last executing test programs: 22m8.324384437s ago: executing program 2 (id=7985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xe}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x3a}, {@in6=@private0, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffb, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x100}, &(0x7f0000000140)=0x8) 22m8.108272678s ago: executing program 2 (id=7986): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000ce0018a1f8580c0002000800010006"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000240)={0x5, 0x0, 0xd}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6], 0x3c}}, 0x0) 22m7.987330875s ago: executing program 2 (id=7989): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@local}, {@my=0x0, 0xd}, 0x400, "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"}, 0x418}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe671, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x1, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0x5, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3a, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x9, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ed, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x7, 0x6, 0xac8, 0xbf, 0x0, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xfffffff8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x512, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xf, 0x8, 0x3, 0x226, 0x5, 0x5, 0xb5, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x48, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xa, 0xe}, {0xfff2}}, [{0x4}, {0x4}, {0x12}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x4080) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 22m7.858572147s ago: executing program 2 (id=7992): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x100000, 0x4, {}, {0x5, 0x2, 0x5, 0xb, 0xff, 0x81, "74c3d545"}, 0x1e1f, 0x4, {0xffffffffffffffff}, 0xa7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x8b, 0x0, 0x800}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) preadv(r3, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_fd={0x6, 0x6, 0x4, 0xe000, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x40, 0xe, 0x9, 0x2, "43dabe7c"}, 0xf, 0x4, {&(0x7f0000000080)=[{0x3, 0x1, {r1}, 0x7}, {0x7fffffff, 0x2, {r3}, 0x401}]}, 0x3, 0x0, r5}) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r11 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x8d4, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x8a8, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x8a0, 0x4, [@m_police={0x89c, 0x3, 0x0, 0x0, {{0xb}, {0x870, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff28, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8d4}}, 0x0) io_uring_enter(r11, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000440)={0x8, @capture={0x0, 0x1, {0x4, 0x2}, 0x3, 0xffff}}) 22m6.695371415s ago: executing program 2 (id=7996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/ptype\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) syz_open_dev$media(&(0x7f0000000b40), 0x0, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0x55117e) renameat2(r8, &(0x7f0000000040)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus/file0\x00', 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x8, r6}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) 22m6.359475201s ago: executing program 2 (id=7997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000900)={0x0, 0x0, r3, r4, 0x3, 0x1, 0x4, 0x1000, {0x280, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x0, 0x8, 0x9, 0xd25, 0x5, 0x60b, 0x2, 0x10000, "6f4f1b1330d057b30bd15565b7300d000000000000009c2cd5ae7297dceeb0be"}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {0xfffffffc, 0x4}}, './file0\x00'}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000380)={0x1, r11, r10}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x4, 0x4, 0x3, 0x0, r10}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r12, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r12, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 22m5.554104668s ago: executing program 32 (id=7997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000900)={0x0, 0x0, r3, r4, 0x3, 0x1, 0x4, 0x1000, {0x280, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x0, 0x8, 0x9, 0xd25, 0x5, 0x60b, 0x2, 0x10000, "6f4f1b1330d057b30bd15565b7300d000000000000009c2cd5ae7297dceeb0be"}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {0xfffffffc, 0x4}}, './file0\x00'}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000380)={0x1, r11, r10}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x4, 0x4, 0x3, 0x0, r10}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r12, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r12, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 6.164123105s ago: executing program 5 (id=14391): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000030004000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c61737400000000040002801400e0f8c1f80100636d756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) unshare(0x26020480) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 5.583551068s ago: executing program 1 (id=14394): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_emit_ethernet(0x1146, &(0x7f0000001380)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x1110, 0x3a, 0xff, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x10, 0x33, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [@srh={0x89, 0x6, 0x4, 0x3, 0x6a, 0x48, 0x3, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @dstopts={0x16, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xc5}]}, @fragment={0x3a, 0x0, 0x80, 0x0, 0x0, 0x11, 0x68}, @routing={0x1d, 0x2, 0x2, 0x6, 0x0, [@loopback]}, @dstopts={0x21, 0x209, '\x00', [@ra={0x5, 0x2, 0x401}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @remote}, @generic={0x4e, 0x1000, "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"}, @ra={0x5, 0x2, 0x800}, @calipso={0x7, 0x28, {0x4fec32466e28b90f, 0x8, 0x0, 0x2, [0x6, 0x8000000000000000, 0x4, 0xff]}}]}]}}}}}}}, 0x0) r4 = getpid() kcmp(r4, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b3b373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d38300d106d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="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", 0x165}], 0x1, 0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="200000002e00090027bd7000000400190008000900035f3102b32a64180c9da65a1b9ccfd2071e10f2638be9ea8b558fd8c6700b3a01ba929ce0c91816f7305ecdaf580cb7e0bba5aa00e4a6b9dd76185df75b4d9881b36f2351387cf9e61a149cd248933720b6b5e32f90e22664421c9846baae98bdf34ea284ee5147d9a46e338e77f3fc80d2d5e96eec30b345e62765080635e6f09e7d575bf8f7c44aa938df50faff07211ec4039ff21b96cb3b", @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) stat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)) 5.256452518s ago: executing program 1 (id=14396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r1, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000580)="b6b8919974762dce724894f4f9f274ed26655467") syz_usb_connect(0x3, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000c6284c10e80401660fcd0102030109021200010009042e0000d39a9e00"], 0x0) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000000100000001a03696a1663646f7bed7224c353f8a000000"], 0x10, 0x20004014}}], 0x1, 0x4004001) socket$key(0xf, 0x3, 0x2) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) syz_io_uring_setup(0x4461, &(0x7f0000000140)={0x0, 0x6831, 0x400, 0x0, 0xef, 0x0, r5}, 0x0, &(0x7f0000000280)) fchdir(r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x340, r6, 0xf9683ccc10e0a75, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x235}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x54000000}]}]}, @TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @local, 0xdfc6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xb5d2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3b, @mcast2, 0x200}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x362}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ce2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x523}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe00000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xad5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b0}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3d51}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x299d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x340}, 0x1, 0x0, 0x0, 0xc0}, 0x40008) 5.107012316s ago: executing program 5 (id=14397): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x219}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1c", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc", 0x59}, {&(0x7f0000001000)="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", 0x3f2}], 0x4}}], 0x3, 0x4004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.600078797s ago: executing program 3 (id=14398): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) 4.556086555s ago: executing program 0 (id=14399): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000002340)={0x0, 0x7a8e, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.100623364s ago: executing program 0 (id=14400): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) fanotify_mark(0xffffffffffffffff, 0x441, 0x40100000, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001980)="bb3fddb1cf", 0x3fbb}], 0x1}}], 0x1, 0x20000000) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x4000000) 3.960239135s ago: executing program 5 (id=14401): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4480) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) fcntl$setpipe(r0, 0x408, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x9) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) 3.796197787s ago: executing program 5 (id=14403): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0x401) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xc8, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x198}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x1, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000040)=0xfffffffa) 3.788279476s ago: executing program 0 (id=14404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1c", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc", 0x59}, {&(0x7f0000001000)="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", 0x3f2}], 0x4}}], 0x3, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.287499179s ago: executing program 1 (id=14405): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000030004000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c61737400000000040002801400e0f8c1f80100636d756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) unshare(0x26020480) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 3.235265277s ago: executing program 0 (id=14406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.0705942s ago: executing program 0 (id=14407): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000600000000080045000027"], 0x0) 2.834648711s ago: executing program 0 (id=14408): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xb, 0xa, 0xfffffff6, {0x403, 0x1, 0x3, 0x8, 0x20, 0x7, 0x5, 0x6, 0x22, 0x5, 0x7f, 0x9c14, 0x20000a, 0x8d12074f, "0010b45adb3bdf6bbf43f7e7bdcf42a72e6ca213e20b354ba4e274f7720904f6"}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000540)=0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) socket$inet6(0xa, 0x803, 0x6) 2.833085002s ago: executing program 4 (id=14409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x3, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0xfee7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x80000000a) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3e9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d498c4c2999aaddd8bceb38fe8eca2a8810000003766baf80cb8303fa984ef66bafc0ced660f38810b", 0x3e}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44) 2.809045081s ago: executing program 3 (id=14410): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000002340)={0x0, 0x7a8e, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.579414348s ago: executing program 4 (id=14411): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x21d}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1c", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc", 0x59}, {&(0x7f0000001000)="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", 0x3f2}], 0x4}}], 0x3, 0x4004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.417249402s ago: executing program 5 (id=14413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) unshare(0x2040400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async, rerun: 64) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) (async, rerun: 32) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 32) 2.232666069s ago: executing program 1 (id=14414): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) fanotify_mark(0xffffffffffffffff, 0x441, 0x40100000, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001980)="bb3fddb1cf", 0x3fbb}], 0x1}}], 0x1, 0x20000000) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x4000000) 1.870250604s ago: executing program 3 (id=14415): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, 0x0, 0x0) r1 = socket(0xb, 0x80000, 0xfffffffe) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.468249917s ago: executing program 4 (id=14416): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1c", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc", 0x59}, {&(0x7f0000001000)="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", 0x3f2}], 0x4}}], 0x3, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.467964469s ago: executing program 3 (id=14417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.050096749s ago: executing program 3 (id=14418): syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3e, 0x28, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x4, 0x7fffffff}, 0x4000000) 847.270102ms ago: executing program 3 (id=14419): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0x12a7, &(0x7f0000000140)={0x0, 0x4042, 0x800, 0x3, 0x1f7}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$media(0x0, 0x4007, 0x0) 830.056595ms ago: executing program 1 (id=14420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="80010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB='$\x00-'], 0x180}, 0x1, 0x0, 0x0, 0x24004904}, 0xc0) (fail_nth: 6) 451.601246ms ago: executing program 4 (id=14421): r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$audion(&(0x7f00000005c0), 0x59f, 0x301000) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYRES16=r0], 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220041"], 0x1c}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/149, 0x95}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/19, 0x13}], 0x5, 0x0, 0x0, 0x4000}, 0x8005) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000000700)=0x2) socket$kcm(0x2, 0x1, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) 451.310208ms ago: executing program 1 (id=14422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x8, 0xce, 0x0, 0x4, 0x3, 0x7, 0x81, 0x0, r6}, &(0x7f0000000080)=0x20) r7 = dup(r1) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r8, 0x212}}, 0x10) 323.066331ms ago: executing program 5 (id=14423): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0) r5 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040015}, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) getgroups(0x27, &(0x7f0000002540)) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5], 0x0, 0x1a, 0x0, 0x0, 0x5}, 0x28) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r9}) 298.612859ms ago: executing program 4 (id=14424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000002340)={0x0, 0x7a8e, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=14425): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x21d}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1c", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc", 0x59}, {&(0x7f0000001000)="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", 0x3f2}], 0x4}}], 0x3, 0x4004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 2] ? fs_reclaim_acquire+0x7d/0x100 [ 2559.457338][T14592] should_fail_ex+0x414/0x560 [ 2559.457376][T14592] should_failslab+0xa8/0x100 [ 2559.457402][T14592] __kvmalloc_node_noprof+0x175/0x920 [ 2559.457427][T14592] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 2559.457469][T14592] alloc_netdev_mqs+0x8a6/0x11b0 [ 2559.457512][T14592] rtnl_create_link+0x31f/0xcf0 [ 2559.457548][T14592] rtnl_newlink_create+0x25c/0xb00 [ 2559.457589][T14592] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2559.457618][T14592] ? __pfx___mutex_lock+0x10/0x10 [ 2559.457652][T14592] ? ns_capable+0x8a/0xf0 [ 2559.457676][T14592] rtnl_newlink+0x16e7/0x1c90 [ 2559.457715][T14592] ? __pfx_rtnl_newlink+0x10/0x10 [ 2559.457735][T14592] ? do_syscall_64+0xfa/0xf80 [ 2559.457754][T14592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2559.457823][T14592] ? kasan_quarantine_put+0xdd/0x220 [ 2559.457842][T14592] ? lockdep_hardirqs_on+0x98/0x140 [ 2559.457871][T14592] ? kmem_cache_free+0x197/0x620 [ 2559.457892][T14592] ? nlmon_xmit+0xb0/0x100 [ 2559.457929][T14592] ? __lock_acquire+0x6b6/0x2cf0 [ 2559.457955][T14592] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2559.457982][T14592] ? __dev_queue_xmit+0x289/0x3140 [ 2559.458008][T14592] ? __dev_queue_xmit+0x289/0x3140 [ 2559.458033][T14592] ? __dev_queue_xmit+0x289/0x3140 [ 2559.458091][T14592] ? __pfx_rtnl_newlink+0x10/0x10 [ 2559.458113][T14592] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2559.458138][T14592] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2559.458160][T14592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2559.458180][T14592] ? ref_tracker_free+0x63a/0x7d0 [ 2559.458201][T14592] ? __asan_memcpy+0x40/0x70 [ 2559.458219][T14592] ? __pfx_ref_tracker_free+0x10/0x10 [ 2559.458238][T14592] ? __skb_clone+0x63/0x7a0 [ 2559.458272][T14592] netlink_rcv_skb+0x208/0x470 [ 2559.458301][T14592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2559.458333][T14592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2559.458374][T14592] ? netlink_deliver_tap+0x2e/0x1b0 [ 2559.458409][T14592] netlink_unicast+0x82f/0x9e0 [ 2559.458443][T14592] ? __pfx_netlink_unicast+0x10/0x10 [ 2559.458470][T14592] ? netlink_sendmsg+0x642/0xb30 [ 2559.458493][T14592] ? skb_put+0x11b/0x210 [ 2559.458520][T14592] netlink_sendmsg+0x805/0xb30 [ 2559.458556][T14592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2559.458587][T14592] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2559.458615][T14592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2559.458635][T14592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2559.458662][T14592] __sock_sendmsg+0x21c/0x270 [ 2559.458695][T14592] ____sys_sendmsg+0x505/0x820 [ 2559.458727][T14592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2559.458763][T14592] ? import_iovec+0x74/0xa0 [ 2559.458793][T14592] ___sys_sendmsg+0x21f/0x2a0 [ 2559.458821][T14592] ? __pfx____sys_sendmsg+0x10/0x10 [ 2559.458852][T14592] ? rcu_read_lock_any_held+0xb3/0x120 [ 2559.458911][T14592] ? __fget_files+0x2a/0x420 [ 2559.458935][T14592] ? __fget_files+0x3a0/0x420 [ 2559.458973][T14592] __x64_sys_sendmsg+0x19b/0x260 [ 2559.459000][T14592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2559.459046][T14592] ? do_syscall_64+0xbe/0xf80 [ 2559.459072][T14592] do_syscall_64+0xfa/0xf80 [ 2559.459093][T14592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2559.459113][T14592] ? clear_bhb_loop+0x60/0xb0 [ 2559.459137][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2559.459158][T14592] RIP: 0033:0x7f82d6f8f749 [ 2559.459179][T14592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2559.459198][T14592] RSP: 002b:00007f82d7d51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2559.459223][T14592] RAX: ffffffffffffffda RBX: 00007f82d71e5fa0 RCX: 00007f82d6f8f749 [ 2559.459240][T14592] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 2559.459254][T14592] RBP: 00007f82d7d51090 R08: 0000000000000000 R09: 0000000000000000 [ 2559.459266][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2559.459278][T14592] R13: 00007f82d71e6038 R14: 00007f82d71e5fa0 R15: 00007f82d730fa28 [ 2559.459315][T14592] [ 2560.473231][ T1285] usbhid 6-1:0.0: can't add hid device: -71 [ 2560.500038][ T1285] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2560.595109][ T1285] usb 6-1: USB disconnect, device number 24 [ 2560.839128][ T30] audit: type=1326 audit(1765889262.612:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6f8f749 code=0x7ffc0000 [ 2560.902892][ T30] audit: type=1326 audit(1765889262.632:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f82d6f8f749 code=0x7ffc0000 [ 2560.936975][ T30] audit: type=1326 audit(1765889262.632:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6f8f749 code=0x7ffc0000 [ 2560.961234][ T30] audit: type=1326 audit(1765889262.642:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f82d6f8f749 code=0x7ffc0000 [ 2561.006376][ T30] audit: type=1326 audit(1765889262.642:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6f8f749 code=0x7ffc0000 [ 2561.030250][ T30] audit: type=1326 audit(1765889262.642:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82d6f8df90 code=0x7ffc0000 [ 2561.054429][ T30] audit: type=1326 audit(1765889262.642:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82d6f8df90 code=0x7ffc0000 [ 2561.080900][ T30] audit: type=1326 audit(1765889262.642:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6f8f749 code=0x7ffc0000 [ 2561.108098][ T30] audit: type=1326 audit(1765889262.642:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f82d6f8f749 code=0x7ffc0000 [ 2561.134287][ T30] audit: type=1326 audit(1765889262.642:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.13267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6f8f749 code=0x7ffc0000 [ 2561.994248][T14640] netlink: 'syz.3.13281': attribute type 21 has an invalid length. [ 2562.332165][T14652] syzkaller0: entered promiscuous mode [ 2562.339227][T14652] syzkaller0: entered allmulticast mode [ 2562.349404][T14656] netlink: 'syz.5.13286': attribute type 10 has an invalid length. [ 2562.426373][ T5883] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2562.581675][ T5883] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2562.582545][T14663] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20003 [ 2562.720070][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2562.736339][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2562.744465][ T5883] usb 2-1: Product: syz [ 2562.755734][ T5883] usb 2-1: Manufacturer: syz [ 2562.760490][ T5883] usb 2-1: SerialNumber: syz [ 2562.992466][ T5883] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2563.135814][T14670] syzkaller0: entered promiscuous mode [ 2563.143602][T14670] syzkaller0: entered allmulticast mode [ 2563.510628][T14682] netlink: 'syz.0.13297': attribute type 10 has an invalid length. [ 2563.546661][T31651] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2563.606131][T14686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13280'. [ 2563.686416][T31651] usb 4-1: device descriptor read/64, error -71 [ 2563.926861][T31651] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2564.056497][T31651] usb 4-1: device descriptor read/64, error -71 [ 2564.357637][T31651] usb usb4-port1: attempt power cycle [ 2564.576716][ T5922] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2564.740272][ C1] usblp0: nonzero write bulk status received: -71 [ 2564.755285][ T5922] usb 6-1: device descriptor read/64, error -71 [ 2564.770449][ T1285] usb 2-1: USB disconnect, device number 67 [ 2564.795112][T31651] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2564.803075][ T1285] usblp0: removed [ 2564.838939][T31651] usb 4-1: device descriptor read/8, error -71 [ 2565.076463][ T5922] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2565.086405][T31651] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2565.117040][T31651] usb 4-1: device descriptor read/8, error -71 [ 2565.216748][ T5922] usb 6-1: device descriptor read/64, error -71 [ 2565.226935][T31651] usb usb4-port1: unable to enumerate USB device [ 2565.375412][ T5922] usb usb6-port1: attempt power cycle [ 2565.671718][T14719] netlink: 'syz.1.13308': attribute type 10 has an invalid length. [ 2565.796436][ T5922] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2565.834314][ T5922] usb 6-1: device descriptor read/8, error -71 [ 2566.126399][ T5922] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2566.158004][ T5922] usb 6-1: device descriptor read/8, error -71 [ 2566.300874][ T5922] usb usb6-port1: unable to enumerate USB device [ 2567.097833][T14753] netlink: 'syz.1.13319': attribute type 10 has an invalid length. [ 2567.319937][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13320'. [ 2568.044564][T14770] netlink: 'syz.0.13325': attribute type 5 has an invalid length. [ 2568.621299][T14779] syzkaller0: entered promiscuous mode [ 2568.626888][T14779] syzkaller0: entered allmulticast mode [ 2568.736836][ T5922] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2568.763629][T14783] netlink: 'syz.1.13330': attribute type 10 has an invalid length. [ 2568.898103][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 2568.909655][ T5922] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2568.918381][ T5922] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2568.931143][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2568.943574][ T5922] usb 4-1: config 1 has no interface number 0 [ 2568.950017][ T5922] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2568.962675][ T5922] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2568.976877][ T5922] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2568.986014][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.011845][ T5922] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2569.211815][ T5922] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 2570.273269][ T5922] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 2570.717090][T14819] netlink: 'syz.0.13341': attribute type 10 has an invalid length. [ 2571.575735][ T5922] usb 4-1: USB disconnect, device number 43 [ 2571.582821][ T5922] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2572.146376][T23576] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2572.297695][T23576] usb 6-1: Using ep0 maxpacket: 32 [ 2572.306129][T23576] usb 6-1: config 6 has an invalid interface number: 139 but max is 0 [ 2572.325500][T23576] usb 6-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 2572.344731][T23576] usb 6-1: config 6 has no interface number 0 [ 2572.363683][T23576] usb 6-1: config 6 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2572.374528][T14856] netlink: 'syz.0.13352': attribute type 10 has an invalid length. [ 2572.415949][T23576] usb 6-1: config 6 interface 139 altsetting 0 has an endpoint descriptor with address 0x13, changing to 0x3 [ 2572.447588][T23576] usb 6-1: config 6 interface 139 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2572.478225][T23576] usb 6-1: config 6 interface 139 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2572.509465][T23576] usb 6-1: config 6 interface 139 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2572.530675][T23576] usb 6-1: config 6 interface 139 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2572.561996][T23576] usb 6-1: config 6 interface 139 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 2572.610844][T23576] usb 6-1: New USB device found, idVendor=12d1, idProduct=78b5, bcdDevice=4f.14 [ 2572.645206][T23576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.668568][T23576] usb 6-1: Product: syz [ 2572.672786][T23576] usb 6-1: Manufacturer: П [ 2572.700243][T23576] usb 6-1: SerialNumber: syz [ 2572.723183][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13353'. [ 2572.727478][T14844] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2572.987747][T14871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13354'. [ 2572.992358][T23576] option 6-1:6.139: GSM modem (1-port) converter detected [ 2573.047148][T23576] usb 6-1: USB disconnect, device number 29 [ 2573.072489][T23576] option 6-1:6.139: device disconnected [ 2573.171160][ T30] kauditd_printk_skb: 427 callbacks suppressed [ 2573.171179][ T30] audit: type=1326 audit(1765889274.942:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.1.13357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95e958f749 code=0x0 [ 2573.208299][ T30] audit: type=1326 audit(1765889274.982:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.1.13357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95e958f749 code=0x0 [ 2574.181177][T14900] netlink: 'syz.0.13363': attribute type 10 has an invalid length. [ 2574.249933][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13364'. [ 2574.787967][T14911] netlink: 'syz.1.13365': attribute type 8 has an invalid length. [ 2575.654207][T14921] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2575.760361][T14921] bond3 (unregistering): Released all slaves [ 2577.036402][ T1285] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2577.100190][T14943] netlink: 'syz.4.13374': attribute type 10 has an invalid length. [ 2577.206418][ T1285] usb 4-1: Using ep0 maxpacket: 16 [ 2577.225276][ T1285] usb 4-1: config 0 has no interfaces? [ 2577.245125][ T1285] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2577.279690][ T1285] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2577.288290][ T1285] usb 4-1: Manufacturer: syz [ 2577.297774][ T1285] usb 4-1: config 0 descriptor?? [ 2577.937045][T14967] program syz.1.13380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2579.688742][T14992] netlink: 'syz.5.13385': attribute type 72 has an invalid length. [ 2579.703972][T15815] usb 4-1: USB disconnect, device number 44 [ 2579.746966][T14992] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13385'. [ 2579.829921][T14995] netlink: 'syz.3.13386': attribute type 10 has an invalid length. [ 2580.487194][T15021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2580.494511][T15021] IPv6: NLM_F_CREATE should be set when creating new route [ 2580.511420][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13392'. [ 2582.026821][ T1285] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2582.236390][ T1285] usb 4-1: Using ep0 maxpacket: 16 [ 2582.297747][T15044] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13387'. [ 2582.330841][ T1285] usb 4-1: config 0 has no interfaces? [ 2582.349571][ T1285] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2582.366448][ T1285] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2582.374600][ T1285] usb 4-1: Manufacturer: syz [ 2582.431267][ T1285] usb 4-1: config 0 descriptor?? [ 2582.573436][T15055] netlink: 'syz.0.13399': attribute type 10 has an invalid length. [ 2582.681406][T15057] netlink: 'syz.0.13400': attribute type 72 has an invalid length. [ 2582.700067][T15057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13400'. [ 2583.692917][T15075] syzkaller0: entered promiscuous mode [ 2583.715167][T15075] syzkaller0: entered allmulticast mode [ 2583.806401][ T1285] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2583.958086][ T1285] usb 6-1: device descriptor read/64, error -71 [ 2584.196411][ T1285] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2584.393369][ T1285] usb 6-1: device descriptor read/64, error -71 [ 2584.508482][ T1285] usb usb6-port1: attempt power cycle [ 2584.604642][T23576] usb 4-1: USB disconnect, device number 45 [ 2584.823016][T15089] netlink: 'syz.3.13410': attribute type 10 has an invalid length. [ 2584.876534][ T1285] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2584.897446][ T1285] usb 6-1: device descriptor read/8, error -71 [ 2585.296582][ T1285] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2585.317023][ T1285] usb 6-1: device descriptor read/8, error -71 [ 2585.436676][ T1285] usb usb6-port1: unable to enumerate USB device [ 2586.182861][T15112] syzkaller0: entered promiscuous mode [ 2586.190362][T15112] syzkaller0: entered allmulticast mode [ 2586.239579][T15114] netlink: 'syz.1.13421': attribute type 10 has an invalid length. [ 2586.459745][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13422'. [ 2586.548833][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13424'. [ 2587.200490][T15137] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2588.547254][T31651] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2588.715048][T31651] usb 2-1: device descriptor read/64, error -71 [ 2589.001302][T31651] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2589.149623][T15169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13436'. [ 2589.169916][T31651] usb 2-1: device descriptor read/64, error -71 [ 2589.205859][T15169] netlink: 43 bytes leftover after parsing attributes in process `syz.3.13436'. [ 2589.272345][T15169] netlink: 'syz.3.13436': attribute type 6 has an invalid length. [ 2589.311321][T31651] usb usb2-port1: attempt power cycle [ 2589.340804][T15169] netlink: 'syz.3.13436': attribute type 5 has an invalid length. [ 2589.391352][T15169] netlink: 43 bytes leftover after parsing attributes in process `syz.3.13436'. [ 2589.545633][T15174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13437'. [ 2589.689145][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13439'. [ 2589.714446][T31651] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 2589.737072][T31651] usb 2-1: device descriptor read/8, error -71 [ 2589.942182][T15189] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 2589.976923][T31651] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 2590.007236][T31651] usb 2-1: device descriptor read/8, error -71 [ 2590.119598][T31651] usb usb2-port1: unable to enumerate USB device [ 2590.188206][T15193] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2590.211138][T15193] IPVS: stopping backup sync thread 10105 ... [ 2590.704124][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.711183][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.995121][T15205] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2591.001714][T15205] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2591.032084][T15205] vhci_hcd vhci_hcd.0: Device attached [ 2591.174773][T15210] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13449'. [ 2591.184431][T15210] unsupported nla_type 13342 [ 2591.266496][ T5922] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 2591.479121][T15214] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13444'. [ 2591.628917][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13451'. [ 2592.084664][T15206] vhci_hcd: connection reset by peer [ 2592.107157][T24154] vhci_hcd vhci_hcd.3: stop threads [ 2592.112661][T24154] vhci_hcd vhci_hcd.3: release socket [ 2592.118793][T24154] vhci_hcd vhci_hcd.3: disconnect device [ 2594.296865][T24180] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2594.636698][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2594.673472][T15259] fuse: Bad value for 'user_id' [ 2594.708869][T15259] fuse: Bad value for 'user_id' [ 2594.726591][T24180] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2595.436405][T24180] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2595.602332][T24180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2595.622897][T24180] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 2595.638505][T24180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2595.655998][T24180] usb 2-1: Product: syz [ 2595.666031][T24180] usb 2-1: Manufacturer: syz [ 2595.678449][T24180] usb 2-1: SerialNumber: syz [ 2595.696109][T24180] usb 2-1: config 0 descriptor?? [ 2595.702373][T16047] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2595.726005][T16047] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2595.829234][T24180] viperboard 2-1:0.0: version 0.00 found at bus 002 address 072 [ 2595.872029][T24180] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2595.885986][T24180] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 2596.417572][ T5922] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2596.419019][ T5883] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2597.745949][T15311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2597.785638][T15311] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2597.813317][T15311] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2598.180742][T31651] usb 2-1: USB disconnect, device number 72 [ 2598.286423][ T5922] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2598.467144][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 2598.474450][ T5922] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 2598.488706][ T5922] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2598.626403][ T5922] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2598.669041][ T5922] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2598.712229][ T5922] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2598.735437][ T5922] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2598.745686][ T5922] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2598.754732][ T5922] usb 6-1: Product: syz [ 2598.764361][ T5922] usb 6-1: Manufacturer: syz [ 2598.777207][ T5922] usb 6-1: SerialNumber: syz [ 2598.787432][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13484'. [ 2598.806770][ T5922] usb 6-1: config 0 descriptor?? [ 2598.826477][ T5922] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2598.860011][T15335] ip6gretap0: entered promiscuous mode [ 2598.865741][T15335] macvtap7: entered promiscuous mode [ 2598.884728][ T5922] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2598.885113][T15335] macvtap7: entered allmulticast mode [ 2598.933494][T15335] ip6gretap0: entered allmulticast mode [ 2598.973758][T15337] ip6gretap0: left allmulticast mode [ 2598.996590][T15337] ip6gretap0: left promiscuous mode [ 2599.094109][T15342] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13486'. [ 2599.156668][T15342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13486'. [ 2599.616546][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2599.688933][T15324] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2599.689573][T31651] usb 6-1: USB disconnect, device number 34 [ 2599.696231][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 2599.714521][T15346] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2599.787308][T26906] Bluetooth: hci3: command 0x0c1a tx timeout [ 2600.129312][T31651] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2601.856409][T26906] Bluetooth: hci3: command 0x0c1a tx timeout [ 2602.103746][T15377] 8021q: VLANs not supported on ip6tnl0 [ 2602.366019][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13493'. [ 2602.554291][T15382] netlink: 'syz.3.13495': attribute type 4 has an invalid length. [ 2602.609814][T15383] netlink: 'syz.3.13495': attribute type 4 has an invalid length. [ 2602.909490][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13496'. [ 2603.697617][T15378] team0 (unregistering): Port device team_slave_0 removed [ 2603.730455][T15378] team0 (unregistering): Port device team_slave_1 removed [ 2603.873191][T15387] ip6gretap0: entered promiscuous mode [ 2603.883955][T15387] macvtap8: entered promiscuous mode [ 2603.894309][T15387] macvtap8: entered allmulticast mode [ 2603.912923][T15387] ip6gretap0: entered allmulticast mode [ 2603.931043][T15389] ip6gretap0: left allmulticast mode [ 2603.937212][T26906] Bluetooth: hci3: command 0x0c1a tx timeout [ 2603.943348][T15400] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2603.959010][T15389] ip6gretap0: left promiscuous mode [ 2606.051448][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13509'. [ 2606.079933][T15438] ip6gretap0: entered promiscuous mode [ 2606.089733][T15438] macvtap9: entered promiscuous mode [ 2606.113401][T15438] macvtap9: entered allmulticast mode [ 2606.134442][T15438] ip6gretap0: entered allmulticast mode [ 2606.162749][T15440] ip6gretap0: left allmulticast mode [ 2606.168366][T15440] ip6gretap0: left promiscuous mode [ 2606.490250][T15443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13510'. [ 2606.685530][T15449] QAT: failed to copy from user. [ 2607.296529][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2607.988782][T15470] netlink: 'syz.1.13521': attribute type 6 has an invalid length. [ 2608.137528][T15473] fuse: Bad value for 'fd' [ 2608.460781][T15484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13526'. [ 2608.472090][ T5883] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2608.636886][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 2608.649949][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2608.663516][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2608.679747][ T5883] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2608.689538][ T5883] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2608.701790][ T5883] usb 2-1: Manufacturer: syz [ 2608.714201][ T5883] usb 2-1: config 0 descriptor?? [ 2609.099507][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13528'. [ 2609.238299][T15493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2609.628741][ T932] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2609.816199][ T932] usb 4-1: Using ep0 maxpacket: 32 [ 2609.832640][ T932] usb 4-1: config 9 has an invalid interface number: 138 but max is 0 [ 2609.869710][ T932] usb 4-1: config 9 has an invalid interface number: 102 but max is 0 [ 2610.128500][ T932] usb 4-1: config 9 has 2 interfaces, different from the descriptor's value: 1 [ 2610.142649][ T932] usb 4-1: config 9 has no interface number 0 [ 2610.164962][ T932] usb 4-1: config 9 has no interface number 1 [ 2610.182272][ T932] usb 4-1: config 9 interface 138 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2610.294991][ T932] usb 4-1: too many endpoints for config 9 interface 102 altsetting 108: 107, using maximum allowed: 30 [ 2610.357166][ T932] usb 4-1: config 9 interface 102 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 2610.393759][ T932] usb 4-1: config 9 interface 138 has no altsetting 0 [ 2610.477410][ T932] usb 4-1: config 9 interface 102 has no altsetting 0 [ 2610.505415][ T932] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=3a.c5 [ 2610.525610][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.556218][ T932] usb 4-1: Product: syz [ 2610.560727][ T932] usb 4-1: Manufacturer: syz [ 2610.565367][ T932] usb 4-1: SerialNumber: syz [ 2611.109718][ T932] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 2611.134137][ T932] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2611.152508][ T932] dib0700: firmware download failed at 7 with -22 [ 2611.439912][T31651] usb 2-1: USB disconnect, device number 73 [ 2611.530554][ T932] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 2611.700000][ T932] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2611.765136][ T932] dib0700: firmware download failed at 7 with -22 [ 2611.875708][ T932] usb 4-1: USB disconnect, device number 46 [ 2612.420242][T15540] io-wq is not configured for unbound workers [ 2614.044251][T15584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13553'. [ 2614.451550][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13559'. [ 2615.189886][T15610] syzkaller0: entered allmulticast mode [ 2615.199422][T15610] tipc: Started in network mode [ 2615.204612][T15610] tipc: Node identity 56e261124a14, cluster identity 4711 [ 2615.213229][T15610] tipc: Enabled bearer , priority 0 [ 2616.186850][T15640] netlink: 388 bytes leftover after parsing attributes in process `syz.0.13570'. [ 2616.448083][ T1285] tipc: Node number set to 485908754 [ 2616.966515][ T5883] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2617.206655][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 2617.234452][ T5883] usb 2-1: config 6 has an invalid interface number: 139 but max is 0 [ 2617.250184][ T5883] usb 2-1: config 6 has no interface number 0 [ 2617.263304][ T5883] usb 2-1: config 6 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2617.303965][ T5883] usb 2-1: config 6 interface 139 altsetting 0 has an endpoint descriptor with address 0x13, changing to 0x3 [ 2617.337708][ T5883] usb 2-1: config 6 interface 139 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2617.371434][ T5883] usb 2-1: New USB device found, idVendor=12d1, idProduct=78b5, bcdDevice=4f.14 [ 2617.395420][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.417174][ T5883] usb 2-1: Product: syz [ 2617.421473][ T5883] usb 2-1: Manufacturer: П [ 2617.425992][ T5883] usb 2-1: SerialNumber: syz [ 2617.556386][T23576] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2617.613810][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13582'. [ 2617.673924][ T5883] option 2-1:6.139: GSM modem (1-port) converter detected [ 2617.699196][ T5883] usb 2-1: USB disconnect, device number 74 [ 2617.710594][T15673] dummy0: entered promiscuous mode [ 2617.721752][ T5883] option 2-1:6.139: device disconnected [ 2617.722649][T15673] macvtap4: entered allmulticast mode [ 2617.729097][T23576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 37: 123, using maximum allowed: 30 [ 2617.733066][T15673] dummy0: entered allmulticast mode [ 2617.752638][T15674] netlink: 'syz.5.13584': attribute type 13 has an invalid length. [ 2617.761063][T23576] usb 4-1: config 0 interface 0 altsetting 37 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 2617.774784][T15673] dummy0: left allmulticast mode [ 2617.784083][T15673] dummy0: left promiscuous mode [ 2617.785251][T23576] usb 4-1: config 0 interface 0 altsetting 37 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 2617.808076][T23576] usb 4-1: config 0 interface 0 altsetting 37 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2617.820566][T23576] usb 4-1: config 0 interface 0 altsetting 37 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2617.821325][T15675] netlink: 'syz.5.13584': attribute type 2 has an invalid length. [ 2617.830703][T23576] usb 4-1: config 0 interface 0 altsetting 37 has 2 endpoint descriptors, different from the interface descriptor's value: 123 [ 2617.853637][T23576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2617.864644][T23576] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2617.874621][T23576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.883455][T23576] usb 4-1: Product: syz [ 2617.888913][T23576] usb 4-1: Manufacturer: syz [ 2617.893803][T23576] usb 4-1: SerialNumber: syz [ 2617.908340][T23576] usb 4-1: config 0 descriptor?? [ 2617.922042][T23576] usb 4-1: ucan: probing device on interface #0 [ 2617.929164][T23576] usb 4-1: ucan: invalid endpoint configuration [ 2617.935713][T23576] usb 4-1: ucan: probe failed; try to update the device firmware [ 2617.947546][T23576] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2618.124860][ T5922] usb 4-1: USB disconnect, device number 47 [ 2618.158380][T15674] bridge0: port 2(bridge_slave_1) entered disabled state [ 2618.165649][T15674] bridge0: port 1(bridge_slave_0) entered disabled state [ 2618.199223][T15674] batman_adv: batadv0: Interface deactivated: dummy0 [ 2618.304994][T15678] fuse: Bad value for 'fd' [ 2618.333162][T15674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2618.351052][T15674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2618.690144][T15610] tipc: Disabling bearer [ 2618.716610][ T1095] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2618.739690][ T1095] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2618.755136][ T1095] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2618.765228][ T1095] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2618.774932][ T5883] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2619.143240][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 2619.151593][ T5883] usb 2-1: config 162 has an invalid interface number: 116 but max is 0 [ 2619.151905][T15695] IPv6: Can't replace route, no match found [ 2619.170307][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13590'. [ 2619.179945][ T5883] usb 2-1: config 162 has no interface number 0 [ 2619.187109][ T5883] usb 2-1: config 162 interface 116 has no altsetting 0 [ 2619.198086][ T5883] usb 2-1: New USB device found, idVendor=0499, idProduct=13b3, bcdDevice=f0.d3 [ 2619.207575][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.215676][ T5883] usb 2-1: Product: syz [ 2619.221537][ T5883] usb 2-1: Manufacturer: syz [ 2619.226617][ T5883] usb 2-1: SerialNumber: syz [ 2619.255857][T15694] bridge0: port 2(bridge_slave_1) entered disabled state [ 2619.263470][T15694] bridge0: port 1(bridge_slave_0) entered disabled state [ 2619.380055][T15694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2619.394905][T15694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2619.531951][ T1095] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2619.590424][ T1058] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2619.643313][ T1058] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2619.656476][ T5883] usb 2-1: USB disconnect, device number 75 [ 2619.708560][ T1058] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2619.725490][T12141] udevd[12141]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:162.116/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2620.238363][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13596'. [ 2620.690741][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13599'. [ 2621.262170][T15738] netlink: 'syz.3.13606': attribute type 6 has an invalid length. [ 2622.016537][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2622.295048][T15752] netlink: 'syz.3.13611': attribute type 1 has an invalid length. [ 2622.411820][T15752] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2622.430038][T15756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13611'. [ 2622.726544][ T5883] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2622.820372][T15761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13613'. [ 2622.886551][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 2622.926231][ T5883] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 2622.936171][ T5883] usb 6-1: config 0 has no interface number 0 [ 2622.958861][ T5883] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 2622.973165][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 2622.986527][ T5883] usb 6-1: Product: syz [ 2622.990885][ T5883] usb 6-1: Manufacturer: syz [ 2623.017326][ T5883] usb 6-1: config 0 descriptor?? [ 2623.486481][T23576] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2623.660718][T23576] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2623.676985][T23576] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2623.696557][T23576] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2623.705936][T23576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.750275][T15765] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2623.838980][T23576] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2624.099715][T15765] fuse: Bad value for 'fd' [ 2624.378735][T23576] usb 4-1: USB disconnect, device number 48 [ 2625.465732][T15701] Set syz1 is full, maxelem 65536 reached [ 2625.606334][ T1285] usb 6-1: USB disconnect, device number 35 [ 2626.574296][T15804] macsec1: entered promiscuous mode [ 2626.579720][T15804] syzkaller0: entered promiscuous mode [ 2626.588465][T15804] macsec1: entered allmulticast mode [ 2626.597292][T15804] syzkaller0: entered allmulticast mode [ 2626.614155][T15804] syzkaller0: left allmulticast mode [ 2626.620853][T15804] syzkaller0: left promiscuous mode [ 2627.444085][T15823] netlink: 'syz.0.13632': attribute type 1 has an invalid length. [ 2629.466362][ T932] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2629.607476][T15849] usb usb8: usbfs: process 15849 (syz.4.13639) did not claim interface 0 before use [ 2629.647008][ T932] usb 2-1: device descriptor read/64, error -71 [ 2629.775589][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13640'. [ 2629.906365][ T932] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2630.056428][ T932] usb 2-1: device descriptor read/64, error -71 [ 2630.185227][ T932] usb usb2-port1: attempt power cycle [ 2630.706430][ T932] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2630.761355][ T932] usb 2-1: device descriptor read/8, error -71 [ 2631.075877][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13646'. [ 2631.134797][ T932] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2631.247327][ T932] usb 2-1: device descriptor read/8, error -71 [ 2631.288954][T15873] macvtap4: entered promiscuous mode [ 2631.294805][T15873] ip6gretap0: entered promiscuous mode [ 2631.301116][T15873] macvtap4: entered allmulticast mode [ 2631.306732][T15873] ip6gretap0: entered allmulticast mode [ 2631.367635][ T932] usb usb2-port1: unable to enumerate USB device [ 2634.474984][T15922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13660'. [ 2639.638364][ T1285] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2639.828488][ T1285] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.849585][ T1285] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2639.900150][ T1285] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2639.947328][ T1285] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2640.001518][ T1285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.141185][ T1285] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2640.193541][ T1285] usb 2-1: invalid MIDI out EP 0 [ 2640.459836][T15990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.470630][T15990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.525508][ T1285] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2640.684956][ T1285] usb 2-1: USB disconnect, device number 80 [ 2640.714746][T15996] netlink: 'syz.4.13684': attribute type 2 has an invalid length. [ 2640.798226][T15996] : entered promiscuous mode [ 2640.887407][T16003] tipc: Started in network mode [ 2640.892374][T16003] tipc: Node identity ac14140f, cluster identity 4711 [ 2640.979146][T16003] tipc: New replicast peer: 255.255.255.255 [ 2640.995856][T16003] tipc: Enabled bearer , priority 10 [ 2641.143970][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13685'. [ 2641.153639][T16003] tipc: Disabling bearer [ 2641.241184][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13688'. [ 2641.695031][T16015] syzkaller0: entered promiscuous mode [ 2641.702276][T16015] syzkaller0: entered allmulticast mode [ 2644.791054][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13695'. [ 2645.649996][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13699'. [ 2648.103395][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13711'. [ 2648.206517][T15815] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2648.356394][T15815] usb 4-1: Using ep0 maxpacket: 32 [ 2648.367113][T15815] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 2648.375352][T15815] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2648.408866][T15815] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2648.436456][T15815] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2648.456391][T15815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2648.478356][T15815] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2648.487831][T15815] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2648.498085][T15815] usb 4-1: Product: syz [ 2648.502582][T15815] usb 4-1: Manufacturer: syz [ 2648.507387][T15815] usb 4-1: SerialNumber: syz [ 2648.516149][T15815] usb 4-1: config 0 descriptor?? [ 2648.534990][T15815] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2648.547118][T15815] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2649.149643][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2649.171901][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2649.181714][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2649.190134][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2649.198656][T23576] usb 4-1: USB disconnect, device number 49 [ 2649.204623][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 2649.217680][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2649.334280][T16081] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2649.576428][T23576] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 2649.594070][T16099] ldusb: No device or device unplugged -19 [ 2650.818170][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13722'. [ 2650.829860][T16105] chnl_net:caif_netlink_parms(): no params data found [ 2651.015593][T16120] ip6gretap0: entered promiscuous mode [ 2651.039328][T16120] macvtap1: entered promiscuous mode [ 2651.063166][T16120] macvtap1: entered allmulticast mode [ 2651.088640][T16120] ip6gretap0: entered allmulticast mode [ 2651.134675][T16122] ip6gretap0: left allmulticast mode [ 2651.165478][T16122] ip6gretap0: left promiscuous mode [ 2651.296627][ T5833] Bluetooth: hci2: command tx timeout [ 2651.456536][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2652.102880][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.109309][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.226583][T16105] bridge0: port 1(bridge_slave_0) entered blocking state [ 2652.243943][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 2652.261775][T16105] bridge_slave_0: entered allmulticast mode [ 2652.323964][T16105] bridge_slave_0: entered promiscuous mode [ 2652.615091][T16105] bridge0: port 2(bridge_slave_1) entered blocking state [ 2652.637497][T16105] bridge0: port 2(bridge_slave_1) entered disabled state [ 2652.644762][T16105] bridge_slave_1: entered allmulticast mode [ 2652.657037][T16105] bridge_slave_1: entered promiscuous mode [ 2652.851367][T16105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2652.929803][T16105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2653.135551][T16105] team0: Port device team_slave_0 added [ 2653.185782][T16105] team0: Port device team_slave_1 added [ 2653.381050][ T5833] Bluetooth: hci2: command tx timeout [ 2653.470658][T16105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2653.498568][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2653.602144][T16105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2653.730577][T16105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2653.757952][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2653.846402][T16105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2654.026024][ T2408] bridge_slave_1: left allmulticast mode [ 2654.404003][ T2408] bridge_slave_1: left promiscuous mode [ 2654.416572][ T2408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.545553][ T2408] bridge_slave_0: left allmulticast mode [ 2654.575553][ T2408] bridge_slave_0: left promiscuous mode [ 2654.594839][ T2408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.616690][ T1285] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2654.787009][ T1285] usb 2-1: Using ep0 maxpacket: 32 [ 2654.970124][ T1285] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2655.179026][ T1285] usb 2-1: config 8 has an invalid interface number: 143 but max is 3 [ 2655.192290][ T1285] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2655.218785][ T1285] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 2655.235854][ T2408] ip6gretap0 (unregistering): left allmulticast mode [ 2655.251106][ T1285] usb 2-1: config 8 has no interface number 0 [ 2655.269989][ T1285] usb 2-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2655.311628][ T1285] usb 2-1: config 8 interface 143 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2655.340828][ T2408] ip6gretap0 (unregistering): left promiscuous mode [ 2655.341844][ T1285] usb 2-1: config 8 interface 143 has no altsetting 0 [ 2655.415277][ T1285] usb 2-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 2655.426752][ T1285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2655.455726][ T1285] usb 2-1: Product: ⯦䊲ꍈ૨徽샼℀ﷲ疆忱 [ 2655.456508][ T5833] Bluetooth: hci2: command tx timeout [ 2655.561323][ T1285] usb 2-1: Manufacturer: ы [ 2655.706357][ T1285] usb 2-1: SerialNumber: я [ 2655.944595][T16177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2655.967872][T16177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2656.014959][T16177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2656.047949][T16177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2656.151361][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13737'. [ 2656.351261][ T2408] bond3 (unregistering): (slave gretap2): Releasing active interface [ 2656.371552][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2656.381911][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2656.434264][ T2408] bond4 (unregistering): (slave gretap3): Releasing backup interface [ 2656.725979][ T2408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2656.750689][ T2408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2656.777316][ T2408] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2656.795875][ T2408] bond0 (unregistering): Released all slaves [ 2656.832464][ T2408] bond1 (unregistering): Released all slaves [ 2657.247449][ T2408] bond2 (unregistering): Released all slaves [ 2657.313184][ T2408] bond3 (unregistering): Released all slaves [ 2657.536386][ T5833] Bluetooth: hci2: command tx timeout [ 2657.661441][ T2408] bond4 (unregistering): Released all slaves [ 2657.706493][ T2408] bond5 (unregistering): Released all slaves [ 2657.778836][T16177] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2657.844042][ T1285] io_ti 2-1:8.143: required endpoints missing [ 2657.889161][T16105] hsr_slave_0: entered promiscuous mode [ 2657.910543][T16105] hsr_slave_1: entered promiscuous mode [ 2657.927199][T16105] debugfs: 'hsr0' already exists in 'hsr' [ 2657.956587][ T1285] usb 2-1: USB disconnect, device number 81 [ 2657.962575][T16105] Cannot create hsr debugfs directory [ 2658.182714][ T2408] tipc: Left network mode [ 2658.190241][T16212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13742'. [ 2658.665849][ T2408] hsr_slave_0: left promiscuous mode [ 2658.674028][ T2408] hsr_slave_1: left promiscuous mode [ 2658.680849][ T2408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2658.706083][ T2408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2658.738288][ T2408] batman_adv: batadv0: Removing interface: dummy0 [ 2661.016393][T23576] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2661.187816][T23576] usb 2-1: Using ep0 maxpacket: 16 [ 2661.195873][T23576] usb 2-1: config 0 has no interfaces? [ 2661.212013][T23576] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2661.223519][T23576] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2661.233660][T23576] usb 2-1: Manufacturer: syz [ 2661.256775][T23576] usb 2-1: config 0 descriptor?? [ 2662.900580][ T2408] IPVS: stop unused estimator thread 0... [ 2663.428346][T16105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2663.495296][T16105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2663.817631][T16105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2663.927276][T16105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2663.946664][ T1285] usb 2-1: USB disconnect, device number 82 [ 2664.484265][T16105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2664.565900][T16105] 8021q: adding VLAN 0 to HW filter on device team0 [ 2664.606916][T23838] bridge0: port 1(bridge_slave_0) entered blocking state [ 2664.614071][T23838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2664.681881][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 2664.689042][ T7813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2665.017415][T16105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2665.292865][T16105] veth0_vlan: entered promiscuous mode [ 2665.345184][T16105] veth1_vlan: entered promiscuous mode [ 2665.598860][T16105] veth0_macvtap: entered promiscuous mode [ 2665.609046][T16317] netlink: 'syz.3.13761': attribute type 6 has an invalid length. [ 2665.623670][T16105] veth1_macvtap: entered promiscuous mode [ 2667.421657][T16105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2667.467158][T16105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2667.526707][ T1095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.795088][ T1095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.844985][ T1095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.864080][ T1095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.901118][T16352] netlink: 'syz.4.13767': attribute type 6 has an invalid length. [ 2667.910677][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13768'. [ 2668.510948][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2668.536318][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2668.631733][ T7717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2668.646062][ T7717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2668.800658][T16372] syzkaller0: entered promiscuous mode [ 2668.806196][T16372] syzkaller0: entered allmulticast mode [ 2669.236183][T16390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13776'. [ 2669.354990][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13778'. [ 2669.634365][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13779'. [ 2669.659579][T16400] ip6gretap0: entered promiscuous mode [ 2669.665412][T16400] macvtap4: entered promiscuous mode [ 2669.691108][T16400] macvtap4: entered allmulticast mode [ 2669.707088][T16400] ip6gretap0: entered allmulticast mode [ 2669.724337][T16410] ip6gretap0: left allmulticast mode [ 2669.731716][T16410] ip6gretap0: left promiscuous mode [ 2671.155610][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13789'. [ 2671.887764][T16447] FAULT_INJECTION: forcing a failure. [ 2671.887764][T16447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2671.996358][T16447] CPU: 0 UID: 0 PID: 16447 Comm: syz.3.13793 Tainted: G L syzkaller #0 PREEMPT(full) [ 2671.996377][T16447] Tainted: [L]=SOFTLOCKUP [ 2671.996381][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2671.996387][T16447] Call Trace: [ 2671.996392][T16447] [ 2671.996397][T16447] dump_stack_lvl+0x189/0x250 [ 2671.996412][T16447] ? __pfx____ratelimit+0x10/0x10 [ 2671.996427][T16447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2671.996438][T16447] ? __pfx__printk+0x10/0x10 [ 2671.996451][T16447] ? __might_fault+0xb0/0x130 [ 2671.996470][T16447] should_fail_ex+0x414/0x560 [ 2671.996486][T16447] _copy_from_user+0x2d/0xb0 [ 2671.996498][T16447] ____sys_sendmsg+0x2fe/0x820 [ 2671.996513][T16447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2671.996528][T16447] ? import_iovec+0x74/0xa0 [ 2671.996540][T16447] ___sys_sendmsg+0x21f/0x2a0 [ 2671.996552][T16447] ? __pfx____sys_sendmsg+0x10/0x10 [ 2671.996566][T16447] ? rcu_read_lock_any_held+0xb3/0x120 [ 2671.996590][T16447] ? __fget_files+0x2a/0x420 [ 2671.996607][T16447] ? __fget_files+0x3a0/0x420 [ 2671.996624][T16447] __x64_sys_sendmsg+0x19b/0x260 [ 2671.996636][T16447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2671.996651][T16447] ? __pfx_ksys_write+0x10/0x10 [ 2671.996662][T16447] ? do_syscall_64+0xbe/0xf80 [ 2671.996673][T16447] do_syscall_64+0xfa/0xf80 [ 2671.996683][T16447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2671.996693][T16447] ? clear_bhb_loop+0x60/0xb0 [ 2671.996704][T16447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2671.996712][T16447] RIP: 0033:0x7f5731f8f749 [ 2671.996721][T16447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2671.996730][T16447] RSP: 002b:00007f5732e65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2671.996745][T16447] RAX: ffffffffffffffda RBX: 00007f57321e5fa0 RCX: 00007f5731f8f749 [ 2671.996754][T16447] RDX: 00000000040080c1 RSI: 0000200000000400 RDI: 0000000000000003 [ 2671.996762][T16447] RBP: 00007f5732e65090 R08: 0000000000000000 R09: 0000000000000000 [ 2671.996775][T16447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2671.996783][T16447] R13: 00007f57321e6038 R14: 00007f57321e5fa0 R15: 00007f573230fa28 [ 2671.996802][T16447] [ 2672.437968][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13792'. [ 2672.459572][T16445] ip6gretap0: entered promiscuous mode [ 2672.466591][T16445] macvtap2: entered promiscuous mode [ 2672.471998][T16445] macvtap2: entered allmulticast mode [ 2672.486621][T16445] ip6gretap0: entered allmulticast mode [ 2672.584328][T16445] ip6gretap0: left allmulticast mode [ 2672.601270][T16445] ip6gretap0: left promiscuous mode [ 2672.620815][T16459] netlink: 'syz.5.13796': attribute type 6 has an invalid length. [ 2672.694627][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13798'. [ 2672.710275][T16462] ip6gretap0: entered promiscuous mode [ 2672.715854][T16462] macvtap10: entered promiscuous mode [ 2672.726627][T16462] macvtap10: entered allmulticast mode [ 2672.733396][T16462] ip6gretap0: entered allmulticast mode [ 2672.774580][T16463] ip6gretap0: left allmulticast mode [ 2672.780733][T16463] ip6gretap0: left promiscuous mode [ 2672.793712][T16465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13799'. [ 2672.910997][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13801'. [ 2673.622263][T15815] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2673.787453][T15815] usb 2-1: Using ep0 maxpacket: 32 [ 2673.797196][T15815] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 2673.807865][T15815] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2673.836080][T15815] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2673.891619][T15815] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2673.905224][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2674.035937][T15815] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2674.045806][T15815] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2674.055009][T15815] usb 2-1: Product: syz [ 2674.067070][T15815] usb 2-1: Manufacturer: syz [ 2674.071750][T15815] usb 2-1: SerialNumber: syz [ 2674.114882][T15815] usb 2-1: config 0 descriptor?? [ 2674.124574][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13813'. [ 2674.157246][T15815] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2674.232679][T15815] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2674.688124][T31468] usb 2-1: USB disconnect, device number 83 [ 2674.688282][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 2674.699680][T16482] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2674.758561][T31468] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 2674.774753][T16510] ldusb: No device or device unplugged -19 [ 2675.241573][T16527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13820'. [ 2675.953097][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13824'. [ 2676.033428][T16544] macvlan2: entered promiscuous mode [ 2676.040247][T16544] macvlan2: entered allmulticast mode [ 2676.226815][ T7845] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2676.376375][ T7845] usb 6-1: device descriptor read/64, error -71 [ 2676.606964][T31468] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2676.636897][ T7845] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2676.786352][T31468] usb 2-1: Using ep0 maxpacket: 32 [ 2676.795768][T31468] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2676.807813][ T7845] usb 6-1: device descriptor read/64, error -71 [ 2676.829537][T31468] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2676.863274][T31468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.919139][T31468] usb 2-1: Product: syz [ 2676.936810][ T7845] usb usb6-port1: attempt power cycle [ 2676.940611][T31468] usb 2-1: Manufacturer: syz [ 2676.964826][T31468] usb 2-1: SerialNumber: syz [ 2677.010582][T31468] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2677.036684][T31468] imon 2-1:155.0: unable to initialize intf0, err -19 [ 2677.065245][T31468] imon:imon_probe: failed to initialize context! [ 2677.081921][T31468] imon 2-1:155.0: unable to register, err -19 [ 2677.326694][ T7845] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2677.346396][T13773] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2677.355662][ T7845] usb 6-1: device descriptor read/8, error -71 [ 2677.496350][T13773] usb 4-1: Using ep0 maxpacket: 32 [ 2677.511015][T13773] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2677.554697][T13773] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2677.566072][T13773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.574324][T13773] usb 4-1: Product: syz [ 2677.584455][T13773] usb 4-1: Manufacturer: syz [ 2677.591443][T13773] usb 4-1: SerialNumber: syz [ 2677.620694][T13773] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2677.628806][ T7845] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2677.638260][T13773] imon 4-1:155.0: unable to initialize intf0, err -19 [ 2677.646445][T13773] imon:imon_probe: failed to initialize context! [ 2677.655094][T13773] imon 4-1:155.0: unable to register, err -19 [ 2677.662424][ T7845] usb 6-1: device descriptor read/8, error -71 [ 2677.781004][ T7845] usb usb6-port1: unable to enumerate USB device [ 2679.379915][T15815] usb 2-1: USB disconnect, device number 84 [ 2679.495559][T16582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13837'. [ 2679.564587][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13836'. [ 2679.765247][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13838'. [ 2680.065673][T15815] usb 4-1: USB disconnect, device number 50 [ 2680.414496][T16594] team0 (unregistering): Port device team_slave_0 removed [ 2680.820010][T16594] team0 (unregistering): Port device team_slave_1 removed [ 2681.466313][T13773] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2681.596353][T31468] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2681.606376][T13773] usb 4-1: device descriptor read/64, error -71 [ 2681.766428][T31468] usb 2-1: Using ep0 maxpacket: 32 [ 2681.793467][T31468] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2681.821104][T31468] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2681.836189][T31468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2681.849945][T13773] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2681.919072][T31468] usb 2-1: Product: syz [ 2681.923369][T31468] usb 2-1: Manufacturer: syz [ 2681.930350][T31468] usb 2-1: SerialNumber: syz [ 2681.964736][T31468] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2681.972594][T31468] imon 2-1:155.0: unable to initialize intf0, err -19 [ 2681.991140][T31468] imon:imon_probe: failed to initialize context! [ 2682.006597][T13773] usb 4-1: device descriptor read/64, error -71 [ 2682.017981][T31468] imon 2-1:155.0: unable to register, err -19 [ 2682.113824][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13849'. [ 2682.128128][T13773] usb usb4-port1: attempt power cycle [ 2682.476503][T13773] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2682.498732][T13773] usb 4-1: device descriptor read/8, error -71 [ 2682.611446][T31468] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2682.766332][T13773] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2682.766439][T31468] usb 6-1: Using ep0 maxpacket: 32 [ 2682.782391][T31468] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 2682.791137][T31468] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2682.815785][T13773] usb 4-1: device descriptor read/8, error -71 [ 2682.828867][T31468] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2682.853434][T16639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13855'. [ 2682.888820][T31468] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2682.924148][T31468] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2682.948745][T31468] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2682.969378][T31468] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2682.976607][T13773] usb usb4-port1: unable to enumerate USB device [ 2683.002034][T31468] usb 6-1: Product: syz [ 2683.009063][T31468] usb 6-1: Manufacturer: syz [ 2683.021833][T31468] usb 6-1: SerialNumber: syz [ 2683.048926][T31468] usb 6-1: config 0 descriptor?? [ 2683.066984][T31468] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2683.100071][T31468] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2683.695468][T16630] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2683.695740][T31468] usb 6-1: USB disconnect, device number 40 [ 2683.702724][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 2683.716107][T16644] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2683.909125][T31468] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2684.176374][T13773] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2684.196938][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13860'. [ 2684.336892][T13773] usb 4-1: Using ep0 maxpacket: 32 [ 2684.344599][T13773] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2684.354905][T13773] usb 4-1: config 8 has an invalid interface number: 143 but max is 3 [ 2684.366280][T13773] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2684.377243][T13773] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 2684.388617][T13773] usb 4-1: config 8 has no interface number 0 [ 2684.397277][T13773] usb 4-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2684.409839][T13773] usb 4-1: config 8 interface 143 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2684.431234][T31468] usb 2-1: USB disconnect, device number 85 [ 2684.445879][T13773] usb 4-1: config 8 interface 143 has no altsetting 0 [ 2684.483353][T13773] usb 4-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 2684.511997][T13773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.531450][T13773] usb 4-1: Product: ⯦䊲ꍈ૨徽샼℀ﷲ疆忱 [ 2684.559399][T13773] usb 4-1: Manufacturer: ы [ 2684.563978][T13773] usb 4-1: SerialNumber: я [ 2684.795041][T16650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2684.809999][T16650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2684.823314][T16650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2684.833768][T16650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2684.904135][T16669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13858'. [ 2684.910214][T16650] bond10: option xmit_hash_policy: invalid value (14) [ 2685.034877][T16650] bond10 (unregistering): Released all slaves [ 2685.108592][T16669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2685.188204][T16669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2685.418053][T13773] io_ti 4-1:8.143: required endpoints missing [ 2685.454554][T13773] usb 4-1: USB disconnect, device number 55 [ 2686.491126][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13871'. [ 2688.176806][ T5940] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2688.376312][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 2688.384189][ T5940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2688.407181][ T5940] usb 4-1: config 8 has an invalid interface number: 143 but max is 3 [ 2688.511738][ T5940] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2688.554007][ T5940] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 2688.572637][ T5940] usb 4-1: config 8 has no interface number 0 [ 2688.583198][ T5940] usb 4-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2688.603268][ T5940] usb 4-1: config 8 interface 143 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2688.623639][ T5940] usb 4-1: config 8 interface 143 has no altsetting 0 [ 2688.890045][ T5940] usb 4-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 2688.953194][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.235054][ T5940] usb 4-1: Product: ⯦䊲ꍈ૨徽샼℀ﷲ疆忱 [ 2689.256378][ T5940] usb 4-1: Manufacturer: ы [ 2689.261022][ T5940] usb 4-1: SerialNumber: я [ 2689.516093][T16726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2689.540764][T16726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2689.578635][T16726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2689.610327][T16726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2689.752212][T16747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13879'. [ 2689.812041][T16726] bond11: option xmit_hash_policy: invalid value (14) [ 2689.873886][T16726] bond11 (unregistering): Released all slaves [ 2689.934373][T16756] netlink: 'syz.4.13888': attribute type 32 has an invalid length. [ 2689.959602][T16756] FAULT_INJECTION: forcing a failure. [ 2689.959602][T16756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2690.051848][T16756] CPU: 0 UID: 0 PID: 16756 Comm: syz.4.13888 Tainted: G L syzkaller #0 PREEMPT(full) [ 2690.051883][T16756] Tainted: [L]=SOFTLOCKUP [ 2690.051892][T16756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2690.051904][T16756] Call Trace: [ 2690.051913][T16756] [ 2690.051921][T16756] dump_stack_lvl+0x189/0x250 [ 2690.051952][T16756] ? __pfx____ratelimit+0x10/0x10 [ 2690.051981][T16756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2690.052004][T16756] ? __pfx__printk+0x10/0x10 [ 2690.052034][T16756] ? __might_fault+0xb0/0x130 [ 2690.052076][T16756] should_fail_ex+0x414/0x560 [ 2690.052112][T16756] _copy_from_user+0x2d/0xb0 [ 2690.052147][T16756] kstrtouint_from_user+0xc4/0x170 [ 2690.052170][T16756] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2690.052211][T16756] proc_fail_nth_write+0x88/0x200 [ 2690.052233][T16756] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2690.052262][T16756] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2690.052286][T16756] vfs_write+0x27e/0xb30 [ 2690.052316][T16756] ? __pfx_vfs_write+0x10/0x10 [ 2690.052337][T16756] ? __fget_files+0x2a/0x420 [ 2690.052367][T16756] ? __fget_files+0x3a0/0x420 [ 2690.052388][T16756] ? __fget_files+0x2a/0x420 [ 2690.052417][T16756] ksys_write+0x145/0x250 [ 2690.052436][T16756] ? __pfx_ksys_write+0x10/0x10 [ 2690.052457][T16756] ? do_syscall_64+0xbe/0xf80 [ 2690.052479][T16756] do_syscall_64+0xfa/0xf80 [ 2690.052500][T16756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2690.052521][T16756] ? clear_bhb_loop+0x60/0xb0 [ 2690.052547][T16756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2690.052567][T16756] RIP: 0033:0x7f82d6f8e1ff [ 2690.052587][T16756] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2690.052605][T16756] RSP: 002b:00007f82d7d51030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2690.052629][T16756] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82d6f8e1ff [ 2690.052644][T16756] RDX: 0000000000000001 RSI: 00007f82d7d510a0 RDI: 0000000000000004 [ 2690.052657][T16756] RBP: 00007f82d7d51090 R08: 0000000000000000 R09: 0000000000000000 [ 2690.052671][T16756] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2690.052684][T16756] R13: 00007f82d71e6038 R14: 00007f82d71e5fa0 R15: 00007f82d730fa28 [ 2690.052721][T16756] [ 2690.052948][T16726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2690.320099][T16726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2690.395520][ T5940] io_ti 4-1:8.143: required endpoints missing [ 2690.443317][ T5940] usb 4-1: USB disconnect, device number 56 [ 2693.054277][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13905'. [ 2693.079513][T16810] ip6gretap0: entered promiscuous mode [ 2693.085491][T16810] macvtap1: entered promiscuous mode [ 2693.091272][T16810] macvtap1: entered allmulticast mode [ 2693.096855][T16810] ip6gretap0: entered allmulticast mode [ 2693.139806][T16814] ip6gretap0: left allmulticast mode [ 2693.145237][T16814] ip6gretap0: left promiscuous mode [ 2694.183823][T16832] syzkaller0: entered promiscuous mode [ 2694.204811][T16832] syzkaller0: entered allmulticast mode [ 2695.676320][ T932] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2695.837673][ T932] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2695.850875][ T932] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2695.881112][ T932] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2695.932456][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2695.979872][T16855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2696.002673][ T932] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2696.281733][T16855] fuse: Bad value for 'fd' [ 2696.544393][T13773] usb 2-1: USB disconnect, device number 86 [ 2698.605574][T16907] syzkaller0: entered promiscuous mode [ 2698.620790][T16907] syzkaller0: entered allmulticast mode [ 2700.986314][T13773] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2701.136819][T13773] usb 4-1: Using ep0 maxpacket: 16 [ 2701.146063][T13773] usb 4-1: config 0 has no interfaces? [ 2701.153624][T13773] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2701.171168][T13773] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2701.196593][T13773] usb 4-1: Manufacturer: syz [ 2701.237830][T13773] usb 4-1: config 0 descriptor?? [ 2703.584903][ T5883] usb 4-1: USB disconnect, device number 57 [ 2704.772940][T17027] fuse: Bad value for 'fd' [ 2704.862162][T17028] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13964'. [ 2706.466207][T17068] syzkaller0: entered promiscuous mode [ 2706.481760][T17068] syzkaller0: entered allmulticast mode [ 2706.516371][T15815] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2706.875867][T15815] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2706.926692][T15815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.938304][T15815] usb 4-1: Product: syz [ 2706.942510][T15815] usb 4-1: Manufacturer: syz [ 2706.960769][T15815] usb 4-1: SerialNumber: syz [ 2706.975011][T15815] usb 4-1: config 0 descriptor?? [ 2707.064633][T15815] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2707.289099][T17080] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2707.307490][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13982'. [ 2707.341695][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13976'. [ 2708.416560][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2708.900275][T15815] gspca_sunplus: reg_w_riv err -71 [ 2708.906672][T15815] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2708.949930][T15815] usb 4-1: USB disconnect, device number 58 [ 2709.468460][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13990'. [ 2709.498705][T17111] ip6gretap0: entered promiscuous mode [ 2709.504413][T17111] macvtap2: entered promiscuous mode [ 2709.558654][T17111] macvtap2: entered allmulticast mode [ 2709.577089][T17111] ip6gretap0: entered allmulticast mode [ 2709.639491][T17119] ip6gretap0: left allmulticast mode [ 2709.655746][T17119] ip6gretap0: left promiscuous mode [ 2709.856536][ T5883] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2710.016416][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 2710.024563][ T5883] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2710.050362][ T5883] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2710.063169][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.074305][ T5883] usb 4-1: Product: syz [ 2710.079957][ T5883] usb 4-1: Manufacturer: syz [ 2710.084960][ T5883] usb 4-1: SerialNumber: syz [ 2710.113733][ T5883] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2710.128084][ T5883] imon 4-1:155.0: unable to initialize intf0, err -19 [ 2710.135966][ T5883] imon:imon_probe: failed to initialize context! [ 2710.146452][ T5883] imon 4-1:155.0: unable to register, err -19 [ 2710.256520][T13773] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2710.406467][T13773] usb 6-1: Using ep0 maxpacket: 32 [ 2710.415104][T13773] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2710.425475][T13773] usb 6-1: config 8 has an invalid interface number: 143 but max is 3 [ 2710.434274][T13773] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2710.446333][T13773] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 2710.456548][T13773] usb 6-1: config 8 has no interface number 0 [ 2710.463797][T13773] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2710.476179][T13773] usb 6-1: config 8 interface 143 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2710.719728][T13773] usb 6-1: config 8 interface 143 has no altsetting 0 [ 2710.744940][T13773] usb 6-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 2710.764616][T13773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.779476][T13773] usb 6-1: Product: ⯦䊲ꍈ૨徽샼℀ﷲ疆忱 [ 2710.787839][T13773] usb 6-1: Manufacturer: ы [ 2710.793402][T13773] usb 6-1: SerialNumber: я [ 2711.011837][T17136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2711.032531][T17136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2711.055705][T17136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2711.083092][T17136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2711.169342][T17152] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13997'. [ 2711.188670][T17136] bond1: option xmit_hash_policy: invalid value (14) [ 2711.215169][T17136] bond1 (unregistering): Released all slaves [ 2711.372961][T17152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2711.395091][T17152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2711.471056][T13773] io_ti 6-1:8.143: required endpoints missing [ 2711.485439][T13773] usb 6-1: USB disconnect, device number 41 [ 2711.757868][T17163] netlink: 'syz.0.14005': attribute type 13 has an invalid length. [ 2711.778354][T17163] erspan0: refused to change device tx_queue_len [ 2712.410163][T17177] fuse: Bad value for 'fd' [ 2712.628253][T31651] usb 4-1: USB disconnect, device number 59 [ 2712.656432][T13773] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2712.945231][T13773] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2712.978407][T13773] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2712.992426][T13773] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2713.003408][T13773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2713.061242][T13773] usb 6-1: SerialNumber: syz [ 2713.539977][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.547896][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.572175][T13773] usb 6-1: invalid UAC_HEADER (v1) [ 2713.706349][T31651] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2713.845734][T13773] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2713.873282][T13773] usb 6-1: USB disconnect, device number 42 [ 2713.886416][T31651] usb 4-1: Using ep0 maxpacket: 32 [ 2713.902445][T31651] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2713.927729][T31651] usb 4-1: config 8 has an invalid interface number: 143 but max is 3 [ 2713.933468][T16871] udevd[16871]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2713.958757][T31651] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2713.994517][T31651] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 2714.012621][T31651] usb 4-1: config 8 has no interface number 0 [ 2714.026488][T31651] usb 4-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2714.056946][T31651] usb 4-1: config 8 interface 143 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2714.080596][T31651] usb 4-1: config 8 interface 143 has no altsetting 0 [ 2714.100041][T31651] usb 4-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 2714.118287][T31651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.137548][T31651] usb 4-1: Product: ⯦䊲ꍈ૨徽샼℀ﷲ疆忱 [ 2714.144365][T31651] usb 4-1: Manufacturer: ы [ 2714.177007][T31651] usb 4-1: SerialNumber: я [ 2714.376476][T13773] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2714.404237][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2714.417311][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2714.435413][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2714.448180][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2714.523341][T17236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14020'. [ 2714.525396][T17202] bond11: option xmit_hash_policy: invalid value (14) [ 2714.539540][T13773] usb 2-1: Using ep0 maxpacket: 32 [ 2714.546761][T13773] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2714.559448][T17202] bond11 (unregistering): Released all slaves [ 2714.568817][T13773] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2714.578170][T13773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.586162][T13773] usb 2-1: Product: syz [ 2714.590456][T13773] usb 2-1: Manufacturer: syz [ 2714.595158][T13773] usb 2-1: SerialNumber: syz [ 2714.597830][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14032'. [ 2714.606115][T13773] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2714.616566][T13773] imon 2-1:155.0: unable to initialize intf0, err -19 [ 2714.623826][T13773] imon:imon_probe: failed to initialize context! [ 2714.630788][T13773] imon 2-1:155.0: unable to register, err -19 [ 2714.734988][T17232] ip6gretap0: entered promiscuous mode [ 2714.752245][T17232] macvtap3: entered promiscuous mode [ 2714.784214][T17232] macvtap3: entered allmulticast mode [ 2714.802278][T17232] ip6gretap0: entered allmulticast mode [ 2714.833955][T17237] ip6gretap0: left allmulticast mode [ 2714.853772][T17237] ip6gretap0: left promiscuous mode [ 2714.859836][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2714.875818][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2715.023782][T31651] io_ti 4-1:8.143: required endpoints missing [ 2715.063365][T31651] usb 4-1: USB disconnect, device number 60 [ 2715.190164][T15815] usb 2-1: USB disconnect, device number 87 [ 2715.954077][T13773] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2716.070212][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14048'. [ 2716.095023][T17296] ip6gretap0: entered promiscuous mode [ 2716.106895][T17296] macvtap11: entered promiscuous mode [ 2716.114242][T17296] macvtap11: entered allmulticast mode [ 2716.116296][T13773] usb 4-1: Using ep0 maxpacket: 16 [ 2716.176855][T17296] ip6gretap0: entered allmulticast mode [ 2716.429868][T17300] ip6gretap0: left allmulticast mode [ 2716.435649][T17300] ip6gretap0: left promiscuous mode [ 2716.444940][T13773] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 2716.453996][T13773] usb 4-1: config 4 has no interface number 0 [ 2716.501700][T13773] usb 4-1: config 4 interface 51 has no altsetting 0 [ 2716.521613][T13773] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 2716.531308][T13773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.539546][T13773] usb 4-1: Product: syz [ 2716.543833][T13773] usb 4-1: Manufacturer: syz [ 2716.554704][T13773] usb 4-1: SerialNumber: syz [ 2716.584168][T13773] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 2716.854481][T17313] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14055'. [ 2716.859686][T31651] usb 4-1: USB disconnect, device number 61 [ 2719.317308][T17384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14079'. [ 2719.474114][T17390] FAULT_INJECTION: forcing a failure. [ 2719.474114][T17390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2719.488058][T17390] CPU: 1 UID: 0 PID: 17390 Comm: syz.3.14082 Tainted: G L syzkaller #0 PREEMPT(full) [ 2719.488092][T17390] Tainted: [L]=SOFTLOCKUP [ 2719.488101][T17390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2719.488113][T17390] Call Trace: [ 2719.488122][T17390] [ 2719.488132][T17390] dump_stack_lvl+0x189/0x250 [ 2719.488163][T17390] ? __pfx____ratelimit+0x10/0x10 [ 2719.488196][T17390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2719.488221][T17390] ? __pfx__printk+0x10/0x10 [ 2719.488266][T17390] should_fail_ex+0x414/0x560 [ 2719.488305][T17390] _copy_to_user+0x31/0xb0 [ 2719.488333][T17390] simple_read_from_buffer+0xe1/0x170 [ 2719.488365][T17390] proc_fail_nth_read+0x1b3/0x220 [ 2719.488392][T17390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2719.488418][T17390] ? rw_verify_area+0x2a6/0x4d0 [ 2719.488449][T17390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2719.488473][T17390] vfs_read+0x200/0xa30 [ 2719.488493][T17390] ? fdget_pos+0x247/0x320 [ 2719.488523][T17390] ? __pfx___mutex_lock+0x10/0x10 [ 2719.488547][T17390] ? __pfx_vfs_read+0x10/0x10 [ 2719.488570][T17390] ? __fget_files+0x2a/0x420 [ 2719.488600][T17390] ? __fget_files+0x3a0/0x420 [ 2719.488624][T17390] ? __fget_files+0x2a/0x420 [ 2719.488661][T17390] ksys_read+0x145/0x250 [ 2719.488684][T17390] ? __pfx_ksys_read+0x10/0x10 [ 2719.488709][T17390] ? do_syscall_64+0xbe/0xf80 [ 2719.488736][T17390] do_syscall_64+0xfa/0xf80 [ 2719.488768][T17390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2719.488789][T17390] ? clear_bhb_loop+0x60/0xb0 [ 2719.488815][T17390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2719.488842][T17390] RIP: 0033:0x7f5731f8e15c [ 2719.488862][T17390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2719.488880][T17390] RSP: 002b:00007f5732e65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2719.488903][T17390] RAX: ffffffffffffffda RBX: 00007f57321e5fa0 RCX: 00007f5731f8e15c [ 2719.488917][T17390] RDX: 000000000000000f RSI: 00007f5732e650a0 RDI: 0000000000000004 [ 2719.488930][T17390] RBP: 00007f5732e65090 R08: 0000000000000000 R09: 0000000000000000 [ 2719.488943][T17390] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 2719.488956][T17390] R13: 00007f57321e6038 R14: 00007f57321e5fa0 R15: 00007f573230fa28 [ 2719.488990][T17390] [ 2719.876333][ T5940] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2719.956113][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14085'. [ 2720.039508][ T5940] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2720.053111][ T5940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2720.066033][ T5940] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 2720.086404][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2720.096470][ T7845] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 2720.119041][ T5940] usb 2-1: config 0 descriptor?? [ 2720.258356][ T7845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2720.271107][ T7845] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2720.293432][ T7845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2720.317183][ T7845] usb 4-1: config 0 descriptor?? [ 2720.379969][T17388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2720.395286][T17388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2720.628649][ T5940] uclogic 0003:5543:0781.0045: item fetching failed at offset 2/5 [ 2720.643493][ T5940] uclogic 0003:5543:0781.0045: parse failed [ 2720.660278][ T5940] uclogic 0003:5543:0781.0045: probe with driver uclogic failed with error -22 [ 2720.733818][T17396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2720.752389][T17396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2720.825925][T15815] usb 2-1: USB disconnect, device number 88 [ 2720.872891][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14084'. [ 2722.860050][ T7845] usbhid 4-1:0.0: can't add hid device: -71 [ 2722.866179][ T7845] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2722.877818][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14101'. [ 2722.983277][ T7845] usb 4-1: USB disconnect, device number 62 [ 2723.728824][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 2723.736442][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.898678][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2723.906308][T15815] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2724.019466][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2724.096495][T15815] usb 6-1: Using ep0 maxpacket: 32 [ 2724.110361][T15815] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2724.147072][T15815] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2724.198808][T15815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2724.239412][T15815] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2724.298842][T15815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2724.340478][T15815] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2724.391392][T15815] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 2724.404094][T15815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2724.414261][T15815] usb 6-1: Product: syz [ 2724.419592][T15815] usb 6-1: Manufacturer: syz [ 2724.425223][T15815] usb 6-1: SerialNumber: syz [ 2724.463259][T15815] usb 6-1: config 0 descriptor?? [ 2724.469716][T17468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2724.503601][T15815] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2724.626734][T17465] macvtap1: left promiscuous mode [ 2724.645626][T17465] macvtap1: left allmulticast mode [ 2724.665456][T17465] macvtap2: left promiscuous mode [ 2724.679730][T17465] macvtap2: left allmulticast mode [ 2724.700319][T17468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2724.712053][T17465] macvtap3: left promiscuous mode [ 2724.741314][T17465] macvtap3: left allmulticast mode [ 2724.763099][T17468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2724.810649][T17319] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2724.861307][T17319] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2724.891822][T17319] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2724.916527][T17319] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.665546][T15815] usb 6-1: USB disconnect, device number 43 [ 2725.715886][T17524] syzkaller0: entered promiscuous mode [ 2725.735805][T17524] syzkaller0: entered allmulticast mode [ 2726.696316][ T7845] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2726.856774][ T7845] usb 4-1: Using ep0 maxpacket: 8 [ 2726.864484][ T7845] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2726.906630][ T7845] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2726.920024][T17565] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 2726.928184][ T7845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2726.928235][ T7845] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2726.928261][ T7845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2726.955310][ T7845] usb 4-1: config 0 descriptor?? [ 2726.980752][T17565] netdevsim netdevsim4: Direct firmware load for / [ 2726.980752][T17565] failed with error -2 [ 2726.992803][T17565] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 2726.992803][T17565] [ 2727.136593][ T5922] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2727.314682][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2727.356879][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2727.375405][ T5922] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2727.386148][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2727.395917][ T5922] usb 2-1: SerialNumber: syz [ 2727.404512][T17568] fuse: Unknown parameter 'f~' [ 2727.520253][ T7845] kye 0003:0458:4018.0046: item fetching failed at offset 12/133 [ 2727.540613][ T7845] kye 0003:0458:4018.0046: parse failed [ 2727.550564][ T7845] kye 0003:0458:4018.0046: probe with driver kye failed with error -22 [ 2727.765748][T15815] usb 4-1: USB disconnect, device number 63 [ 2727.771820][T31651] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2727.939095][ T5922] usb 2-1: invalid UAC_HEADER (v1) [ 2727.965273][T31651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2727.987507][T31651] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2727.998681][T31651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2728.010111][ T5922] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2728.018323][T17571] syzkaller0: entered promiscuous mode [ 2728.025673][ T5922] usb 2-1: USB disconnect, device number 89 [ 2728.033013][T31651] usb 6-1: Product: syz [ 2728.037542][T31651] usb 6-1: Manufacturer: syz [ 2728.041961][T17571] syzkaller0: entered allmulticast mode [ 2728.042157][T31651] usb 6-1: SerialNumber: syz [ 2728.065533][T16871] udevd[16871]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2728.105173][T31651] usb 6-1: config 0 descriptor?? [ 2728.770501][T17592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2728.780580][T17592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2728.996472][ T7845] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2729.256408][ T7845] usb 2-1: Using ep0 maxpacket: 32 [ 2729.387403][ T7845] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2729.396269][ T7845] usb 2-1: config 0 has no interface number 0 [ 2729.405852][ T7845] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2729.421502][ T7845] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2729.431170][ T7845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2729.454072][ T7845] usb 2-1: Product: syz [ 2729.455580][T17600] syzkaller0: entered promiscuous mode [ 2729.464420][ T7845] usb 2-1: Manufacturer: syz [ 2729.464755][T17600] syzkaller0: entered allmulticast mode [ 2729.475926][ T7845] usb 2-1: SerialNumber: syz [ 2729.491556][ T7845] usb 2-1: config 0 descriptor?? [ 2730.770237][T13773] usb 6-1: USB disconnect, device number 44 [ 2731.396686][T13773] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2731.557854][T13773] usb 6-1: Using ep0 maxpacket: 16 [ 2731.571529][T13773] usb 6-1: config 0 has no interfaces? [ 2731.587297][T13773] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2731.597164][T13773] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2731.605158][T13773] usb 6-1: Manufacturer: syz [ 2731.634701][T13773] usb 6-1: config 0 descriptor?? [ 2731.736321][ T5922] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2731.887288][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 2731.901468][ T5922] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 2731.924979][ T5922] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2731.962017][ T5922] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2731.985731][ T5922] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2732.092940][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2732.124850][ T5922] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2732.181985][ T5922] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2732.203990][ T5922] usb 4-1: Product: syz [ 2732.214832][ T5922] usb 4-1: Manufacturer: syz [ 2732.222819][ T5922] usb 4-1: SerialNumber: syz [ 2732.271422][T17637] syzkaller0: entered promiscuous mode [ 2732.277050][T17637] syzkaller0: entered allmulticast mode [ 2732.319995][ T7845] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2732.336080][ T7845] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2732.350989][ T5922] usb 4-1: config 0 descriptor?? [ 2732.366916][ T5922] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2732.367894][ T7845] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2732.418178][ T5922] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2732.431976][ T7845] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2732.501410][ T7845] usb 2-1: USB disconnect, device number 90 [ 2732.948283][T17624] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2732.948708][ T7845] usb 4-1: USB disconnect, device number 64 [ 2732.955518][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 2733.073617][ T7845] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 2733.083053][T17642] ldusb: No device or device unplugged -19 [ 2733.950394][T13773] usb 6-1: USB disconnect, device number 45 [ 2734.230884][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14169'. [ 2734.538991][T17666] syzkaller0: entered promiscuous mode [ 2734.558319][T17666] syzkaller0: entered allmulticast mode [ 2735.036389][T13773] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2735.218023][T13773] usb 6-1: Using ep0 maxpacket: 32 [ 2735.274704][T13773] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2735.459955][T13773] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2735.469226][T13773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.477485][T13773] usb 6-1: Product: syz [ 2735.481760][T13773] usb 6-1: Manufacturer: syz [ 2735.566265][T13773] usb 6-1: SerialNumber: syz [ 2735.599434][T13773] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2735.621919][T13773] imon 6-1:155.0: unable to initialize intf0, err -19 [ 2735.637462][T13773] imon:imon_probe: failed to initialize context! [ 2735.690986][T13773] imon 6-1:155.0: unable to register, err -19 [ 2736.231459][T13773] usb 6-1: USB disconnect, device number 46 [ 2736.422993][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14182'. [ 2736.890596][T17708] netlink: 'syz.5.14183': attribute type 21 has an invalid length. [ 2737.371638][T17714] tipc: Started in network mode [ 2737.393577][T17714] tipc: Node identity , cluster identity 4711 [ 2737.416003][T17714] tipc: Failed to obtain node identity [ 2737.451982][T17714] tipc: Enabling of bearer rejected, failed to enable media [ 2737.474446][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14186'. [ 2737.523668][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14186'. [ 2737.575047][T17714] netlink: 'syz.1.14186': attribute type 10 has an invalid length. [ 2737.604558][T17723] debugfs: '1^!' already exists in 'ieee80211' [ 2737.661561][T17714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14186'. [ 2737.765132][T17714] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2737.870725][T17725] syzkaller0: entered promiscuous mode [ 2737.877088][T17725] syzkaller0: entered allmulticast mode [ 2738.178455][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14193'. [ 2738.355433][T17740] sit0: entered promiscuous mode [ 2738.437529][T17740] netlink: 'syz.3.14195': attribute type 1 has an invalid length. [ 2738.536839][T17740] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14195'. [ 2739.176890][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14199'. [ 2739.775287][T17769] syzkaller0: entered promiscuous mode [ 2739.791296][T17769] syzkaller0: entered allmulticast mode [ 2740.327124][T13773] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2740.523915][T13773] usb 6-1: device descriptor read/64, error -71 [ 2740.831889][T13773] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2741.015655][T13773] usb 6-1: device descriptor read/64, error -71 [ 2741.168987][T13773] usb usb6-port1: attempt power cycle [ 2741.536324][T13773] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2741.575012][T13773] usb 6-1: device descriptor read/8, error -71 [ 2741.857280][T13773] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2741.887271][T13773] usb 6-1: device descriptor read/8, error -71 [ 2742.046612][T13773] usb usb6-port1: unable to enumerate USB device [ 2742.956529][T31651] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2743.148876][T31651] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2743.175757][T31651] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2743.476842][T31651] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2743.513892][T31651] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2743.553763][T17814] syzkaller0: entered promiscuous mode [ 2743.573955][T17814] syzkaller0: entered allmulticast mode [ 2743.615456][T31651] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2743.692558][T31651] usb 4-1: Product: syz [ 2743.717812][T31651] usb 4-1: Manufacturer: syz [ 2743.722536][T31651] usb 4-1: SerialNumber: syz [ 2743.745722][T31651] usb 4-1: config 0 descriptor?? [ 2743.764743][T31651] usb 4-1: selecting invalid altsetting 0 [ 2744.008062][T17802] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2744.024689][T17801] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2744.042928][T31651] usb 4-1: USB disconnect, device number 65 [ 2744.462809][T17837] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14227'. [ 2744.472356][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14227'. [ 2745.320014][ T30] audit: type=1326 audit(1765889447.092:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17880 comm="syz.3.14241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5731f8f749 code=0x0 [ 2748.453223][T17961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14264'. [ 2748.553590][T17964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14265'. [ 2749.658258][T17988] netlink: 200 bytes leftover after parsing attributes in process `syz.5.14271'. [ 2750.344877][T18002] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14277'. [ 2750.624468][T18011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14280'. [ 2751.272353][T18019] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14260'. [ 2751.336331][T13773] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2751.666304][T13773] usb 4-1: device descriptor read/64, error -71 [ 2751.800649][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14282'. [ 2751.986439][T13773] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2752.136356][T13773] usb 4-1: device descriptor read/64, error -71 [ 2752.246574][T13773] usb usb4-port1: attempt power cycle [ 2752.611782][T13773] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2752.750108][T13773] usb 4-1: device descriptor read/8, error -71 [ 2753.026348][T13773] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2753.058110][T13773] usb 4-1: device descriptor read/8, error -71 [ 2753.170331][T13773] usb usb4-port1: unable to enumerate USB device [ 2755.346448][T31651] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2755.496581][T31651] usb 6-1: Using ep0 maxpacket: 32 [ 2755.504300][T31651] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2755.669982][T31651] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 2755.690458][T31651] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2755.701193][T31651] usb 6-1: config 255 has no interface number 0 [ 2755.721596][T31651] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2755.786322][T31651] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2755.850399][T31651] usb 6-1: config 255 interface 81 has no altsetting 0 [ 2755.922436][T31651] usb 6-1: string descriptor 0 read error: -22 [ 2755.931145][T31651] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 2755.958253][T31651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.025886][T31651] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input152 [ 2756.252634][ T7845] usb 6-1: USB disconnect, device number 51 [ 2756.861796][T18117] syzkaller0: entered promiscuous mode [ 2756.880417][T18117] syzkaller0: entered allmulticast mode [ 2756.936343][ T7845] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2757.111861][ T7845] usb 2-1: New USB device found, idVendor=255f, idProduct=c230, bcdDevice=b6.ac [ 2757.121210][ T7845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2757.304485][ T7845] usb 2-1: Product: syz [ 2757.321423][ T7845] usb 2-1: Manufacturer: syz [ 2757.360943][ T7845] usb 2-1: SerialNumber: syz [ 2757.381696][ T7845] usb 2-1: config 0 descriptor?? [ 2757.693044][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14310'. [ 2757.702365][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14310'. [ 2757.715754][T18113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2757.725373][T18113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2757.883515][ T7845] usb 2-1: USB disconnect, device number 91 [ 2759.066324][T18165] syzkaller0: entered promiscuous mode [ 2759.083103][T18165] syzkaller0: entered allmulticast mode [ 2759.277581][T18174] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14329'. [ 2759.290737][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14329'. [ 2759.352396][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14330'. [ 2759.756631][ T7845] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 2760.164953][ T7845] usb 2-1: device descriptor read/64, error -71 [ 2760.496658][ T7845] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 2760.535027][T31651] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2760.666845][ T7845] usb 2-1: device descriptor read/64, error -71 [ 2760.707050][T31651] usb 4-1: device descriptor read/64, error -71 [ 2760.786828][ T7845] usb usb2-port1: attempt power cycle [ 2760.806434][ T932] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2760.946331][T31651] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2760.966336][ T932] usb 6-1: Using ep0 maxpacket: 32 [ 2760.973567][ T932] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 2760.985220][ T932] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2761.003576][ T932] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2761.015362][ T932] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2761.048490][ T932] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2761.069632][ T932] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2761.091125][ T932] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2761.119400][ T932] usb 6-1: Product: syz [ 2761.136396][ T932] usb 6-1: Manufacturer: syz [ 2761.153496][ T932] usb 6-1: SerialNumber: syz [ 2761.158588][T31651] usb 4-1: device descriptor read/64, error -71 [ 2761.168191][T18209] syzkaller0: entered promiscuous mode [ 2761.173781][T18209] syzkaller0: entered allmulticast mode [ 2761.179570][ T7845] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 2761.195301][ T932] usb 6-1: config 0 descriptor?? [ 2761.208553][ T7845] usb 2-1: device descriptor read/8, error -71 [ 2761.209280][ T932] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2761.231171][ T932] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2761.276591][T31651] usb usb4-port1: attempt power cycle [ 2761.497166][ T7845] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 2761.590725][ T7845] usb 2-1: device descriptor read/8, error -71 [ 2761.646371][T31651] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2761.689556][T31651] usb 4-1: device descriptor read/8, error -71 [ 2761.702832][T18201] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2761.703130][ T5883] usb 6-1: USB disconnect, device number 52 [ 2761.710319][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 2761.737393][ T7845] usb usb2-port1: unable to enumerate USB device [ 2761.746285][ T5883] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2761.746722][T18213] ldusb: No device or device unplugged -19 [ 2762.046558][T31651] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2762.085145][T31651] usb 4-1: device descriptor read/8, error -71 [ 2762.196787][T31651] usb usb4-port1: unable to enumerate USB device [ 2762.683611][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14345'. [ 2763.376823][ T5922] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2763.557363][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 2763.587694][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2763.599800][ T5922] usb 2-1: config 8 has an invalid interface number: 143 but max is 3 [ 2763.635670][ T5922] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2763.659332][ T5922] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 2763.676728][ T5922] usb 2-1: config 8 has no interface number 0 [ 2763.696509][ T5922] usb 2-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2763.742937][ T5922] usb 2-1: config 8 interface 143 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2763.768955][ T5922] usb 2-1: config 8 interface 143 has no altsetting 0 [ 2763.789034][ T5922] usb 2-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 2763.800727][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2763.802222][T18244] syzkaller0: entered promiscuous mode [ 2763.814473][ T5922] usb 2-1: Product: ⯦䊲ꍈ૨徽샼℀ﷲ疆忱 [ 2763.821977][ T5922] usb 2-1: Manufacturer: ы [ 2763.822073][T18244] syzkaller0: entered allmulticast mode [ 2763.826621][ T5922] usb 2-1: SerialNumber: я [ 2764.110973][T18235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2764.131753][T18235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2764.153176][T18235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2764.174842][T18235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2764.449521][T18260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14349'. [ 2764.456993][T18235] bond5: option xmit_hash_policy: invalid value (14) [ 2764.587532][T18235] bond5 (unregistering): Released all slaves [ 2764.723827][T18235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2764.735295][T18235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2765.011355][T18270] fuse: Unknown parameter 'gF00000000000000000000' [ 2765.233945][ T5922] io_ti 2-1:8.143: required endpoints missing [ 2765.281888][ T5922] usb 2-1: USB disconnect, device number 96 [ 2765.699854][T18282] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2766.364753][ T7845] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2766.616281][ T7845] usb 6-1: Using ep0 maxpacket: 8 [ 2766.644152][ T7845] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 2766.697719][ T7845] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2766.762875][ T7845] usb 6-1: config 0 has no interfaces? [ 2766.783202][ T7845] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 2766.816781][ T7845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2766.855167][ T7845] usb 6-1: config 0 descriptor?? [ 2767.575313][ T932] usb 6-1: USB disconnect, device number 53 [ 2768.276424][ T932] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2768.436634][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 2768.459023][ T932] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 2768.469788][ T932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2768.532857][ T932] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2768.559507][ T932] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2768.593178][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2768.625353][ T932] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2768.644000][ T932] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2768.670889][ T932] usb 2-1: Product: syz [ 2768.704458][ T932] usb 2-1: Manufacturer: syz [ 2768.717294][ T932] usb 2-1: SerialNumber: syz [ 2768.743201][ T932] usb 2-1: config 0 descriptor?? [ 2768.769484][T18335] kAFS: unable to lookup cell '' [ 2768.776058][ T932] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2768.792957][ T932] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2768.805288][T18335] kAFS: unable to lookup cell '(,c' [ 2769.202521][T18315] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2769.262928][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 2769.276310][ T932] usb 2-1: USB disconnect, device number 97 [ 2769.335431][T18339] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2769.464069][ T932] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 2769.584953][T18343] netlink: 'syz.4.14378': attribute type 23 has an invalid length. [ 2769.911906][ T30] audit: type=1804 audit(1765889471.682:3452): pid=18343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.14378" name="/newroot/215/file1" dev="fuse" ino=1 res=1 errno=0 [ 2770.103939][T18350] netlink: 320 bytes leftover after parsing attributes in process `syz.3.14379'. [ 2770.139181][T18350] FAULT_INJECTION: forcing a failure. [ 2770.139181][T18350] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.190631][T18350] CPU: 0 UID: 0 PID: 18350 Comm: syz.3.14379 Tainted: G L syzkaller #0 PREEMPT(full) [ 2770.190666][T18350] Tainted: [L]=SOFTLOCKUP [ 2770.190672][T18350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2770.190685][T18350] Call Trace: [ 2770.190694][T18350] [ 2770.190704][T18350] dump_stack_lvl+0x189/0x250 [ 2770.190734][T18350] ? __pfx____ratelimit+0x10/0x10 [ 2770.190767][T18350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2770.190792][T18350] ? __pfx__printk+0x10/0x10 [ 2770.190826][T18350] ? __pfx___might_resched+0x10/0x10 [ 2770.190849][T18350] ? fs_reclaim_acquire+0x7d/0x100 [ 2770.190878][T18350] should_fail_ex+0x414/0x560 [ 2770.190914][T18350] should_failslab+0xa8/0x100 [ 2770.190942][T18350] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2770.190975][T18350] ? __alloc_skb+0x255/0x430 [ 2770.190996][T18350] ? napi_skb_cache_get+0x4a5/0x780 [ 2770.191016][T18350] ? napi_skb_cache_get+0x151/0x780 [ 2770.191043][T18350] __alloc_skb+0x255/0x430 [ 2770.191067][T18350] ? __pfx___alloc_skb+0x10/0x10 [ 2770.191096][T18350] ? netlink_ack_tlv_len+0x6c/0x210 [ 2770.191125][T18350] netlink_ack+0x146/0xa50 [ 2770.191147][T18350] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2770.191166][T18350] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2770.191188][T18350] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2770.191228][T18350] netlink_rcv_skb+0x28c/0x470 [ 2770.191255][T18350] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2770.191277][T18350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2770.191337][T18350] ? down_read+0x274/0x2e0 [ 2770.191359][T18350] ? genl_rcv+0xd/0x40 [ 2770.191391][T18350] genl_rcv+0x28/0x40 [ 2770.191419][T18350] netlink_unicast+0x82f/0x9e0 [ 2770.191452][T18350] ? __pfx_netlink_unicast+0x10/0x10 [ 2770.191479][T18350] ? netlink_sendmsg+0x642/0xb30 [ 2770.191503][T18350] ? skb_put+0x11b/0x210 [ 2770.191529][T18350] netlink_sendmsg+0x805/0xb30 [ 2770.191567][T18350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2770.191597][T18350] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2770.191627][T18350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2770.191652][T18350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2770.191680][T18350] __sock_sendmsg+0x21c/0x270 [ 2770.191715][T18350] ____sys_sendmsg+0x505/0x820 [ 2770.191748][T18350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2770.191783][T18350] ? import_iovec+0x74/0xa0 [ 2770.191812][T18350] ___sys_sendmsg+0x21f/0x2a0 [ 2770.191840][T18350] ? __pfx____sys_sendmsg+0x10/0x10 [ 2770.191874][T18350] ? rcu_read_lock_any_held+0xb3/0x120 [ 2770.191930][T18350] ? __fget_files+0x2a/0x420 [ 2770.191955][T18350] ? __fget_files+0x3a0/0x420 [ 2770.191994][T18350] __x64_sys_sendmsg+0x19b/0x260 [ 2770.192023][T18350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2770.192059][T18350] ? __pfx_ksys_write+0x10/0x10 [ 2770.192085][T18350] ? do_syscall_64+0xbe/0xf80 [ 2770.192112][T18350] do_syscall_64+0xfa/0xf80 [ 2770.192134][T18350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2770.192156][T18350] ? clear_bhb_loop+0x60/0xb0 [ 2770.192183][T18350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2770.192204][T18350] RIP: 0033:0x7f5731f8f749 [ 2770.192223][T18350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2770.192243][T18350] RSP: 002b:00007f5732e65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2770.192267][T18350] RAX: ffffffffffffffda RBX: 00007f57321e5fa0 RCX: 00007f5731f8f749 [ 2770.192283][T18350] RDX: 00000000000000c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 2770.192296][T18350] RBP: 00007f5732e65090 R08: 0000000000000000 R09: 0000000000000000 [ 2770.192317][T18350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2770.192330][T18350] R13: 00007f57321e6038 R14: 00007f57321e5fa0 R15: 00007f573230fa28 [ 2770.192367][T18350] [ 2771.501487][T18377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14390'. [ 2771.832145][T18380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14391'. [ 2771.936487][T26906] Bluetooth: hci2: command 0x0406 tx timeout [ 2771.948069][T18385] netlink: 'syz.1.14393': attribute type 23 has an invalid length. [ 2772.524258][T18395] netlink: 'syz.0.14395': attribute type 1 has an invalid length. [ 2772.755143][T18398] bond6: (slave bridge1): making interface the new active one [ 2772.773999][T18398] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 2773.076882][T18400] tipc: Started in network mode [ 2773.081908][T18400] tipc: Node identity 84e, cluster identity 4711 [ 2773.088940][T18400] tipc: Node number set to 2126 [ 2773.112608][T18395] macvlan2: entered promiscuous mode [ 2773.118400][T18395] macvlan2: entered allmulticast mode [ 2773.140444][T18395] bond6: entered promiscuous mode [ 2773.146571][T18395] bridge1: entered promiscuous mode [ 2773.155227][T18395] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2773.166654][ T7845] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2773.167593][T18395] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2773.199204][T18395] bond6: left promiscuous mode [ 2773.209469][T18395] bridge1: left promiscuous mode [ 2773.359014][ T7845] usb 2-1: Using ep0 maxpacket: 16 [ 2773.373099][ T7845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2773.383616][ T7845] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2773.396070][ T7845] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=cd.0f [ 2773.405629][ T7845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.413920][ T7845] usb 2-1: Product: syz [ 2773.420414][ T7845] usb 2-1: Manufacturer: syz [ 2773.425167][ T7845] usb 2-1: SerialNumber: syz [ 2773.440240][ T7845] usb 2-1: config 0 descriptor?? [ 2773.678936][ T7845] usb 2-1: USB disconnect, device number 98 [ 2774.728489][T18426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14405'. [ 2774.982871][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.989371][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.723567][T26906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2775.734114][T26906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2775.744014][T26906] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2775.762205][T26906] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2775.780572][T26906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2777.010208][T18449] chnl_net:caif_netlink_parms(): no params data found [ 2777.495408][T18474] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14421'. [ 2777.515576][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14421'. [ 2777.570680][T13211] syz_tun (unregistering): left allmulticast mode [ 2777.736350][T18449] bridge0: port 1(bridge_slave_0) entered blocking state [ 2777.866407][ T5833] Bluetooth: hci1: command tx timeout [ 2777.883561][T18449] bridge0: port 1(bridge_slave_0) entered disabled state [ 2777.905354][T18449] bridge_slave_0: entered allmulticast mode [ 2777.924191][T18449] bridge_slave_0: entered promiscuous mode [ 2777.959545][T18449] bridge0: port 2(bridge_slave_1) entered blocking state [ 2777.983505][T17284] ================================================================== [ 2777.991623][T17284] BUG: KASAN: use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 2777.999293][T17284] Read of size 8 at addr ffff888058f24108 by task kworker/u8:23/17284 [ 2778.007463][T17284] [ 2778.009794][T17284] CPU: 0 UID: 0 PID: 17284 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT(full) [ 2778.009809][T17284] Tainted: [L]=SOFTLOCKUP [ 2778.009813][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2778.009820][T17284] Workqueue: netns cleanup_net [ 2778.009835][T17284] Call Trace: [ 2778.009839][T17284] [ 2778.009843][T17284] dump_stack_lvl+0x189/0x250 [ 2778.009856][T17284] ? rcu_is_watching+0x15/0xb0 [ 2778.009867][T17284] ? __kasan_check_byte+0x12/0x40 [ 2778.009878][T17284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2778.009887][T17284] ? rcu_is_watching+0x15/0xb0 [ 2778.009898][T17284] ? lock_release+0x4b/0x3b0 [ 2778.009908][T17284] ? __virt_addr_valid+0x1c8/0x5c0 [ 2778.009920][T17284] ? __virt_addr_valid+0x4a5/0x5c0 [ 2778.009932][T17284] print_report+0xca/0x240 [ 2778.009941][T17284] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2778.009953][T17284] kasan_report+0x118/0x150 [ 2778.009964][T17284] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2778.009977][T17284] nf_hook_entry_head+0x1f1/0x2c0 [ 2778.009989][T17284] __nf_unregister_net_hook+0x74/0x6f0 [ 2778.010003][T17284] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 2778.010016][T17284] __nft_release_hook+0x180/0x350 [ 2778.010032][T17284] nf_tables_pre_exit_net+0xa7/0x110 [ 2778.010045][T17284] ops_undo_list+0x187/0x990 [ 2778.010056][T17284] ? __pfx_ops_undo_list+0x10/0x10 [ 2778.010066][T17284] ? do_raw_spin_unlock+0x122/0x240 [ 2778.010081][T17284] cleanup_net+0x4d8/0x7a0 [ 2778.010090][T17284] ? __pfx_cleanup_net+0x10/0x10 [ 2778.010100][T17284] ? _raw_spin_unlock_irq+0x23/0x50 [ 2778.010114][T17284] ? process_scheduled_works+0x9ef/0x1770 [ 2778.010123][T17284] ? process_scheduled_works+0x9ef/0x1770 [ 2778.010133][T17284] process_scheduled_works+0xad1/0x1770 [ 2778.010146][T17284] ? __pfx_process_scheduled_works+0x10/0x10 [ 2778.010159][T17284] worker_thread+0x8a0/0xda0 [ 2778.010170][T17284] ? __kthread_parkme+0x7b/0x200 [ 2778.010182][T17284] kthread+0x711/0x8a0 [ 2778.010193][T17284] ? __pfx_worker_thread+0x10/0x10 [ 2778.010202][T17284] ? __pfx_kthread+0x10/0x10 [ 2778.010213][T17284] ? _raw_spin_unlock_irq+0x23/0x50 [ 2778.010225][T17284] ? lockdep_hardirqs_on+0x98/0x140 [ 2778.010234][T17284] ? __pfx_kthread+0x10/0x10 [ 2778.010245][T17284] ret_from_fork+0x599/0xb30 [ 2778.010254][T17284] ? __pfx_ret_from_fork+0x10/0x10 [ 2778.010264][T17284] ? __switch_to_asm+0x39/0x70 [ 2778.010275][T17284] ? __switch_to_asm+0x33/0x70 [ 2778.010286][T17284] ? __pfx_kthread+0x10/0x10 [ 2778.010297][T17284] ret_from_fork_asm+0x1a/0x30 [ 2778.010311][T17284] [ 2778.010315][T17284] [ 2778.260010][T17284] The buggy address belongs to the physical page: [ 2778.266600][T17284] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058f24880 pfn:0x58f24 [ 2778.276675][T17284] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2778.283793][T17284] raw: 00fff00000000000 ffffea0000bcef08 ffffea0002b9f008 0000000000000000 [ 2778.292542][T17284] raw: ffff888058f24880 00000000000f0000 00000000ffffffff 0000000000000000 [ 2778.301566][T17284] page dumped because: kasan: bad access detected [ 2778.308051][T17284] page_owner tracks the page as freed [ 2778.313408][T17284] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 16862, tgid 16857 (syz.0.13919), ts 2696338193446, free_ts 2746768086007 [ 2778.333546][T17284] post_alloc_hook+0x234/0x290 [ 2778.338485][T17284] get_page_from_freelist+0x2365/0x2440 [ 2778.344021][T17284] __alloc_frozen_pages_noprof+0x181/0x370 [ 2778.350074][T17284] alloc_pages_mpol+0x232/0x4a0 [ 2778.354917][T17284] allocate_slab+0x86/0x3b0 [ 2778.359406][T17284] ___slab_alloc+0xf2b/0x1960 [ 2778.364065][T17284] __slab_alloc+0x65/0x100 [ 2778.368816][T17284] kmem_cache_alloc_noprof+0x40f/0x710 [ 2778.374440][T17284] xfrm_state_alloc+0x24/0x2f0 [ 2778.379279][T17284] xfrm_state_find+0x37d4/0x5400 [ 2778.384380][T17284] xfrm_resolve_and_create_bundle+0x768/0x2f60 [ 2778.390787][T17284] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 2778.396154][T17284] xfrm_lookup_route+0x3c/0x1c0 [ 2778.401003][T17284] udp_sendmsg+0x142e/0x2170 [ 2778.405582][T17284] __sock_sendmsg+0x19c/0x270 [ 2778.410248][T17284] ____sys_sendmsg+0x52d/0x820 [ 2778.415001][T17284] page last free pid 17912 tgid 17912 stack trace: [ 2778.421488][T17284] __free_frozen_pages+0xbc8/0xd30 [ 2778.426586][T17284] __put_partials+0x146/0x170 [ 2778.431251][T17284] put_cpu_partial+0x1f2/0x2d0 [ 2778.436001][T17284] __slab_free+0x288/0x2a0 [ 2778.440404][T17284] qlist_free_all+0x97/0x100 [ 2778.444987][T17284] kasan_quarantine_reduce+0x148/0x160 [ 2778.450430][T17284] __kasan_slab_alloc+0x22/0x80 [ 2778.455268][T17284] kmem_cache_alloc_noprof+0x37d/0x710 [ 2778.460715][T17284] vm_area_alloc+0x24/0x140 [ 2778.465554][T17284] mmap_region+0xdea/0x1d10 [ 2778.470218][T17284] do_mmap+0xc45/0x10d0 [ 2778.474797][T17284] vm_mmap_pgoff+0x2a6/0x4d0 [ 2778.479551][T17284] do_syscall_64+0xfa/0xf80 [ 2778.484043][T17284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2778.489927][T17284] [ 2778.492241][T17284] Memory state around the buggy address: [ 2778.497942][T17284] ffff888058f24000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2778.506010][T17284] ffff888058f24080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2778.514248][T17284] >ffff888058f24100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2778.522508][T17284] ^ [ 2778.527007][T17284] ffff888058f24180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2778.535248][T17284] ffff888058f24200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2778.543473][T17284] ================================================================== [ 2778.553221][T18449] bridge0: port 2(bridge_slave_1) entered disabled state [ 2778.561588][T18449] bridge_slave_1: entered allmulticast mode [ 2778.572998][T18449] bridge_slave_1: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2778.596615][T17284] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2778.603844][T17284] CPU: 0 UID: 0 PID: 17284 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT(full) [ 2778.615234][T17284] Tainted: [L]=SOFTLOCKUP [ 2778.619553][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2778.629597][T17284] Workqueue: netns cleanup_net [ 2778.634350][T17284] Call Trace: [ 2778.637621][T17284] [ 2778.640630][T17284] dump_stack_lvl+0x99/0x250 [ 2778.645303][T17284] ? __asan_memcpy+0x40/0x70 [ 2778.649884][T17284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2778.655075][T17284] ? __pfx__printk+0x10/0x10 [ 2778.659748][T17284] vpanic+0x237/0x6d0 [ 2778.663722][T17284] ? __pfx_vpanic+0x10/0x10 [ 2778.668214][T17284] ? preempt_schedule+0xae/0xc0 [ 2778.673054][T17284] ? __pfx_preempt_schedule+0x10/0x10 [ 2778.678423][T17284] panic+0xb9/0xc0 [ 2778.682149][T17284] ? __pfx_panic+0x10/0x10 [ 2778.686571][T17284] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 2778.692480][T17284] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2778.697858][T17284] check_panic_on_warn+0x89/0xb0 [ 2778.702889][T17284] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2778.708092][T17284] end_report+0x6f/0x140 [ 2778.712426][T17284] kasan_report+0x129/0x150 [ 2778.716932][T17284] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2778.722574][T17284] nf_hook_entry_head+0x1f1/0x2c0 [ 2778.727606][T17284] __nf_unregister_net_hook+0x74/0x6f0 [ 2778.733073][T17284] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 2778.739407][T17284] __nft_release_hook+0x180/0x350 [ 2778.744443][T17284] nf_tables_pre_exit_net+0xa7/0x110 [ 2778.749739][T17284] ops_undo_list+0x187/0x990 [ 2778.754331][T17284] ? __pfx_ops_undo_list+0x10/0x10 [ 2778.759443][T17284] ? do_raw_spin_unlock+0x122/0x240 [ 2778.764651][T17284] cleanup_net+0x4d8/0x7a0 [ 2778.769161][T17284] ? __pfx_cleanup_net+0x10/0x10 [ 2778.774102][T17284] ? _raw_spin_unlock_irq+0x23/0x50 [ 2778.779313][T17284] ? process_scheduled_works+0x9ef/0x1770 [ 2778.785039][T17284] ? process_scheduled_works+0x9ef/0x1770 [ 2778.790758][T17284] process_scheduled_works+0xad1/0x1770 [ 2778.796318][T17284] ? __pfx_process_scheduled_works+0x10/0x10 [ 2778.802302][T17284] worker_thread+0x8a0/0xda0 [ 2778.806897][T17284] ? __kthread_parkme+0x7b/0x200 [ 2778.811840][T17284] kthread+0x711/0x8a0 [ 2778.815925][T17284] ? __pfx_worker_thread+0x10/0x10 [ 2778.821049][T17284] ? __pfx_kthread+0x10/0x10 [ 2778.825643][T17284] ? _raw_spin_unlock_irq+0x23/0x50 [ 2778.830854][T17284] ? lockdep_hardirqs_on+0x98/0x140 [ 2778.836053][T17284] ? __pfx_kthread+0x10/0x10 [ 2778.840646][T17284] ret_from_fork+0x599/0xb30 [ 2778.845235][T17284] ? __pfx_ret_from_fork+0x10/0x10 [ 2778.850348][T17284] ? __switch_to_asm+0x39/0x70 [ 2778.855120][T17284] ? __switch_to_asm+0x33/0x70 [ 2778.859896][T17284] ? __pfx_kthread+0x10/0x10 [ 2778.864489][T17284] ret_from_fork_asm+0x1a/0x30 [ 2778.869280][T17284] [ 2778.873382][T17284] Kernel Offset: disabled [ 2778.877702][T17284] Rebooting in 86400 seconds..