914922][T26728] ip6gretap0: left promiscuous mode [ 1428.926579][T26728] bridge0: left promiscuous mode [ 1428.931128][T26728] vcan0: left promiscuous mode [ 1428.934652][T26728] bond0: left promiscuous mode [ 1428.941704][T26728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.943253][T26728] team0: left promiscuous mode [ 1428.972623][T26728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.973739][T26728] dummy0: left promiscuous mode [ 1428.976534][T26728] nlmon0: left promiscuous mode [ 1428.979885][T26728] batadv0: left promiscuous mode [ 1428.982203][T26728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.983038][T26728] vxcan0: left promiscuous mode [ 1428.984874][T26728] vxcan1: left promiscuous mode [ 1428.986201][T26728] veth0: left promiscuous mode [ 1428.988978][T26728] veth1: left promiscuous mode [ 1429.031177][T26728] wg0: left promiscuous mode [ 1429.063518][T26728] wg1: left promiscuous mode [ 1429.083444][T26728] wg2: left promiscuous mode [ 1429.095037][T26728] veth0_to_bridge: left promiscuous mode [ 1429.120687][T26728] veth1_to_bridge: left promiscuous mode [ 1429.141142][T26728] veth0_to_bond: left promiscuous mode [ 1429.143592][T26728] bond_slave_0: left promiscuous mode [ 1429.146388][T26728] veth1_to_bond: left promiscuous mode [ 1429.153534][T26728] bond_slave_1: left promiscuous mode [ 1429.156706][T26728] veth0_to_team: left promiscuous mode [ 1429.170844][T26728] team_slave_0: left promiscuous mode [ 1429.177402][T26728] veth1_to_team: left promiscuous mode [ 1429.191974][T26728] team_slave_1: left promiscuous mode [ 1429.193526][T26728] veth0_to_batadv: left promiscuous mode [ 1429.195235][T26728] batadv_slave_0: left promiscuous mode [ 1429.196599][T26728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.197085][T26728] veth1_to_batadv: left promiscuous mode [ 1429.230049][T26728] batadv_slave_1: left promiscuous mode [ 1429.231237][T26728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.231683][T26728] xfrm0: left promiscuous mode [ 1429.233952][T26728] veth0_to_hsr: left promiscuous mode [ 1429.236393][T26728] veth1_to_hsr: left promiscuous mode [ 1429.252312][T26728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1429.252342][T26728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1429.252439][T26728] hsr0: left promiscuous mode [ 1429.297442][T26728] veth1_virt_wifi: left promiscuous mode [ 1429.305747][T26728] veth0_virt_wifi: left promiscuous mode [ 1429.307259][T26728] virt_wifi0: left promiscuous mode [ 1429.320292][T26728] veth1_vlan: left promiscuous mode [ 1429.330496][T26728] vlan0: left promiscuous mode [ 1429.332429][T26728] vlan1: left promiscuous mode [ 1429.334258][T26728] veth1_vlan: entered promiscuous mode [ 1429.334558][T26728] macvlan0: left promiscuous mode [ 1429.336654][T26728] macvlan1: left promiscuous mode [ 1429.341179][T26728] ipvlan0: left promiscuous mode [ 1429.347083][T26728] ipvlan1: left promiscuous mode [ 1429.348679][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1429.364308][T26728] veth1_macvtap: left promiscuous mode [ 1429.375063][T26728] veth0_macvtap: left promiscuous mode [ 1429.383172][T26728] veth0_macvtap: entered promiscuous mode [ 1429.385509][T26728] macvtap0: left promiscuous mode [ 1429.396338][T26728] veth1_macvtap: entered promiscuous mode [ 1429.398570][T26728] macsec0: left promiscuous mode [ 1429.407502][T26728] geneve0: left promiscuous mode [ 1429.423071][T26728] geneve1: left promiscuous mode [ 1429.423939][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.424005][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.432657][T26728] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1429.434851][T26728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1429.440538][T26728] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 1429.442907][T26728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1429.459223][T26728] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 1429.464352][T26728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1429.488650][T26728] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 1429.489923][T26728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1429.491043][T26728] mac80211_hwsim hwsim129 wlan0: left promiscuous mode [ 1429.492355][T26728] mac80211_hwsim hwsim130 wlan1: left promiscuous mode [ 1429.493502][T26728] mac80211_hwsim hwsim131 wlan2: left promiscuous mode [ 1429.494507][T26728] M: left promiscuous mode [ 1429.496371][T26728] bridge1: left promiscuous mode [ 1429.505613][ T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1429.561655][T26728] bridge2: left promiscuous mode [ 1429.562318][ T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1429.562377][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.562398][ T9] usb 3-1: config 0 has no interface number 0 [ 1429.562443][ T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1429.562469][ T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1429.562520][ T9] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1429.569266][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.569299][ T9] usb 3-1: Product: syz [ 1429.569317][ T9] usb 3-1: Manufacturer: syz [ 1429.569375][ T9] usb 3-1: SerialNumber: syz [ 1429.626385][ T9] usb 3-1: config 0 descriptor?? [ 1429.661395][ T5620] Bluetooth: hci2: command tx timeout [ 1429.701571][T24578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.701710][T24578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.704523][T24578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.704649][T24578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.750765][T25079] usb 34-1: device descriptor read/8, error -110 [ 1429.803728][T26741] ipip0: entered promiscuous mode [ 1429.803905][T26741] veth2: entered promiscuous mode [ 1429.804155][T26741] veth3: entered promiscuous mode [ 1429.846685][T20672] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1429.846818][T20672] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1429.847008][T20672] uvcvideo 4-1:0.31: Failed to create links for entity 5 [ 1429.847068][T20672] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 1429.917373][T20672] usb 4-1: USB disconnect, device number 44 [ 1430.019430][T25080] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1430.039053][ T9] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1430.041638][T25080] usb 1-1: USB disconnect, device number 22 [ 1430.105241][T24562] ip6_tunnel: M xmit: Local address not yet configured! [ 1430.129322][ T9] usb 3-1: USB disconnect, device number 22 [ 1430.174716][T25079] usb usb34-port1: attempt power cycle [ 1430.317896][T26697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.325728][T26697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.325915][T26697] bridge_slave_0: entered allmulticast mode [ 1430.343126][T26697] bridge_slave_0: entered promiscuous mode [ 1430.357462][T26697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.357592][T26697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.357758][T26697] bridge_slave_1: entered allmulticast mode [ 1430.398773][T26697] bridge_slave_1: entered promiscuous mode [ 1430.508862][T26697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.509765][T24562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.516444][T26697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.551504][T26750] coredump: 423(syz.3.6775): Core dump to core aborted: cannot preserve file permissions [ 1430.772538][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6776'. [ 1430.802524][T25079] usb usb34-port1: unable to enumerate USB device [ 1430.817922][T26757] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6778'. [ 1430.862868][T26759] xt_hashlimit: size too large, truncated to 1048576 [ 1430.889182][T26760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6777'. [ 1431.108671][T25079] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1431.226914][T12341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.226950][T12341] usb 6-1: Product: 䩵ᆨ좃식趍怭⽖懨ũ㉍薅忇欃宑諮枢콳㳷䙑梐䍍擈줽夣䞐づ텬ۮ垺覱蟢裟엮癩莅숰䡓䊬⫱廹ꌽ⭳䥘倒⨢旺蛳꯶ୄ씦糣볦ᔨ⬤磠ᤁ뿘⤋孇綈뉠䩩㽎ฮ䨯죓⟞㟟㉴럒൧꣐츁췸䡊莻餢￧깛쪪살㤼囜컑纺較ᒞꇠ阸导ꕊ큼㯯ꉯ얘㐬縩葽 [ 1431.227001][T12341] usb 6-1: Manufacturer: 굏댃䑍蛥὇뉂ဆ兡௾䂻꤀눫鮬䩎鰍嗶攩榢뽟栔⛌⩙듶袂ᑙꩇ컵쵽ҥ䳶搳Ἵ⹳뒓䭎촊፮霵麅셉Ԟ䯽㱖됪皔쀏睚즬㢼膡퓖㳘⍊誅쓖㨹術䖜挐댻乫萝 [ 1431.296540][T25079] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1431.318871][T25079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.361174][T25079] usb 4-1: config 0 descriptor?? [ 1431.386145][T25079] cp210x 4-1:0.0: cp210x converter detected [ 1431.424155][T12341] usb 6-1: can't set config #199, error -71 [ 1431.449195][T12341] usb 6-1: USB disconnect, device number 34 [ 1431.748342][ T5620] Bluetooth: hci2: command tx timeout [ 1431.941931][T26784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6781'. [ 1432.058307][T25079] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1432.058342][T25079] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1432.067171][T25079] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1432.102923][T25079] usb 4-1: USB disconnect, device number 45 [ 1432.128223][T25079] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1432.128887][T25079] cp210x 4-1:0.0: device disconnected [ 1432.349987][T26761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.357350][T26761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.429379][T26761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.432704][T26761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.459581][T26761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1432.459611][T26761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1432.529086][T26761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1432.530962][T26761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1432.533683][T26761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1432.536709][T26761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1432.573020][T26761] batman_adv: batadv0: Interface activated: ipvlan2 [ 1432.588795][T26761] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1432.589064][T24574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.593010][T24577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.593068][T24577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.593110][T24577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.593152][T24577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.593193][T24577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.806513][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.806673][ T8832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.814155][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.814463][ T8832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.975161][T26697] team0: Port device team_slave_0 added [ 1433.003066][T26697] team0: Port device team_slave_1 added [ 1433.091091][T26697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.091109][T26697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.091134][T26697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.093018][T26697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.093033][T26697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.093058][T26697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.238225][T12325] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1433.397063][T24577] ip6_tunnel: M xmit: Local address not yet configured! [ 1433.397327][T24577] ip6_tunnel: M xmit: Local address not yet configured! [ 1433.415986][T12325] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1433.418044][T12325] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1433.418606][T12325] usb 1-1: config 0 has no interface number 0 [ 1433.418657][T12325] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1433.419164][ T9] ip6_tunnel: M xmit: Local address not yet configured! [ 1433.459266][T12325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.459295][T12325] usb 1-1: Product: syz [ 1433.459312][T12325] usb 1-1: Manufacturer: syz [ 1433.459328][T12325] usb 1-1: SerialNumber: syz [ 1433.464685][T12325] usb 1-1: config 0 descriptor?? [ 1433.518982][T26697] hsr_slave_0: entered promiscuous mode [ 1433.594269][T26697] hsr_slave_1: entered promiscuous mode [ 1433.619008][ T8832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.694111][ T60] IPVS: stop unused estimator thread 0... [ 1433.764752][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1433.791878][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1433.810017][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1433.815935][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1433.836264][ T5630] Bluetooth: hci2: command tx timeout [ 1433.836390][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1433.898590][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 1434.229287][T25079] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1434.303119][T14161] ip6_tunnel: M xmit: Local address not yet configured! [ 1434.383131][ T9] ip6_tunnel: M xmit: Local address not yet configured! [ 1434.391865][T25079] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1434.406694][T25079] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1434.406721][T25079] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.406740][T25079] usb 6-1: config 0 has no interface number 0 [ 1434.406803][T25079] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1434.406829][T25079] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1434.406849][T25079] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1434.434865][T25079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.435003][T25079] usb 6-1: Product: syz [ 1434.435054][T25079] usb 6-1: Manufacturer: syz [ 1434.435106][T25079] usb 6-1: SerialNumber: syz [ 1434.503088][T25079] usb 6-1: config 0 descriptor?? [ 1434.593919][T14161] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1434.637323][T26812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.637835][T26812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.740065][T14161] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1434.742914][T14161] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.742947][T14161] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1434.742985][T14161] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1434.780722][T14161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.780755][T14161] usb 4-1: Product: syz [ 1434.780772][T14161] usb 4-1: Manufacturer: syz [ 1434.780790][T14161] usb 4-1: SerialNumber: syz [ 1434.871938][T26812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.896584][T26812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.057048][T14161] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1435.057088][T14161] uvcvideo 4-1:220.0: No valid video chain found. [ 1435.069688][T25079] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1435.089770][T14161] usb 4-1: USB disconnect, device number 46 [ 1435.150260][T25079] usb 6-1: USB disconnect, device number 35 [ 1435.211024][T26812] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1435.233754][T26812] ip6tnl1: entered promiscuous mode [ 1435.269943][T24577] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.270042][T24577] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.270085][T24577] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.270151][T24577] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.316665][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1435.382850][T12325] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1435.396682][T12325] usb 1-1: USB disconnect, device number 23 [ 1435.704030][ T31] kauditd_printk_skb: 79 callbacks suppressed [ 1435.704053][ T31] audit: type=1326 audit(1792367561.221:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e559 code=0x7ffc0000 [ 1435.704654][ T31] audit: type=1326 audit(1792367561.221:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e559 code=0x7ffc0000 [ 1435.707804][ T31] audit: type=1326 audit(1792367561.221:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fcbf9e1eb code=0x7ffc0000 [ 1435.708043][ T31] audit: type=1326 audit(1792367561.221:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e559 code=0x7ffc0000 [ 1435.821155][ T31] audit: type=1326 audit(1792367561.341:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e559 code=0x7ffc0000 [ 1435.856530][ T31] audit: type=1326 audit(1792367561.381:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fcbf9e1eb code=0x7ffc0000 [ 1435.856784][ T31] audit: type=1326 audit(1792367561.381:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e559 code=0x7ffc0000 [ 1435.857088][ T31] audit: type=1326 audit(1792367561.381:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e559 code=0x7ffc0000 [ 1435.857555][ T31] audit: type=1326 audit(1792367561.381:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1fcbf9e559 code=0x7ffc0000 [ 1435.882984][ T31] audit: type=1326 audit(1792367561.381:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26835 comm="syz.3.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e559 code=0x7ffc0000 [ 1435.917047][ T5620] Bluetooth: hci1: command tx timeout [ 1436.050859][T26697] ================================================================== [ 1436.050968][T26697] BUG: KASAN: null-ptr-deref in netlink_has_listeners+0x3d/0x3f0 [ 1436.051009][T26697] Read of size 8 at addr 0000000000000578 by task syz-executor/26697 [ 1436.051070][T26697] [ 1436.051122][T26697] CPU: 0 UID: 0 PID: 26697 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.051188][T26697] Tainted: [L]=SOFTLOCKUP [ 1436.051197][T26697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1436.051212][T26697] Call Trace: [ 1436.051222][T26697] [ 1436.051234][T26697] dump_stack_lvl+0xe8/0x150 [ 1436.051272][T26697] ? netlink_has_listeners+0x3d/0x3f0 [ 1436.051301][T26697] kasan_report+0x117/0x150 [ 1436.051339][T26697] ? netlink_has_listeners+0x3d/0x3f0 [ 1436.051382][T26697] kasan_check_range+0x264/0x2c0 [ 1436.051420][T26697] netlink_has_listeners+0x3d/0x3f0 [ 1436.051453][T26697] devlink_port_notify+0x18c/0x520 [ 1436.051605][T26697] ? __pfx_devlink_port_notify+0x10/0x10 [ 1436.051642][T26697] ? __devlink_port_type_set+0x5e4/0x7a0 [ 1436.051678][T26697] ? __local_bh_enable_ip+0xd6/0x140 [ 1436.051712][T26697] __devlink_port_type_set+0x5f1/0x7a0 [ 1436.051749][T26697] ? __pfx___devlink_port_type_set+0x10/0x10 [ 1436.051788][T26697] ? ip_vs_dst_event+0x171/0xc00 [ 1436.051849][T26697] ? unregister_netdevice_many_notify+0x1a3d/0x2140 [ 1436.051896][T26697] devlink_port_netdevice_event+0x25d/0x3a0 [ 1436.051935][T26697] notifier_call_chain+0x1a5/0x3d0 [ 1436.051965][T26697] unregister_netdevice_many_notify+0x1a76/0x2140 [ 1436.052008][T26697] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1436.052043][T26697] ? __mutex_lock+0x1096/0x1550 [ 1436.052086][T26697] unregister_netdevice_queue+0x2f5/0x340 [ 1436.052118][T26697] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1436.052156][T26697] nsim_destroy+0x275/0x800 [ 1436.052246][T26697] __nsim_dev_port_del+0x14e/0x200 [ 1436.052299][T26697] nsim_dev_reload_destroy+0x288/0x490 [ 1436.052325][T26697] nsim_drv_remove+0x58/0x170 [ 1436.052359][T26697] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1436.052389][T26697] device_release_driver_internal+0x48b/0x880 [ 1436.052468][T26697] bus_remove_device+0x444/0x560 [ 1436.052502][T26697] ? __pfx_bus_remove_device+0x10/0x10 [ 1436.052534][T26697] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1436.052571][T26697] device_del+0x524/0x8f0 [ 1436.052604][T26697] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1436.052633][T26697] ? __pfx_device_del+0x10/0x10 [ 1436.052665][T26697] ? lock_acquire+0x115/0x350 [ 1436.052691][T26697] device_unregister+0x21/0xf0 [ 1436.052724][T26697] del_device_store+0x2b5/0x370 [ 1436.052760][T26697] ? __pfx_del_device_store+0x10/0x10 [ 1436.052793][T26697] ? sysfs_file_kobj+0x1e4/0x230 [ 1436.052816][T26697] ? sysfs_kf_write+0x166/0x260 [ 1436.052857][T26697] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1436.052878][T26697] kernfs_fop_write_iter+0x3a4/0x540 [ 1436.052916][T26697] vfs_write+0x612/0xba0 [ 1436.052947][T26697] ? __pfx_vfs_write+0x10/0x10 [ 1436.052973][T26697] ? do_sys_openat2+0x14e/0x200 [ 1436.053007][T26697] ? kmem_cache_free+0x182/0x650 [ 1436.053046][T26697] ksys_write+0x150/0x270 [ 1436.053070][T26697] ? __pfx_ksys_write+0x10/0x10 [ 1436.053101][T26697] do_syscall_64+0x166/0x520 [ 1436.053128][T26697] ? trace_irq_disable+0x3b/0x140 [ 1436.053157][T26697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.053184][T26697] ? clear_bhb_loop+0x70/0xc0 [ 1436.053212][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.053237][T26697] RIP: 0033:0x7f831975ed8e [ 1436.053261][T26697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1436.053284][T26697] RSP: 002b:00007f8319b4f1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1436.053312][T26697] RAX: ffffffffffffffda RBX: 00005555709e4500 RCX: 00007f831975ed8e [ 1436.053332][T26697] RDX: 0000000000000001 RSI: 00007f8319b4f280 RDI: 0000000000000005 [ 1436.053372][T26697] RBP: 00007f831983637c R08: 0000000000000000 R09: 0000000000000000 [ 1436.053389][T26697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.053405][T26697] R13: 00007f8319b4f280 R14: 00007f8319b4fac0 R15: 0000000000000003 [ 1436.053435][T26697] [ 1436.053446][T26697] ================================================================== [ 1436.053487][T26697] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1436.478055][T26697] CPU: 0 UID: 0 PID: 26697 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.489202][T26697] Tainted: [L]=SOFTLOCKUP [ 1436.493577][T26697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1436.503689][T26697] Call Trace: [ 1436.506998][T26697] [ 1436.509956][T26697] vpanic+0x56d/0xa60 [ 1436.514017][T26697] ? __pfx_vpanic+0x10/0x10 [ 1436.518570][T26697] panic+0xc5/0xd0 [ 1436.522414][T26697] ? __pfx_panic+0x10/0x10 [ 1436.526870][T26697] ? netlink_has_listeners+0x3d/0x3f0 [ 1436.532286][T26697] ? netlink_has_listeners+0x3d/0x3f0 [ 1436.537702][T26697] check_panic_on_warn+0x89/0xb0 [ 1436.542676][T26697] ? netlink_has_listeners+0x3d/0x3f0 [ 1436.548205][T26697] end_report+0x73/0x170 [ 1436.552516][T26697] ? netlink_has_listeners+0x3d/0x3f0 [ 1436.557918][T26697] kasan_report+0x128/0x150 [ 1436.562463][T26697] ? netlink_has_listeners+0x3d/0x3f0 [ 1436.567882][T26697] kasan_check_range+0x264/0x2c0 [ 1436.572861][T26697] netlink_has_listeners+0x3d/0x3f0 [ 1436.578274][T26697] devlink_port_notify+0x18c/0x520 [ 1436.583431][T26697] ? __pfx_devlink_port_notify+0x10/0x10 [ 1436.589117][T26697] ? __devlink_port_type_set+0x5e4/0x7a0 [ 1436.594795][T26697] ? __local_bh_enable_ip+0xd6/0x140 [ 1436.600289][T26697] __devlink_port_type_set+0x5f1/0x7a0 [ 1436.606143][T26697] ? __pfx___devlink_port_type_set+0x10/0x10 [ 1436.612194][T26697] ? ip_vs_dst_event+0x171/0xc00 [ 1436.617163][T26697] ? unregister_netdevice_many_notify+0x1a3d/0x2140 [ 1436.623793][T26697] devlink_port_netdevice_event+0x25d/0x3a0 [ 1436.629740][T26697] notifier_call_chain+0x1a5/0x3d0 [ 1436.634928][T26697] unregister_netdevice_many_notify+0x1a76/0x2140 [ 1436.641389][T26697] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1436.648184][T26697] ? __mutex_lock+0x1096/0x1550 [ 1436.653186][T26697] unregister_netdevice_queue+0x2f5/0x340 [ 1436.659028][T26697] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1436.665305][T26697] nsim_destroy+0x275/0x800 [ 1436.669855][T26697] __nsim_dev_port_del+0x14e/0x200 [ 1436.675001][T26697] nsim_dev_reload_destroy+0x288/0x490 [ 1436.680493][T26697] nsim_drv_remove+0x58/0x170 [ 1436.685197][T26697] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1436.690517][T26697] device_release_driver_internal+0x48b/0x880 [ 1436.696744][T26697] bus_remove_device+0x444/0x560 [ 1436.701717][T26697] ? __pfx_bus_remove_device+0x10/0x10 [ 1436.707383][T26697] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1436.713137][T26697] device_del+0x524/0x8f0 [ 1436.717500][T26697] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1436.723343][T26697] ? __pfx_device_del+0x10/0x10 [ 1436.728230][T26697] ? lock_acquire+0x115/0x350 [ 1436.732949][T26697] device_unregister+0x21/0xf0 [ 1436.738097][T26697] del_device_store+0x2b5/0x370 [ 1436.742993][T26697] ? __pfx_del_device_store+0x10/0x10 [ 1436.748409][T26697] ? sysfs_file_kobj+0x1e4/0x230 [ 1436.753378][T26697] ? sysfs_kf_write+0x166/0x260 [ 1436.758259][T26697] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1436.763663][T26697] kernfs_fop_write_iter+0x3a4/0x540 [ 1436.769012][T26697] vfs_write+0x612/0xba0 [ 1436.773901][T26697] ? __pfx_vfs_write+0x10/0x10 [ 1436.778697][T26697] ? do_sys_openat2+0x14e/0x200 [ 1436.783585][T26697] ? kmem_cache_free+0x182/0x650 [ 1436.788559][T26697] ksys_write+0x150/0x270 [ 1436.792921][T26697] ? __pfx_ksys_write+0x10/0x10 [ 1436.797810][T26697] do_syscall_64+0x166/0x520 [ 1436.802435][T26697] ? trace_irq_disable+0x3b/0x140 [ 1436.807488][T26697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.813678][T26697] ? clear_bhb_loop+0x70/0xc0 [ 1436.818510][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.824433][T26697] RIP: 0033:0x7f831975ed8e [ 1436.828879][T26697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1436.848677][T26697] RSP: 002b:00007f8319b4f1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1436.857295][T26697] RAX: ffffffffffffffda RBX: 00005555709e4500 RCX: 00007f831975ed8e [ 1436.865312][T26697] RDX: 0000000000000001 RSI: 00007f8319b4f280 RDI: 0000000000000005 [ 1436.873321][T26697] RBP: 00007f831983637c R08: 0000000000000000 R09: 0000000000000000 [ 1436.881343][T26697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.889342][T26697] R13: 00007f8319b4f280 R14: 00007f8319b4fac0 R15: 0000000000000003 [ 1436.897379][T26697] [ 1436.901051][T26697] Kernel Offset: disabled [ 1436.905413][T26697] Rebooting in 86400 seconds..