last executing test programs: 58.571356992s ago: executing program 3 (id=5422): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = accept$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0519ecfffffffddbdf25120000001800018014000200626f6e645f736c6176655f310000000008000800000000000800070002000000"], 0x3c}}, 0x40001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000400)=0xffffffc0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x2, 0x4, 0x16e}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14000000120000000000000004000000f3e308933756f8e399ddb1eda82039fa273103662ed89b8746dd8701be724bd6ec814b5e1fb5eb5f1cb9b731f43dae2687525355b5a77ec3777def2915bf243c507e2bd647237af52189ecde09eb0f93bda69c6728e31b9aef2a38f443069218e920c2754571169fb3ed9ea50b43e7553a232b78b21502b3ac2b4a1ee8b69311"], 0x14}], 0x1}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x45, 0x0, @fd_index, 0x0, 0x0, 0xcb1a, 0x8, 0x0, {0x0, 0x0, r2}}) io_uring_enter(r7, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000480)={r12, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000040)=0x84) 56.130883647s ago: executing program 3 (id=5435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 55.92490088s ago: executing program 3 (id=5439): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000d00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000b4d000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, 0x2000, 0x3, 0x2}) 55.840157757s ago: executing program 3 (id=5440): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create(0x29) (async) r1 = epoll_create(0x29) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x110000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x110000000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x10000a, 0x0, 0x80000, {r5}}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x48001, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) read$FUSE(r6, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r6, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000042000503"], 0x18}}, 0x20008804) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x9}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x78, 0x0, 0x0, {0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x8006c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x1, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x8006c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x1, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 55.755454119s ago: executing program 3 (id=5441): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000010104000000000008000001000002069e32953f0c6b68024a42c890ad613dce6332b8b7deb4beb7ce62a27c04b089d76f686d8201b9685e3de7db97386dc990382ba87365a9df299bc9e00e94170f3f1a9725d8715fa4715c3b798c3d64f2ffa791e84d5779746fa05f59570f122dd173289f8295d83f56beeaa86a2319bfcab5bbfdbf4bca1c2f44b113af2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r6 = openat(r5, &(0x7f00000002c0)='./bus\x00', 0x40000, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="1e02040000000000280012800b00010067656e657665000018000280080001000100000005000c0001000000040006001400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r9, 0x0}]) 54.344915945s ago: executing program 3 (id=5448): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x761, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_clone(0x4000, &(0x7f0000000300)="c55f1c5fb4cd4ea4e127ede8efa9474c7333c42a7266955141259f213b7c17f37dc8637d39564eedfc7e89dd9e662011279972beae777350706415deefe5b331b461a1dc2c22fcfbd7c822", 0x4b, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="cfab8b1540e9004065bb") getrandom(&(0x7f0000000040)=""/280, 0xffffffc8, 0x3) r4 = socket(0xa, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xe863, 0x2a}, 0x90) 39.231250401s ago: executing program 32 (id=5448): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x761, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_clone(0x4000, &(0x7f0000000300)="c55f1c5fb4cd4ea4e127ede8efa9474c7333c42a7266955141259f213b7c17f37dc8637d39564eedfc7e89dd9e662011279972beae777350706415deefe5b331b461a1dc2c22fcfbd7c822", 0x4b, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="cfab8b1540e9004065bb") getrandom(&(0x7f0000000040)=""/280, 0xffffffc8, 0x3) r4 = socket(0xa, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xe863, 0x2a}, 0x90) 5.132028089s ago: executing program 5 (id=5766): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb6010203010902", @ANYRESHEX], 0x0) r1 = fanotify_init(0x200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(r1, 0x1, 0x8, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x81d}}}, 0x0) 4.426422475s ago: executing program 2 (id=5773): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xc1ff, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 4.332122437s ago: executing program 1 (id=5774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.503625153s ago: executing program 5 (id=5777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 3.418592636s ago: executing program 1 (id=5779): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000002180)=0xfff) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) syz_fuse_handle_req(r5, &(0x7f0000000100)="441dc4cccf61bbe670c9a162ee3f4131f7ac93e15ff13e5e3266848f4ac39db1d922e8e19d1b0caf9b88b18d9c81f0af935f3fcd6e0a16373e04b463f98d1aeafc3a6ac932c774e6e0611525b8562297592bbc2ffae0c996a6a6e4e9fc86eaf126c239c24ddcb16a04449dcb3115b95e9cac1d35320e1f866472e4f38cdd2b018beccb380d7fc746839f90af4b119b2167ac65109ae202edc80dbb609f86e6141a2be5fa0c0272193ff985952ec06a2ec1e0410448e3d09d842c6cdccf8e59b465aab77390a79c4b81d91d43a1e1bf5861a2f04fbd636f309a91f5a9c33d25f7b03c589dab2f4d4849c2146bbc1c24e4998baefbdbdefc809a8d1550c4695d7c082ec2931863500f279624f7e6da93a78308daf5d34fe0735607e50a9fbaa1c8c5ce53936ab9cfc7cb1ff318f8050c0a669d7c46cd481148740b913d20dcc2fe3efbe4e040f9464b40c399449267ab6a4dd15fa1edc9da962771958a7ca1d56f6a40a28acded95c4c385bbb0cf25d7975e993ef164f1218e335424cacf51f5829d7acaf77f8f4b20ce4bd7e2d9f7650f8f5bdf53bee073543fd7bbdddff61fccfe0bef7f98973239ab8ca31ce6d9a7f7b68cc8061719ddb57ae2eb36b3b4847a4ff38f80118b17185a8551fbf4848bad9798626cd35d5cebd64c5c602a72b99f7862d3e7a48222b8d2604f8c7eb2f9d54908fec591b1565442dbb6066cc69baef5c4df83c421cfd744b95ce864b99cd4de0e62a1242fe2fd01652a7f7fbe9e0ffe66c782e0c5c75a7c722ffcb91f55ddc05409c265bddb7dd5e2bf6bb67aef46ad2710195b9d7941ef7850c028cfb9debd302f59e2d4d8fe7fdc32b433a1f7f087119e2f03a8b04b5fc9d384cabed3cd1cfe21027c0b4cc72b471506736cd6b0b9477adb0c71a1bd17e5e1c04bbf0088e1dd47380195c7892483aed16ff4e1614af924111a32c753b654fc7434028d78f7ba3ae95f622dd8e090769fa2d1cacdbaef4e16e2c984e2f918ad1d4c6c1320266c29c28f31117c8a3f78ddd82086169963d170eb9aa3e08a67fba771c693204cde736ecaa670eac58dc1ee1264c614002f020ac804ca964dc871e4c7d6f45d8f36c9286694bf5404b0962c77bd6e017f9581f349c07a64d71ea8cb603e17ffb1eeb685e64ff661eb711cf239df16061a18f1b5f2b205253fe94e7b88da5f89d25c23ecf7581d13ce04c9142a854bc10d80c448bd32e4ff95a4d4198ec6497af86207717fe41b075245d3733f6b86989b6f928cbb4bd217e71f5f0d0b7f773d4e358d48241db916c8a823029d0dbd3f84c5bd883248e1074cbec741381b5e2f33aa9b11dbf5c8efc44cde79160971f8b99a4508d7f526f05e9b4045c479682867f8e0b3080457b7361ee27d6e41eeb19af163a851db51dfc7622251d43d2f157178b78f505eefe2b74544db9e9192912c3c5e0c05fce01b7769a9a8c7b95c7ca0c9351a24a5b9457839fe24994b5044501eb7dbb37eac1ada55ab8ab1026b0599e2015550a6ac51b0347ed33d1ade8f6284d65b070808c8c23bfe9aa433b4600e18de836649074801f5f0ba422489544eb1dfe70ec72f61cc2bed2dcec65a2acf6f22e8779f30e565bf2353d82dd647e1bfe4e737463e987981418c93944947eca531f74997c9a8faa78a1688fbc525645f4ee9e59d5fa98e19684bd156ec7b70b31f9f5d0a4760e47f72fae3300be641d1d99eb98b4028b898d0a937e9d68df6da9dc11423bc513873a2b3b29b2a226fe1d4ed24a9c16e9c17df2d3c6fc9d08ee229653e1864766376339245b69f7a0f958ad2c218b1a536b4b979dd2b09894b6726bd6e33d5c1abee084c7a9287166befdf18e3a887b35d26564a91ac6c76b07ae0470cc4fa3759523284aa371905696b52edeff38636b8acdbf099d13a2b6ed6f3a10278f3cd56842911ff6b47b58f1123a68831df551072dab8903781188b17da457bcd1c3412625864eb3cc7d9bf51626ba9f20407030d8b8492ef2c87369745ca372ea82a0996737b6ca99a6460de5a24aa4fbc0991482213f0e7849781884c464203b12eae572d92d11d17f9fb34fbdcd24109dc05b89901c12caa034848435982d592936e8c0b0f15be8172fd8967580de63aa4719880ad332ad87957fd29f80bdec08a17bf1a7d3bf9ae4e954c6a5cad1f1fb1342ab76cada4e5d324aaa765c78b0776f2152ed0824f24c2249170fdb29524335ceb34cdc6e2bbee0e4ca2e81c3b5fbdd23fa3c58c7f5d0667142232225da4c19a7ca407c2da4c8a7d20fba24bdfd53e7cfd877a812b626767cce2f99ee2936a37002df1cb5be7e77fc42b474c4276588e0f967303e17bd23743f28dc328e8f689beed0967574261bbc1a6b3115543b43b82e1c99e717e8f0c0df34cd23ff66b65083118af200aa87c3e61c06db197beff820264377a3cd249606f5a0d72647e5a9b85fc582c47e6691e1c737c02266f9c290c712e97738bc32c307ba0c16d0c15af199fa45e056e172e80b0f0d68f344bfbae09a9f94f3dd8a6e70f966a874ea3800bebd327751e01b5ebc766f4800431a7259a9cb88a27a4fe4860f008b4c00ec2be65b959dd1b9dc15384216fe75da6ff9fe769f0042bd0e339c791deaafcd5b26de034554fece99179614a87d40738cd0ee9bd62555c2008f2bdbbfd850cf3367665a58bb5aecf8d89512d73a33e58404ca784537153d75edc0fefd4f5d47fe55a271f70572c4c188afe52bd604248bc429840805caccc0dae96a6988bfc6117727a9ad99ded65ffaef5c5c50d4def8f193083f6d699b9a0e5eaf24d07a730d93a939cb993c8ea23a6ea282aa676e1b200713920050738cc89c5658009297c27ad9f605b1fa92308f768a948eb77a2892b85483ec3664c72532a00ade0207d6e0f9ff12d90d0c525ed2912489836a6d112dd09eb217152fd91bd0870d185bccaa9e7c646bbd36fe857cb36829b224c1ad2d3243bcbdaa4051a606b5c1458f627add211416a5c28fadb44a65169c1bcef2fa8dae2a3e53853ed27816a380832ef3abc8ea3357906c76dba49c27377222106f9b5ca4ed9403f8b3ce751a7002a8c0e12893f4180a07946f94a4f91c81423aae6a77d77bf406f4aac5cf77ffabeedc305738d0bdaccc7b0f9757cd608f9e891f3a6fd4105b948f84cd75830454d1c81e58c6bde555de5e7322c68a696b6c74c3e74178bca0bdcb1691311202f35cebb67c87c81c1c9de7f9b1aa93544ac5df04c11dfeb2bb71655caa89fb4517fd3a1daa553e740a4ae33c0dc976bdfa380d347192dffda313480fb9b77c6f2d12cce6b0951d28a8f6f710dc02edf6dafc93cd87f3ad27f00a063f78ca38fb0d265b976322aa9e30924b60a37fa906054a53056cb607f4303100972af2ea00c41c8db02d04f01a59a241b541c016e69b0578ad67418cada774f285ec2fd83823ae087c05292e5eb9b93c4acacceaf4effc97377038e6a1263d941d8d8f54b677a8103df3bf76a6051bad0953330ffb8c8cdd68167c8e92ce2bf856cf6fa89ca3e6f4e377e5bac1093439a25c07b9789859ac40538fdbfb5b43af4d606223c257b10ef6caecc44d8e396db0327735369eb7767fbe824284ecf77742534a6a5965c1ed88b25afcd512b650b1a90b5eda3e0990425d17ceca1e08a98250de33e9cb8dd146f00acf5e9fed71fa92542eea7a5d29e078b0f590a561934d68ec9585b955c699d339ee4f587f7080c40781b323afeea02b5f690f6555c4fb6b8171b0ece634421835c314468f0391cba486447de54a5e5edf1c154a32ce223c4ed872b34593f501d30eb3ac2cf1b5ee15e20cf9c0cb4acfb1e6d89f1b5f32f08c126a576ac9c85b86eeb930c3f1ee72a41b70856a92addc2dfdda2b33fe252006c3931a7028964259c42eff45079cf2e6a72abeb44690301cc35ec501e808177687bc11693ad4e45797e5f2ffb343f2597ea504926f696e9258c85472e4238faa76d1156af7cda89f3fef5158071e9a20bae9f7fed127e8966b4869a24b2e372c0fa3ac0627e9091afd14a86c7bcc48db479f563051b89878c7701c6af4032ba45712376603966840dd022e8d5b54f80c30e05b986a87a7d1fc99b0cdcc1b0acf4c99a05dbd990559c3635a5881d2c4d23f7be8ea1ab5e4f83376279e8ecd593803a3674acc0ae36c07b50c3143aa252a35b36f57131be8aefafebdb25c6a702700ff2355682e7d6a50177ada7c02b2999217b4aa60268e638b1efa316b2cd15cb4ef9d031acfa2dc38577c6cf93fe536fd6e98931d9fd7df076b93f1cae3bccb2ecac8c7304bb96e6b8d17f14cb2c5026b67b8b8a0ab0dcb08ce13970d30c3571ff64d24c06328d5385de3f18c37669f95f35de2d30e3a3721fe0b49bec68e42bd5ed0fcd2490da357747c93449725f0a4a80d48567b68e516585847b9dc3e6cad9f5065271ca56cb645b97a2b368a60daf5d9add5c218bac5ba0995cfbe9f6255a6a239111ce294a70f50018f651669998a9340a01aa0c423e16c03dad2b0f8cc0af9ba210ab0b456d353a989111178128e00812b34cbe90cad16af7ebc86cabfff0935e0e655c6fe536e2e432071f1da249f11f5937dd679b56d3fd5e784345a7efde8fc886c4177c19e0dd326c1579132c4e75169aebee1728a4a9f258ecdb9a0b43c882f62e682b39895a7b8f9aed8188b8401f00d9046fa9867344d4ee76cc2c28280fc31fc84398215758fe4eec79550efc2ac8126af6391d216ac4e3a22b063868925680e56213302d6a1bd256d6c13178d1255d1022c8664ab6c1dbdacc601381d3ad300cb19480b9bbc35bd11b231bfde95befe250ab89d9daae0f131f050c17b8e51589a171210b469df4a4c5d95736109a35ded00a19b3fb691261d4590cb29a935ade8cc4dd7d023bdf898123b5b72b9838834634e57acb4c5789a49e40427837598fb2b3a71f466b8c7ab0b9773cd98c84260af113a494dffce9b8a825cab0aed4149c40def029ab9c3a03369189ee180afc7af502ccb3c6ed50af87d80e244d5a663edb3dde4b45fc4812907c74860de5dd54065f4f017e00a9e0b6df3b28f6a5da7b1d51469f6e6d0ff116d32a90f5fbd0b7e7afd3256ec99ce54987baf6578c97e2bd08b120be33b98cb43811650f46f69ea130df6937cdbe0262343633680b16e1a2dc317706e8915657ea1e32b05dbceeea0554c6f0345a36ed6f212f77af75c090c44d5043a76e49fd323dfb5b58346a550c0d732ac8c991d4a77cc7ead0ac259a3f63255a735ce1a8de746929e4bf6311407b40e905b97e8876268281639cdeddd698e3715906e63f7c9d6403e4b42f4c0fa2083d91e6e5d44b880a03d6f41b0b0909f6fb789493ecb32774bdf0122a5c7e8c1c38385cea9fd9a235f95d7731b48e94deca481630b8998c5ae3dd2438a9d228a7b7f1fb38a6ef8bd9e37ccb1437ea9157219ba3f2d1d63872065d40314f1aafbee2b315ffd0a69cb1550d78e997c4e2403ae8dcc833bf9e54e145a4c08766fb090c99cec5cf7dba079478713027fbab6f03244f47baa354360d6d7ac067162106657db4be7e80fae25178a0550f425d5214dcadaf44ea99ea41e2a5afdeb22e1133e6d3748265c4947c40ba479b83772945819e8bc34d78a124faf3748ce5f524003540bdf529b22199369654e4cafb3e9bbb20dc9a855f817164b44867b7b146f285780cf3573483798d85265157563ffde156c03d0b5b233fe1a7fe34be0573085d4cee9f9e4ebacf9b7dd708d981c7fbc2ba7f9f57053a6d7da3ab162f5ae03554edb471fa12c4b37290d7dfc819943332a2b5afe2c8185d0986bc27dc7f70530a544b189b87e7471af9811040435b5a1db64c905a94b5bb51876eeb6378a82d8a9864a142e4ebaf48847ffd65b2410554ac5e414404c8ed72cc788f77fd296fad040626f5cc4adbe8e89711aeb58f73746ecb92a910f0de212f8804e368cc1cb1c2f737ffe0f076d9c563b88fd2ec44ed7287ad93cbd4da73de5c787aedaef7038301bffa81e1ac3adc9551be5cfb0c928c98a8145c627e562481593890eb73f6f10e4bbcb4d731e725450cb507f5ee60cf763f31538fdbaef8db325fca8108c7732b67b9d246f4ec07423e98e460e7653ef5cd1307779f8eff8e17831a6bccb54142f6c5d9869e0a5b8182af12cc3a3c3b2d300e5e16a868a2dce782d156261a17770038edcbef522592c631d27ae9e89d40fe3f1044d8594556ff9c5c7c93b607552532908e1232833cfd804142f143bb50fd2d9cc7c9d4812d51260c6932018d524dcd1de744b886046220cf1fc512a0d6dc5f68d2a71c1938b2c16d984289743f712e5a66fd560bc64de623a2b4f879f6b6d554c2361a994ccab499df8612b24204689b604c4ca3065823eaf0d3464b3ea414308e4e27fb44ab72c4c178c0500a18a2f6adda1eab34c3b78ba4c820a536f8e5a7f6b9d79703f73bc63bdbc1d551dc03c6cfcf96f6935fa9881002a6523778e05af641e761932733bce5962722341f7f34a1ad35e3e35813c2b626ed9133f50452b2492e846591d8a42e8ef3333ec1ce387cda54825c5c2dad96515a50cca5dad736d73cdf4cf9dfe055314d308163583e4d36a6ac2a6dfd0bb6de9a6c57607797def82c4a10f2503959ac61f56bba409bd5b63d3416e57bf1cb75aee0e191222a195eb8716346b0eda19d2a78f51cc8b5f8d5059a06e315b885c5f72ac58f502d4c5c1b399bc1030bba9a97b17cf59f333271f486083089d219c4327e564d599ed74c7234715e0c7737bf0cf261013736e78be3b32992d4cf0aa7b0172b83a7558b18dd35d9d61dd07e3a4f93c9280a294e4982e5a7d8a142aef26e0e4c587f1485a81231fac207311d7db351842ec97722bfca487be1b2f7d2b63c1ce9fe35ac17fcdd987c2d7832109860784028e46521298860d7f46d869c0ac152febfca95aca8420d54a25019b4d98ff2342c8c3f162ba450e6c4996edfe348d14aec300d808f2d6c85b10b08673761497e249ab4d20b293ba9279bb9db3593e3c7c2e05ab34cb77621e2d4ce175d3ce0b25c7a0bc85a5df782a81e0a32f89dc6d472b07fbc4efb382a94f6483bc2c2776c088094e89c5a49d5628ad78ce7ecbdbee528a0c184bfc2a4f07442591e27524d75136c3eae29d19c430628916f71ce5ff944c1ab27fd110d8f902bdad1f4973bce379fcf82ceb2899b0c3869ca04042da8ae1ddc904eea800724ede5b54b92f83d2bc65fc34d266188112f2c6128261545a789c82cd76d3f29bcd1a2067af3a78ec756524ef5c33f73e750c9148f9b3e7b04a53a73058c26a7c4047c30696bda0ec170e8e32122684be3387b4701c2af19c3b3624b4b23848871ce51c33c5b9401131e9f5b5783b4d09c5e5b2a6f943f83764dfe01908ecd82cbc948cf69d2a595fb5d3507ce13d24f8f6b1f71ae08858d34b1e20539aaf16288743b80281f2a2db1fdb663fb26a528a0ac27d52e1ad7e49f5e8c15e76b3b269ce383eedd5778fe81fd57feb9d5a71fe140b707fe09e4709f2dcaf61f8d184d31a7c6bbe767ea27af3c97b0c103f5234815f0d1fbb9268bfc84fcebbb6a738da7c7d2007c81f9ccdce18ed017571b0ada3eb21733a1df52db0313d1f7be846e0048ef39538a284d7c8f15abe0010013f8c678531ea6774ee4536e2f84ce995d43658a19a859c349a552efbd58ad64c7e973f7eb3fb5c35a224719fa141be5707c01b52f9885f17891e5722c93c605377f44858ee0255acaad2a1a7cf4d4b12d03adf6bba3afbd23e99776866268833a0867d40a2167916f2ba706781522b623694345af64e23511cd4add8755206e8bd168578452730b5a3a318de3d081d7b13007e3881fad3e7299716ab6509192d6df781917d1a41a595934490e75dbb77ceef99df4e8b1655f7c6787280300000057649f6482bcd99aa76c8b92e8eb98ec6c84d7b34968c1a720e420573491ccfd6534aebebe3b67226c9d664d92bb478f4c335cda6a8116f3be19b13ca294018a9691b86007b3846c0e27b613bded91903fd3976cea5975afeeb4d53de10e6aa595ad308f1dd502726781e33da8d9b589b5cf28427d38f3ee20820a662076a4f6a0a962de55adcb99025a124a9ad2f0c108224aff8287b42221ff790f3f3347987dcdc28557e12bc1c9230b7b12880f473f85983d75fb7652e0138a289a7e6d995be48b477114fcf8c52f9528abd9a8e059232b94e0e6741e79d98de5678452740f8c32531d5e31b5bf9773fa441d135da0284783e9773a15b78f3c1721472a47e80d6b4bfc6d3e99105e6cc1d2e004beab92e4c883ace98b985dcf87b88d143998945a06cd204c6106adfa08c26fb769e1e8228c163639e820c39c20233adb29d0043b5be34ef2b6218910d1c9bae133325d4ca0c8f2db33a9a5d77716b311d9a630a5932611e57133eb9f90a7549b116d67aead1017a1de54f551fa94c3e38fc768e65ce35d8acef134530224a5e5a43e8fe3b6687dfb48281805f24b9ae6e888817569a6f9d698758f2efdddd9908bfe08e66adf1b2bd014b8e064297750f8ba3670d7f338569999f90d9f437fefea9b101323cd638c8ede385c29efb0102824dfb10bba3bb02149935681b918b155210648d503db811a4c361ed562c8581bc5753268ea7ae665bcbd075139d86b938a2ebccf2e327e0be4ede5c1e1416bd5260217363c8e0724bc2640a008903e44407c1d79b30c93e6d370634a99544697e1fb00f3313090931d69d211fbdbb7c9226ef8230c49ad6e1ea9b2fe73fff13997d2c1cf5da28d829f3438c063af9f7e5d7ee3eefce8b805565442d321745200451c266ce8783a0e7cbb43e4b6dc5230c3244250defa5049e8a370f697262f7c35f7efeb6aecea096fde2bc3e0dc2b26bc20ee5fc21ba8c54c4bcd0f0b487f26382e98043fe18e9252f7f5883ede0006c8e378ee10e627771ba4602e16e8768f94fdee69d198fc8fe8f082f6fcdf72194a6fdf33936e5dd121c3a395b400b12f23e38b9fb72f9d4a3e58b2315e710f97a15eb3a76461cdc77947e5a2d0a771c67815752ee42b2b433a7a16909b8a21c5f85297f71db0ad81fd490ba7245b044ed173d03bd7e4c1527d466ba868acb2e7bf297ee96b6b4547235981f4592622a0d78db9f5904ae2becd8a6a85df77be9ccc7c9a447c472d25df6fbcf14e77e83712b784b10f4949bfb3505c0543d9de34e968a83ca322605ad219db671f91052334fe7f259fd0b072d3f8743ab1795962d98297b8de451f93af47554276f1b6d15661b31470a88cdcb0ebdb7564a659ec8de6dba91be1bfe288a4f2894c216ec86eae3f5b4b9ab519ab6fa784d3fb8cb41e77b457e6cce024a7ede2ce90e3c7fb9abfd8852d6a07d3614fc0806e458baf370a4e6bbae200b1021ebcdba8ae6acace1235a6e0bbfa67c087e72922bf910cd78c39429270b9097c97a30541acb246a4aa5e5133cdd2f7ff53cbc4c0d6b026541949d31659fe0e899c1bcd70c1c8775cf192696451d102052aabbbccc4b9adce945de8270f56c7abb34c4cc64a4de49fe3b2d6d3846bea4c200fc4818cbc29b42f3137bda22f1c30179bf65a8970c02fe95cda6c33b57dc4a42bd642d75a28912c218c6e4c3fce1b85f7e73aa3b2f1349a52f55a6bc8bfc8e707b9f215701350394faffc29aee230f3befdeab7a79f08b453c42155f03c9dcc88a8659f5231ecb1ff1d569ce49dbc1c653eab0377c2ac0e631e43d0d65002d3b1c2abbb09831b881f9ba0d62f531e2f5fcbc9ee6bc4decf0e8e4c487552a9f8a7fab9a9b532ad4600458d0732160c21b5fd12984e250ac6f50bdb8e00a1f9fe8d9fe4b4c5fcb583def1c0909ff3bab7e980c57105d40ae0b80002b3a43c663bcd793f80596ad50f99f7ca32194a49ebcd7b623e8b31c344c2411352539141c144e8d6e80f463737dbd0878005693457c7341f86db8d9d846a091c7ff5ad639bbf03a20c7130e9aed2c745b27bd9d7459984fc647732b64b21b2d6510a0c59850ad65ff8407e6dcedece3c8791a72e84d85530da4d82cbd4eb5ef846e861328df902d7c8eb9008b1f0f7e681b0c3557833a83a6bc2862f6cd69fee060eb796305617b80465514544c6416463648598581527b4618d5fe5cf9d90432db2e03efaa4c37223daf9abba782a6f0c2bfdf69c81f41c277123e1eca24ce04320de85b4a589f99e4d6c9dbe1ddbd8bcb2a78fdbcd1e83acaf5fbc8e080b5cc76401437a3858c551203cde584b73e30265a75b23167628aa4a277c0bb67ab2c59adad13015ef3bf44b62bdfc8754b2cc5bcf28e5c78594882eb3f095880e9d5a7719bdff1c870ad0ac30a6e65881621b8e7e497e6930c56b84ce227c17371916b4800382016549b61246c6143349c22d19b6bfa6d1d120addcdf6120a5b252a772ddc73d495ae2ec0401b2fc0ca90128631878ce83538b48881b79648b5d2b9cff7467804f757f949453b251f845ec2dd5293d8d1890ba6af69aeb973920ad2c222c6d9f11073c2475dd99347f9ab9f110e3d4fdf88f7b19c3e2adfe7e99806048c9c97f44e7936e585ed4e10af8e8c5e1ddfaebf2508c7161f97a01dd61acae0db57b409d78d98c30cbe8db2aa9e18b1a8230a24601463115fe0cece698bc58550f9f031dd01fddddf76e7d514481e5dba6fb872e2787891a5529b30863e3b36d55ceb585ab3a5a85e436ce86499f3d4d32d1a67fe1f910a4b7105fe65b350758f5b916f8a9b01ed55addbc73e2693261fe6bd0fe64a3d4e8d58b8956479b15be5b78038fa7b930f313173df02c325710a6358f7268e0be7aa1861c062928f6d5c6b438d22660fd7872ca4c2bd010a675d7b901054cdaf7c74a9ed303cf97f7392faf48647888fbe86368ca6675a83ed451b046f542e289a641b2849377e0a1534371cdffcf5767a9cb939ef5641b30239e42fd277e5355f488caab80f8fff77c770d5102aa55f2c2a73d404241c51034a50e916751da67ec159a856b6dd7946c597cd566b824202ac0b8841656a4e7564cac21f73af79001bfe411c93288a2c3615aa11028c6d5f6b814468ee01f965bfd309bd30857e9ba41733fdae310033e91ac09ff4532194c830f5cd2ca5e9baeb318cf8c2053fb465166943625a7040c332f80c03a58ee37a6d112de0913f7e5e6403f892430e8e3e4a9a04c8e86aa71cda551177c398dee2187de9d6944b7741e451d699791e4cb9beee18344e7c427785abb664e02ec3d8d5fd21dc5fcb0adf9d58019852565da4a830e7cb81c1a1c9c8ffaa0d82fe78b583ebe2d94a043bacc11f5218b18df82232f1efc20001aa48b1e9172a713e7a8a7d9c3f16c26d420ba0526e1bd154c8cae3f7661ef6de83da1441f99a4754f448549191f255fe77840577564e1d2e803d8bf371e97b7edb020cbf1098aa950eed5a0ef0ab1f76980be4c4df29c9927ce71b9f1a83b8e2c4bd63dce14ad9487b5a31d9de8bc6f2b856f33f20b457648185970f6f48e22b3aa4eb736a0acfe31f2b5ceb7d9b80a83aa07ba5ea748c372446059da75c1bc8100", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000001c0)=0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) 3.323458122s ago: executing program 5 (id=5780): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x300000000000000}, {0x0, 0xb}}}, 0xb8}}, 0x0) 3.305175203s ago: executing program 2 (id=5781): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x4000000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x0, 0xd1f}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x20, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) 3.095683824s ago: executing program 5 (id=5782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1a6b2b2c699dde70, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0x8, 0x201, 0x1, 0x6, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x2, 0x8000, 0x4, 0x8, r4}, &(0x7f00000003c0)=0x10) syz_usb_connect(0x3, 0x1d9, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x21, 0x13, 0xfc, 0x8, 0x421, 0x8f, 0x2605, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c7, 0x1, 0xf8, 0x4, 0x0, 0x5, "", [{{0x9, 0x4, 0xa5, 0x8, 0x6, 0x2, 0x2, 0xff, 0x6a, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x1, 0xf8, 0x6}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x8, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x4, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xbc, 0x2, 0x1, [@generic={0xb8, 0x1, "847b00b2d20a1fd6534aab520c2ebf58a1bd80bb0463e2dfe91d9b6e519046ac171cf3fd372e026dedbc84ca74b153d499b539a53f901ac5651d2554be691c4912ee873aac5850686d13264f93d084332d2c00290a4fcf81a24eddb81c5a647dde1a8ec54a2d03081fe62971d63f5d3d7f5e1c97f944b9fa7329c2d41ae87634f086fdaa480d72ed730e8a0d4892f38e71118d86371dee9da82b5464012196dafca7440174d32041236af5287f958d7ecc0dcfd5424d"}, @generic={0x39, 0x30, "0e0fb66cdfc05a87252e1a1a5a463d93dfd37580ba720d0660dd3bf9492ca1121eb9515e6c0149b53a30dba5d85f893508e1a8538dfea4"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x4, 0x3c, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9}, @generic={0x6b, 0xc, "af8a0dbe5b14b39f525a096fe6bcc9809ded5bf89682899edccfcfd0dd467202cb10b80d6bda5711f77d3dfe81596aab9e9f175b3bda82fb4f9213fe0558ad91dbce6515385e15ea41663606d94d0affa28f0bf431080a288f3911c884de89b84058182540d39eef8c"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x601, 0xc, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x77}]}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x1, 0x7, 0x10, 0x8f}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x81, 0xf00, 0x80, [0xff6000, 0xff00c0, 0x60, 0x3eb0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x4, 0x0, 0xfff8, [0xff0000, 0xe92342172dcdcb2a, 0xc00f, 0xff0000]}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x457}}, {0x6c, &(0x7f0000000100)=@string={0x6c, 0x3, "3c52d1bc288a9b953bd0bb13f3498fbc557112565cc992ac8224b70c18351191c18639662331bf11c33230f38301e1be51094c80cd00de1985b29f2279d8ffa0c74ca8e188a0f45f27240282d95a8ca1cdfc156141e02b7e23cb6afaf94f59cae9efb1df286980e5a682"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}, {0xe, &(0x7f00000002c0)=@string={0xe, 0x3, "3211347f75c68df25dbfbe0f"}}, {0xef, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0xbf, &(0x7f0000000680)=@string={0xbf, 0x3, "2c280761d00c7d1fbaa017ad58ff05aff2ad377ea5bb11c2a8b4a4a67a04a7208dcbd52784a78a9364b7d3e4aa66cdd0419c22ab2da2edef3e68e1b61d11882f2d11aac9b9aeb84f8c5760be167cb134c0c4c0faedf24c2683ec7eadfc6b371ba4310379b17923f1558b3c4edcf009be47fd822ef244f587f62140134f5bf5af6587e84a07f80426c340d478944c1886cb1ca0b82f4c28af1c166edc89d651caf21146595d536b2bdff8c3fc3d9b7f280d01dce4b29df29af512b6c73d"}}, {0x80, &(0x7f0000000740)=ANY=[@ANYBLOB="8003d5f7448cf6b7d186dbcd478009ada320f992642da307b3d11c328561327333e3b788bcd349675f42fb2114665612383f09a85561e91c7e9c62fdb3c329c4cb69f82a90e6818ec6bcb7198d5e92f9137e3154e29e0d5b393f53b6d0d1d80450b90100000029545f34c25ac7ea88c688b61187833ddea3b626"]}, {0x94, &(0x7f00000007c0)=@string={0x94, 0x3, "560b6dd4e4ea7a3d836c4839eccdd2c3236085e0a7fcd2f128b130a98652b257adb05b27c325220d35257a042c48e4c13def00e13ce69bd05535293d9d10042df06a4ce1b35f2cf86467f35c883be7575c45b3bc9346917d748873bf5e72538be20fa89739af611e35bd116e5c376fc26dd152748c1cca6da1bd8543983d3816bfaa4a6edfbf13c69f837efe560e235ef238"}}, {0xb9, &(0x7f0000000880)=@string={0xb9, 0x3, "3fcf09ab4060fd0d70350ec9d6dbadb1474066a141cf7a1e0e184e2e0c636387a6a8f68efdec2afd444b9a827efafdcd27c2a76f8d6a9658bb0801308bd60143b42c8034f22d0c16235dbba14d51cb5e0383267f6907b9a49f2bf8623187d24cb3abd04acc5959cb0a1297a2f4582f2d3191dd5e988c554f23590b04f3bd7dc60b55d89970414d9edf41421a25f85554d2f6d8a3dde105f76e696f5910cb69a027b556b245da53cd8b4cd053b8b42190029d2576c56048"}}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x100, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd0, 0x2, {{0x8004, 0x10000, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x7c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x6, 0x6, 0x100, 0xfffffff7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x8613, 0x5, 0x9, 0x2b}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x9, 0x4, 0x6, 0x35e}}, @NETEM_LOSS_GI={0x18, 0x1, {0x322d, 0xc, 0x14, 0x10, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0xfffffffc, 0x6, 0x10001, 0x98}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x9a0}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0xab7a, 0x9, 0x5, 0x3, 0x7}}]}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef"], 0x0) 3.027920672s ago: executing program 2 (id=5784): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x3c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0xde}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x1a, 0xd2, 0x0, 0x1, [@typed={0x4, 0x146}, @generic="06f7b93e4e2da0a483180f51dcf6", @nested={0x4, 0xc7}]}, @nested={0x4, 0xd6}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) 2.954917424s ago: executing program 2 (id=5785): r0 = mq_open(&(0x7f0000000440)='\x7fmdF\x17\x16\xbc\xecRHX\x99S\x06\xa9\xb8e\xceoL\xe4zR\xc4\xe5\xf0\xd28\x18\xb0\xac\x00\xa9\xfd\xc3\xa7|\xda\x8b\xa2\xea$\xa4_\xc6\x00\x06\xbf\x05\x12\xe9\x89\x8dH\x18G,\xd3a]5w\x9aZ\x1f\x87\xc4\x06\xcf\xb3\xbe\xa8\xa848\xcd\xcfw\xd4\xd5\x9a,p\x89\"dM\xf3\xf7~X\xdct\xea(t>.F\xb9\'u\x1f\xa7hr3\xc0g\x9a\xba\xa10\x83\x12qI?\x82\x82\xea~5\x88\x06\x00\x00\x00\x00\x00\x00\x00n|o\xae\xe9\xe3 K/\xe8$\\\xfb\x95E\xcdt\x98E\x85\xc4\x0e\xa8\xebvFC\xb7]\xf3\xa5|\x05#\t\x14N\x80\x1fs\"\x8e\x9b\x83\x02[r\x9b\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x118, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x1, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x23}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@t={0x81, 0x8, 0x5, 0x6}) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000020bc20005500000000000109022d00010000600209040000050301010009210000360122050009058103"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x1b, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xcc, 0x26, 0x89, 0x8, 0x9710, 0x7820, 0x6122, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x7, 0x7, 0x20, 0xfc}}]}}, 0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x101402, 0x85, 0x20}, 0x18) r5 = socket$kcm(0xa, 0x2, 0x0) close(r5) socket$kcm(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={r1, 0x68, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x9, @private0, 0x100}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x2, @local, 0xfff}]}, &(0x7f0000000340)=0x10) r6 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 1.815563769s ago: executing program 0 (id=5787): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582002c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x735042) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000180)) sendmsg$kcm(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001500)="075505b80715806e701dd59ba9a31a755697b68b9d4181d7e8876e9262e9fd65b116b6cd2c824263de36a821e68ff2f498a9bd98f485e0d102e2225d15451d828173e35c73f109d34fecbfdf0b925e408e7248cffc613539003f449d12b145dc01d683aa4e3d43222da73e8c54135d6b4ec9a135fafded26859c1331f83f073c631cf4d44f0f185585d431106a0a77ea41b206008af917ef2b66be41f014b849e39724ddf6ed051119c66d25d15f48bdf0d12d432fefc52ae6d59351f61b0842752b60c6e6256e95ddc89ffd56ce6b0a77", 0xd1}, {&(0x7f0000001600)="dade37c8ce939f0760270161a79f3446cf933f3ebdc8691d587b86721bc4b7f0988bd5c70cc0672b202e041d963504f08838901a75b922f161fbe661b309fb898626a5ab82c6050ab07b742d3aff70e36fbda5087fe8d371a67d0dddaf871080432320a3fbc481f3c664100657b88fef7c5efed7c3ea0792d9f6516b3ffd65cbf9d528f347012cb06808537f9a342868e7245cc64554882773758dce44f1c85595087c", 0xa3}, {&(0x7f00000016c0)="64200e0c89a72a896bfeda611207bf25222531875f3c53069d926cd1568691fafda3a96fcb1f9899ba3e1809ac768879a28185a8b9d03666747998f5a18b436f8d316613ded4d8272ed4bde23fbc6551c6c851c3c91a348863e46083630362444798a29af937b7d305a6da22b0394380873d204f8a9d0d12ec744c7f022d25c7b6fcfde93956db57796ad46d15aa4fa505db11a9d5325b783b01cb6567ffad08cb1250081a53c4998828baa9691c5b8d2b76d64329e2c3dad3e675bed622808dd4c6b792aff9f4d8ee8c5ad04ec5afcdbd94234e97cffe77d7567445974ad15537041efdc759c145b56ce07a4399111d9cd65383", 0xf4}, {&(0x7f0000000280)="51c0c5a969fb454db4e6eb1170db3ee5fabef5d8d76b", 0x16}, {&(0x7f0000000400)="154aaf00002251e7225f83bb3315eae283376a4f09e1af3662118475a5a57251d9083608af5a92e169b79f4d42acb6cc16b533ca84baa7ba10c2b7dc18ce3381fce145c47e2c9e795c29d2aa09c5597983bf0858ff2d37295db2f378d8e8d79454b1a21a843be9bed4909ff112db9f02c1", 0x71}, {&(0x7f00000017c0)="996e3531f0e26252911bf393ec875c45a62a28099aa8599998fc7fe3f7fcf719eb4a5dbc3f22263afb45c84c0622e0bb1291b2f63d6207f27238affb958b9dd7a5d181f820a279b4fc94eae9ab2d413e05cabdacc886182f985b8617f9dec2286c2e0403685f8f04600c03f44698ff055f7b62bcce3c938525c65f17274d51c8b0b8a9863430834f717b2e21258d681e4e8ac6f57b0218f87b671f8064dcafc00758dbe1d79ebe8193f6fff1745c2dbcba49de15015ce6ac69eda79f01421089874a8eba4950dcfc1488003ef4892ac099c9ab6f10a6cb33", 0xd8}, {&(0x7f00000018c0)="97a20aeecf6ba9b50977378ae4b2c9ea7b9fb54667955233d5bbc9844aff6ae3d438fe216e3a1dd5a4fcec994c689a54428446200ba9cfd5a9ab88d803ded58a80c5539a3a1a7e5157dd588b9955fd4e46ac48bfc03420d3c0a09fa58a3d5e890fe5a9bcdaf2ca65b89c1785b72cb6b83738b5db2875b2e36d6c6d227ce2225ca0e6a8167b95e12137169cf42dd9e7018bf30b88975ac7a7400433c5f6040e15ce0796a019592315eae489e5fda281548a8dfe917baa73927c6da9ee5971f20802e8", 0xc2}, {&(0x7f00000002c0)="184262b482d6d367be2a34dd14882a479006", 0x12}], 0x8, &(0x7f0000001a40)=[{0x58, 0x112, 0x60058d4e, "7a0a447555c68e339d9b4f80f3b9d842623ce72906fa06fe7ec46a65e87e368ea453d8e2510beff1bd91d768fbf2bef99cab6db309045048458896e63f3f2af071bcbddd6e06"}, {0x108, 0x3a, 0x7, "1e676bf7b710a5c6508ae56c6265f0d2115687620a171966b8f8ad80af03945eae77d205b4a0bfee6c49307394187e7314f3dec187c44116db8839483c099793cbb879af8a8e7497aae4d350cfbfb397d5b5482842edbda5bdebbce070358c2a59cbf888ea2474e2b884e7632b6ec13bcc5b1bf0e852b3ab0b19524dec7c5835527ce9162ad5364c2c6cb31fe75eebee5cdbb330291c26e2d6ef2b3b9a056bc344422dbcd7b1977694093812c7504562cf5992cff498b97178375ecf1567fbf0a5913191c71d7646dc24cf7f03422b537084627492244890c4733f6d7de0f99dae25b8b492121247cd9e6876267d85b4f98e20cae1c6be9a"}, {0x20, 0x116, 0x2, "be00eef78d1b5788478f3798"}], 0x180}, 0x800) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0x1, &(0x7f0000000480)='\x00', 0x5}) set_mempolicy(0x2002, 0x0, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 1.561363107s ago: executing program 0 (id=5790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) 1.480192624s ago: executing program 1 (id=5791): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000680001000000fe0000000000020000000000000008000600f200000008000500", @ANYRES32=r2], 0x28}}, 0x4000) 1.391756622s ago: executing program 1 (id=5792): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff01000000000000000000000300000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008"], 0x490) 1.376972489s ago: executing program 1 (id=5793): syz_emit_ethernet(0x5a, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010100}]}, @ssrr={0x89, 0xb, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xf00}}}}}}, 0x0) 1.349760119s ago: executing program 4 (id=5794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x0, 0xffed}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4044898}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000005", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.315913858s ago: executing program 1 (id=5795): r0 = syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000000844060e804000010303010902600003010400030904001b00010100000a24010e000a00020102090401000008020000090401010101020000090501"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trusted: '], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d6, &(0x7f00000001c0)={0x0, 0x8af6, 0x80, 0x1, 0x37c}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x7, 0x38c, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) socket$tipc(0x1e, 0x2, 0x0) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.155656077s ago: executing program 0 (id=5796): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e22, 0xf, @mcast1, 0xffffeffd}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.14685645s ago: executing program 5 (id=5797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="440000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="30050400b5b30400140012800c0001006d616376746170000400028008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x8000002) 1.126340332s ago: executing program 0 (id=5798): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0964719"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES16=r0, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbbfaae60080000000000001000000000000000000007efff10000400000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000008000", [0x8000000000008, 0xffffffff9673e35d]}}) 1.015825417s ago: executing program 4 (id=5799): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x98, 0x0, 0x138, 0x98, 0x210, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x3f000000, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x71}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x22, 0x31, 0x4, 0x1d, 0x4, 0x38, 0x3c, 0x1c, 0x18, 0x11, 0x1b, 0x28, 0x3, 0x1e, 0xe, 0x1], 0x2, 0x7, 0x382}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 892.23233ms ago: executing program 4 (id=5800): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582002c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x735042) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000180)) sendmsg$kcm(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001500)="075505b80715806e701dd59ba9a31a755697b68b9d4181d7e8876e9262e9fd65b116b6cd2c824263de36a821e68ff2f498a9bd98f485e0d102e2225d15451d828173e35c73f109d34fecbfdf0b925e408e7248cffc613539003f449d12b145dc01d683aa4e3d43222da73e8c54135d6b4ec9a135fafded26859c1331f83f073c631cf4d44f0f185585d431106a0a77ea41b206008af917ef2b66be41f014b849e39724ddf6ed051119c66d25d15f48bdf0d12d432fefc52ae6d59351f61b0842752b60c6e6256e95ddc89ffd56ce6b0a77", 0xd1}, {&(0x7f0000001600)="dade37c8ce939f0760270161a79f3446cf933f3ebdc8691d587b86721bc4b7f0988bd5c70cc0672b202e041d963504f08838901a75b922f161fbe661b309fb898626a5ab82c6050ab07b742d3aff70e36fbda5087fe8d371a67d0dddaf871080432320a3fbc481f3c664100657b88fef7c5efed7c3ea0792d9f6516b3ffd65cbf9d528f347012cb06808537f9a342868e7245cc64554882773758dce44f1c85595087c", 0xa3}, {&(0x7f00000016c0)="64200e0c89a72a896bfeda611207bf25222531875f3c53069d926cd1568691fafda3a96fcb1f9899ba3e1809ac768879a28185a8b9d03666747998f5a18b436f8d316613ded4d8272ed4bde23fbc6551c6c851c3c91a348863e46083630362444798a29af937b7d305a6da22b0394380873d204f8a9d0d12ec744c7f022d25c7b6fcfde93956db57796ad46d15aa4fa505db11a9d5325b783b01cb6567ffad08cb1250081a53c4998828baa9691c5b8d2b76d64329e2c3dad3e675bed622808dd4c6b792aff9f4d8ee8c5ad04ec5afcdbd94234e97cffe77d7567445974ad15537041efdc759c145b56ce07a4399111d9cd65383", 0xf4}, {&(0x7f0000000280)="51c0c5a969fb454db4e6eb1170db3ee5fabef5d8d76b", 0x16}, {&(0x7f0000000400)="154aaf00002251e7225f83bb3315eae283376a4f09e1af3662118475a5a57251d9083608af5a92e169b79f4d42acb6cc16b533ca84baa7ba10c2b7dc18ce3381fce145c47e2c9e795c29d2aa09c5597983bf0858ff2d37295db2f378d8e8d79454b1a21a843be9bed4909ff112db9f02c1", 0x71}, {&(0x7f00000017c0)="996e3531f0e26252911bf393ec875c45a62a28099aa8599998fc7fe3f7fcf719eb4a5dbc3f22263afb45c84c0622e0bb1291b2f63d6207f27238affb958b9dd7a5d181f820a279b4fc94eae9ab2d413e05cabdacc886182f985b8617f9dec2286c2e0403685f8f04600c03f44698ff055f7b62bcce3c938525c65f17274d51c8b0b8a9863430834f717b2e21258d681e4e8ac6f57b0218f87b671f8064dcafc00758dbe1d79ebe8193f6fff1745c2dbcba49de15015ce6ac69eda79f01421089874a8eba4950dcfc1488003ef4892ac099c9ab6f10a6cb33", 0xd8}, {&(0x7f00000018c0)="97a20aeecf6ba9b50977378ae4b2c9ea7b9fb54667955233d5bbc9844aff6ae3d438fe216e3a1dd5a4fcec994c689a54428446200ba9cfd5a9ab88d803ded58a80c5539a3a1a7e5157dd588b9955fd4e46ac48bfc03420d3c0a09fa58a3d5e890fe5a9bcdaf2ca65b89c1785b72cb6b83738b5db2875b2e36d6c6d227ce2225ca0e6a8167b95e12137169cf42dd9e7018bf30b88975ac7a7400433c5f6040e15ce0796a019592315eae489e5fda281548a8dfe917baa73927c6da9ee5971f20802e8", 0xc2}, {&(0x7f00000002c0)="184262b482d6d367be2a34dd14882a479006", 0x12}], 0x8, &(0x7f0000001a40)=[{0x58, 0x112, 0x60058d4e, "7a0a447555c68e339d9b4f80f3b9d842623ce72906fa06fe7ec46a65e87e368ea453d8e2510beff1bd91d768fbf2bef99cab6db309045048458896e63f3f2af071bcbddd6e06"}, {0x108, 0x3a, 0x7, "1e676bf7b710a5c6508ae56c6265f0d2115687620a171966b8f8ad80af03945eae77d205b4a0bfee6c49307394187e7314f3dec187c44116db8839483c099793cbb879af8a8e7497aae4d350cfbfb397d5b5482842edbda5bdebbce070358c2a59cbf888ea2474e2b884e7632b6ec13bcc5b1bf0e852b3ab0b19524dec7c5835527ce9162ad5364c2c6cb31fe75eebee5cdbb330291c26e2d6ef2b3b9a056bc344422dbcd7b1977694093812c7504562cf5992cff498b97178375ecf1567fbf0a5913191c71d7646dc24cf7f03422b537084627492244890c4733f6d7de0f99dae25b8b492121247cd9e6876267d85b4f98e20cae1c6be9a"}, {0x20, 0x116, 0x2, "be00eef78d1b5788478f3798"}], 0x180}, 0x800) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0x1, &(0x7f0000000480)='\x00', 0x5}) set_mempolicy(0x2002, 0x0, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 837.611436ms ago: executing program 5 (id=5801): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r4, 0x3514, 0x9141, 0x69, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000006c0)=[{0x0}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f0c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000009140)}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r11], &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[r12], &(0x7f0000000180), 0x0, 0xff}) 686.483613ms ago: executing program 4 (id=5802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000003f40), 0x0, 0x8010) r2 = socket(0xa, 0x3, 0xff) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x3, 0x5, 0x3}, 0x10) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r6, &(0x7f0000002180)=ANY=[@ANYBLOB="1001000000000000", @ANYRES64=r7, @ANYBLOB="0700000000000014"], 0x110) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r8, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0x40405515, &(0x7f0000000040)={0x9, 0x6, 0xffff, 0x2, '\x00', 0x61fb}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5e9ef8ac1000ffff25bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="320a0500230800000c001a800400070004000700080029ffffffff00"], 0x34}, 0x1, 0x0, 0x0, 0x40040c1}, 0x8ae257a062c83560) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r10, &(0x7f0000000240)='1', 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000280)={'erspan0\x00'}) 362.697227ms ago: executing program 0 (id=5803): syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaeaaaaaaaaaaa08bce417458f0045000030000000004a7c9813c1b0c614010190780a010102b7d6cf1ba21414aa04019078640101024510000100000000040600"], 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x4, 0x4) io_uring_setup(0x3185, &(0x7f0000000200)={0x0, 0xd3d0, 0x1000, 0xfffffffe, 0x345}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_VOLTAGE(r3, 0x6f43, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xf0200e7, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000456000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 352.993464ms ago: executing program 2 (id=5804): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100060808004149004001040800", 0x58}], 0x1) 251.88207ms ago: executing program 4 (id=5805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 170.266574ms ago: executing program 4 (id=5806): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000fec000/0x14000)=nil, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_io_uring_setup(0x5c3, &(0x7f0000000140)={0x0, 0x2, 0x1000, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7b75e7eff0000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b508000000000000850000000000950000000000000000000000000000000000ab633ed0c838db4c97260dd6ba44cd8feba3176c0508bc027fc0a807a9f4974b60270b992a12ca4173565b315e46e135ac7052827196625e3f462caa6a140102037f7e55e1d33825c6dabc80ffe644694d5885ad2a1dfe2b29e36e02226e5adaef9dd25be033db672108634c2b3b98a01b2a5495775e10b29ad2d0fc78dab427a656167fb6a13a90aef2536124c1af593b822a88e9abbe1d5f44dccc05fa0b2a4c539b8470f95e39d50f5df2ed44e423045eeaf12486f7821a9f026efb68034806f35e593317ce16c532415617b916b9c7f2410742ba1fd747"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x0) fchdir(r8) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x30) memfd_create(0x0, 0x33e44fdd1f3c9db) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r12 = open(&(0x7f0000000400)='./bus\x00', 0x5311c2, 0xe7) write$FUSE_INIT(r12, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4e, 0x212130, 0xfffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}}, 0x50) getpeername$qrtr(r8, &(0x7f0000000200), &(0x7f0000000300)=0xc) 62.497537ms ago: executing program 0 (id=5807): syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x2000000}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x2, 0x80805, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYRESHEX=r6], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10000, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)) 0s ago: executing program 2 (id=5808): syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000740)=ANY=[@ANYBLOB="290369872b478735e3e26568d0288c0700000094ef7df3e24282c06714d08ef70f3d37785da8f9dedf"]}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0xb0, 0x30, 0x2, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_ife={0x98, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x10000000, 0x7, 0x4}}}]}, {0x51, 0x6, "ef24aca1c2559602e2ee3721ed1d9df846f5a608c5d9cee65bb50d5834ba897653b361b4f46fed2968c8108bc9783f1fa1f25ff5eca70ac99449a46cd9c480c56b47323ce8a42e57662111e959"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xe}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) kernel console output (not intermixed with test programs): 7 using dummy_hcd [ 964.071837][ T5889] usb 1-1: USB disconnect, device number 4 [ 964.078713][ T5889] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 964.251366][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.264767][ T5889] wwan wwan0: port wwan0mbim0 disconnected [ 964.273157][ T5823] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 964.315076][ T5823] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 964.334699][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.353000][ T5823] usb 3-1: Product: syz [ 964.380042][ T5823] usb 3-1: Manufacturer: syz [ 964.384780][ T5823] usb 3-1: SerialNumber: syz [ 964.395937][ T5823] usb 3-1: config 0 descriptor?? [ 964.574666][T22307] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5219'. [ 964.663336][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 964.734847][ T29] audit: type=1800 audit(1773214234.794:1897): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5235" name="bus" dev="tmpfs" ino=2380 res=0 errno=0 [ 964.843872][ T5889] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 964.853253][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.880895][ T5889] usb 1-1: config 0 descriptor?? [ 964.910101][ T5889] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 964.920696][ T5889] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 964.935030][T21085] usb 3-1: USB disconnect, device number 7 [ 965.087359][T22356] loop4: detected capacity change from 0 to 7 [ 965.097684][ T5889] usb 1-1: USB disconnect, device number 5 [ 965.121007][ T9797] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 965.129415][ T9797] loop4: partition table partially beyond EOD, truncated [ 965.137512][ T9797] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 965.154252][T22356] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 965.163174][T22356] loop4: partition table partially beyond EOD, truncated [ 965.170734][T22356] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 965.205765][ T9797] udevd[9797]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 965.247144][ T9797] udevd[9797]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 965.309393][T22360] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5237'. [ 965.503363][T22365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.597079][T22370] ipt_REJECT: ECHOREPLY no longer supported. [ 965.643748][T22371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.666305][T22315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.743754][T22371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.772763][T22371] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5240'. [ 965.839040][T22377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.024643][T22377] team0: Port device bond0 added [ 966.053738][T22382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.153181][T22381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.181822][T22382] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5244'. [ 966.602818][ T5823] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 966.834658][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.846025][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.860091][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.882502][ T5823] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.892695][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.914111][ T5823] usb 5-1: config 0 descriptor?? [ 967.329116][ T5823] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 967.599878][T22404] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5254'. [ 967.615876][T22405] syzkaller1: entered promiscuous mode [ 967.621511][T22405] syzkaller1: entered allmulticast mode [ 967.642460][T22404] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 968.123991][T22422] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 968.662217][ T5823] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 968.789907][T22432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.804451][T22432] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5263'. [ 968.862060][ T5823] usb 5-1: device descriptor read/64, error -32 [ 969.211968][ T5823] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 969.265349][T22434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.341968][ T5823] usb 5-1: device descriptor read/64, error -32 [ 969.592099][T22441] loop4: detected capacity change from 0 to 7 [ 969.605279][ T5823] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 969.617011][T22441] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 969.622700][T22441] loop4: partition table partially beyond EOD, truncated [ 969.630129][T22441] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 969.702716][ T9797] udevd[9797]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 969.730270][T22445] netlink: 'syz.4.5268': attribute type 4 has an invalid length. [ 969.738257][T22445] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5268'. [ 969.822027][ T5823] usb 5-1: device not accepting address 4, error -71 [ 969.884184][T22451] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5271'. [ 970.280115][T22468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.301286][T22468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.313687][T22468] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5275'. [ 970.457924][T22472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 970.461992][ T5823] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 970.465777][T22472] IPv6: NLM_F_CREATE should be set when creating new route [ 970.480789][T22472] IPv6: NLM_F_CREATE should be set when creating new route [ 970.505501][ T5823] usb 5-1: device firmware changed [ 970.514069][ T5889] usb 5-1: USB disconnect, device number 4 [ 970.667075][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 970.859868][T22452] syzkaller0: entered promiscuous mode [ 970.924676][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 970.954314][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 970.997121][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 971.027981][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 971.259886][T22487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5283'. [ 971.328379][T22452] syzkaller0: entered allmulticast mode [ 971.331432][ T5889] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 971.344767][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.354513][ T5889] usb 5-1: config 0 descriptor?? [ 971.436719][T22487] bond2: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 971.449382][T22487] bond2 (unregistering): Released all slaves [ 971.505612][T22474] tipc: Enabled bearer , priority 0 [ 971.537141][T22436] tipc: Resetting bearer [ 971.561279][ T5889] hdpvr 5-1:0.0: firmware version 0x0 dated [ 971.571959][ T5889] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 971.682944][ T5889] hdpvr 5-1:0.0: device init failed [ 971.697962][ T5889] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 971.719280][ T5889] usb 5-1: USB disconnect, device number 5 [ 971.822453][T22436] tipc: Disabling bearer [ 971.840107][T22495] pim6reg: entered allmulticast mode [ 971.846300][T22503] pim6reg: left allmulticast mode [ 972.056787][T22510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5290'. [ 972.284983][T22520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.305528][T22520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.319320][T22520] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5294'. [ 972.372077][ T796] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 972.526011][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5295'. [ 972.537658][ T796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 972.550595][ T796] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7 [ 972.570073][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5295'. [ 972.585110][ T796] usb 5-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice= 0.40 [ 972.594935][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.603392][ T796] usb 5-1: Product: syz [ 972.619394][ T796] usb 5-1: Manufacturer: syz [ 972.632377][ T796] usb 5-1: SerialNumber: syz [ 972.907327][ T796] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 972.914701][ T796] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 972.922110][ T796] usb 5-1: unit 9 not found! [ 972.926982][ T796] usb 5-1: unit 5 not found! [ 973.051506][ T796] usb 5-1: USB disconnect, device number 6 [ 973.460790][T22535] loop4: detected capacity change from 0 to 7 [ 973.475644][T22535] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 973.481135][T22535] loop4: partition table partially beyond EOD, truncated [ 973.488440][T22535] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 973.579599][ T9797] udevd[9797]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 973.937553][ T9797] udevd[9797]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 974.877056][ T29] audit: type=1326 audit(1773214244.964:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22554 comm="syz.1.5304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81ff79c799 code=0x0 [ 975.110001][T22563] net_ratelimit: 395 callbacks suppressed [ 975.110015][T22563] netlink: zone id is out of range [ 975.147253][T22563] netlink: zone id is out of range [ 975.166874][T22563] netlink: zone id is out of range [ 975.184766][T22563] netlink: zone id is out of range [ 975.198206][T22563] netlink: zone id is out of range [ 975.210401][T22563] netlink: zone id is out of range [ 975.221964][T22563] netlink: zone id is out of range [ 975.235410][T22563] netlink: zone id is out of range [ 975.247843][T22563] netlink: zone id is out of range [ 975.260346][T22563] netlink: zone id is out of range [ 976.730230][ T796] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 976.807946][ T5823] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 976.861569][T22587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.882003][T22587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.893930][T22587] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5310'. [ 976.948620][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 976.982701][ T796] usb 1-1: config 0 has no interfaces? [ 977.004423][ T796] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 977.022321][ T796] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 977.033551][ T796] usb 1-1: Manufacturer: syz [ 977.090288][ T796] usb 1-1: config 0 descriptor?? [ 978.161953][ T5823] usb 2-1: device descriptor read/64, error -71 [ 978.412078][ T5823] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 978.581989][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 978.593198][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 978.607007][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 978.623728][ T5823] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 978.633179][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.641215][ T5823] usb 2-1: Product: syz [ 978.646965][ T5823] usb 2-1: Manufacturer: syz [ 978.651601][ T5823] usb 2-1: SerialNumber: syz [ 978.658510][ T5823] usb 2-1: config 0 descriptor?? [ 978.669795][ T5823] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 978.679232][ T5823] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 978.883026][ T5889] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 979.031958][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 979.038624][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 979.050578][ T5889] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 979.066543][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.079571][ T5889] usb 3-1: config 0 descriptor?? [ 979.292826][ T5889] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 979.491307][T22621] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5317'. [ 979.510642][T22621] bridge_slave_1: left allmulticast mode [ 979.527323][T22621] bridge_slave_1: left promiscuous mode [ 979.542365][T22621] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.634304][ T5889] usb 1-1: USB disconnect, device number 6 [ 979.784462][T22621] bridge_slave_0: left allmulticast mode [ 979.790413][T22621] bridge_slave_0: left promiscuous mode [ 979.796439][T22621] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.163242][ T5823] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 980.197181][ T5823] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 980.238685][ T5823] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 980.247425][ T5823] em28xx 2-1:0.0: No AC97 audio processor [ 980.247823][ T796] usb 3-1: USB disconnect, device number 8 [ 980.422174][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5331'. [ 980.654507][T22653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.697632][T22649] veth3: entered promiscuous mode [ 980.732519][T22653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.744241][T22653] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5330'. [ 981.267398][ T1545] usb 2-1: USB disconnect, device number 8 [ 981.275055][ T1545] em28xx 2-1:0.0: Disconnecting em28xx [ 981.290293][ T1545] em28xx 2-1:0.0: Freeing device [ 981.819878][T22669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.840315][T22669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.884315][T22669] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5335'. [ 982.056975][ T1545] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 982.222182][ T1545] usb 2-1: Using ep0 maxpacket: 16 [ 982.233790][ T1545] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.255507][ T1545] usb 2-1: config 0 interface 0 has no altsetting 0 [ 982.271413][ T1545] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 982.297140][ T1545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.468674][ T1545] usb 2-1: config 0 descriptor?? [ 982.761983][T21085] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 982.907418][ T1545] nzxt-smart2 0003:1E71:2009.002B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 982.922760][T21085] usb 1-1: Using ep0 maxpacket: 16 [ 982.965290][T21085] usb 1-1: unable to get BOS descriptor or descriptor too short [ 983.007335][T21085] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 983.024761][T21085] usb 1-1: can't read configurations, error -71 [ 983.217891][T22682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.226750][T22682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.256918][T22684] xt_policy: output policy not valid in PREROUTING and INPUT [ 983.401775][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5343'. [ 983.569213][T22692] netlink: 'syz.4.5343': attribute type 1 has an invalid length. [ 983.671697][T22697] netlink: 'syz.3.5345': attribute type 10 has an invalid length. [ 983.686588][T22697] team0: Device ipvlan1 failed to register rx_handler [ 983.866582][T22701] net_ratelimit: 748 callbacks suppressed [ 983.866605][T22701] openvswitch: netlink: Key 4 has unexpected len 2 expected 12 [ 983.891956][T22701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.905639][T22701] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5346'. [ 983.922265][T21085] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 984.083301][T21085] usb 1-1: Using ep0 maxpacket: 32 [ 984.091693][T21085] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.102342][T21085] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 984.113764][T21085] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 984.123865][T21085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.132021][T21085] usb 1-1: Product: syz [ 984.136357][T21085] usb 1-1: Manufacturer: syz [ 984.141032][T21085] usb 1-1: SerialNumber: syz [ 984.150336][T21085] usb 1-1: config 0 descriptor?? [ 984.179310][T21085] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 984.405606][T22695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.426856][T22706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.450361][T22707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.469898][T22707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.480974][T22707] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5348'. [ 984.520433][T22695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.529956][T22706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.605607][T21085] usb 2-1: USB disconnect, device number 9 [ 984.665382][ T796] usb 1-1: USB disconnect, device number 8 [ 984.806167][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 985.102145][T21085] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 985.252016][T21085] usb 2-1: device descriptor read/64, error -71 [ 985.494526][T21085] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 985.583044][T22721] xt_policy: output policy not valid in PREROUTING and INPUT [ 985.632233][T21085] usb 2-1: device descriptor read/64, error -71 [ 985.743673][T21085] usb usb2-port1: attempt power cycle [ 986.112125][T21085] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 986.194762][T21085] usb 2-1: device descriptor read/8, error -71 [ 986.943447][T21085] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 987.022082][T21085] usb 2-1: device descriptor read/8, error -71 [ 987.132438][T21085] usb usb2-port1: unable to enumerate USB device [ 987.297297][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5364'. [ 987.312069][ T5906] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 987.317266][T22761] Invalid logical block size (26707) [ 987.373810][T22760] pim6reg: entered allmulticast mode [ 987.381415][T22760] pim6reg: left allmulticast mode [ 987.482024][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 987.490735][ T5906] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 987.499316][ T5906] usb 1-1: config 0 has no interface number 0 [ 987.507526][ T5906] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 987.534187][ T5906] usb 1-1: config 0 interface 89 has no altsetting 0 [ 987.548638][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 987.558818][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.567440][ T5906] usb 1-1: Product: syz [ 987.572738][ T5906] usb 1-1: Manufacturer: syz [ 987.577587][ T5906] usb 1-1: SerialNumber: syz [ 987.590064][ T5906] usb 1-1: config 0 descriptor?? [ 987.603585][ T5906] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 987.617923][ T5906] em28xx 1-1:0.89: Video interface 89 found: [ 987.685197][T22768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.709731][T22768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.722151][T22768] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5367'. [ 988.207290][ T5906] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 988.555926][T22779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.579366][T22779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.595664][T22779] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5370'. [ 988.913837][ T5889] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 989.083692][ T5889] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 989.092530][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.104081][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 989.113572][ T5889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.137212][ T5889] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 989.147771][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 989.158288][ T5889] usb 5-1: Product: syz [ 989.163619][ T5889] usb 5-1: Manufacturer: syz [ 989.176633][ T5889] cdc_wdm 5-1:1.0: skipping garbage [ 989.202386][ T5889] cdc_wdm 5-1:1.0: skipping garbage [ 989.217274][ T5889] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 989.232004][ T5889] cdc_wdm 5-1:1.0: Unknown control protocol [ 989.500170][ T5906] em28xx 1-1:0.89: board has no eeprom [ 989.515572][T22786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5374'. [ 989.545628][ T9] usb 5-1: USB disconnect, device number 7 [ 989.952198][ T5906] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 989.959862][ T5906] em28xx 1-1:0.89: analog set to bulk mode. [ 989.968860][ T796] em28xx 1-1:0.89: Registering V4L2 extension [ 989.992237][T21085] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 990.021894][ T5906] usb 1-1: USB disconnect, device number 9 [ 990.028701][ T5906] em28xx 1-1:0.89: Disconnecting em28xx [ 990.052410][ T796] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 990.059646][ T796] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 990.070328][ T796] em28xx 1-1:0.89: No AC97 audio processor [ 990.094253][ T796] usb 1-1: Decoder not found [ 990.098888][ T796] em28xx 1-1:0.89: failed to create media graph [ 990.124062][T22799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.147490][T22799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.161442][T22799] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5377'. [ 990.184035][ T796] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 990.192076][T21085] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 990.200704][T21085] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.263888][ T796] em28xx 1-1:0.89: Registering snapshot button... [ 990.271799][ T796] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input89 [ 990.284028][T21085] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 990.350005][T21085] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.362513][ T796] em28xx 1-1:0.89: Remote control support is not available for this card. [ 990.385828][ T5906] em28xx 1-1:0.89: Closing input extension [ 990.393349][ T5906] em28xx 1-1:0.89: Deregistering snapshot button [ 990.402687][T21085] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 990.432670][T21085] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 990.442154][T21085] usb 5-1: Product: syz [ 990.446514][T21085] usb 5-1: Manufacturer: syz [ 990.509797][ T5906] em28xx 1-1:0.89: Freeing device [ 990.525201][T21085] cdc_wdm 5-1:1.0: skipping garbage [ 990.536344][T21085] cdc_wdm 5-1:1.0: skipping garbage [ 990.603621][T21085] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 990.625631][T22804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.659205][T21085] cdc_wdm 5-1:1.0: Unknown control protocol [ 990.746959][T22781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.755988][T22781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.766667][T22781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.775724][T22781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.961487][ T5906] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 991.132083][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 991.143439][ T5906] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 991.154530][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.162620][ T5906] usb 1-1: Product: syz [ 991.166809][ T5906] usb 1-1: Manufacturer: syz [ 991.171429][ T5906] usb 1-1: SerialNumber: syz [ 991.180175][ T5906] usb 1-1: config 0 descriptor?? [ 991.194168][ T5906] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 991.568726][T22819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.587348][T22819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.598522][T22819] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5383'. [ 991.876049][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.882964][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.891224][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.897866][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.904192][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.910803][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.917127][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.923747][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.931880][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.938597][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.945037][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.951662][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.957983][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.964592][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.970844][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.977458][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.983914][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 991.990520][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 991.997035][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 992.003646][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 992.012576][ T1545] usb 5-1: USB disconnect, device number 8 [ 992.019038][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 992.063079][ T5906] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 992.076638][ T5906] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 992.105898][ T5906] usb 1-1: USB disconnect, device number 10 [ 992.433483][T22825] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5384'. [ 992.935907][T22848] xt_policy: output policy not valid in PREROUTING and INPUT [ 992.965685][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.972370][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.168932][T22825] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5384'. [ 993.362062][ T1545] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 993.518034][ T1545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.528837][ T1545] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 993.567693][ T1545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.579171][ T1545] usb 2-1: config 0 descriptor?? [ 993.590798][ T1545] pwc: Askey VC010 type 2 USB webcam detected. [ 993.716991][T22882] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 993.756432][T22882] CPU: 0 UID: 0 PID: 22882 Comm: syz.0.5403 Tainted: G L syzkaller #0 PREEMPT(full) [ 993.756453][T22882] Tainted: [L]=SOFTLOCKUP [ 993.756458][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 993.756466][T22882] Call Trace: [ 993.756471][T22882] [ 993.756477][T22882] dump_stack_lvl+0xe8/0x150 [ 993.756497][T22882] sysfs_warn_dup+0x8e/0xa0 [ 993.756513][T22882] sysfs_do_create_link_sd+0xc0/0x110 [ 993.756530][T22882] device_add_class_symlinks+0x1cf/0x240 [ 993.756610][T22882] device_add+0x475/0xb70 [ 993.756624][T22882] wiphy_register+0x1d73/0x2d50 [ 993.756670][T22882] ? __pfx_wiphy_register+0x10/0x10 [ 993.756684][T22882] ? __pfx_netdev_run_todo+0x10/0x10 [ 993.756722][T22882] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 993.756739][T22882] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 993.756819][T22882] ieee80211_register_hw+0x3562/0x4200 [ 993.756858][T22882] ? ieee80211_register_hw+0x1501/0x4200 [ 993.756874][T22882] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 993.756894][T22882] ? __hrtimer_setup+0x181/0x200 [ 993.756910][T22882] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 993.756925][T22882] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 993.756951][T22882] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 993.756962][T22882] ? kstrndup+0xbf/0x160 [ 993.756981][T22882] hwsim_new_radio_nl+0xf35/0x1bd0 [ 993.757003][T22882] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 993.757019][T22882] ? rcu_is_watching+0x15/0xb0 [ 993.757034][T22882] ? trace_kmalloc+0x2a/0x110 [ 993.757050][T22882] ? __nla_parse+0x40/0x60 [ 993.757068][T22882] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 993.757085][T22882] genl_family_rcv_msg_doit+0x22a/0x330 [ 993.757100][T22882] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 993.757117][T22882] ? bpf_lsm_capable+0x9/0x20 [ 993.757140][T22882] ? security_capable+0x7e/0x2c0 [ 993.757157][T22882] genl_rcv_msg+0x61c/0x7a0 [ 993.757172][T22882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 993.757183][T22882] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 993.757194][T22882] ? __lock_acquire+0x6b5/0x2cf0 [ 993.757214][T22882] netlink_rcv_skb+0x232/0x4b0 [ 993.757229][T22882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 993.757240][T22882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 993.757263][T22882] ? down_read+0x272/0x2e0 [ 993.757274][T22882] ? genl_rcv+0xd/0x40 [ 993.757291][T22882] genl_rcv+0x28/0x40 [ 993.757300][T22882] netlink_unicast+0x80f/0x9b0 [ 993.757317][T22882] ? __pfx_netlink_unicast+0x10/0x10 [ 993.757331][T22882] ? netlink_sendmsg+0x650/0xb40 [ 993.757345][T22882] ? skb_put+0x11b/0x210 [ 993.757363][T22882] netlink_sendmsg+0x813/0xb40 [ 993.757382][T22882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 993.757399][T22882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 993.757415][T22882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 993.757431][T22882] ____sys_sendmsg+0x972/0x9f0 [ 993.757441][T22882] ? futex_unqueue+0x211/0x240 [ 993.757458][T22882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 993.757473][T22882] ? import_iovec+0x73/0xa0 [ 993.757491][T22882] ___sys_sendmsg+0x2a5/0x360 [ 993.757504][T22882] ? __pfx____sys_sendmsg+0x10/0x10 [ 993.757518][T22882] ? futex_wait+0x29a/0x380 [ 993.757546][T22882] ? __fget_files+0x2a/0x420 [ 993.757562][T22882] ? __fget_files+0x3a0/0x420 [ 993.757582][T22882] __x64_sys_sendmsg+0x1bd/0x2a0 [ 993.757594][T22882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 993.757609][T22882] ? rcu_is_watching+0x15/0xb0 [ 993.757630][T22882] do_syscall_64+0x14d/0xf80 [ 993.757640][T22882] ? trace_irq_disable+0x3b/0x150 [ 993.757655][T22882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.757666][T22882] ? clear_bhb_loop+0x40/0x90 [ 993.757679][T22882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.757690][T22882] RIP: 0033:0x7f1364d9c799 [ 993.757702][T22882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.757711][T22882] RSP: 002b:00007f1365d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.757724][T22882] RAX: ffffffffffffffda RBX: 00007f1365015fa0 RCX: 00007f1364d9c799 [ 993.757732][T22882] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000006 [ 993.757739][T22882] RBP: 00007f1364e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 993.757745][T22882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.757752][T22882] R13: 00007f1365016038 R14: 00007f1365015fa0 R15: 00007f136513fa48 [ 993.757769][T22882] [ 994.613764][T22891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.625191][T22891] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5402'. [ 994.766956][ T1545] pwc: recv_control_msg error -32 req 02 val 2b00 [ 994.777366][ T1545] pwc: recv_control_msg error -32 req 02 val 2700 [ 994.843657][ T1545] pwc: recv_control_msg error -32 req 02 val 2c00 [ 994.966955][ T29] audit: type=1800 audit(1773214264.994:1899): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5405" name="/" dev="fuse" ino=1 res=0 errno=0 [ 995.008012][T22896] xt_policy: output policy not valid in PREROUTING and INPUT [ 995.054602][ T1545] pwc: recv_control_msg error -32 req 04 val 1000 [ 995.089624][ T1545] pwc: recv_control_msg error -32 req 04 val 1300 [ 995.101452][ T1545] pwc: recv_control_msg error -32 req 04 val 1400 [ 995.112297][ T1545] pwc: recv_control_msg error -32 req 02 val 2000 [ 995.119522][ T1545] pwc: recv_control_msg error -32 req 02 val 2100 [ 995.128072][ T1545] pwc: recv_control_msg error -32 req 04 val 1500 [ 995.135235][ T1545] pwc: recv_control_msg error -32 req 02 val 2500 [ 995.142419][ T1545] pwc: recv_control_msg error -32 req 02 val 2400 [ 995.149648][ T1545] pwc: recv_control_msg error -32 req 02 val 2600 [ 995.158088][ T1545] pwc: recv_control_msg error -32 req 02 val 2900 [ 995.166255][ T1545] pwc: recv_control_msg error -32 req 02 val 2800 [ 995.175191][ T1545] pwc: recv_control_msg error -32 req 04 val 1100 [ 995.193367][ T1545] pwc: Registered as video103. [ 995.221918][ T1545] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input90 [ 995.419582][ T1545] usb 2-1: USB disconnect, device number 14 [ 995.598297][T22905] SET target dimension over the limit! [ 995.951804][T22911] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5411'. [ 995.964819][T22911] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5411'. [ 996.052104][ T1545] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 996.077656][T22913] xt_NFQUEUE: number of total queues is 0 [ 996.189310][T22921] FAULT_INJECTION: forcing a failure. [ 996.189310][T22921] name failslab, interval 1, probability 0, space 0, times 0 [ 996.203551][T22921] CPU: 1 UID: 0 PID: 22921 Comm: syz.3.5414 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.203580][T22921] Tainted: [L]=SOFTLOCKUP [ 996.203587][T22921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 996.203598][T22921] Call Trace: [ 996.203605][T22921] [ 996.203613][T22921] dump_stack_lvl+0xe8/0x150 [ 996.203643][T22921] should_fail_ex+0x412/0x560 [ 996.203669][T22921] ? alloc_inode+0x6a/0x1b0 [ 996.203693][T22921] should_failslab+0xa8/0x100 [ 996.203717][T22921] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 996.203736][T22921] ? simple_start_creating+0xcc/0x110 [ 996.203767][T22921] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 996.203794][T22921] alloc_inode+0x6a/0x1b0 [ 996.203826][T22921] new_inode+0x22/0x170 [ 996.203855][T22921] __debugfs_create_file+0xb8/0x400 [ 996.203883][T22921] debugfs_create_file_full+0x3f/0x60 [ 996.203912][T22921] ref_tracker_dir_debugfs+0x197/0x360 [ 996.203937][T22921] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 996.203985][T22921] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 996.204005][T22921] ? alloc_netdev_mqs+0xa6/0x11b0 [ 996.204028][T22921] ? __raw_spin_lock_init+0x45/0x100 [ 996.204049][T22921] alloc_netdev_mqs+0x272/0x11b0 [ 996.204067][T22921] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 996.204191][T22921] rtnl_create_link+0x31f/0xd70 [ 996.204249][T22921] rtnl_newlink_create+0x277/0xb70 [ 996.204301][T22921] ? __pfx___nla_validate_parse+0x10/0x10 [ 996.204334][T22921] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 996.204363][T22921] ? __pfx___mutex_lock+0x10/0x10 [ 996.204403][T22921] ? ns_capable+0x89/0xe0 [ 996.204428][T22921] rtnl_newlink+0x1666/0x1be0 [ 996.204466][T22921] ? __pfx_rtnl_newlink+0x10/0x10 [ 996.204487][T22921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.204540][T22921] ? kasan_quarantine_put+0xbb/0x1f0 [ 996.204559][T22921] ? lockdep_hardirqs_on+0x7a/0x110 [ 996.204589][T22921] ? kmem_cache_free+0x187/0x630 [ 996.204607][T22921] ? nlmon_xmit+0xb0/0x100 [ 996.204728][T22921] ? __lock_acquire+0x6b5/0x2cf0 [ 996.204754][T22921] ? __local_bh_enable_ip+0xd0/0x130 [ 996.204776][T22921] ? lockdep_hardirqs_on+0x7a/0x110 [ 996.204799][T22921] ? __dev_queue_xmit+0x277/0x3890 [ 996.204823][T22921] ? __local_bh_enable_ip+0xd0/0x130 [ 996.204842][T22921] ? __dev_queue_xmit+0x277/0x3890 [ 996.204880][T22921] ? __pfx_rtnl_newlink+0x10/0x10 [ 996.204904][T22921] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 996.204931][T22921] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 996.204951][T22921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 996.204972][T22921] ? ref_tracker_free+0x693/0x840 [ 996.204994][T22921] ? __copy_skb_header+0xa3/0x4a0 [ 996.205013][T22921] ? __pfx_ref_tracker_free+0x10/0x10 [ 996.205045][T22921] netlink_rcv_skb+0x232/0x4b0 [ 996.205082][T22921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 996.205107][T22921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 996.205141][T22921] ? netlink_deliver_tap+0x2e/0x1b0 [ 996.205171][T22921] netlink_unicast+0x80f/0x9b0 [ 996.205200][T22921] ? __pfx_netlink_unicast+0x10/0x10 [ 996.205222][T22921] ? netlink_sendmsg+0x650/0xb40 [ 996.205244][T22921] ? skb_put+0x11b/0x210 [ 996.205272][T22921] netlink_sendmsg+0x813/0xb40 [ 996.205303][T22921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.205329][T22921] ? aa_sock_msg_perm+0xf1/0x1b0 [ 996.205354][T22921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 996.205378][T22921] ____sys_sendmsg+0x972/0x9f0 [ 996.205405][T22921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.205431][T22921] ? import_iovec+0x73/0xa0 [ 996.205460][T22921] ___sys_sendmsg+0x2a5/0x360 [ 996.205483][T22921] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.205534][T22921] ? __fget_files+0x2a/0x420 [ 996.205558][T22921] ? __fget_files+0x3a0/0x420 [ 996.205592][T22921] __x64_sys_sendmsg+0x1bd/0x2a0 [ 996.205613][T22921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 996.205640][T22921] ? __pfx_ksys_write+0x10/0x10 [ 996.205671][T22921] do_syscall_64+0x14d/0xf80 [ 996.205687][T22921] ? trace_irq_disable+0x3b/0x150 [ 996.205712][T22921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.205730][T22921] ? clear_bhb_loop+0x40/0x90 [ 996.205752][T22921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.205769][T22921] RIP: 0033:0x7f7e4199c799 [ 996.205787][T22921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.205802][T22921] RSP: 002b:00007f7e42847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.205828][T22921] RAX: ffffffffffffffda RBX: 00007f7e41c15fa0 RCX: 00007f7e4199c799 [ 996.205841][T22921] RDX: 0000000024000880 RSI: 0000200000000200 RDI: 0000000000000003 [ 996.205852][T22921] RBP: 00007f7e42847090 R08: 0000000000000000 R09: 0000000000000000 [ 996.205863][T22921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 996.205873][T22921] R13: 00007f7e41c16038 R14: 00007f7e41c15fa0 R15: 00007f7e41d3fa48 [ 996.205902][T22921] [ 996.206006][T22921] debugfs: out of free dentries, can not create file 'netdev@ffff888094aea620' [ 996.323570][ T1545] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 996.710428][ T1545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.762143][ T5889] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 996.852136][ T1545] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 996.944890][ T1545] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 996.963683][ T5889] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 996.976842][ T1545] usb 1-1: Manufacturer: syz [ 996.994106][ T5889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 997.015186][ T1545] usb 1-1: config 0 descriptor?? [ 997.021968][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 997.043444][ T5889] usb 2-1: Product: syz [ 997.051953][ T5889] usb 2-1: Manufacturer: syz [ 997.056615][ T5889] usb 2-1: SerialNumber: syz [ 997.172895][T22921] ip6tnl1: entered promiscuous mode [ 997.212043][ T1545] rc_core: IR keymap rc-hauppauge not found [ 997.218014][ T1545] Registered IR keymap rc-empty [ 997.237637][ T1545] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 997.267403][ T1545] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input91 [ 997.280707][ T5889] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 997.485588][ T1545] usb 2-1: USB disconnect, device number 15 [ 997.495767][ T1545] usblp0: removed [ 997.508590][T22927] rc rc0: two consecutive events of type space [ 997.648099][T22937] netlink: zone id is out of range [ 997.654220][T22936] xt_policy: output policy not valid in PREROUTING and INPUT [ 997.655258][T22937] netlink: zone id is out of range [ 997.667030][T22937] netlink: zone id is out of range [ 997.672257][T22937] netlink: zone id is out of range [ 997.677517][T22937] netlink: zone id is out of range [ 997.683112][T22937] netlink: zone id is out of range [ 997.688397][T22937] netlink: zone id is out of range [ 997.705383][T22937] netlink: zone id is out of range [ 997.720055][T22937] netlink: zone id is out of range [ 997.725617][T22937] netlink: zone id is out of range [ 998.109145][T22952] loop4: detected capacity change from 0 to 7 [ 998.172272][T22952] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 998.177769][T22952] loop4: partition table partially beyond EOD, truncated [ 998.197621][T22952] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 998.458253][ T9797] udevd[9797]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 998.631988][ T1545] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 998.811447][ T1545] usb 2-1: Using ep0 maxpacket: 16 [ 998.824353][ T1545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.838876][ T1545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.867971][ T1545] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 998.888336][ T1545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.933399][ T1545] usb 2-1: config 0 descriptor?? [ 999.112271][T22964] netlink: 'syz.2.5425': attribute type 10 has an invalid length. [ 999.132587][T22964] team0: Device ipvlan1 failed to register rx_handler [ 999.294263][T22968] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5426'. [ 999.618011][ T1545] usbhid 2-1:0.0: can't add hid device: -71 [ 999.632108][ T1545] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 999.648106][T21085] usb 1-1: USB disconnect, device number 11 [ 999.686616][ T1545] usb 2-1: USB disconnect, device number 16 [ 999.934967][T22980] netlink: 'syz.0.5429': attribute type 1 has an invalid length. [ 1000.015146][T22980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1000.071464][T22982] bond2: (slave geneve3): making interface the new active one [ 1000.085748][T22985] loop2: detected capacity change from 0 to 7 [ 1000.103684][T22982] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1000.129892][T22985] Dev loop2: unable to read RDB block 7 [ 1000.137719][T22985] loop2: AHDI p1 p2 p3 [ 1000.143805][T22985] loop2: partition table partially beyond EOD, truncated [ 1000.165218][T22985] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1000.188196][T22985] loop2: p3 start 335544320 is beyond EOD, truncated [ 1000.682793][T21085] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1000.772002][ T5906] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1000.816749][T21085] usb 2-1: device descriptor read/64, error -71 [ 1000.888890][T23018] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5441'. [ 1000.946600][ T5906] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1000.958635][ T5906] usb 5-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1000.972298][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1000.981623][ T5906] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1000.991208][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1001.000035][ T5906] usb 5-1: Product: syz [ 1001.004915][ T5906] usb 5-1: Manufacturer: syz [ 1001.009605][ T5906] usb 5-1: SerialNumber: syz [ 1001.017369][ T5906] usb 5-1: config 0 descriptor?? [ 1001.026974][ T5906] usb 5-1: selecting invalid altsetting 0 [ 1001.061962][T21085] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1001.112166][ T5889] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1001.120768][ T1545] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1001.191972][T21085] usb 2-1: device descriptor read/64, error -71 [ 1001.242351][ T5906] usb 5-1: USB disconnect, device number 9 [ 1001.263192][ T1545] usb 1-1: device descriptor read/64, error -71 [ 1001.282804][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 1001.290251][ T5889] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1001.303767][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1001.304987][T21085] usb usb2-port1: attempt power cycle [ 1001.322102][ T5889] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1001.331515][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.340237][ T5889] usb 3-1: Product: syz [ 1001.344594][ T5889] usb 3-1: Manufacturer: syz [ 1001.349206][ T5889] usb 3-1: SerialNumber: syz [ 1001.531995][ T1545] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1001.662278][T21085] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1001.672033][ T1545] usb 1-1: device descriptor read/64, error -71 [ 1001.694812][T21085] usb 2-1: device descriptor read/8, error -71 [ 1001.728384][ T5889] usb 3-1: unit 0 not found! [ 1001.733195][ T5889] usb 3-1: unit 2 not found! [ 1001.772516][ T5889] usb 3-1: USB disconnect, device number 9 [ 1001.782520][ T1545] usb usb1-port1: attempt power cycle [ 1001.808386][ T9455] udevd[9455]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.886662][T23027] netlink: 'syz.4.5446': attribute type 4 has an invalid length. [ 1001.894765][T23027] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5446'. [ 1001.982038][T21085] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1002.012520][T21085] usb 2-1: device descriptor read/8, error -71 [ 1002.122211][T21085] usb usb2-port1: unable to enumerate USB device [ 1002.141960][ T1545] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1002.164131][ T1545] usb 1-1: device descriptor read/8, error -71 [ 1002.195125][T23033] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1002.201692][T23033] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1002.212113][T23033] vhci_hcd vhci_hcd.0: Device attached [ 1002.230200][T23033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1002.245436][T23033] xt_nfacct: accounting object `syz1' does not exist [ 1002.432005][ T1545] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1002.459532][ T1545] usb 1-1: device descriptor read/8, error -71 [ 1002.512038][ T5889] usb 42-1: SetAddress Request (6) to port 0 [ 1002.518122][ T5889] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1002.572231][ T1545] usb usb1-port1: unable to enumerate USB device [ 1003.445569][T23044] binder: BINDER_SET_CONTEXT_MGR already set [ 1003.451738][T23044] binder: 23043:23044 ioctl 4018620d 200000000040 returned -16 [ 1003.882028][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1003.890132][T23053] net_ratelimit: 1062 callbacks suppressed [ 1003.890152][T23053] netlink: zone id is out of range [ 1003.905177][T23053] netlink: zone id is out of range [ 1003.912049][T23053] netlink: zone id is out of range [ 1003.919143][T23053] netlink: zone id is out of range [ 1003.924588][T23053] netlink: zone id is out of range [ 1003.929883][T23053] netlink: zone id is out of range [ 1003.941817][T23053] netlink: zone id is out of range [ 1003.962955][T23053] netlink: zone id is out of range [ 1003.968427][T23053] netlink: zone id is out of range [ 1003.977818][T23053] netlink: zone id is out of range [ 1004.062802][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 1004.069208][ T5906] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1004.078328][ T5906] usb 2-1: config 179 has no interface number 0 [ 1004.085585][ T5906] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1004.100012][ T5906] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1004.112591][ T5906] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1004.124091][ T5906] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1004.136187][ T5906] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1004.224598][T23064] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1004.235546][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1004.248323][T23064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1004.258441][ T5906] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1004.280008][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.291216][T23049] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1004.599252][ T9] usb 2-1: USB disconnect, device number 21 [ 1004.599303][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1004.613930][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1005.071714][T23034] vhci_hcd: connection reset by peer [ 1005.078880][T16965] vhci_hcd vhci_hcd.4: stop threads [ 1005.084792][T16965] vhci_hcd vhci_hcd.4: release socket [ 1005.136376][T23074] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5458'. [ 1005.173650][T16965] vhci_hcd vhci_hcd.4: disconnect device [ 1005.319004][ T796] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1005.684910][ T796] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1005.688973][T23078] netlink: 'syz.4.5461': attribute type 9 has an invalid length. [ 1005.696596][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.702011][T23078] netlink: 'syz.4.5461': attribute type 11 has an invalid length. [ 1005.710199][ T796] usb 3-1: Product: syz [ 1005.718489][T23078] netlink: 'syz.4.5461': attribute type 12 has an invalid length. [ 1005.738394][ T796] usb 3-1: Manufacturer: syz [ 1005.738496][T23078] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.5461'. [ 1005.744184][ T796] usb 3-1: SerialNumber: syz [ 1005.759929][T23078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5461'. [ 1005.902500][ T5823] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1006.019642][T23085] xt_TCPMSS: Only works on TCP SYN packets [ 1006.039609][ T5823] usb 2-1: device descriptor read/64, error -71 [ 1006.070291][T23090] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5464'. [ 1006.079765][T23090] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5464'. [ 1006.282025][ T5823] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1006.282428][ T796] rtl8150 3-1:1.0: couldn't reset the device [ 1006.296500][ T796] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1006.329010][ T796] usb 3-1: USB disconnect, device number 10 [ 1006.341598][T23099] xt_NFQUEUE: number of total queues is 0 [ 1006.423452][ T5823] usb 2-1: device descriptor read/64, error -71 [ 1006.554347][ T5823] usb usb2-port1: attempt power cycle [ 1006.568777][T23109] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1006.581578][T23109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1006.595463][T23109] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1006.922029][ T5823] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1006.970311][ T5823] usb 2-1: device descriptor read/8, error -71 [ 1007.027497][T23114] bridge0: port 3(hsr0) entered blocking state [ 1007.034123][T23114] bridge0: port 3(hsr0) entered disabled state [ 1007.040784][T23114] hsr0: entered allmulticast mode [ 1007.046914][T23114] hsr_slave_0: entered allmulticast mode [ 1007.054268][T23114] hsr_slave_1: entered allmulticast mode [ 1007.062940][T23114] hsr0: entered promiscuous mode [ 1007.070053][T23114] bridge0: port 3(hsr0) entered blocking state [ 1007.076403][T23114] bridge0: port 3(hsr0) entered forwarding state [ 1007.251966][ T5823] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1007.347686][ T5823] usb 2-1: device descriptor read/8, error -71 [ 1007.463953][ T5823] usb usb2-port1: unable to enumerate USB device [ 1007.602506][ T5889] usb 42-1: device descriptor read/8, error -110 [ 1007.813192][T23117] netlink: 'syz.0.5472': attribute type 9 has an invalid length. [ 1007.821203][T23117] netlink: 'syz.0.5472': attribute type 11 has an invalid length. [ 1007.845128][T23117] netlink: 'syz.0.5472': attribute type 12 has an invalid length. [ 1007.853137][T23117] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5472'. [ 1007.862700][T23117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5472'. [ 1008.023185][ T5889] usb usb42-port1: attempt power cycle [ 1008.174495][T23122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5473'. [ 1008.183622][T23122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5473'. [ 1008.772078][ T5906] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1008.793090][ T5889] usb usb42-port1: unable to enumerate USB device [ 1008.931967][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 1008.961426][T23137] loop2: detected capacity change from 0 to 7 [ 1008.971530][T23137] Dev loop2: unable to read RDB block 7 [ 1008.980006][T23137] loop2: AHDI p1 p2 p3 [ 1008.984740][T23137] loop2: partition table partially beyond EOD, truncated [ 1008.992605][T23137] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1009.001191][T23137] loop2: p3 start 335544320 is beyond EOD, truncated [ 1009.032296][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.061795][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.077465][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1009.088598][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.107965][ T5906] usb 3-1: config 0 descriptor?? [ 1009.126395][T23138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5475'. [ 1009.232563][ T5906] hub 3-1:0.0: USB hub found [ 1009.298899][T23140] netlink: 'syz.0.5477': attribute type 1 has an invalid length. [ 1009.439549][ T5906] hub 3-1:0.0: 1 port detected [ 1009.569471][T23142] veth3: entered promiscuous mode [ 1009.583549][T23142] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1009.654853][T23145] loop4: detected capacity change from 0 to 7 [ 1009.668994][T23145] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1009.674687][T23145] loop4: partition table partially beyond EOD, truncated [ 1009.682179][T23145] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1009.717997][T23140] bond3: entered promiscuous mode [ 1009.732652][T23140] bond3: entered allmulticast mode [ 1009.753701][T23140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1009.772073][ T9797] udevd[9797]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1009.875620][T23148] netlink: 'syz.4.5479': attribute type 10 has an invalid length. [ 1009.893425][T23148] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1010.069665][ T5906] hub 3-1:0.0: activate --> -90 [ 1010.350364][T23157] netlink: 'syz.0.5483': attribute type 9 has an invalid length. [ 1010.361743][T23157] netlink: 'syz.0.5483': attribute type 11 has an invalid length. [ 1011.100832][T23160] __nla_validate_parse: 2 callbacks suppressed [ 1011.100868][T23160] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5484'. [ 1011.123286][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5484'. [ 1011.139879][T23160] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5484'. [ 1011.150999][ T5906] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1011.672228][ T796] usb 3-1: USB disconnect, device number 11 [ 1012.443862][T23181] macvtap1: entered promiscuous mode [ 1012.474743][T23181] dummy0: entered promiscuous mode [ 1012.485431][T23181] team0: Device macvtap1 failed to register rx_handler [ 1012.499087][T23181] dummy0: left promiscuous mode [ 1012.572633][T23188] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1012.679474][T23190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1013.157858][T23201] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5498'. [ 1013.168738][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5498'. [ 1013.180800][T23201] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5498'. [ 1013.931973][ T1545] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1014.162075][ T1545] usb 2-1: Using ep0 maxpacket: 8 [ 1014.192880][ T1545] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1014.203011][ T1545] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1014.240092][ T1545] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1014.265186][ T1545] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.327907][T23224] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5506'. [ 1014.381643][ T1545] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1014.401093][ T1545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.646364][ T1545] usb 2-1: GET_CAPABILITIES returned 0 [ 1014.656385][T23230] SET target dimension over the limit! [ 1014.663801][ T1545] usbtmc 2-1:16.0: can't read capabilities [ 1014.844000][T23211] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1014.879311][ T5906] usb 2-1: USB disconnect, device number 26 [ 1015.215592][T23245] xt_hashlimit: max too large, truncated to 1048576 [ 1015.259427][T23247] validate_nla: 1 callbacks suppressed [ 1015.259440][T23247] netlink: 'syz.0.5516': attribute type 4 has an invalid length. [ 1015.272874][ T29] audit: type=1804 audit(1773214285.334:1900): pid=23245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5514" name="/newroot/188/file1" dev="tmpfs" ino=983 res=1 errno=0 [ 1015.298368][T23247] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5516'. [ 1015.618111][T23258] kvm: user requested TSC rate below hardware speed [ 1015.872066][ T5889] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1016.022353][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 1016.094676][ T1545] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1016.102879][ T5889] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1016.124476][ T5889] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1016.136675][ T5889] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1016.148324][ T5889] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1016.162383][ T5889] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1016.171526][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.430498][ T1545] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1016.457753][ T1545] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1016.469568][ T1545] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1016.570103][ T5889] usb 3-1: GET_CAPABILITIES returned 0 [ 1016.580434][ T5889] usbtmc 3-1:16.0: can't read capabilities [ 1016.596645][ T1545] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1016.623569][ T1545] usb 1-1: Product: syz [ 1016.627885][ T1545] usb 1-1: Manufacturer: syz [ 1016.633500][ T1545] usb 1-1: SerialNumber: syz [ 1016.640764][ T1545] usb 1-1: config 0 descriptor?? [ 1016.673656][ T1545] usb 1-1: selecting invalid altsetting 0 [ 1016.780045][T23258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.788883][T23258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.799839][T23276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.889105][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1016.928051][ T1545] usb 1-1: USB disconnect, device number 16 [ 1017.488643][T23289] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5528'. [ 1017.488901][T23289] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5528'. [ 1017.822577][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1017.827915][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1017.829666][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1017.830667][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1017.831287][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.142427][T23297] syzkaller0: entered promiscuous mode [ 1018.148362][T23297] syzkaller0: entered allmulticast mode [ 1018.544062][ T5906] usb 3-1: USB disconnect, device number 12 [ 1018.942061][T23292] chnl_net:caif_netlink_parms(): no params data found [ 1019.170085][T23292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.207054][T23292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.222656][T21085] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1019.235050][T23292] bridge_slave_0: entered allmulticast mode [ 1019.241423][T23324] input: syz0 as /devices/virtual/input/input92 [ 1019.267115][T23292] bridge_slave_0: entered promiscuous mode [ 1019.297332][T23326] xt_policy: output policy not valid in PREROUTING and INPUT [ 1019.332523][T23292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.344362][T23292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.352408][T23292] bridge_slave_1: entered allmulticast mode [ 1019.364761][T23292] bridge_slave_1: entered promiscuous mode [ 1019.407432][T21085] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.421257][T21085] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1019.444553][T23292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.456297][T21085] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1019.465899][T21085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.478302][T23292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.488457][T21085] usb 5-1: Product: syz [ 1019.492789][T21085] usb 5-1: Manufacturer: syz [ 1019.502072][T21085] usb 5-1: SerialNumber: syz [ 1019.522174][T23330] FAULT_INJECTION: forcing a failure. [ 1019.522174][T23330] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.539591][T23330] CPU: 0 UID: 0 PID: 23330 Comm: syz.0.5542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.539621][T23330] Tainted: [L]=SOFTLOCKUP [ 1019.539628][T23330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1019.539637][T23330] Call Trace: [ 1019.539645][T23330] [ 1019.539653][T23330] dump_stack_lvl+0xe8/0x150 [ 1019.539682][T23330] should_fail_ex+0x412/0x560 [ 1019.539709][T23330] should_failslab+0xa8/0x100 [ 1019.539731][T23330] __kvmalloc_node_noprof+0x178/0x8a0 [ 1019.539752][T23330] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1019.539779][T23330] alloc_netdev_mqs+0xa6/0x11b0 [ 1019.539797][T23330] ? __pfx_macvlan_setup+0x10/0x10 [ 1019.539896][T23330] rtnl_create_link+0x31f/0xd70 [ 1019.539921][T23330] rtnl_newlink_create+0x277/0xb70 [ 1019.539951][T23330] ? __mutex_lock+0x5ac/0x1300 [ 1019.539975][T23330] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1019.540004][T23330] ? __pfx___mutex_lock+0x10/0x10 [ 1019.540025][T23330] ? ns_capable+0x89/0xe0 [ 1019.540041][T23330] rtnl_newlink+0x1666/0x1be0 [ 1019.540081][T23330] ? __pfx_rtnl_newlink+0x10/0x10 [ 1019.540102][T23330] ? do_syscall_64+0x14d/0xf80 [ 1019.540119][T23330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.540167][T23330] ? kasan_quarantine_put+0xbb/0x1f0 [ 1019.540178][T23330] ? lockdep_hardirqs_on+0x7a/0x110 [ 1019.540195][T23330] ? kmem_cache_free+0x187/0x630 [ 1019.540205][T23330] ? nlmon_xmit+0xb0/0x100 [ 1019.540230][T23330] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.540258][T23330] ? __local_bh_enable_ip+0xd0/0x130 [ 1019.540281][T23330] ? lockdep_hardirqs_on+0x7a/0x110 [ 1019.540305][T23330] ? __dev_queue_xmit+0x277/0x3890 [ 1019.540318][T23330] ? __local_bh_enable_ip+0xd0/0x130 [ 1019.540330][T23330] ? __dev_queue_xmit+0x277/0x3890 [ 1019.540354][T23330] ? __pfx_rtnl_newlink+0x10/0x10 [ 1019.540367][T23330] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1019.540391][T23330] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1019.540414][T23330] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1019.540436][T23330] ? ref_tracker_free+0x693/0x840 [ 1019.540457][T23330] ? __copy_skb_header+0xa3/0x4a0 [ 1019.540470][T23330] ? __pfx_ref_tracker_free+0x10/0x10 [ 1019.540488][T23330] netlink_rcv_skb+0x232/0x4b0 [ 1019.540502][T23330] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1019.540516][T23330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1019.540554][T23330] ? netlink_deliver_tap+0x2e/0x1b0 [ 1019.540583][T23330] netlink_unicast+0x80f/0x9b0 [ 1019.540613][T23330] ? __pfx_netlink_unicast+0x10/0x10 [ 1019.540626][T23330] ? netlink_sendmsg+0x650/0xb40 [ 1019.540637][T23330] ? skb_put+0x11b/0x210 [ 1019.540653][T23330] netlink_sendmsg+0x813/0xb40 [ 1019.540673][T23330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1019.540699][T23330] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1019.540724][T23330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1019.540748][T23330] ____sys_sendmsg+0x972/0x9f0 [ 1019.540761][T23330] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.540777][T23330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1019.540791][T23330] ? import_iovec+0x73/0xa0 [ 1019.540808][T23330] ___sys_sendmsg+0x2a5/0x360 [ 1019.540824][T23330] ? __pfx____sys_sendmsg+0x10/0x10 [ 1019.540855][T23330] ? kstrtouint+0x6e/0xe0 [ 1019.540900][T23330] ? __fget_files+0x2a/0x420 [ 1019.540916][T23330] ? __fget_files+0x3a0/0x420 [ 1019.540935][T23330] __sys_sendmmsg+0x27c/0x4e0 [ 1019.540947][T23330] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1019.540956][T23330] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1019.540989][T23330] ? ksys_write+0x242/0x270 [ 1019.541010][T23330] ? __pfx_ksys_write+0x10/0x10 [ 1019.541034][T23330] __x64_sys_sendmmsg+0xa0/0xc0 [ 1019.541054][T23330] do_syscall_64+0x14d/0xf80 [ 1019.541069][T23330] ? trace_irq_disable+0x3b/0x150 [ 1019.541093][T23330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.541104][T23330] ? clear_bhb_loop+0x40/0x90 [ 1019.541117][T23330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.541128][T23330] RIP: 0033:0x7f1364d9c799 [ 1019.541146][T23330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.541161][T23330] RSP: 002b:00007f1365d29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1019.541180][T23330] RAX: ffffffffffffffda RBX: 00007f1365015fa0 RCX: 00007f1364d9c799 [ 1019.541194][T23330] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000010 [ 1019.541206][T23330] RBP: 00007f1365d29090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.541217][T23330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.541223][T23330] R13: 00007f1365016038 R14: 00007f1365015fa0 R15: 00007f136513fa48 [ 1019.541242][T23330] [ 1019.994214][ T5831] Bluetooth: hci4: command tx timeout [ 1020.007233][T23292] team0: Port device team_slave_0 added [ 1020.015021][T23292] team0: Port device team_slave_1 added [ 1020.213970][T23332] xt_NFQUEUE: number of total queues is 0 [ 1020.348748][T23339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1020.356051][T23339] IPv6: NLM_F_CREATE should be set when creating new route [ 1020.363353][T23339] IPv6: NLM_F_CREATE should be set when creating new route [ 1020.370615][T23339] IPv6: NLM_F_CREATE should be set when creating new route [ 1020.379297][T23339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1020.693808][T23292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.700940][T23292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.731944][T23292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.745357][T23292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.752800][T23292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.782088][T23292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.915427][T23361] netlink: 'syz.0.5553': attribute type 8 has an invalid length. [ 1021.024754][T21085] usb 5-1: cannot find UAC_HEADER [ 1021.037204][T23369] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5554'. [ 1021.077791][ T1175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.465976][T23374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.592462][T21085] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1021.635990][T23369] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5554'. [ 1021.775981][T21085] usb 5-1: USB disconnect, device number 10 [ 1021.905297][ T1175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.960556][ T9797] udevd[9797]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.997041][T23292] hsr_slave_0: entered promiscuous mode [ 1022.004692][ T5831] Bluetooth: hci4: command tx timeout [ 1022.013981][T23292] hsr_slave_1: entered promiscuous mode [ 1022.022152][T23292] debugfs: 'hsr0' already exists in 'hsr' [ 1022.032521][T23292] Cannot create hsr debugfs directory [ 1022.043906][T23384] tipc: Started in network mode [ 1022.048807][T23384] tipc: Node identity fe80000000000000000000000000003a, cluster identity 4711 [ 1022.068908][T23384] tipc: Enabled bearer , priority 10 [ 1022.226131][ T1175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.374072][ T1175] team0: Port device netdevsim0 removed [ 1022.397224][ T1175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.641289][T23397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1022.688037][T23397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1022.774822][T23398] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5565'. [ 1023.110846][T23408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.116473][T23411] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5567'. [ 1023.150157][T21085] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1023.254873][T23413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1023.277760][T21086] tipc: Node number set to 4269801530 [ 1023.322493][T21085] usb 3-1: Using ep0 maxpacket: 8 [ 1023.469400][T21085] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1023.490722][T21085] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1023.534338][ T1175] bridge_slave_1: left allmulticast mode [ 1023.536409][T21085] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1023.551633][ T1175] bridge_slave_1: left promiscuous mode [ 1023.575591][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.591317][T21085] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 20203, setting to 1024 [ 1023.607337][ T1175] bridge_slave_0: left allmulticast mode [ 1023.615127][ T1175] bridge_slave_0: left promiscuous mode [ 1023.620962][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.644240][T21085] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1023.679227][T21085] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.839670][T21085] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1023.853813][T21085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.068596][T21085] usb 3-1: usb_control_msg returned -32 [ 1024.085380][ T5831] Bluetooth: hci4: command tx timeout [ 1024.111593][T21085] usbtmc 3-1:16.0: can't read capabilities [ 1024.189259][ T1175] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1024.249105][T23426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1024.269507][T23426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1024.348440][ T1175] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.360801][ T1175] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.384125][ T1175] .` (unregistering): Released all slaves [ 1024.404839][ T1175] bond0 (unregistering): left promiscuous mode [ 1024.415915][ T1175] bond0 (unregistering): Released all slaves [ 1024.431375][ T5903] usb 3-1: USB disconnect, device number 13 [ 1024.508843][ T1175] bond1 (unregistering): Released all slaves [ 1024.562334][ T1175] bond2 (unregistering): Released all slaves [ 1024.584691][T23432] xt_policy: output policy not valid in PREROUTING and INPUT [ 1024.610524][ T1175] bond3 (unregistering): Released all slaves [ 1024.652649][ T1175] bond4 (unregistering): Released all slaves [ 1024.676684][ T1175] bond5 (unregistering): Released all slaves [ 1024.703513][ T1175] team0: Port device bond6 removed [ 1024.711417][ T1175] bond6 (unregistering): Released all slaves [ 1024.737116][ T1175] bond7 (unregistering): Released all slaves [ 1024.778755][ T1175] bond8 (unregistering): Released all slaves [ 1024.827388][T23438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1024.950076][ T1175] tipc: Left network mode [ 1024.976414][T23292] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1025.044761][T23292] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1025.086808][T23292] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1025.139869][T23292] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1025.416796][T23462] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5577'. [ 1025.438225][T23462] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5577'. [ 1025.852927][T23469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.871985][T23469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.884039][T23469] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5578'. [ 1026.112378][ T1175] batadv0: left promiscuous mode [ 1026.166684][ T5831] Bluetooth: hci4: command tx timeout [ 1026.169039][ T1175] hsr_slave_0: left promiscuous mode [ 1026.196916][ T1175] hsr_slave_1: left promiscuous mode [ 1026.305520][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.335054][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.423347][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.461952][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.610578][ T1175] veth0_macvtap: left promiscuous mode [ 1026.626877][ T1175] veth1_vlan: left promiscuous mode [ 1026.647088][ T1175] veth0_vlan: left promiscuous mode [ 1026.670049][T23479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.732063][T23479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.750977][T23480] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5579'. [ 1027.130490][ T29] audit: type=1326 audit(1773214297.214:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.178136][ T29] audit: type=1326 audit(1773214297.244:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.219666][T23488] net_ratelimit: 364 callbacks suppressed [ 1027.219686][T23488] openvswitch: netlink: Message has 12 unknown bytes. [ 1027.224645][ T29] audit: type=1326 audit(1773214297.244:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.226116][T23488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.251989][ T29] audit: type=1326 audit(1773214297.244:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.292168][T21086] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1027.381643][ T29] audit: type=1326 audit(1773214297.244:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.406065][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 1027.424261][ T29] audit: type=1326 audit(1773214297.244:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.448766][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 1027.483446][T21086] usb 1-1: Using ep0 maxpacket: 16 [ 1027.492048][ T29] audit: type=1326 audit(1773214297.244:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.519516][T21086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.550816][ T29] audit: type=1326 audit(1773214297.244:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.558618][T21086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.598795][T21086] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1027.656191][T21086] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1027.675348][ T29] audit: type=1326 audit(1773214297.764:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.698551][T21086] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.700839][T23292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.738891][T21086] usb 1-1: config 0 descriptor?? [ 1027.789001][ T29] audit: type=1326 audit(1773214297.764:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.2.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290219c799 code=0x7ffc0000 [ 1027.817863][T23292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.840371][T23495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1027.860774][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.868049][T16961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.952217][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.959473][T16961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.048813][T23505] netlink: 'syz.2.5586': attribute type 10 has an invalid length. [ 1028.073448][T23505] team0: Device ipvlan1 failed to register rx_handler [ 1028.174663][ T1175] IPVS: stop unused estimator thread 0... [ 1028.215802][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1028.231986][T21086] microsoft 0003:045E:07DA.002C: ignoring exceeding usage max [ 1028.261105][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x1 [ 1028.307491][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1028.315202][T23511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5587'. [ 1028.319648][T23292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.348521][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1028.360325][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1028.374218][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x5 [ 1028.411705][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1028.440385][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1028.478024][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1028.499504][T23292] veth0_vlan: entered promiscuous mode [ 1028.521744][T21086] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1028.557035][T23292] veth1_vlan: entered promiscuous mode [ 1028.573658][T21086] microsoft 0003:045E:07DA.002C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1028.631722][T21086] microsoft 0003:045E:07DA.002C: no inputs found [ 1028.649664][T21086] microsoft 0003:045E:07DA.002C: could not initialize ff, continuing anyway [ 1028.679806][T23292] veth0_macvtap: entered promiscuous mode [ 1028.718173][T23527] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5589'. [ 1028.751113][T23526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5591'. [ 1028.767712][T21086] usb 1-1: USB disconnect, device number 17 [ 1028.939687][T23527] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5589'. [ 1028.957976][T23521] fido_id[23521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1028.975143][T23292] veth1_macvtap: entered promiscuous mode [ 1029.005437][T23292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.205591][T23292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.291663][T16955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.366080][T16955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.380632][T16955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.544984][T16955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.609921][T23544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.704849][T23539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.742343][T23539] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5592'. [ 1029.758683][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.813179][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.846121][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.862764][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.920141][T23547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.937330][T23547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.947976][T23547] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5594'. [ 1030.995790][T23558] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 1031.446183][T23582] SET target dimension over the limit! [ 1031.537617][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1031.733551][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 1031.744407][ T5906] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1031.761359][T23595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1031.769641][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.818355][ T5906] usb 2-1: config 0 descriptor?? [ 1031.833430][ T5906] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22 [ 1032.059355][ T5906] usb 2-1: USB disconnect, device number 27 [ 1032.114611][T23610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.134936][T23610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.151980][ T5823] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 1032.163440][T23607] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5607'. [ 1032.236320][T23612] netlink: set zone limit has 8 unknown bytes [ 1032.367346][ T5823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1032.376155][ T5823] usb 5-1: config 242 has an invalid interface number: 40 but max is 0 [ 1032.384895][ T5823] usb 5-1: config 242 has no interface number 0 [ 1032.396405][ T5823] usb 5-1: config 242 interface 40 altsetting 4 endpoint 0xD is Bulk; changing to Interrupt [ 1032.413842][ T5823] usb 5-1: config 242 interface 40 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 1032.435293][ T5823] usb 5-1: config 242 interface 40 has no altsetting 0 [ 1032.448250][ T5823] usb 5-1: string descriptor 0 read error: -22 [ 1032.470600][ T5823] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11 [ 1032.486133][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.506044][T23601] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1032.536647][ T5823] hdpvr 5-1:242.40: Could not find bulk-in endpoint [ 1032.552264][ T5823] hdpvr 5-1:242.40: probe with driver hdpvr failed with error -12 [ 1032.582244][ T5906] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1032.699616][T23618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.711962][ T5906] usb 2-1: device descriptor read/64, error -71 [ 1032.726852][T23618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.738675][T21085] usb 5-1: USB disconnect, device number 11 [ 1032.888100][T23620] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5610'. [ 1032.962315][ T5906] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1033.092030][ T5906] usb 2-1: device descriptor read/64, error -71 [ 1033.202191][ T5906] usb usb2-port1: attempt power cycle [ 1033.541994][ T5906] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1033.572149][ T796] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1033.590467][ T5906] usb 2-1: device descriptor read/8, error -71 [ 1033.598608][T23630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.616432][T23630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.627710][T23630] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5613'. [ 1033.834022][ T796] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1033.851394][ T796] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1033.862773][ T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1033.872087][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1033.883318][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1033.896465][ T796] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1033.906016][ T796] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1033.915096][ T796] usb 5-1: Product: syz [ 1033.922602][ T5906] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1033.932327][ T796] usb 5-1: Manufacturer: syz [ 1033.992057][ T5906] usb 2-1: device descriptor read/8, error -71 [ 1034.107169][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 1034.119184][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 1034.125199][ T5906] usb usb2-port1: unable to enumerate USB device [ 1034.138498][ T796] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1034.148709][ T796] cdc_wdm 5-1:1.0: Unknown control protocol [ 1034.419056][ T5903] usb 5-1: USB disconnect, device number 12 [ 1034.475352][ T5823] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1034.631950][ T5823] usb 1-1: Using ep0 maxpacket: 32 [ 1034.638743][ T5823] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.649977][ T5823] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1034.662206][ T5823] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1034.674040][ T5823] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1034.689354][ T5823] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1034.708992][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.722396][ T5823] usb 1-1: Product: syz [ 1034.726606][ T5823] usb 1-1: Manufacturer: syz [ 1034.731302][ T5823] usb 1-1: SerialNumber: syz [ 1034.744798][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1034.756182][ T5823] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input93 [ 1034.962523][ T5823] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1034.975706][ T5823] (id 0x00) [ 1035.081983][ T5823] rc_core: IR keymap rc-imon-pad not found [ 1035.086482][T23642] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1035.098198][ T5823] Registered IR keymap rc-empty [ 1035.127953][ T5823] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1035.259361][ T5823] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1035.314431][ T5823] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1035.327338][ T5823] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input94 [ 1035.442935][T23649] netlink: 'syz.4.5618': attribute type 10 has an invalid length. [ 1035.491469][T23649] team0: Cannot enslave team device to itself [ 1035.502858][ T5823] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:18> initialized [ 1035.991437][T23632] imon:send_packet: task interrupted [ 1035.997532][T23632] imon:send_packet: packet tx failed (-512) [ 1036.009776][T23632] imon:vfd_write: send packet #1 failed [ 1036.032862][T23661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1036.060755][T23632] imon:send_packet: task interrupted [ 1036.077262][T23632] imon:send_packet: packet tx failed (-512) [ 1036.094677][T23632] imon:vfd_write: send packet #0 failed [ 1036.115662][T23662] imon:display_open: display port is already open [ 1036.128660][T23632] imon:send_packet: task interrupted [ 1036.142087][T23632] imon:send_packet: packet tx failed (-512) [ 1036.158261][T23632] imon:vfd_write: send packet #0 failed [ 1036.171536][T23632] imon:send_packet: packet tx failed (-32) [ 1036.187602][T23632] imon:vfd_write: send packet #0 failed [ 1036.304406][ T5906] usb 1-1: USB disconnect, device number 18 [ 1036.389783][T23667] vlan0: entered promiscuous mode [ 1036.577099][T23672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.595458][T23675] macvtap1: entered promiscuous mode [ 1036.602931][T23675] dummy0: entered promiscuous mode [ 1036.609265][T23675] team0: Device macvtap1 failed to register rx_handler [ 1036.621545][T23675] dummy0: left promiscuous mode [ 1036.805108][T23672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.873228][T23677] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5624'. [ 1037.063736][T23686] netlink: 'syz.2.5630': attribute type 12 has an invalid length. [ 1037.071698][T23686] netlink: 'syz.2.5630': attribute type 29 has an invalid length. [ 1037.079744][T23686] netlink: 'syz.2.5630': attribute type 1 has an invalid length. [ 1037.087616][T23686] netlink: 'syz.2.5630': attribute type 37 has an invalid length. [ 1037.095545][T23686] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5630'. [ 1037.169472][T23690] syzkaller0: entered promiscuous mode [ 1037.177140][T23690] syzkaller0: entered allmulticast mode [ 1037.661943][ T796] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1037.831995][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 1037.847021][ T796] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1037.875325][ T796] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1038.010636][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1038.031954][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1038.042578][ T796] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.068978][ T796] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1038.085300][T23714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1038.103509][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.123541][ T796] usb 2-1: Product: syz [ 1038.127842][ T796] usb 2-1: Manufacturer: syz [ 1038.133901][ T796] usb 2-1: SerialNumber: syz [ 1038.150396][ T796] usb 2-1: config 0 descriptor?? [ 1038.329754][T23724] SET target dimension over the limit! [ 1038.468114][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5644'. [ 1038.616107][ T796] iowarrior 2-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 1038.646832][ T796] usb 2-1: USB disconnect, device number 32 [ 1039.004573][T23750] trusted_key: encrypted_key: master key parameter '=i_~43s LZY`P;7}@a.#1CGܯ&jLP*2L?' is invalid [ 1039.239438][T23750] could not allocate digest TFM handle sha224-ssse3 [ 1039.303222][T23756] could not allocate digest TFM handle sha3-512-generic [ 1040.227036][T23778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1040.351422][T23781] x_tables: duplicate entry at hook 2 [ 1040.568875][T23791] ip6tnl2: entered promiscuous mode [ 1040.673672][ T5823] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1040.953709][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.965185][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1040.977145][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.988770][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1041.006219][ T5823] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1041.015724][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.037608][ T5823] usb 3-1: config 0 descriptor?? [ 1041.250876][ T5823] usbhid 3-1:0.0: can't add hid device: -71 [ 1041.260137][ T5823] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1041.285100][ T5823] usb 3-1: USB disconnect, device number 14 [ 1041.401945][ T5903] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1041.461674][T23814] netlink: 'syz.4.5667': attribute type 10 has an invalid length. [ 1041.470928][T23814] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1041.523029][T23816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5668'. [ 1041.555270][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 1041.563333][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1041.580118][ T5903] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 7 [ 1041.596616][ T5903] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1041.609114][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.617367][ T5903] usb 6-1: Product: syz [ 1041.621679][ T5903] usb 6-1: Manufacturer: syz [ 1041.627283][ T5903] usb 6-1: SerialNumber: syz [ 1041.801761][ T29] audit: type=1326 audit(1773214311.884:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23825 comm="syz.0.5672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1364d9c799 code=0x0 [ 1041.802033][ T5823] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1041.841029][ T5903] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1041.854574][ T5903] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1041.862394][ T5903] usb 6-1: unit 6 not found! [ 1041.867209][ T5903] usb 6-1: unit 7 not found! [ 1041.875206][T23827] usb usb8: usbfs: process 23827 (syz.0.5672) did not claim interface 0 before use [ 1041.935112][ T5903] usb 6-1: USB disconnect, device number 2 [ 1041.985737][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 1042.008609][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.029880][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.052057][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.065462][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1042.078865][ T5823] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1042.088379][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.110038][ T5823] usb 3-1: config 0 descriptor?? [ 1042.328595][ T5823] usbhid 3-1:0.0: can't add hid device: -71 [ 1042.334811][ T5823] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1042.346311][ T5823] usb 3-1: USB disconnect, device number 15 [ 1042.484030][ T796] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1042.602403][T23846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5679'. [ 1042.662542][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 1042.681720][ T796] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1042.722008][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.747069][ T796] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1042.852112][T23863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5683'. [ 1042.871402][T23863] netlink: 'syz.5.5683': attribute type 3 has an invalid length. [ 1042.982408][ T5906] IPVS: starting estimator thread 0... [ 1043.083537][T23868] IPVS: using max 35 ests per chain, 84000 per kthread [ 1043.346932][ T796] gspca_nw80x: reg_r err -32 [ 1043.356425][ T796] nw80x 2-1:3.0: probe with driver nw80x failed with error -32 [ 1043.745088][T23913] loop2: detected capacity change from 0 to 7 [ 1043.753775][T23912] netlink: 'syz.0.5693': attribute type 9 has an invalid length. [ 1043.761749][T23912] netlink: 'syz.0.5693': attribute type 11 has an invalid length. [ 1043.761813][ T9797] Dev loop2: unable to read RDB block 7 [ 1043.782092][ T9797] loop2: AHDI p1 p2 p3 [ 1043.786723][ T9797] loop2: partition table partially beyond EOD, truncated [ 1043.812796][T23912] netlink: 'syz.0.5693': attribute type 12 has an invalid length. [ 1043.820655][T23912] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1043.830790][ T9797] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1043.852174][ T9797] loop2: p3 start 335544320 is beyond EOD, truncated [ 1043.883778][T23917] vlan2: entered promiscuous mode [ 1043.889279][T23917] macvlan1: entered promiscuous mode [ 1043.899002][T23913] Dev loop2: unable to read RDB block 7 [ 1043.906918][T23912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1043.911277][T23913] loop2: AHDI p1 p2 p3 [ 1043.923096][T23913] loop2: partition table partially beyond EOD, truncated [ 1043.930834][T23913] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1043.938956][T23913] loop2: p3 start 335544320 is beyond EOD, truncated [ 1043.970341][ T796] usb 2-1: USB disconnect, device number 33 [ 1044.337788][T23937] vlan2: entered promiscuous mode [ 1044.645820][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5703'. [ 1044.681296][T23948] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5703'. [ 1044.692203][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1044.705152][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1044.736817][T23955] macvtap0: entered promiscuous mode [ 1044.763157][T23951] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290396940 (8580793880 ns) > initial count (7730345080 ns). Using initial count to start timer. [ 1044.773376][T23955] macvtap0: left promiscuous mode [ 1044.794638][T23958] netlink: 'syz.2.5703': attribute type 1 has an invalid length. [ 1044.817912][T23951] kvm: kvm [23950]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1044.862220][T23951] kvm: kvm [23950]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1045.550518][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5715'. [ 1045.560849][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5715'. [ 1045.611792][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5715'. [ 1045.643434][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5715'. [ 1045.756737][T23999] SET target dimension over the limit! [ 1045.991109][T24009] xt_policy: output policy not valid in PREROUTING and INPUT [ 1046.096531][T24011] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290396940 (8580793880 ns) > initial count (7730345080 ns). Using initial count to start timer. [ 1046.154770][T24011] kvm: kvm [24010]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1046.169041][T24011] kvm: kvm [24010]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1046.452937][ T5823] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1046.606964][T24035] netlink: 'syz.2.5729': attribute type 9 has an invalid length. [ 1046.616644][T24035] netlink: 'syz.2.5729': attribute type 11 has an invalid length. [ 1046.626458][T24035] netlink: 'syz.2.5729': attribute type 12 has an invalid length. [ 1046.642055][ T796] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1046.643829][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.671373][ T5823] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1046.683564][ T5823] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1046.692962][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.701079][ T5823] usb 1-1: Product: syz [ 1046.707791][ T5823] usb 1-1: Manufacturer: syz [ 1046.720061][ T5823] usb 1-1: SerialNumber: syz [ 1046.735551][ T5823] usb 1-1: config 0 descriptor?? [ 1046.792380][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 1046.801022][ T796] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1046.810703][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.821404][ T796] usb 2-1: Product: syz [ 1046.830043][T24044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290396940 (8580793880 ns) > initial count (7730345080 ns). Using initial count to start timer. [ 1046.854679][ T796] usb 2-1: Manufacturer: syz [ 1046.859839][ T796] usb 2-1: SerialNumber: syz [ 1046.867554][ T796] usb 2-1: config 0 descriptor?? [ 1046.879308][ T796] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1047.018014][T24048] ip6tnl2: entered promiscuous mode [ 1047.052849][ T5823] usb 1-1: USB disconnect, device number 19 [ 1047.153208][T24054] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.159445][T24054] binder: 24052:24054 ioctl 4018620d 200000000100 returned -16 [ 1047.174131][T24054] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.180174][T24054] binder: 24052:24054 ioctl 4018620d 2000000002c0 returned -16 [ 1047.238561][T24056] : renamed from bond_slave_0 (while UP) [ 1047.506998][ T5823] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1047.513147][ T796] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 1047.532864][ T796] usb 2-1: USB disconnect, device number 34 [ 1047.764295][ T5823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1047.774420][ T5823] usb 3-1: config 0 has no interfaces? [ 1047.782018][ T5823] usb 3-1: language id specifier not provided by device, defaulting to English [ 1047.802875][ T5823] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1047.813915][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.822054][ T5823] usb 3-1: Product: syz [ 1047.881196][ T5823] usb 3-1: SerialNumber: syz [ 1047.956586][ T5823] usb 3-1: config 0 descriptor?? [ 1048.192990][T24053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.203377][T24053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.264877][T24053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.367297][T24054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.403532][T24074] netlink: 'syz.0.5741': attribute type 9 has an invalid length. [ 1048.413417][T24053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.440667][T24074] netlink: 'syz.0.5741': attribute type 11 has an invalid length. [ 1048.444473][T24054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.468499][T24074] netlink: 'syz.0.5741': attribute type 12 has an invalid length. [ 1048.557874][ T5823] usb 3-1: USB disconnect, device number 16 [ 1048.686711][T24077] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1048.972295][T24085] __nla_validate_parse: 7 callbacks suppressed [ 1048.972315][T24085] netlink: 476 bytes leftover after parsing attributes in process `syz.4.5746'. [ 1049.131812][T24091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.207964][T24091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.224770][T24091] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5747'. [ 1049.509357][T24107] xt_policy: output policy not valid in PREROUTING and INPUT [ 1050.007878][T24117] netlink: 'syz.5.5754': attribute type 9 has an invalid length. [ 1050.018136][T24117] netlink: 'syz.5.5754': attribute type 11 has an invalid length. [ 1050.038043][T24117] netlink: 'syz.5.5754': attribute type 12 has an invalid length. [ 1050.052845][T24117] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.5754'. [ 1050.073268][T24117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5754'. [ 1050.086906][T24122] netlink: zone id is out of range [ 1050.092984][T24122] netlink: zone id is out of range [ 1050.098332][T24122] netlink: get zone limit has 8 unknown bytes [ 1050.305644][T24126] FAULT_INJECTION: forcing a failure. [ 1050.305644][T24126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.350015][ T5903] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1050.383708][T24126] CPU: 0 UID: 0 PID: 24126 Comm: syz.5.5757 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.383728][T24126] Tainted: [L]=SOFTLOCKUP [ 1050.383732][T24126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1050.383740][T24126] Call Trace: [ 1050.383745][T24126] [ 1050.383751][T24126] dump_stack_lvl+0xe8/0x150 [ 1050.383770][T24126] should_fail_ex+0x412/0x560 [ 1050.383786][T24126] _copy_from_user+0x2d/0xb0 [ 1050.383803][T24126] ___sys_sendmsg+0x1c6/0x360 [ 1050.383815][T24126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.383840][T24126] ? __fget_files+0x2a/0x420 [ 1050.383854][T24126] ? __fget_files+0x3a0/0x420 [ 1050.383871][T24126] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1050.383882][T24126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1050.383896][T24126] ? __pfx_ksys_write+0x10/0x10 [ 1050.383912][T24126] do_syscall_64+0x14d/0xf80 [ 1050.383921][T24126] ? trace_irq_disable+0x3b/0x150 [ 1050.383935][T24126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.383945][T24126] ? clear_bhb_loop+0x40/0x90 [ 1050.383957][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.383974][T24126] RIP: 0033:0x7f57a099c799 [ 1050.383985][T24126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.383994][T24126] RSP: 002b:00007f57a17d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.384005][T24126] RAX: ffffffffffffffda RBX: 00007f57a0c15fa0 RCX: 00007f57a099c799 [ 1050.384012][T24126] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1050.384019][T24126] RBP: 00007f57a17d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.384025][T24126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.384031][T24126] R13: 00007f57a0c16038 R14: 00007f57a0c15fa0 R15: 00007f57a0d3fa48 [ 1050.384046][T24126] [ 1050.733832][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.744037][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1050.755622][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.765801][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1050.780427][ T5903] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1050.789898][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.801070][ T5903] usb 5-1: config 0 descriptor?? [ 1051.026712][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 1051.053785][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1051.075859][ T5903] usb 5-1: USB disconnect, device number 13 [ 1051.103734][T24143] netlink: zone id is out of range [ 1051.115670][T24143] netlink: zone id is out of range [ 1051.122463][T24143] netlink: zone id is out of range [ 1051.127709][T24143] netlink: zone id is out of range [ 1051.133088][T24143] netlink: zone id is out of range [ 1051.138314][T24143] netlink: zone id is out of range [ 1051.145497][T24143] netlink: zone id is out of range [ 1051.276277][T24147] tipc: Enabled bearer , priority 0 [ 1051.317887][T24150] ip6tnl2: entered promiscuous mode [ 1051.334897][T24147] syzkaller0: entered promiscuous mode [ 1051.340425][T24147] syzkaller0: entered allmulticast mode [ 1051.436779][T24147] tipc: Resetting bearer [ 1051.443151][T24157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'. [ 1051.483862][T24157] veth5: entered promiscuous mode [ 1051.502026][ T5903] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1051.628668][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 1051.637838][ T1545] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1051.652778][T24167] macvtap0: entered promiscuous mode [ 1051.659745][T24167] macvtap0: left promiscuous mode [ 1051.665068][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 1051.672329][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.687798][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.699038][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.713640][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1051.726919][ T5903] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1051.736081][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.754319][ T5903] usb 5-1: config 0 descriptor?? [ 1051.801045][ T1545] usb 6-1: config index 0 descriptor too short (expected 30768, got 18) [ 1051.825264][ T1545] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1051.848267][ T1545] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1051.876452][ T1545] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1051.903009][ T1545] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1051.905441][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5772'. [ 1051.913267][ T1545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.930112][ T1545] usb 6-1: Product: syz [ 1051.935250][ T1545] usb 6-1: Manufacturer: syz [ 1051.940502][ T1545] usb 6-1: SerialNumber: syz [ 1051.952020][T24169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5772'. [ 1051.977455][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 1051.985469][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1052.023047][ T5903] usb 5-1: USB disconnect, device number 14 [ 1052.291997][T21086] tipc: Node number set to 2130706433 [ 1052.342004][ T1545] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1052.496182][ T1545] usb 3-1: Using ep0 maxpacket: 16 [ 1052.522684][T24171] loop2: detected capacity change from 0 to 7 [ 1052.542098][T24171] Dev loop2: unable to read RDB block 7 [ 1052.547725][T24171] loop2: AHDI p1 p2 p3 [ 1052.562171][T24171] loop2: partition table partially beyond EOD, truncated [ 1052.569433][T24171] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1052.573104][T24177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5775'. [ 1052.587707][T24177] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5775'. [ 1052.605099][T24171] loop2: p3 start 335544320 is beyond EOD, truncated [ 1052.627832][ T1545] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1052.647978][ T1545] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1052.662370][T24178] netlink: 'syz.4.5775': attribute type 1 has an invalid length. [ 1052.670830][ T1545] usb 3-1: can't read configurations, error -71 [ 1052.746607][T24163] tipc: Resetting bearer [ 1052.832945][T24163] tipc: Disabling bearer [ 1052.901582][T24181] netlink: 'syz.4.5776': attribute type 10 has an invalid length. [ 1052.919174][ T5903] usb 6-1: USB disconnect, device number 3 [ 1052.967250][T24181] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 1053.797786][T21086] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1053.901946][ T1545] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1053.963491][T21086] usb 6-1: Using ep0 maxpacket: 8 [ 1053.974757][T21086] usb 6-1: config 248 has an invalid interface number: 165 but max is 0 [ 1053.996836][T21086] usb 6-1: config 248 contains an unexpected descriptor of type 0x1, skipping [ 1054.014642][T21086] usb 6-1: config 248 has no interface number 0 [ 1054.030286][T21086] usb 6-1: config 248 interface 165 altsetting 8 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1054.054748][T21086] usb 6-1: config 248 interface 165 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 16 [ 1054.074994][T21086] usb 6-1: config 248 interface 165 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1054.087853][ T1545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.147294][ T1545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1054.158478][T21086] usb 6-1: config 248 interface 165 has no altsetting 0 [ 1054.160723][ T1545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.179869][ T1545] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1054.182763][T21086] usb 6-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=26.05 [ 1054.202568][ T1545] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1054.211710][ T1545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.222725][ T1545] usb 3-1: config 0 descriptor?? [ 1054.291173][T21086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.311485][T21086] usb 6-1: Product: п [ 1054.332974][T21086] usb 6-1: Manufacturer: 刼병訨閛퀻Ꮋ䧳벏煕嘒쥜겒⒂ಷ㔘鄑蛁昹ㄣᆿ㋃ƃ뻡॑职Í᧞늅⊟ꃿ䳇ꂈ忴␧舂嫙ꆌﳍ愕縫쬣頻俹쩙椨芦 [ 1054.393336][T21086] usb 6-1: SerialNumber: ᄲ缴왵뽝྾ [ 1054.406415][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.413381][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.416221][T24199] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1054.441200][ T1545] usbhid 3-1:0.0: can't add hid device: -71 [ 1054.457880][ T1545] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1054.478320][ T1545] usb 3-1: USB disconnect, device number 19 [ 1054.671436][T24199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.692559][T24211] netlink: 'syz.0.5787': attribute type 9 has an invalid length. [ 1054.698932][T24199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.702599][T24211] netlink: 'syz.0.5787': attribute type 11 has an invalid length. [ 1054.748781][T24211] netlink: 'syz.0.5787': attribute type 12 has an invalid length. [ 1054.761590][T21086] usb 6-1: bad CDC descriptors [ 1054.772497][T24211] __nla_validate_parse: 2 callbacks suppressed [ 1054.772516][T24211] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5787'. [ 1054.773265][T21086] cdc_acm 6-1:248.165: Zero length descriptor references [ 1054.784084][T24211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5787'. [ 1054.803837][T21086] cdc_acm 6-1:248.165: probe with driver cdc_acm failed with error -22 [ 1054.894383][T21086] usb 6-1: USB disconnect, device number 4 [ 1054.942865][ T1545] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1054.999489][T24216] kvm: kvm [24215]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1055.010669][T24216] kvm: kvm [24215]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1055.101959][ T1545] usb 3-1: Using ep0 maxpacket: 32 [ 1055.125086][ T1545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.143184][ T1545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.170584][ T1545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.181616][ T1545] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1055.194975][ T1545] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1055.205909][ T1545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.224270][ T1545] usb 3-1: config 0 descriptor?? [ 1055.244277][T24230] syzkaller0: entered promiscuous mode [ 1055.249952][T24230] syzkaller0: entered allmulticast mode [ 1055.385765][T24234] macvtap1: entered promiscuous mode [ 1055.396564][T24234] dummy0: entered promiscuous mode [ 1055.404001][T24236] loop2: detected capacity change from 0 to 7 [ 1055.412349][T24234] team0: Device macvtap1 failed to register rx_handler [ 1055.420089][T24236] Dev loop2: unable to read RDB block 7 [ 1055.426440][T24236] loop2: unable to read partition table [ 1055.432927][T24234] dummy0: left promiscuous mode [ 1055.438691][T24236] loop2: partition table beyond EOD, truncated [ 1055.465344][T24236] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1055.467059][ T1545] usbhid 3-1:0.0: can't add hid device: -71 [ 1055.474893][T21086] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 1055.494477][ T1545] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1055.513083][ T1545] usb 3-1: USB disconnect, device number 20 [ 1055.623621][T24240] netlink: 'syz.4.5800': attribute type 9 has an invalid length. [ 1055.634797][T21086] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.645058][T24240] netlink: 'syz.4.5800': attribute type 11 has an invalid length. [ 1055.654807][T21086] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1055.664754][T21086] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1055.669229][T24240] netlink: 'syz.4.5800': attribute type 12 has an invalid length. [ 1055.676926][T21086] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1055.687107][T24240] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.5800'. [ 1055.720002][T21086] usb 2-1: string descriptor 0 read error: -22 [ 1055.720347][T24240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5800'. [ 1055.727099][T21086] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1055.756206][T21086] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1055.815002][T21086] usb 2-1: 0:2 : does not exist [ 1055.858195][T24248] CUSE: DEVNAME unspecified [ 1055.895564][T21086] usb-storage 2-1:1.1: USB Mass Storage device detected [ 1056.141692][T24259] trusted_key: encrypted_key: hex blob is missing [ 1056.461899][T24269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5806'. [ 1056.482068][T24269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5806'. [ 1056.523659][T24269] bridge0: entered promiscuous mode [ 1056.882685][T24269] ip6gretap0: entered promiscuous mode [ 1056.984289][ T1545] [ 1056.986665][ T1545] ============================================ [ 1056.992803][ T1545] WARNING: possible recursive locking detected [ 1056.998955][ T1545] syzkaller #0 Tainted: G L [ 1057.004911][ T1545] -------------------------------------------- [ 1057.011048][ T1545] kworker/0:2/1545 is trying to acquire lock: [ 1057.017108][ T1545] ffff88807db4ef70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1057.026268][ T1545] [ 1057.026268][ T1545] but task is already holding lock: [ 1057.033717][ T1545] ffff888025578f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1057.042782][ T1545] [ 1057.042782][ T1545] other info that might help us debug this: [ 1057.050828][ T1545] Possible unsafe locking scenario: [ 1057.050828][ T1545] [ 1057.058286][ T1545] CPU0 [ 1057.061563][ T1545] ---- [ 1057.064846][ T1545] lock(&hsr->seqnr_lock); [ 1057.069349][ T1545] lock(&hsr->seqnr_lock); [ 1057.073863][ T1545] [ 1057.073863][ T1545] *** DEADLOCK *** [ 1057.073863][ T1545] [ 1057.082081][ T1545] May be due to missing lock nesting notation [ 1057.082081][ T1545] [ 1057.090609][ T1545] 13 locks held by kworker/0:2/1545: [ 1057.095935][ T1545] #0: ffff88803125f148 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1057.106784][ T1545] #1: ffffc90005bcfc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1057.119956][ T1545] #2: ffff88806d846538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 1057.129338][ T1545] #3: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 1057.138567][ T1545] #4: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1057.147669][ T1545] #5: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1057.157699][ T1545] #6: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1057.166887][ T1545] #7: ffff888025578f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1057.176368][ T1545] #8: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1057.185875][ T1545] #9: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1057.195817][ T1545] #10: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1930 [ 1057.205416][ T1545] #11: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1057.215416][ T1545] #12: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1057.224714][ T1545] [ 1057.224714][ T1545] stack backtrace: [ 1057.230601][ T1545] CPU: 0 UID: 0 PID: 1545 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.230619][ T1545] Tainted: [L]=SOFTLOCKUP [ 1057.230623][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1057.230632][ T1545] Workqueue: mld mld_ifc_work [ 1057.230660][ T1545] Call Trace: [ 1057.230670][ T1545] [ 1057.230679][ T1545] dump_stack_lvl+0xe8/0x150 [ 1057.230703][ T1545] print_deadlock_bug+0x279/0x290 [ 1057.230726][ T1545] __lock_acquire+0x253f/0x2cf0 [ 1057.230740][ T1545] ? __lock_acquire+0x6b5/0x2cf0 [ 1057.230752][ T1545] ? unwind_next_frame+0xa5/0x23c0 [ 1057.230765][ T1545] ? unwind_next_frame+0x1aaf/0x23c0 [ 1057.230779][ T1545] lock_acquire+0xf0/0x2e0 [ 1057.230797][ T1545] ? hsr_dev_xmit+0x237/0x360 [ 1057.230820][ T1545] ? hsr_dev_xmit+0x237/0x360 [ 1057.230838][ T1545] _raw_spin_lock_bh+0x36/0x50 [ 1057.230862][ T1545] ? hsr_dev_xmit+0x237/0x360 [ 1057.230875][ T1545] hsr_dev_xmit+0x237/0x360 [ 1057.230885][ T1545] ? hsr_dev_xmit+0x2d/0x360 [ 1057.230896][ T1545] dev_hard_start_xmit+0x2d8/0x870 [ 1057.230909][ T1545] __dev_queue_xmit+0x16d1/0x3890 [ 1057.230920][ T1545] ? __dev_queue_xmit+0x277/0x3890 [ 1057.230931][ T1545] ? lockdep_hardirqs_on+0x7a/0x110 [ 1057.230953][ T1545] ? ebt_do_table+0x2665/0x2830 [ 1057.230975][ T1545] ? ebt_do_table+0x2665/0x2830 [ 1057.231004][ T1545] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1057.231027][ T1545] ? br_nf_post_routing+0x219/0xfe0 [ 1057.231040][ T1545] br_dev_queue_push_xmit+0x370/0x4a0 [ 1057.231051][ T1545] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1057.231060][ T1545] NF_HOOK+0x360/0x3f0 [ 1057.231070][ T1545] ? NF_HOOK+0xa2/0x3f0 [ 1057.231078][ T1545] ? __pfx_NF_HOOK+0x10/0x10 [ 1057.231090][ T1545] ? ret_from_fork+0x51e/0xb90 [ 1057.231111][ T1545] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1057.231132][ T1545] br_forward_finish+0xd3/0x130 [ 1057.231148][ T1545] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1057.231165][ T1545] ? __pfx_br_forward_finish+0x10/0x10 [ 1057.231179][ T1545] NF_HOOK+0x360/0x3f0 [ 1057.231188][ T1545] ? NF_HOOK+0xa2/0x3f0 [ 1057.231197][ T1545] ? __pfx_NF_HOOK+0x10/0x10 [ 1057.231205][ T1545] ? __pfx_br_forward_finish+0x10/0x10 [ 1057.231215][ T1545] ? __skb_clone+0x483/0x7a0 [ 1057.231223][ T1545] ? br_handle_vlan+0x61/0x530 [ 1057.231314][ T1545] __br_forward+0x397/0x540 [ 1057.231327][ T1545] ? __pfx_br_forward_finish+0x10/0x10 [ 1057.231337][ T1545] br_flood+0x6ee/0xb80 [ 1057.231348][ T1545] ? br_dev_xmit+0x193/0x1930 [ 1057.231360][ T1545] br_dev_xmit+0x1292/0x1930 [ 1057.231372][ T1545] ? br_dev_xmit+0x193/0x1930 [ 1057.231388][ T1545] ? __pfx_br_dev_xmit+0x10/0x10 [ 1057.231407][ T1545] ? __skb_get_hash_net+0x13f/0x2e0 [ 1057.231489][ T1545] ? __pfx___skb_get_hash_net+0x10/0x10 [ 1057.231499][ T1545] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 1057.231508][ T1545] ? skb_network_protocol+0x23d/0x3f0 [ 1057.231518][ T1545] ? __pfx_passthru_features_check+0x10/0x10 [ 1057.231528][ T1545] dev_hard_start_xmit+0x2d8/0x870 [ 1057.231553][ T1545] __dev_queue_xmit+0x16d1/0x3890 [ 1057.231574][ T1545] ? __dev_queue_xmit+0x277/0x3890 [ 1057.231593][ T1545] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1057.231613][ T1545] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1057.231628][ T1545] ? __asan_memcpy+0x40/0x70 [ 1057.231636][ T1545] ? __pskb_copy_fclone+0x9c8/0xff0 [ 1057.231646][ T1545] ? __asan_memcpy+0x40/0x70 [ 1057.231655][ T1545] ? __pskb_copy_fclone+0x9c8/0xff0 [ 1057.231666][ T1545] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 1057.231678][ T1545] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1057.231696][ T1545] hsr_forward_skb+0x157b/0x2860 [ 1057.231719][ T1545] ? ret_from_fork_asm+0x1a/0x30 [ 1057.231745][ T1545] ? hsr_forward_skb+0xb3/0x2860 [ 1057.231767][ T1545] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1057.231781][ T1545] ? do_raw_spin_lock+0x12b/0x2f0 [ 1057.231792][ T1545] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1057.231802][ T1545] ? hsr_dev_xmit+0x237/0x360 [ 1057.231812][ T1545] hsr_dev_xmit+0x242/0x360 [ 1057.231823][ T1545] ? hsr_dev_xmit+0x2d/0x360 [ 1057.231836][ T1545] dev_hard_start_xmit+0x2d8/0x870 [ 1057.231855][ T1545] __dev_queue_xmit+0x16d1/0x3890 [ 1057.231871][ T1545] ? __dev_queue_xmit+0x277/0x3890 [ 1057.231889][ T1545] ? __local_bh_enable_ip+0xd0/0x130 [ 1057.231908][ T1545] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1057.231922][ T1545] ? neigh_connected_output+0x1ea/0x460 [ 1057.231976][ T1545] ? eth_header+0x11b/0x200 [ 1057.232027][ T1545] ? __asan_memcpy+0x40/0x70 [ 1057.232050][ T1545] ? ip6_output+0x126/0x550 [ 1057.232069][ T1545] ip6_output+0x340/0x550 [ 1057.232081][ T1545] ? __pfx_ip6_output+0x10/0x10 [ 1057.232093][ T1545] NF_HOOK+0x177/0x4f0 [ 1057.232107][ T1545] ? __pfx_NF_HOOK+0x10/0x10 [ 1057.232123][ T1545] ? __pfx_dst_output+0x10/0x10 [ 1057.232142][ T1545] ? lockdep_hardirqs_on+0x7a/0x110 [ 1057.232167][ T1545] ? __local_bh_enable_ip+0xd0/0x130 [ 1057.232188][ T1545] ? icmp6_dst_alloc+0x3a6/0x440 [ 1057.232249][ T1545] mld_sendpack+0x8b4/0xe40 [ 1057.232262][ T1545] ? look_up_lock_class+0x57/0x110 [ 1057.232286][ T1545] ? mld_sendpack+0x213/0xe40 [ 1057.232308][ T1545] ? __pfx_mld_sendpack+0x10/0x10 [ 1057.232336][ T1545] mld_ifc_work+0x835/0xe70 [ 1057.232359][ T1545] ? process_scheduled_works+0xa25/0x1830 [ 1057.232373][ T1545] process_scheduled_works+0xb02/0x1830 [ 1057.232390][ T1545] ? __pfx_process_scheduled_works+0x10/0x10 [ 1057.232402][ T1545] ? assign_work+0x3d5/0x5e0 [ 1057.232414][ T1545] worker_thread+0xa50/0xfc0 [ 1057.232447][ T1545] kthread+0x388/0x470 [ 1057.232464][ T1545] ? __pfx_worker_thread+0x10/0x10 [ 1057.232484][ T1545] ? __pfx_kthread+0x10/0x10 [ 1057.232500][ T1545] ret_from_fork+0x51e/0xb90 [ 1057.232516][ T1545] ? __pfx_ret_from_fork+0x10/0x10 [ 1057.232527][ T1545] ? __switch_to+0xc7d/0x1450 [ 1057.232538][ T1545] ? __pfx_kthread+0x10/0x10 [ 1057.232546][ T1545] ret_from_fork_asm+0x1a/0x30 [ 1057.232563][ T1545] [ 1057.891774][T21086] usb 2-1: us122l: couldn't allocate write buffer [ 1057.902213][T21086] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1058.313590][T21086] usb 2-1: USB disconnect, device number 35 [ 1058.597304][T24280] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1058.603876][T24280] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1058.612375][T24280] vhci_hcd vhci_hcd.0: Device attached [ 1058.654737][T24280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5808'. [ 1058.678252][T24280] xt_nfacct: accounting object `syz1' does not exist [ 1058.932023][T21086] usb 38-1: SetAddress Request (18) to port 0 [ 1058.938281][T21086] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1059.919205][T24281] vhci_hcd: connection reset by peer [ 1059.933353][ T1098] vhci_hcd vhci_hcd.2: stop threads [ 1059.942169][ T1098] vhci_hcd vhci_hcd.2: release socket [ 1059.948719][ T1098] vhci_hcd vhci_hcd.2: disconnect device [ 1064.002151][T21086] usb 38-1: device descriptor read/8, error -110 [ 1064.392753][T21086] usb usb38-port1: attempt power cycle [ 1064.952745][T21086] usb usb38-port1: unable to enumerate USB device