last executing test programs: 55.927866372s ago: executing program 4 (id=3790): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1e0000000000, 0x8000) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_netdev_private(r1, 0x8992, &(0x7f00000000c0)="0008f7") ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x3) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x4, 0x6f) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) accept$packet(r5, 0x0, &(0x7f0000000140)) r6 = fcntl$dupfd(r1, 0x0, r0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304010010000000000000000000", @ANYRES32=r7, @ANYBLOB="838a0000000000001c00128009000100626f6e64000000000c00028005001b00bd000000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="0009000000000400", @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC=r5], 0x50) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x20000000, &(0x7f0000002400)="ec561953cd82268a3c737e0f6d124dd0ff3e2e66fb0e61de6d32a5f417ebf96460f1acfc590088b79158f93071ffbe77b7e70009b24804564de5d8f2ffe30637d67dd18a41813fd3c9df4facbf874d8218fe72a617b5e71f31f68d3968368e326070bd7ed07bd0c1dc68fa5221661424136493d310a7bf9d6bd79bb7923c6736e293fbbcbdc87a065f674dc15da90da7626ed87e4d20a48bf78b66147a4f2c20986852735e93c4e7683db9ebf87dfcc8f78043984c75cf4ee746a65ea00d27ed546c196775e9a8171b6a4ba353548d74098a565b9f43fd7ff4c94733f0a0201aaa26bd896a14cc20554019161a456f1a216e057ae088ec673e8b54ed54145ae86e0a21e86c9b8e2189cc89e712cd6dd19e2a4865244a21d5ee4164cbda4f228c1d8dcd4217ca2114f156fd09bffc7b0e49e8107e5c4b36c544100ed1a5ee4619ace784117b773364a15dc5d5e62cfdd310b65ac454f8f46a3d6b91f617bad7707d888585b9685c991551782c0f9971d82827db58d6ffd7d3941d6b35e79c5c5eac33ecf4f4f5e91c4e055380eabc89f04c0c9f9572e4adab1cf38ab458d520a0c2859f417a9f8cdb8d823a1f0949826457b6263bbdbbcdd97ed75bd57c3bc8be4641ca5d3c6ffbbd45615017c756d5d6fa20fd47d06ed741de0fd2444561b185fda261fa7d53f6ce2d57bd5f267273b2a7b8ac63892324abe685f3b73e0e7733d05db170afd2e3e8a8a5e50c7e746411422179cd30151569bcf7d2b4ddcbed83f2b5ad508bc9f723de3638b55330b3d16143786762b0b67bffc8c6eff7178f0827de6d2c707e3f24de5401fb63776cfa0c463ac78f1133645c8c536c061368ea2a2a0927467b8330ddbb7bfe08658ad6aeacef80941a47caccba458f1808fdd2c9d52334595eb7692c8d4edd34a5141346ad3d9f3df94b370226f75363f1f4606d1d96e116b1b8768b6c9f493ba658399e352cb7f662bebdd11abba255987be3d41434f7b78d7ca941782a7c3c9060dc22d914db04fc0c6795e118e2532f8cb76af6ddba0f4a7437a82bd130ee520814f3d621ae1b22dfee59946c37af53930c1bfa2b0af64e0a8ce89f70eb343bd66eb414f6fde57e20cb2f4f04851aa562b87e5c88eeb7d82c31d4079a25086b3ff60e48104c948948ecec266a2855744a5df81fcce27c2ed00cbb18dee0356731b0772c594db45de67eaf3342560fbe60da042e2fa6621d32bc30e673663a73e4061572902e72685071724286554d2bf1a8647bee064bb52f3921c9c4048b941647bad9537f808f23fb7a3a5ff3cb7bbfc0facbbeb816705ded95c7fbde7f61c50516c8e2eada0a1cf5e21c62b7041216d5c224bae52052fcd40e4947ca3cc770a40ab06d0bf78f6110c6adae111998ee0c0f0fce09d0ee185b6ce861039fdd1fd8c3098b4f9fbdf6902b32df2a050ff2cb9a92179b4da7fd6c7093b3758131b7eac24135e9c5c32789644375ec27fdf91cb07e71336de03c662c7f66cbdcf07c5dd97ca4595d8e1a0b41a64cdf86b9f03d996f438da08a577643aa85909bc926f215a4825606a0d9b792afcf1deeac9a020e299d081f98458e239540c0ca73cfa3fb7efc60bb7887eeb3029a513127f6d6bcc2c31bf76a8b2ea8aaf7da8601fd53ebdce351b701302e01e7b9bb1c1b9c3e252705c3fec0b4024f7b36c26b3775cc0734924dca49d4ba79e83402f1e74cef2f20ef29655d3afab15d1b6b1c8ee8c582b1a54eff671dc88f54d95fd3399939792ee5c669aef88e9e148ae3b62dac35b94cae0b021c261a81643cc5f4933d8df659eba101573382fdcb7c1bd15d489101c64a0dfe0c65cf872c36090efc158bfff738ec77426d69028ec0b27d87d91cf6c559762f7a48d1474461bafb68a7e654b636b3a3d1c6c33712d73a318fcde413ba1d5eaf7f78b10aafe134e42fd541ed41ae78a4112dc257029a0458c41b4e1704278286406375de271b5b662d2c4e00846db339e8a95bf64e27a2bd711e051fcc0f57a44056785412d34d4ed15ef572b7bf607f880eec46e0c7ef224ecc136b7e74ba21e43e643591d24580cc127afa37dbf46bfc0604a0ed4e6e75d6ee6161bf4e6292b5cead3c38b369960e374c4171b8f0042fa03e92535965f3ea815313cdae66558da972c8fe08565e75eea6007805c57b6009bce27d42bb26b9985455d944c5ac1d4d169e5f82802de7330ab5bbab6a5ffae07319cef773d07ea01f3c6c022f7bd8523416b09fd94b6c93e92bc4ce296547d6b4baa94701981b416bf0e005d6709a62f1f5173ddd49245b67772a566b06adece945be2562669b199782222a743ccc9a9205cdefc10152e1cccc88379463c3a690f444f3f74be28a05caa4ddca4253f3eb02422dae5cadaeb875625aafe1fcb79a22daa36f1674c3749af40dc601593fa09b16fdb69bbc51da3d08879452667362f975529db9506f0ef8f697976df2ebba073a3f80966cadaa2424db46cc1ee476573412396a9461222924c26ff2355da2254b0f76819028a67b1991ac260a8ff9eeffc1748ed341f5db92c6cf0f4f1a83a4167f34a373a8c8744502aa22e718ff73baca9f0f16acb6bc5a0aabd17cc26fc8f22dcaad69b81a4e22326cde7466f148a1935606f7a14d36dacfd1468b625719f66e3c94d6a838c5db82072ea41c5fbc72320e3b91b65c2ec13754786b7c73167bc7335f7b27198fbb0fa1b6a9369c20c67f6d49db6ed79126ff670fab94eed556feee60f3c9dfbb0158819c08162bfdd97c5f3e2a92c17293c10a2f5aadc249040f879eebb6b1b6496db2d72e1b97a3361b567ab70b68df648b0ed4b6dc518a15d0b9cae69f709366aad080174de1082fddfcf1b571cc77337c8087239639892b82610ac98ad4dae98441f70021a482ed3a32c44da49425f0d3b291656ec58bc0444240a04e3c2db78731cc1654ba71f385f50a92d50a88c3a89460f0945437262361ae4663ee27744a0fda72bb55c3225821b42ebdcbe7fc8888f987e72ff051f7f2cbf49ea1c53c9f4a324f4745d55cb195f52d2afe110aa02e247bbabbbf3ff25ff66f9c6c17d92b974e58df95410def97b2009b638591eb8b7a09dd4c4dc09fcad9dcc5999b604f64afe5604e971d57970aa25fb9bfc1d7c81bfef90c423bb6c684999209ebc9fec7b81b44f2806f677522b88339d3e0bda97f72c0216493f71da85c83d7f117f8efd17a46d1957d0d1c9c55eb69147130ec2374024f2336dd39aa9f6de72fd2e35d7c3ebdb8132d9a98d5ce3e24c9e8af859b37a1bdba80a3d6ee1528e19dac84261904c8683ade5dfe92b0af4733c44ef424b7d05cf5b0731c61b73df92f630974b24467eb894a608df60f698d12e9e33d443714e0a1d298d9b1ddd538e478a9af938981d52eb1c685c60dea79348b0bae9a4cd3ec5c549055089df59e4313b4c2153d7a2e758adf0276a32558c62285fc1411c8a7886fd89c016a1ae985b8fdc900e0fb26eee116a5c17a29fc746a3296f0123d79440659ec6db2da249441c8056d385eb67e7449f1583af5c0ca231e7632358e5a6e48a2c6f049d112f4e3827453b50fe1e7e40041f8163315fdf07e089a65691b27946c6d0f6535a76b6cf2ccf43a9f0029a0951c633c61e07af0dd12b8290107bc22b439848c7ff46d369b87b4b6ce44f3d6d61e8ef97e074528bb58ddf555527d0b9728e4312142addd95ce0c7298d98bd2ac64d1d384b42dabe39097497ef1170bab6a5780e44476972bdb3d65dc97cedc045c275671fa28b82a3a14014e0d9673f3072614491731bbbcd8c4ef0744e0e1499be7dda87d61eba815b3aa92b25599ec8d49d9914dcc1131606fcf678ccae1918dcabe3601e60e41f751e710eb78e5d3e29a5f1cef3813b564e5385712d5f69c4e1a97b1eb2e3570ed8128f31df671d44061f4a60d9af6ba6ccf12cbd0685ddf55c68cad57a4df6ffc7d31015da287aed91dbeb0cf764d542deefbb401387f2b760f6e1ef46842350ecbee46e13bdf6619b5f5454daa79b8952efc1b81762498d7f108c553d52ae01afa75d833d7ebf37f7a11d16f1e3e178cd323c6ebd08a28347ed09b35b3ddc9b8420fc1bc0f690c56043fbab387100960cf5502911eb1a4813995a4ad2c261dc613df23961771b2f3724f370ea7acdf443fdd6a89ebf37286b7d55b7cdc7fb0e08f954bfdf453fdab5324d7d7e16b605b591b961bfcb527e29db266a337b04e769884af085e62bb426a9ff71b7a90bdd480d2bc3f9c3e6b9aef84d9507a44c250b1b924b367664ba4ec0f36f4ffe3f8862afc5668a8d5734ae3864c6d2f1ff2ce7e98b9534040f9e0bfe1763310a2a96fdd7957ef3eb82d705447ba2439a8e3443f2c75f907926c9929e993b3363148a24629a5c55685d1be53aab51070c8f0ebcabc5789c919ea8920c31bba37579f33cf0956c017d72cec95ae27cf5f9d47b2f23c3fee803cf83799b37806a2a6aabef3e20feb5ca4856f92651f35a46423c289d05cbfb4d3ea290db88911e3c7aed17de223166dee9041edf0567c376305bc39942fe895831c57b8d817095a714ebc52276fd6d0a1b8cf7ed7d90483c5fbf8a4d80dad27a8207e6281f6dd3b628c8cdc741b7de463bfe299dc9a1fd3a5cbd2d6cedf52b2904591ae399c0b0b371c873fb9fd0595b1013382958d98e0a7f8ac30bcaeac019463bc2374d3197f6180629de6248435d1cec49ff5e25d415199fa56ee64d0d5129bc7d07136f338ef0dc97d973f4bf0a3e08630dad5c2e9a71ec9ca3a479b362ac632b3fab750062b35bffd958dbfe6a96eb115ce1bbf99a6541c65d166f847c6b149aa467d9d1cb3ca35aea73d786eacb308a6b8a7e049d7b476ac3ac34bcbc3bd3a65d8b3c9ae5dfa51bea452d2e34caadc31d30c5e3cc4e2a8465615fb01606d0a52bf5f75ba4eefd8e00080ff72bdb79a27530ecbe7232a91cb14e47e40dcf7bd0e398b60148c25cb4da76a2b5fcc295913072e230358299f6bff0b33ef97573231d0eb42ccb3e90aaf4058cb462416fd670ab6788bbc18ab1d8ab6f259925d55575a6c6e03410352c7c6d8ab612976006f8a180acaced818e64dee83e6f014386396105dedff2619cc132d010e41ac8a4caac1b137fb3fbe83a24aa7b13c48cd9666cfd4a5e12d49c521a2ef70aa75a9b90067e770f9f9b458b7e9cd00e08a2e928b012b6143163196bdc1a5b174360591646ab74600f80a6223a0450adb45dcf23a6cde12917afba052ff19d19d8211e51be923929e48c40e162e1cebcdd5cba04c8d43b6dbf7b1b29d162dd32d4c03b97a8ebf120201e1141fef003c6bf5504d9f5ab17191e21d73db004123c64c8a232e6e2fc5384fae9ba9661efe4af537129d1812ebb22aa7818f1578227fd84422884c22a5d16f229fdf28ed4e627bced67e1310e9d9786bd38c6186931162db2c305ef034ff39a82ad473ff5382a7d8816667546d565bb48c02cbd3e6a6d2ad15feb6e402b9d2fde8ac65df9254d25bc4e8b5cde854827e7880a7df59b36fcb6223ffaf7c9e8d5d0674cda483d367981e8c1ae748f05b979a7d3b1f9fcea42a2475e8437dfb3d6c1ffb8d96b84c3b0776c857a2a654ca75a1a16e90e8eb6175b7c7fc5585315b4535e7ed364498d0360b9c6bef4fc75e465a9bd615c55a7feb99bb0c27e90af85d8219965df48477f6493618ab72dd37af8851975eadef739c09f580a38826088f573727cb04e100b263d6f81d8dbf890d53ee7c496ba926270b1efb55d6cd5b71fd978b16d88f8a2b0382fd07", 0x1000, &(0x7f0000003400), &(0x7f0000003440), &(0x7f0000003480)="a94f2320de9bab06fda322e54afa34136b4480b70aa2638bce7015b891737d59ca874f9400d2cc7ddcbadfb08a6bac97f6c6b39836ba6b3ed8047d00418397ebc3823e4077ac04a85139657a6140890000a0092e730072b609c725cf9202f180f15524de1f2fcdfad4d6233797e4b5200842e48800220fb30708c134d2d643a31409804cfd9bd764d787b138798f9de6134d18ec49") r12 = syz_open_procfs(r11, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000240), 0x4) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x23, 0x0, &(0x7f0000000200)) getdents64(r6, &(0x7f0000001400)=""/4090, 0xffa) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r14, &(0x7f0000000780)=ANY=[@ANYBLOB="0000001803010300ffffc4"], 0xf0) (async) write$binfmt_elf32(r12, &(0x7f0000003540)=ANY=[@ANYBLOB="7f454c46c704096d060000000000000002000300ff07000009010000380000008501000001800000810020000200000000000800000000000100000000000000d2000000010000800c000000ff070000030000000600000000000060010000000000000079000000080c00000100000009000000ffffffff12b212e8ca63cae49015e5871fd160f2363d8d7eb5d8757c475b35309d1072c4ea5f4a0fdffdf42c19cdd8e0ddf2cab7732a69a2b1a66bfa5022fb7087121251a7b1f520829fd5303a49f6c66a9b582f5b03d341023a947af54a881f886121e4425db1997ce4332a4d8816290b99b527e43115932266970277921b223068fb526b36018aaeb8f5cf3237361dbde8495c3a14966f1d1c91434bc17d494919a32386edf779097068b6c7af0dcb902d68f9ee99c7f468f9a10e5df78898d6a422b3b2d0ae63f417f382d3918d0d85a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f1a43bf47d12b8a085bb4ee5eab6be89ad32997a139f2cc65d675d392350322a8e15750f96887f2e5cd4cfa8a"], 0xb47) (async) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f00000001c0)={0x3, 0x0, [{0xa57, 0x0, 0x9}, {0xa4c, 0x0, 0x7}, {0xacf, 0x0, 0x7}]}) 55.050729105s ago: executing program 4 (id=3796): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040501d4d61000100000001090248548a29528b100384400a"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2000) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000540)="04", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r2, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 54.973979343s ago: executing program 0 (id=3798): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x400000100002f, {0x5, 0x2, 0xa303, 0x201, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b06e53f07010100000a900683749e821c0b8b9236590b"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 54.6455602s ago: executing program 2 (id=3799): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) 54.147555506s ago: executing program 2 (id=3801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0xffffffbd, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28) writev(r0, &(0x7f00000021c0)=[{&(0x7f0000000300)="79385db1d35d6a9c3abc35b71f3817", 0xf}], 0x1) 53.893369667s ago: executing program 2 (id=3802): socket$inet6(0xa, 0x3, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) mlockall(0x3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x103100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) read(r3, &(0x7f00000005c0)=""/163, 0xa3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[], 0x48) 53.300611456s ago: executing program 4 (id=3805): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f0000000480), 0x800100000000002, 0xa01) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000040)=""/192) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) r7 = socket(0xa, 0x3, 0x3a) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local, 0xd}, {0xa, 0x0, 0x0, @empty}}, 0x5c) socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0xfffc, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, {0xa, 0x0, 0x400001, @empty}, 0x1, {[0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff]}}, 0x5c) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 52.783734683s ago: executing program 3 (id=3807): syz_usb_connect(0x0, 0x62, 0x0, 0x0) personality(0xeaffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x568}, 0x1, 0x0, 0x0, 0x4}, 0x0) 52.728112382s ago: executing program 0 (id=3808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x16b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x54b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000010}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x419, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe1f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x110, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xfc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!(&)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbc, 0x4, "2bc418b5c9e1308ff0304bcfaa0337a9ef11263d70f5c556544c01ed81fca0e31af4076f7553b1e2cc32c8116c8b8ea8429e59af1d8b71d98c4cfeb1d6f02d0d445a6ac85ecb23985a9048fb1e6424b192465b16ece02090f3b2e8b43863a790b0d423a3633795f37c84ee958dc8cbc01ac3fbad1c55cbb74f3284337296a5167fd5fd1ef253521d87e7a7947e1fb2eb902a1a7446c50231beb50b1e8a966ec9f5c23f2ab7f187a156456185a57137bd548125be0ef742f8"}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40004}, 0x2000) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000005c0)={0x0, 0x3, 0x0, [0x2, 0x1, 0x7, 0x1, 0x6], [0x0, 0x2, 0x6, 0x0, 0x7fffffffffffffff, 0x7, 0x7, 0x6, 0x9, 0x4, 0x8, 0xa, 0x3, 0x7, 0x7fffffff, 0x6, 0x1ff, 0xfffffffffffffffd, 0xb, 0x2, 0x7d, 0x992, 0x2, 0x0, 0x1, 0x8, 0x4, 0xd9, 0x8000000000000000, 0x1, 0x3, 0x9d, 0x1, 0x1, 0xa83, 0x8000000000000001, 0x400, 0xb710, 0x9182, 0x60, 0x10000, 0x4000000000000000, 0x36, 0x4, 0x5b3, 0x0, 0x8000000000000001, 0x80, 0x0, 0x3, 0x8000000000000000, 0x8, 0x1, 0xc5, 0x400, 0x5, 0x7fff, 0xffffffffffffffff, 0xeee0000000000000, 0x1, 0x4, 0x66, 0x8, 0xe21, 0x9, 0x80000001, 0xa28, 0x9, 0x2, 0x8000000000000001, 0xfb, 0x9, 0x4, 0x7fffffffffffffff, 0x8, 0x9, 0x80000000, 0x0, 0xfffffffffffffffe, 0x401, 0x5, 0x8, 0x6, 0x101, 0x80000001, 0x7fffffff, 0x9c0d, 0x6, 0x3, 0x40, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x7f, 0x7, 0x8, 0x8, 0x800, 0xff, 0x3, 0xfffffffffffffffd, 0xfffffffffffffff7, 0x1, 0x10, 0x7f, 0x38c, 0x7, 0x7, 0x7, 0xfffffffffffffffa, 0x8, 0x1, 0x5, 0x6c4c, 0x10001, 0x7ff, 0xd2c7, 0x4, 0x80000000, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a00)={r5, 0x80, 0x5, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0}, &(0x7f0000000e80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000f40)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, r4, 0x502, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r3) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x5c, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x24000005) write(r3, &(0x7f0000001200)="4e7762e4f7da160b741affe3266b4f7e58919be87a176c87b754b0938d1bd1fbab5d127d48b174428b2992d595e263756bd5d155e675958e600f2bb7b3f962de", 0x40) syz_emit_ethernet(0x50d, &(0x7f0000001240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "6a9b8d", 0x4d7, 0x3a, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x3a, 0x0, 0x4, 0x1, 0x0, 0x1a, 0x67}, @fragment={0x3a, 0x0, 0x4, 0x1, 0x0, 0x9, 0x67}, @hopopts={0x2c, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x50, {0x0, 0x12, 0x5, 0x9, [0x5, 0x7ff, 0x10000000000, 0x0, 0x10001, 0xd, 0x8, 0x9, 0x4]}}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0xffffff30}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x30, 0x13, "535e33cfd79771ac4c930e0ccbcf405b7966247168ad4062bd63dba820b86ea839f5ec27d5d4bd69a2267ac85b4f0ec3d2c3e58de4240cf201661ffe55edd6b51fdb8005dc68866a3c0b750e2ac994f49a24331c6e39cedfffa90add481551c70814104053ccab4146ac71de8a4c0eb2cfd1a9a8d6e718fe2d0e0b4871d87b231f8029833bac603c78ddbd1b50250d95a077bdc98cb3863bbefdcbcde4"}, {0xe, 0x1d, "c25428e5443d1f0c2bb4e4260968e5cab4104aaca8c517ece1aa0a71a53231d9b8dc08b6e6f3901d7f7f549c20773074a7a7b376320716857df4d7f029634871d856aae7f6f34c96918605edd3db18900de017c97e0bc935462bb586aed836b9c1a0c22de27b0ac39859dbd383d80ca2f8bd2d16cbaeac621147f4e7afcf428790a8e07f4172cca034cf03e71923fed65f9d73bfc954076ca6d3b4f420e5a57549403bc3432542b4966139e5b1cc2a4f9b04c08ef1b9ba6306a91243ac6121dc88cd01c7eab1fb5467efc65e033b4aa039d229628da4bb1747b0df3284475e32b9d48d9a12600c146c"}, {0x3, 0xf, "f36a2b96b98dfa42a1ee181e0a134bbf86365b1999da6104c55d4ce4dc702c2380969ab0afad5ac80375b6a3c3f93d28e3407dde1413c277ba96d64f02391d02b13ca3dc9d99a243e9a8527aace13eb092d0e93e86975d0a014a513a595bf77e1865d002518d66fbd9a62fc5a1e26ad91f4e9fdc1bd0486d7c"}, {0x18, 0x11, "0d154c276659960be4304d3175efe1bcbab5c4253b0ba4bfd6fbb6ebb890733b2cfb7c422918410507b2c31c7546c223334ade3ff51419014a2267ef4b3b00ce8d102dccff4733efb2cfd6380f00fa2632756dda85c7c62fd6ea6ebc12869344360e64844d8ca375205d6f97f92872750e909205b41e837296bea304482ceb16dee0809c78800b69593bef4124"}, {0x2, 0x1, "c7b7c3d695883d522781848e"}, {0x4, 0x4, "76568c6660f51cc3f9cfc1dc46218e37a6d6b545874d6ccf2440e16e8be95c849bf2de"}, {0x2, 0x19, "63eeb4809ab8eac7517f48ca37766df236cd8fe609537c799b203a44241cb020635ca3ef0f7d424b22e30e149055f3b585c713b7c8fc7a52df21b83d4db65d95c4fc40b784d916608050c562e997897031e7cc3bc0899997c7251a342968c9e613f2708fc0a9c80bf4869e340554a23bfdc8ea092a5a45b7d1d03f2605fda090bbf3a9d7c3e08cca8553af44b1f8b85449401c87e7d90e23be993dff9a163b25b54fd651eec1737808779295cf870fe8cd59e60c20c557278adf89aabe762b52a124a5de2d176ca33e"}, {0xe, 0xf, "538df117619a1371c90682f6a91adbf4834c781631598b66ead459c8b1012feeec5b5d66985d683e17d95bfca3ba06415dbe52427ba055c1bebd3b8a280c0efe68348e846d0e95fa8bb56a9d52dd8335f32891e628c16a5842d7e70416b5503f30b6fe0c529d6a4545c0d887d20dcd7dd6f502a528ca8b7335e8b6"}, {0x1f, 0x2, "d167d8dd50261cff08d3cb724327"}]}}}}}}, &(0x7f0000001780)={0x0, 0x1, [0x790, 0x6eb, 0xf4d, 0x968]}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000017c0)={0xc5, 0xa756}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GET_RESBLKS(r10, 0x80105873, &(0x7f0000001840)) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x20040000) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001980)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$XFS_IOC_DIOINFO(r11, 0x800c581e, &(0x7f00000019c0)) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r12, &(0x7f0000001a00)="e1aece3d48f93278490ff293442ee0d4111cfa0560d43fdcf1beb8648e8f854f2666139e0de840ec341cfc86e873953bee6d7e509e03e8b1197de8d0002fa750972fba1b5c838f40424b3fefd3043f5f72c785c037db950a24b38a9c536e0154c5a7e3f61b92f40428cfb21e9adddb832f450ddd19b235aedfe454e5aa3db1c53d772ef4de7c363cbb562a12883a985bfebcacda58f12dfb2eb822b11679546cd9e14acea030c14b1dc02f2946e7cd9ee64f9029bbaeb51fee4432dcf05eb736eea8f575c32f927884c752be22b4654847b33beb022277335e0bd8646d324a73f789dc44", 0xe4) timer_create(0x4, &(0x7f0000001b00)={0x0, 0x13, 0x4}, &(0x7f0000001b40)=0x0) timer_settime(r13, 0x1, &(0x7f0000001b80), &(0x7f0000001bc0)) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001f00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x188, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) 52.366835863s ago: executing program 0 (id=3809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xa000200) r2 = semget$private(0x0, 0x4000, 0x0) semtimedop(r2, &(0x7f0000000640)=[{0x0, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x4010) close(r0) 52.143932871s ago: executing program 0 (id=3810): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 52.023320006s ago: executing program 3 (id=3811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000480)="df7d608e239e9d28c822eca0a7aaac2b123129a2f366120e0621678b869b48ed8845f0aeaaa12b84ff0bd2a4cf1591422794de930333bcea892c6fd7788f057371e5b9d3f79815fb7559de3753c5ea682b5021e927f99886b430ee74274f2c6680d5d850460aad47414040e62a4a4100381b2ccdfe84ab4bd5292212b5204f642092cd3f622c9078d12cea7ebd91fe93255a4d7253573f58eb3b90d78317cf8ccdcd6370467216e56adbce1d28683392d533fd64a2a0856670bd68f5e00b9f95d65d9ce2", 0xc4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r2, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'cbcmac-aes-neon\x00'}}) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400"], 0x0) r5 = fsmount(r4, 0x1, 0x3) fchdir(r5) (async) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xa5) lseek(r6, 0x101, 0x0) (async) lseek(r6, 0x101, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) dup3(r9, r7, 0x80000) (async) dup3(r9, r7, 0x80000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x100000, 0x1}, 0x0, &(0x7f0000000140)={0x1f, 0x6, 0x80000001, 0x80000000003, 0x4, 0x80000000000000, 0x6a9, 0x3}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x100000, 0x1}, 0x0, &(0x7f0000000140)={0x1f, 0x6, 0x80000001, 0x80000000003, 0x4, 0x80000000000000, 0x6a9, 0x3}, 0x0, 0x0) getdents64(r6, &(0x7f0000000200)=""/75, 0x4b) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_KVMCLOCK_CTRL(r10, 0xaead) (async) ioctl$KVM_KVMCLOCK_CTRL(r10, 0xaead) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 51.955957062s ago: executing program 2 (id=3812): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r1, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081"], 0x5c}, 0x1, 0x0, 0xffed, 0x8000}, 0xc094) 51.808042716s ago: executing program 2 (id=3813): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x7, 0xff01]}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3c01af1d, 0x3, 0x5, 0xc, 0x9, 0x4, 0x860, 0x49, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e321000c8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0xc4) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, @dev}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) accept4$tipc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80800) 51.075592088s ago: executing program 2 (id=3814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2b, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)="da", 0x1}], 0x1}, 0x20000885) 49.583445541s ago: executing program 4 (id=3820): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 49.481136405s ago: executing program 4 (id=3822): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x8ba}}, 0xe7e, 0x3, 0x3ff, 0x6, 0xb2, 0x7, 0x1}, &(0x7f0000000000)=0x9c) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x3000)=nil) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$midi(0x2, 0x68, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x67, 0x0, 0xe6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x1, [@midi_out_jack={0xb, 0x24, 0x3, 0x2, 0xe, 0x2, [{0x6, 0xf2}, {0x3, 0x9}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x3, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x85, 0x2f}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x81, 0x1}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x0, 0x4, [{0x2, 0x5}, {0xfc, 0x8}, {0x9, 0x9}, {0xf3, 0x3}], 0xc0}, @midi_out_jack={0x11, 0x24, 0x3, 0x7, 0xe, 0x5, [{0x10, 0x2}, {0xb, 0x8}, {0x1, 0x7}, {0x5, 0x6}, {0x6, 0xdf}], 0x55}, @ms_header={0x7, 0x24, 0x1, 0x55b3, 0x7}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xa, 0x5, 0x4, 0x10}, 0x1b, &(0x7f00000004c0)={0x5, 0xf, 0x1b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x5, 0x7}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x10001, 0xf00f, 0x6}]}, 0x5, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x426}}, {0x5b, &(0x7f0000000600)=@string={0x5b, 0x3, "3ec4af83655473c543aa075f3d0d788b60ea036ca5a1d504adde84218ae5c11dd3d80a46c6aff46db449c578b959d371e4be32e0cfacfdba643f0a16df539063faca25e12f02c73c9bdb733692b183d408bc4857d1ff928391"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r9, @ANYBLOB="5c005a8058000180050007000100000005000a"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc, 0x7e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8084}, 0x4000800) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)={0x20, 0xd, 0x4, "11b657f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x16, 0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0}) 49.276527903s ago: executing program 0 (id=3824): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00'}) sysinfo(&(0x7f0000000800)=""/4096) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) unshare(0x2c020400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=0x2, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008ba000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000b1e000/0x4000)=nil, &(0x7f00004ff000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x17}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x80, 0xd1, 0x4, 0x0, @loopback, @multicast1}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x33, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000100)=0xc97) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8}) write(r5, &(0x7f0000000300)='.', 0x1) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x3}) 48.52724463s ago: executing program 3 (id=3825): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 47.420342263s ago: executing program 3 (id=3826): r0 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000003280)=[{0x0}, {&(0x7f0000001200)=""/23, 0x17}], 0x2}}], 0x1, 0x12060, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0xd4}], 0x40000000000031b, 0x40000043, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x800000, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) unshare(0x400) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000001540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x40, 0x8f}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x84c) 38.508211449s ago: executing program 1 (id=3835): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000010000000000002000100000000fffffffbfc0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 38.229489168s ago: executing program 1 (id=3836): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='soua\x94r', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 36.295223503s ago: executing program 3 (id=3838): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2$watch_queue(&(0x7f0000002300), 0x80) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x3, 0x91c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 36.169491243s ago: executing program 4 (id=3839): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) getsockname(r5, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000340)=0x80) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r9, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r7], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 36.091665181s ago: executing program 0 (id=3840): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000700)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r3, r9, &(0x7f00000004c0)={0x0, 0x5a87, 0x40, 0x1, 0x25, 0x0, r3}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58bd, 0x1, 0x3, 0x9d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc6ab, 0x200, 0x2, 0x2ee, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2f5, 0x200, 0x2, 0x38b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc78d, 0x10000, 0x0, 0x361, 0x0, r4}}], 0x4, &(0x7f0000001d00)={0x2e, 0x40, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, r8, '\x00', {0x2, 0x279, 0x0, 0x0}}, &(0x7f0000001d80)) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x1, 0x3, "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"}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa00964, 0x0, '\x00', @p_u16=0x0}}) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f102030109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r13, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r14 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UDMABUF_CREATE(r14, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x401f}) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6827, 0x0) 35.878048467s ago: executing program 32 (id=3814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2b, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)="da", 0x1}], 0x1}, 0x20000885) 35.651953574s ago: executing program 3 (id=3842): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 35.5628676s ago: executing program 1 (id=3843): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000024000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000002400000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 35.053711398s ago: executing program 1 (id=3844): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x244a00, 0x0) r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000340)={0x11, 0x6, 0x0, 0x1, 0x81, 0x6, @remote}, 0x14) 34.50404898s ago: executing program 1 (id=3845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 0s ago: executing program 33 (id=3840): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000700)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r3, r9, &(0x7f00000004c0)={0x0, 0x5a87, 0x40, 0x1, 0x25, 0x0, r3}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58bd, 0x1, 0x3, 0x9d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc6ab, 0x200, 0x2, 0x2ee, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2f5, 0x200, 0x2, 0x38b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc78d, 0x10000, 0x0, 0x361, 0x0, r4}}], 0x4, &(0x7f0000001d00)={0x2e, 0x40, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, r8, '\x00', {0x2, 0x279, 0x0, 0x0}}, &(0x7f0000001d80)) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x1, 0x3, "4c1d1fcb305347550f63cab087a69e9dea4a0071ef647a0e476b7ed0b4ac55d2a9a735e9d3cb47f5f4fc0425be151a9477f2c13cf78d585224b4014db0aa73052c445175c1ed623a0ef631cd36e7376db17a89e89153dd9d70b6d9242d3d091c86e9fea2f50dfa673a1ed958d23122247639bfccf874dca0c5d4941a415bcf81fad28b45b56868985cb9c542498a0e2c496d26a95aebe2d6743151d93e05c8852fe73feba8352e334057fe7a11ee56c8b278270e21e511e3d415717ef324fb262b32b310db48f7c0cb4277915eea04506eace6c7eb9de651519d1799056419fb1247943a44af0dd6dc60b6972b2ffe34c189657660f5786d3ee32bfdbb1add9e"}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa00964, 0x0, '\x00', @p_u16=0x0}}) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f102030109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r13, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r14 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UDMABUF_CREATE(r14, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x401f}) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6827, 0x0) kernel console output (not intermixed with test programs): ialized): Bind routine FAILED [ 696.375444][ T9405] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 696.411016][ T9405] usb 2-1: USB disconnect, device number 111 [ 696.573893][ T5782] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 696.575621][T16004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.616151][T16004] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.657593][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.657670][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.676268][ T9404] usb 5-1: USB disconnect, device number 18 [ 696.716063][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.716176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.726449][ T5782] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 696.759540][ T5782] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.759602][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.792331][ T5782] usb 1-1: config 0 descriptor?? [ 696.817085][ T5782] pwc: Askey VC010 type 2 USB webcam detected. [ 696.988091][T16004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.175523][T16004] veth0_vlan: entered promiscuous mode [ 697.202933][T16004] veth1_vlan: entered promiscuous mode [ 697.277813][T16004] veth0_macvtap: entered promiscuous mode [ 697.297083][T16004] veth1_macvtap: entered promiscuous mode [ 697.335388][T16004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.383750][T16004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.442874][T12045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.443234][ T7170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.443276][ T7170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.443316][ T7170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.506428][T16160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.506888][T16160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.589375][T16160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3231'. [ 697.633136][T16160] bond0: entered promiscuous mode [ 697.633163][T16160] bond_slave_0: entered promiscuous mode [ 697.633443][T16160] bond_slave_1: entered promiscuous mode [ 697.633696][T16160] bond0: entered allmulticast mode [ 697.633713][T16160] bond_slave_0: entered allmulticast mode [ 697.633731][T16160] bond_slave_1: entered allmulticast mode [ 697.726467][ T5782] pwc: recv_control_msg error -71 req 02 val 2700 [ 697.728726][ T5782] pwc: recv_control_msg error -71 req 02 val 2c00 [ 697.760150][ T5782] pwc: recv_control_msg error -71 req 04 val 1000 [ 697.762934][ T5782] pwc: recv_control_msg error -71 req 04 val 1300 [ 697.770597][ T5782] pwc: recv_control_msg error -71 req 04 val 1400 [ 697.780402][ T5782] pwc: recv_control_msg error -71 req 02 val 2000 [ 697.789846][ T5782] pwc: recv_control_msg error -71 req 02 val 2100 [ 697.792797][ T5782] pwc: recv_control_msg error -71 req 04 val 1500 [ 697.795096][ T5782] pwc: recv_control_msg error -71 req 02 val 2500 [ 697.813040][ T5782] pwc: recv_control_msg error -71 req 02 val 2400 [ 697.822572][ T5614] Bluetooth: hci3: command tx timeout [ 697.823835][ T5782] pwc: recv_control_msg error -71 req 02 val 2600 [ 697.840855][ T5782] pwc: recv_control_msg error -71 req 02 val 2900 [ 697.846745][ T5782] pwc: recv_control_msg error -71 req 02 val 2800 [ 697.856758][ T5782] pwc: recv_control_msg error -71 req 04 val 1100 [ 697.858650][ T5782] pwc: recv_control_msg error -71 req 04 val 1200 [ 697.879003][ T5782] pwc: Registered as video103. [ 697.899869][ T5782] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input114 [ 698.009047][ T5782] usb 1-1: USB disconnect, device number 114 [ 698.156541][ T7172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.156566][ T7172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.288270][T12046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.288290][T12046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.413107][T16200] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3235'. [ 698.666806][T16205] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3237'. [ 699.774268][ T5782] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 699.906793][ T5782] usb 1-1: device descriptor read/64, error -71 [ 700.142258][ T5782] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 700.201630][ T9472] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 700.274523][ T5782] usb 1-1: device descriptor read/64, error -71 [ 700.353387][ T9472] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 700.353941][ T9472] usb 3-1: config 0 has no interfaces? [ 700.353978][ T9472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.358695][ T9472] usb 3-1: config 0 descriptor?? [ 700.397714][ T5782] usb usb1-port1: attempt power cycle [ 700.731982][ T5782] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 700.752334][ T5782] usb 1-1: device descriptor read/8, error -71 [ 700.823676][ T6573] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 700.946017][T16253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.960570][T16253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.971706][ T6573] usb 5-1: Using ep0 maxpacket: 16 [ 700.972542][ T6573] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 700.974293][ T6573] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 700.974326][ T6573] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 700.998393][ T6573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.998471][ T6573] usb 5-1: Product: syz [ 700.998523][ T6573] usb 5-1: Manufacturer: syz [ 700.998566][ T6573] usb 5-1: SerialNumber: syz [ 701.007823][ T5782] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 701.055245][ T5782] usb 1-1: device descriptor read/8, error -71 [ 701.061012][ T6573] usb 5-1: config 0 descriptor?? [ 701.095398][ T6573] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 701.095438][ T6573] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 701.139034][T16253] openvswitch: netlink: Key type 262 is out of range max 32 [ 701.141024][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 701.162032][ T5782] usb usb1-port1: unable to enumerate USB device [ 701.451682][ T9472] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 701.601631][ T9472] usb 2-1: Using ep0 maxpacket: 8 [ 701.603364][ T9472] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 701.610003][ T9472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.610030][ T9472] usb 2-1: Product: syz [ 701.610047][ T9472] usb 2-1: Manufacturer: syz [ 701.610064][ T9472] usb 2-1: SerialNumber: syz [ 701.656537][ T9472] usb 2-1: config 0 descriptor?? [ 701.694666][ T6573] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 701.701030][ T6573] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 701.864242][T16258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.864984][T16258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.164131][ T9472] usb read operation failed. (-71) [ 702.164764][ T9472] usb write operation failed. (-71) [ 702.166759][ T9472] usb write operation failed. (-71) [ 702.167169][ T9472] usb write operation failed. (-71) [ 702.167190][ T9472] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 702.313996][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.314550][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.320658][ T6573] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 702.321171][ T6573] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 702.330551][ T6573] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 702.913718][ T44] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 702.979663][ T25] usb 3-1: USB disconnect, device number 119 [ 703.061636][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 703.062583][ T44] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 703.064435][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.099561][ T44] usb 1-1: New USB device strings: Mfr=1, Product=69, SerialNumber=3 [ 703.099619][ T44] usb 1-1: Product: syz [ 703.099636][ T44] usb 1-1: Manufacturer: syz [ 703.099653][ T44] usb 1-1: SerialNumber: syz [ 703.126893][ T44] usb 1-1: config 0 descriptor?? [ 703.151856][ T44] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 703.299915][ T6573] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 703.300378][ T6573] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 703.300840][ T6573] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 703.338143][ T6573] usb 5-1: USB disconnect, device number 19 [ 703.371083][ T44] usb 1-1: qt2_attach - failed to power on unit: -71 [ 703.371317][ T44] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 703.396312][ T44] usb 1-1: USB disconnect, device number 119 [ 703.515606][T16288] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3256'. [ 703.676084][T16293] batadv_slave_1: entered promiscuous mode [ 703.795146][T16289] batadv_slave_1: left promiscuous mode [ 704.205520][T16311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3266'. [ 704.205829][T12043] bond0: (slave bond_slave_0): interface is now down [ 704.205857][T12043] bond0: (slave bond_slave_1): interface is now down [ 704.207161][T16311] bond0: left allmulticast mode [ 704.207179][T16311] bond_slave_0: left allmulticast mode [ 704.207198][T16311] bond_slave_1: left allmulticast mode [ 704.352368][T12045] bond0: (slave bond_slave_0): interface is now down [ 704.352394][T12045] bond0: (slave bond_slave_1): interface is now down [ 704.384825][T12045] bond0: now running without any active interface! [ 704.392809][ T44] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 704.422153][ T9406] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 704.551621][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 704.552497][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 704.558786][ T44] usb 3-1: string descriptor 0 read error: -22 [ 704.558936][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.590002][ T44] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 704.606594][ T9406] usb 5-1: Using ep0 maxpacket: 32 [ 704.614580][ T9406] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 704.615722][ T9406] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 704.615751][ T9406] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.621470][ T9406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.621957][ T9406] usb 5-1: Product: syz [ 704.621976][ T9406] usb 5-1: Manufacturer: syz [ 704.621993][ T9406] usb 5-1: SerialNumber: syz [ 704.677918][ T9406] usb 5-1: config 0 descriptor?? [ 704.693727][ T9406] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 704.779648][ T44] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 704.840540][ T44] usb 3-1: USB disconnect, device number 120 [ 705.286119][ T9406] gspca_sunplus: reg_r err -71 [ 705.979688][T16354] netlink: 'syz.4.3282': attribute type 10 has an invalid length. [ 706.111270][T16353] syz.4.3282 (16353): drop_caches: 2 [ 706.141683][ T5672] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 706.144243][T16353] input: syz1 as /devices/virtual/input/input115 [ 706.151691][ T5782] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 706.293806][ T5672] usb 1-1: Using ep0 maxpacket: 32 [ 706.295070][ T5672] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 706.296120][ T5672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.300090][ T5672] usb 1-1: config 0 descriptor?? [ 706.345397][ T5672] as10x_usb: device has been detected [ 706.346119][ T5672] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 706.364568][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 706.370391][ T5782] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 706.371697][ T9406] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 706.394462][ T5782] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 706.394494][ T5782] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.417527][ T9406] usb 5-1: USB disconnect, device number 20 [ 706.418169][ T5672] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 706.438995][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.439025][ T5782] usb 3-1: Product: syz [ 706.439042][ T5782] usb 3-1: Manufacturer: syz [ 706.439058][ T5782] usb 3-1: SerialNumber: syz [ 706.468773][ T5672] as10x_usb: error during firmware upload part1 [ 706.469705][ T5672] Registered device nBox DVB-T Dongle [ 706.508172][ T5782] usb 3-1: config 0 descriptor?? [ 706.528777][ T5782] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 706.551061][T16350] syzkaller1: entered promiscuous mode [ 706.551086][T16350] syzkaller1: entered allmulticast mode [ 706.678987][T16367] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3286'. [ 706.783766][ T5672] usb 1-1: USB disconnect, device number 120 [ 706.825197][ T5672] Unregistered device nBox DVB-T Dongle [ 706.827501][ T5672] as10x_usb: device has been disconnected [ 707.131689][ T5782] gspca_sunplus: reg_r err -71 [ 707.255517][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3289'. [ 707.255544][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3289'. [ 707.449460][T16384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3291'. [ 708.111669][ T5782] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 708.132772][ T5782] usb 3-1: USB disconnect, device number 121 [ 708.468449][ T5782] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 708.623363][ T5782] usb 3-1: Using ep0 maxpacket: 8 [ 708.624639][ T5782] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 708.630612][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.630633][ T5782] usb 3-1: Product: syz [ 708.630645][ T5782] usb 3-1: Manufacturer: syz [ 708.630656][ T5782] usb 3-1: SerialNumber: syz [ 708.682344][ T5782] usb 3-1: config 0 descriptor?? [ 708.899333][T16397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.908922][T16397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.249063][ T5782] usb read operation failed. (-71) [ 709.249891][ T5782] usb write operation failed. (-71) [ 709.250254][ T5782] usb write operation failed. (-71) [ 709.251049][ T5782] usb write operation failed. (-71) [ 709.251070][ T5782] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 709.292185][ T44] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 709.441780][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 709.442675][ T44] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 709.444546][ T44] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 709.444575][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.448327][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.448354][ T44] usb 1-1: Product: syz [ 709.448371][ T44] usb 1-1: Manufacturer: syz [ 709.448387][ T44] usb 1-1: SerialNumber: syz [ 709.520980][ T44] usb 1-1: config 0 descriptor?? [ 709.537546][ T44] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 709.661281][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3311'. [ 709.661299][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 710.143129][ T44] gspca_sunplus: reg_r err -71 [ 710.883525][T16462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3324'. [ 710.884111][T12046] bond0: (slave bond_slave_0): interface is now down [ 710.884141][T12046] bond0: (slave bond_slave_1): interface is now down [ 711.024085][T12045] bond0: (slave bond_slave_0): interface is now down [ 711.024115][T12045] bond0: (slave bond_slave_1): interface is now down [ 711.078922][T12045] bond0: now running without any active interface! [ 711.097680][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 711.097696][ T30] audit: type=1326 audit(1790394694.161:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.097878][ T30] audit: type=1326 audit(1790394694.161:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.165076][ T30] audit: type=1326 audit(1790394694.231:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.165134][ T30] audit: type=1326 audit(1790394694.231:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.165168][ T30] audit: type=1326 audit(1790394694.231:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.172018][ T30] audit: type=1326 audit(1790394694.231:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.172737][ T30] audit: type=1326 audit(1790394694.241:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.172870][ T30] audit: type=1326 audit(1790394694.241:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.175501][ T30] audit: type=1326 audit(1790394694.241:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.175655][ T30] audit: type=1326 audit(1790394694.241:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 711.251896][ T44] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 711.302185][ T44] usb 1-1: USB disconnect, device number 121 [ 711.691738][ T44] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 711.841625][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 711.842374][ T44] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 711.844554][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.844580][ T44] usb 1-1: config 0 has no interfaces? [ 711.846617][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.846649][ T44] usb 1-1: Product: syz [ 711.846661][ T44] usb 1-1: Manufacturer: syz [ 711.846672][ T44] usb 1-1: SerialNumber: syz [ 711.850884][ T44] usb 1-1: config 0 descriptor?? [ 711.929764][T16478] xt_hashlimit: size too large, truncated to 1048576 [ 712.124590][ T5672] usb 1-1: USB disconnect, device number 122 [ 712.157933][T16491] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3332'. [ 713.031826][ T5672] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 713.181715][ T5672] usb 1-1: Using ep0 maxpacket: 32 [ 713.183561][ T5672] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a39, bcdDevice=a8.6d [ 713.184541][ T5672] usb 1-1: config 4 has an invalid interface number: 219 but max is 0 [ 713.184569][ T5672] usb 1-1: config 4 has no interface number 0 [ 713.184613][ T5672] usb 1-1: config 4 interface 219 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 713.184645][ T5672] usb 1-1: config 4 interface 219 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 713.184665][ T5672] usb 1-1: config 4 interface 219 has no altsetting 0 [ 713.189302][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.189336][ T5672] usb 1-1: Product: syz [ 713.189348][ T5672] usb 1-1: Manufacturer: syz [ 713.189360][ T5672] usb 1-1: SerialNumber: syz [ 713.623163][T16514] netlink: 'syz.4.3341': attribute type 10 has an invalid length. [ 713.716626][T16513] input: syz1 as /devices/virtual/input/input116 [ 714.149868][ T5672] usb 1-1: USB disconnect, device number 123 [ 714.229816][T16529] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3347'. [ 714.277949][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 714.277967][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'. [ 714.277987][T16533] netlink: 'syz.0.3349': attribute type 11 has an invalid length. [ 714.277998][T16533] netlink: 'syz.0.3349': attribute type 12 has an invalid length. [ 714.551736][ T9404] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 714.703198][ T9404] usb 5-1: Using ep0 maxpacket: 16 [ 714.703940][ T9404] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 714.705105][ T9404] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.705123][ T9404] usb 5-1: config 0 has no interfaces? [ 714.707507][ T9404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.707537][ T9404] usb 5-1: Product: syz [ 714.707560][ T9404] usb 5-1: Manufacturer: syz [ 714.707571][ T9404] usb 5-1: SerialNumber: syz [ 714.710144][ T9404] usb 5-1: config 0 descriptor?? [ 714.927440][ T9404] usb 5-1: USB disconnect, device number 21 [ 715.341609][ T5672] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 715.492072][ T5672] usb 1-1: Using ep0 maxpacket: 32 [ 715.493530][ T5672] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 715.525372][ T5672] usb 1-1: string descriptor 0 read error: -22 [ 715.525548][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.576263][ T5672] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 715.629377][T16566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3364'. [ 715.737191][T16569] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3365'. [ 715.762775][ T5672] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 715.811798][ T5672] usb 1-1: USB disconnect, device number 124 [ 716.571300][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 716.571324][ T30] audit: type=1326 audit(1790394699.631:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcebd197ed7 code=0x7ffc0000 [ 716.571467][ T30] audit: type=1326 audit(1790394699.631:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcebd13f4d9 code=0x7ffc0000 [ 716.634614][ T30] audit: type=1326 audit(1790394699.701:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcebd197ed7 code=0x7ffc0000 [ 716.634674][ T30] audit: type=1326 audit(1790394699.701:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcebd13f4d9 code=0x7ffc0000 [ 716.634722][ T30] audit: type=1326 audit(1790394699.701:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcebd197ed7 code=0x7ffc0000 [ 716.634770][ T30] audit: type=1326 audit(1790394699.701:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcebd13f4d9 code=0x7ffc0000 [ 716.634819][ T30] audit: type=1326 audit(1790394699.701:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcebd197ed7 code=0x7ffc0000 [ 716.634866][ T30] audit: type=1326 audit(1790394699.701:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcebd13f4d9 code=0x7ffc0000 [ 716.634915][ T30] audit: type=1326 audit(1790394699.701:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcebd197ed7 code=0x7ffc0000 [ 716.634970][ T30] audit: type=1326 audit(1790394699.701:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.3.3367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcebd13f4d9 code=0x7ffc0000 [ 717.381729][ T9406] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 717.531667][ T9406] usb 1-1: Using ep0 maxpacket: 16 [ 717.532433][ T9406] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 717.534123][ T9406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.534149][ T9406] usb 1-1: config 0 has no interfaces? [ 717.536574][ T9406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.536602][ T9406] usb 1-1: Product: syz [ 717.536620][ T9406] usb 1-1: Manufacturer: syz [ 717.536633][ T9406] usb 1-1: SerialNumber: syz [ 717.602770][ T9406] usb 1-1: config 0 descriptor?? [ 717.806764][ T44] usb 1-1: USB disconnect, device number 125 [ 717.887332][ T6573] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 718.034032][ T6573] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 718.036226][ T6573] usb 5-1: config 0 has no interfaces? [ 718.036267][ T6573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.066529][ T6573] usb 5-1: config 0 descriptor?? [ 718.667381][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3377'. [ 718.667767][T16618] bond0: option arp_validate: invalid value (18890) [ 720.051715][ T6573] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 720.201634][ T6573] usb 1-1: Using ep0 maxpacket: 32 [ 720.204182][ T6573] usb 1-1: unable to get BOS descriptor or descriptor too short [ 720.204235][ T6573] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 720.205349][ T6573] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 720.208291][ T6573] usb 1-1: language id specifier not provided by device, defaulting to English [ 720.209809][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.209836][ T6573] usb 1-1: Product: syz [ 720.209851][ T6573] usb 1-1: Manufacturer: syz [ 720.209866][ T6573] usb 1-1: SerialNumber: syz [ 720.429942][T16640] bond0: left promiscuous mode [ 720.429961][T16640] bond_slave_0: left promiscuous mode [ 720.430135][T16640] bond_slave_1: left promiscuous mode [ 720.498715][ T6573] usb 1-1: 1:1 : bogus bTerminalLink 5 [ 720.542772][ T6573] usb 1-1: USB disconnect, device number 126 [ 720.579762][ T6580] udevd[6580]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.637240][ T5672] usb 5-1: USB disconnect, device number 22 [ 721.148566][T16662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3400'. [ 721.266182][T16665] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3401'. [ 721.766579][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3409'. [ 722.824035][T16713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3419'. [ 723.114350][T16721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1950419466 (3900838932 ns) > initial count (3403334374 ns). Using initial count to start timer. [ 723.139579][ T30] kauditd_printk_skb: 1773 callbacks suppressed [ 723.139599][ T30] audit: type=1326 audit(1790394706.211:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.139852][ T30] audit: type=1326 audit(1790394706.211:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.141462][ T30] audit: type=1326 audit(1790394706.211:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.141629][ T30] audit: type=1326 audit(1790394706.211:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.141710][ T30] audit: type=1326 audit(1790394706.211:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.144609][ T30] audit: type=1326 audit(1790394706.211:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.144787][ T30] audit: type=1326 audit(1790394706.211:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.144908][ T30] audit: type=1326 audit(1790394706.211:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.145695][ T30] audit: type=1326 audit(1790394706.211:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.146322][ T30] audit: type=1326 audit(1790394706.211:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 723.741808][ T5614] Bluetooth: hci5: command 0x0406 tx timeout [ 724.082735][ T6573] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 724.234505][ T6573] usb 1-1: Using ep0 maxpacket: 16 [ 724.235676][ T6573] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 724.237054][ T6573] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 724.241064][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.241091][ T6573] usb 1-1: Product: syz [ 724.241108][ T6573] usb 1-1: Manufacturer: syz [ 724.241125][ T6573] usb 1-1: SerialNumber: syz [ 724.268210][ T6573] usb 1-1: config 0 descriptor?? [ 724.294415][ T6573] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 724.306018][ T6573] usb 1-1: Detected FT232R [ 724.522138][ T6573] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 724.523674][T16728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.524313][T16728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.529909][T16728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3424'. [ 724.802690][ T6573] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 724.808572][ T6573] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 724.841819][ T6573] usb 1-1: USB disconnect, device number 127 [ 724.849718][ T6573] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 724.850157][ T6573] ftdi_sio 1-1:0.0: device disconnected [ 725.222694][T16750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3432'. [ 725.223113][ T12] bond0: (slave bond_slave_0): interface is now down [ 725.223136][ T12] bond0: (slave bond_slave_1): interface is now down [ 725.224622][T16750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.361781][T12043] bond0: (slave bond_slave_0): interface is now down [ 725.361809][T12043] bond0: (slave bond_slave_1): interface is now down [ 725.370465][T12043] bond0: now running without any active interface! [ 725.514772][T16760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.519693][T16760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.553560][T16760] loop9: detected capacity change from 0 to 7 [ 725.558598][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.558663][ C1] buffer_io_error: 480 callbacks suppressed [ 725.558757][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.559098][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.559162][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.562507][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.562766][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.566885][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.567163][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.567676][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.567814][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.568194][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.568381][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.568854][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.569048][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.569167][T16760] ldm_validate_partition_table(): Disk read failed. [ 725.569471][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.569755][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.570381][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.570569][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.571050][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.571252][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.579396][T16760] Dev loop9: unable to read RDB block 0 [ 725.583579][T16760] loop9: unable to read partition table [ 725.584373][T16760] loop9: partition table beyond EOD, truncated [ 725.584428][T16760] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 725.745907][ T9404] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 725.911626][ T9404] usb 5-1: Using ep0 maxpacket: 16 [ 725.912379][ T9404] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 725.913826][ T9404] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.913852][ T9404] usb 5-1: config 0 has no interfaces? [ 725.916637][ T9404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.916664][ T9404] usb 5-1: Product: syz [ 725.916682][ T9404] usb 5-1: Manufacturer: syz [ 725.916699][ T9404] usb 5-1: SerialNumber: syz [ 725.937502][ T9404] usb 5-1: config 0 descriptor?? [ 726.166084][ T6573] usb 5-1: USB disconnect, device number 23 [ 726.470960][T16782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3444'. [ 726.774777][ T5672] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 726.922403][ T5672] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 726.923111][ T5672] usb 1-1: config 0 has no interfaces? [ 726.923148][ T5672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.928475][ T5672] usb 1-1: config 0 descriptor?? [ 726.964979][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3449'. [ 727.489039][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'. [ 727.489066][T16804] bond0: option arp_validate: invalid value (18890) [ 728.031624][ T44] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 728.181581][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 728.182189][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 728.183147][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.183165][ T44] usb 5-1: config 0 has no interfaces? [ 728.185182][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.185208][ T44] usb 5-1: Product: syz [ 728.185224][ T44] usb 5-1: Manufacturer: syz [ 728.185245][ T44] usb 5-1: SerialNumber: syz [ 728.187689][ T44] usb 5-1: config 0 descriptor?? [ 728.392131][ T9406] usb 5-1: USB disconnect, device number 24 [ 729.254653][T16836] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3467'. [ 729.619504][ T9406] usb 1-1: USB disconnect, device number 2 [ 729.930478][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3478'. [ 730.111679][T12046] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.111736][T12046] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.111776][T12046] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.111817][T12046] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.114524][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 730.551942][ T9406] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 730.614751][T16881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3485'. [ 730.615200][ T7172] bond0: (slave bond_slave_0): interface is now down [ 730.615223][ T7172] bond0: (slave bond_slave_1): interface is now down [ 730.716695][ T9406] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 730.719096][ T9406] usb 5-1: config 0 has no interfaces? [ 730.719138][ T9406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.746734][ T9406] usb 5-1: config 0 descriptor?? [ 730.753851][ T7172] bond0: (slave bond_slave_0): interface is now down [ 730.753916][ T7172] bond0: (slave bond_slave_1): interface is now down [ 730.878540][ T7172] bond0: now running without any active interface! [ 731.072207][T16901] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3492'. [ 731.316940][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 731.316978][T16914] bond0: option arp_all_targets: invalid value (18890) [ 731.906102][ T5693] kworker/0:6 (5693) used greatest stack depth: 13856 bytes left [ 731.939119][T16940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.942483][T16940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.990131][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 732.161741][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 732.321874][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 732.324412][ T44] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 732.326632][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.326669][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.326712][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.358181][ T44] usb 1-1: config 0 descriptor?? [ 733.267262][T16957] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3515'. [ 733.318146][ T9406] usb 5-1: USB disconnect, device number 25 [ 734.203032][T16975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3524'. [ 734.765268][T16989] syzkaller0: entered promiscuous mode [ 734.765299][T16989] syzkaller0: entered allmulticast mode [ 734.968626][ T44] usbhid 1-1:0.0: can't add hid device: -71 [ 734.968774][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 734.994680][ T44] usb 1-1: USB disconnect, device number 3 [ 735.093876][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 735.093899][ T30] audit: type=1326 audit(1790394718.151:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.3.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffe0000 [ 736.413724][T17024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3536'. [ 736.524321][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 736.756482][T17033] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 736.845825][T17033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3538'. [ 737.378664][T17043] vim2m vim2m.0: vidioc_s_fmt queue busy [ 738.593692][T17063] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3546'. [ 738.839404][ T30] audit: type=1326 audit(1790394721.901:7029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 738.839556][ T30] audit: type=1326 audit(1790394721.901:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 738.839994][ T30] audit: type=1326 audit(1790394721.901:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 738.840155][ T30] audit: type=1326 audit(1790394721.901:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 738.840304][ T30] audit: type=1326 audit(1790394721.901:7033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 738.840602][ T30] audit: type=1326 audit(1790394721.901:7034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 738.840745][ T30] audit: type=1326 audit(1790394721.901:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 738.841032][ T30] audit: type=1326 audit(1790394721.901:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 738.841171][ T30] audit: type=1326 audit(1790394721.901:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.3.3542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 739.096075][T17072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.435309][T17081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3551'. [ 740.181716][ T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 740.341624][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 740.342372][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 740.344672][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.344699][ T25] usb 5-1: config 0 has no interfaces? [ 740.350354][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.350383][ T25] usb 5-1: Product: syz [ 740.350402][ T25] usb 5-1: Manufacturer: syz [ 740.350419][ T25] usb 5-1: SerialNumber: syz [ 740.414852][ T25] usb 5-1: config 0 descriptor?? [ 740.635496][ T5672] usb 5-1: USB disconnect, device number 26 [ 741.329798][T17107] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3561'. [ 741.830361][T17120] xt_hashlimit: size too large, truncated to 1048576 [ 741.912674][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.928981][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 741.944437][T17121] bridge_slave_0 (unregistering): left allmulticast mode [ 741.944468][T17121] bridge_slave_0 (unregistering): left promiscuous mode [ 741.944582][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.081570][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 742.083361][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 742.084535][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.084567][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.084593][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 742.084637][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.097372][ T25] usb 5-1: config 0 descriptor?? [ 742.162664][ T9472] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 742.162764][ T9472] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 742.165937][ T9468] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 742.166041][ T9468] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 742.166829][ T5782] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 742.166927][ T5782] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 742.220595][ T5782] usb 3-1: USB disconnect, device number 122 [ 742.222917][ T9472] usb 2-1: USB disconnect, device number 112 [ 742.234796][ T5672] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 742.274891][ T9468] usb 4-1: USB disconnect, device number 120 [ 742.437455][ T5672] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 742.446402][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.446482][ T5672] usb 1-1: Product: syz [ 742.446520][ T5672] usb 1-1: Manufacturer: syz [ 742.446566][ T5672] usb 1-1: SerialNumber: syz [ 742.486834][ T5672] usb 1-1: config 0 descriptor?? [ 742.619892][T17132] ipt_rpfilter: unknown options [ 742.644882][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 742.644999][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 742.649569][ T25] usb 5-1: USB disconnect, device number 27 [ 742.675562][T17137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3571'. [ 742.691654][ T5782] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 742.806477][ T5672] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 742.806583][ T5672] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 742.806611][ T5672] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 742.815562][ T5672] usb 1-1: USB disconnect, device number 4 [ 742.892914][ T5782] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.895268][ T5782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.895296][ T5782] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 742.895320][ T5782] usb 3-1: config 1 has no interface number 1 [ 742.895360][ T5782] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 742.895403][ T5782] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 742.899918][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.899949][ T5782] usb 3-1: Product: syz [ 742.899966][ T5782] usb 3-1: Manufacturer: syz [ 742.899983][ T5782] usb 3-1: SerialNumber: syz [ 742.992113][T17103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 743.095084][ T9468] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 743.241761][ T9468] usb 2-1: Using ep0 maxpacket: 16 [ 743.242641][ T9468] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 743.246537][ T9468] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.246564][ T9468] usb 2-1: config 0 has no interfaces? [ 743.255918][ T9468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.256002][ T9468] usb 2-1: Product: syz [ 743.256046][ T9468] usb 2-1: Manufacturer: syz [ 743.256098][ T9468] usb 2-1: SerialNumber: syz [ 743.314848][ T5782] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 743.315086][ T5782] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 743.321434][ T9468] usb 2-1: config 0 descriptor?? [ 743.415242][ T5782] usb 3-1: USB disconnect, device number 123 [ 743.570996][ T9468] usb 2-1: USB disconnect, device number 113 [ 743.645547][ T6580] udevd[6580]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.805978][T17151] fuse: fd is not a fuse device [ 744.037265][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 744.037374][ T30] audit: type=1326 audit(1790394727.101:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 744.037427][ T30] audit: type=1326 audit(1790394727.101:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 744.039000][ T30] audit: type=1326 audit(1790394727.101:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 744.039285][ T30] audit: type=1326 audit(1790394727.101:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d09b9e159 code=0x7ffc0000 [ 744.039886][ T30] audit: type=1326 audit(1790394727.101:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d09b5e98e code=0x7ffc0000 [ 744.040512][ T30] audit: type=1326 audit(1790394727.101:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d09b9ddeb code=0x7ffc0000 [ 744.040844][ T30] audit: type=1326 audit(1790394727.101:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d09b9ddeb code=0x7ffc0000 [ 744.060781][ T30] audit: type=1326 audit(1790394727.111:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d09b9ddeb code=0x7ffc0000 [ 744.060923][ T30] audit: type=1326 audit(1790394727.111:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d09b9ddeb code=0x7ffc0000 [ 744.101817][ T5782] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 744.121715][T17161] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3578'. [ 744.165857][ T30] audit: type=1326 audit(1790394727.221:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.2.3577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d09b9ddeb code=0x7ffc0000 [ 744.292472][ T5672] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 744.322121][ T5782] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 744.334690][ T5782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.334844][ T5782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.334909][ T5782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 744.334975][ T5782] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.355799][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.355874][ T5782] usb 1-1: Product: syz [ 744.355918][ T5782] usb 1-1: Manufacturer: syz [ 744.355961][ T5782] usb 1-1: SerialNumber: syz [ 744.463977][ T5672] usb 3-1: Using ep0 maxpacket: 16 [ 744.466013][ T5672] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 744.467897][ T5672] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 744.471136][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.471163][ T5672] usb 3-1: Product: syz [ 744.471180][ T5672] usb 3-1: Manufacturer: syz [ 744.471196][ T5672] usb 3-1: SerialNumber: syz [ 744.523183][ T5672] usb 3-1: config 0 descriptor?? [ 744.529545][ T5672] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 744.549858][ T5672] usb 3-1: Detected FT232R [ 744.580941][T17163] netlink: Failed to add üÿÿÿ helper -22 [ 744.580986][T17163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.626038][ T5782] usb 1-1: USB disconnect, device number 5 [ 744.742167][ T5672] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 744.766488][T17158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.780938][T17158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.805046][T17158] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3577'. [ 745.052475][ T5672] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 745.055999][ T5672] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 745.079874][ T5672] usb 3-1: USB disconnect, device number 124 [ 745.093239][ T5672] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 745.093877][ T5672] ftdi_sio 3-1:0.0: device disconnected [ 745.125423][ T1226] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 745.273460][ T1226] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 745.274699][ T1226] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 745.279416][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.279444][ T1226] usb 5-1: Product: 鮥㵭ï–㪚棣꫱黬ë¸îƒ”脈Έ⩜淉볨漚à³íŸšäƒ¯ç•ºï¤¶á”²â…¾è”€ã€ºï´“⊘廿ë‰â¶»è®¿î—™æ²«àºœì¢´íŠªï ç—µïˆ¢ì…¸î–¢ã¶Šäž¢ì´î­—èªÏ®ìŸ¤é‹‡ï½’ì’°ê—‰å‹á³´á¢“螣ꯡ낎烺Ὼï™é—¡ï’ ç‡–è¸ä¡’鄫â‚蒆ޟ栢럔¾빲않窘ﶉ觊齴ʩ㡃ﲇé‚⾈䨾纞㋽ [ 745.279476][ T1226] usb 5-1: Manufacturer: 뢂쯥㚀细，휼ߠæµä Žî—±â”¯á†ã‰¡á¯±ï¬ƒã–‘ [ 745.279496][ T1226] usb 5-1: SerialNumber: syz [ 745.528339][T17190] netlink: 'syz.0.3590': attribute type 10 has an invalid length. [ 745.572421][ T1226] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 745.623858][T17193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3591'. [ 745.623899][T17193] netlink: 'syz.3.3591': attribute type 7 has an invalid length. [ 745.623914][T17193] netlink: 'syz.3.3591': attribute type 8 has an invalid length. [ 745.623928][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3591'. [ 745.628283][T17190] syz.0.3590 (17190): drop_caches: 2 [ 745.682488][ T1226] usb 5-1: USB disconnect, device number 28 [ 745.717049][T17193] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 745.741027][T17193] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 745.753086][T17193] erspan0: entered promiscuous mode [ 745.755349][T17193] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 745.825134][T14021] udevd[14021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.855354][T17197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3592'. [ 745.942363][ T9468] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 746.091671][ T9468] usb 2-1: Using ep0 maxpacket: 16 [ 746.092496][ T9468] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 746.093717][ T9468] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.093756][ T9468] usb 2-1: config 0 has no interfaces? [ 746.096047][ T9468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.096065][ T9468] usb 2-1: Product: syz [ 746.096077][ T9468] usb 2-1: Manufacturer: syz [ 746.096089][ T9468] usb 2-1: SerialNumber: syz [ 746.098566][ T9468] usb 2-1: config 0 descriptor?? [ 746.291634][ T25] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 746.313123][ T9393] usb 2-1: USB disconnect, device number 114 [ 746.441675][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 746.445956][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 746.468751][ T25] usb 4-1: string descriptor 0 read error: -22 [ 746.468894][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.513932][ T25] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 746.660814][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 746.724203][ T1226] usb 4-1: USB disconnect, device number 121 [ 747.011894][T17228] syz.4.3600 (17228): attempted to duplicate a private mapping with mremap. This is not supported. [ 747.266072][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.266138][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.417407][T17243] netlink: 'syz.3.3605': attribute type 1 has an invalid length. [ 747.533171][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'. [ 747.851681][ T25] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 748.001581][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 748.002379][ T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 748.003450][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 748.003474][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 748.005530][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.005550][ T25] usb 2-1: Product: syz [ 748.005561][ T25] usb 2-1: Manufacturer: syz [ 748.005572][ T25] usb 2-1: SerialNumber: syz [ 748.009133][ T25] usb 2-1: config 0 descriptor?? [ 748.032381][ T1226] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 748.191793][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 748.192756][ T1226] usb 1-1: New USB device found, idVendor=fa80, idProduct=0301, bcdDevice= 1.03 [ 748.192788][ T1226] usb 1-1: no configurations [ 748.192814][ T1226] usb 1-1: can't read configurations, error -22 [ 748.230172][ T9393] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 748.273997][ T25] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input119 [ 748.331746][ T1226] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 748.385284][ T9393] usb 3-1: Using ep0 maxpacket: 16 [ 748.386368][ T9393] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 748.387960][ T9393] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.387984][ T9393] usb 3-1: config 0 has no interfaces? [ 748.390558][ T9393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.390578][ T9393] usb 3-1: Product: syz [ 748.390591][ T9393] usb 3-1: Manufacturer: syz [ 748.390602][ T9393] usb 3-1: SerialNumber: syz [ 748.450166][ T9393] usb 3-1: config 0 descriptor?? [ 748.497616][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 748.508957][ T1226] usb 1-1: New USB device found, idVendor=fa80, idProduct=0301, bcdDevice= 1.03 [ 748.509022][ T1226] usb 1-1: no configurations [ 748.509037][ T1226] usb 1-1: can't read configurations, error -22 [ 748.522062][ T1226] usb usb1-port1: attempt power cycle [ 748.669286][ T5782] usb 3-1: USB disconnect, device number 125 [ 748.701919][ T25] rc_core: IR keymap rc-imon-pad not found [ 748.701941][ T25] Registered IR keymap rc-empty [ 748.702056][ T25] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 748.702077][ T25] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 748.759908][ T25] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 748.804572][ T25] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input120 [ 748.833926][ T25] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:115> initialized [ 748.893524][ T1226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 748.916127][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 748.916870][ T1226] usb 1-1: New USB device found, idVendor=fa80, idProduct=0301, bcdDevice= 1.03 [ 748.916925][ T1226] usb 1-1: no configurations [ 748.916941][ T1226] usb 1-1: can't read configurations, error -22 [ 748.961964][T17249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3608'. [ 749.063097][ T1226] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 749.072805][T17272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.092573][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 749.093129][ T1226] usb 1-1: New USB device found, idVendor=fa80, idProduct=0301, bcdDevice= 1.03 [ 749.093171][ T1226] usb 1-1: no configurations [ 749.093187][ T1226] usb 1-1: can't read configurations, error -22 [ 749.093508][ T1226] usb usb1-port1: unable to enumerate USB device [ 749.121715][T17272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.039672][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 750.044020][ T1226] usb 2-1: USB disconnect, device number 115 [ 750.293715][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3623'. [ 750.471661][ T9393] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 750.621087][T17307] loop2: detected capacity change from 0 to 7 [ 750.628502][ T9393] usb 3-1: Invalid ep0 maxpacket: 32 [ 750.641655][T17307] loop2: [ 750.641684][T17307] loop2: partition table partially beyond EOD, truncated [ 750.761618][ T9393] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 750.803147][ T9468] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 750.911984][ T9393] usb 3-1: Invalid ep0 maxpacket: 32 [ 750.912314][ T9393] usb usb3-port1: attempt power cycle [ 750.927144][ T5782] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 750.956258][ T9468] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 750.957277][ T9468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.960370][ T9468] usb 5-1: config 0 descriptor?? [ 751.093214][ T5782] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 751.093852][ T5782] usb 2-1: config 0 has no interfaces? [ 751.093890][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.097489][ T5782] usb 2-1: config 0 descriptor?? [ 751.114642][ T44] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 751.252187][ T9393] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 751.274424][ T9393] usb 3-1: Invalid ep0 maxpacket: 32 [ 751.275488][ T44] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 751.280063][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.280118][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.317615][ T44] usb 4-1: config 0 descriptor?? [ 751.402284][ T9393] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 751.426318][ T9393] usb 3-1: Invalid ep0 maxpacket: 32 [ 751.426718][ T9393] usb usb3-port1: unable to enumerate USB device [ 751.557318][ T44] hid_parser_main: 28 callbacks suppressed [ 751.557347][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557410][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557442][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557472][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557502][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557559][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557588][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557617][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557646][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.557703][ T44] uclogic 0003:5543:0064.0018: unknown main item tag 0x0 [ 751.559917][ T44] uclogic 0003:5543:0064.0018: unexpected long global item [ 751.561178][ T44] uclogic 0003:5543:0064.0018: parse failed [ 751.561275][ T44] uclogic 0003:5543:0064.0018: probe with driver uclogic failed with error -22 [ 751.758191][ T44] usb 4-1: USB disconnect, device number 122 [ 751.886713][T17332] FAULT_INJECTION: forcing a failure. [ 751.886713][T17332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.886751][T17332] CPU: 0 UID: 0 PID: 17332 Comm: syz.0.3637 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.886785][T17332] Tainted: [L]=SOFTLOCKUP [ 751.886791][T17332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.886802][T17332] Call Trace: [ 751.886809][T17332] [ 751.886833][T17332] dump_stack_lvl+0xe8/0x150 [ 751.886877][T17332] should_fail_ex+0x410/0x560 [ 751.886909][T17332] _copy_to_user+0x31/0xb0 [ 751.886944][T17332] simple_read_from_buffer+0xe1/0x170 [ 751.886974][T17332] proc_fail_nth_read+0x1bb/0x230 [ 751.887011][T17332] ? common_file_perm+0x20e/0x2b0 [ 751.887044][T17332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.887069][T17332] ? rw_verify_area+0x24a/0x4c0 [ 751.887123][T17332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.887147][T17332] vfs_read+0x213/0xa80 [ 751.887187][T17332] ? __pfx___mutex_lock+0x10/0x10 [ 751.887221][T17332] ? __pfx_vfs_read+0x10/0x10 [ 751.887263][T17332] ? __fget_files+0x2a/0x420 [ 751.887314][T17332] ? __fget_files+0x3a2/0x420 [ 751.887346][T17332] ? __fget_files+0x2a/0x420 [ 751.887385][T17332] ksys_read+0x150/0x270 [ 751.887422][T17332] ? __pfx_ksys_read+0x10/0x10 [ 751.887456][T17332] do_syscall_64+0x166/0x520 [ 751.887500][T17332] ? trace_irq_disable+0x3b/0x140 [ 751.887522][T17332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.887546][T17332] ? clear_bhb_loop+0x70/0xc0 [ 751.887576][T17332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.887593][T17332] RIP: 0033:0x7fcab9b5e98e [ 751.887608][T17332] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 751.887643][T17332] RSP: 002b:00007fcabaafffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.887668][T17332] RAX: ffffffffffffffda RBX: 00007fcabab006c0 RCX: 00007fcab9b5e98e [ 751.887685][T17332] RDX: 000000000000000f RSI: 00007fcabab000a0 RDI: 0000000000000006 [ 751.887699][T17332] RBP: 00007fcabab00090 R08: 0000000000000000 R09: 0000000000000000 [ 751.887713][T17332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.887730][T17332] R13: 00007fcab9e26038 R14: 00007fcab9e25fa0 R15: 00007fcab9f4fa48 [ 751.887758][T17332] [ 752.203719][T17334] socket: no more sockets [ 752.544538][T17343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3641'. [ 753.234546][ T4982] loop2: [ 753.234578][ T4982] loop2: partition table partially beyond EOD, truncated [ 753.324282][ T4982] loop2: [ 753.324304][ T4982] loop2: partition table partially beyond EOD, truncated [ 753.424983][ T9393] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 753.434149][ T4982] loop2: [ 753.434273][ T4982] loop2: partition table partially beyond EOD, truncated [ 753.579192][ T9393] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 753.580542][ T9393] usb 1-1: config 0 has no interfaces? [ 753.580572][ T9393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.611817][ T9393] usb 1-1: config 0 descriptor?? [ 753.635021][T17365] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3650'. [ 753.664999][ T9468] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 753.665458][ T9468] [drm:udl_init] *ERROR* Selecting channel failed [ 753.725532][ T9468] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 753.725561][ T9468] [drm] Initialized udl on minor 1 [ 753.769833][ T9393] usb 2-1: USB disconnect, device number 116 [ 753.772868][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 753.805082][ T9468] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 753.828070][ T9468] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 753.891034][ T9468] usb 5-1: USB disconnect, device number 29 [ 753.922524][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 753.924163][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 753.957538][ T44] usb 3-1: string descriptor 0 read error: -22 [ 753.957698][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.038854][ T44] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 754.189481][ T44] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 754.259334][ T44] usb 3-1: USB disconnect, device number 4 [ 754.273689][T17381] ALSA: seq fatal error: cannot create timer (-22) [ 754.412129][ T9468] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 754.488077][T17386] netlink: 'syz.3.3656': attribute type 2 has an invalid length. [ 754.488110][T17386] netlink: 'syz.3.3656': attribute type 2 has an invalid length. [ 754.564460][ T9468] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 754.565512][ T9468] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 754.565543][ T9468] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.565565][ T9468] usb 5-1: config 0 has no interface number 0 [ 754.565608][ T9468] usb 5-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 754.569425][ T9468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.569446][ T9468] usb 5-1: Product: syz [ 754.569458][ T9468] usb 5-1: Manufacturer: syz [ 754.569469][ T9468] usb 5-1: SerialNumber: syz [ 754.581311][ T9468] usb 5-1: config 0 descriptor?? [ 754.654265][ T9468] symbolserial 5-1:0.175: required endpoints missing [ 754.927986][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3660'. [ 754.952508][ T5672] usb 5-1: USB disconnect, device number 30 [ 755.686725][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 755.686748][ T30] audit: type=1326 audit(1790394738.751:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.686800][ T30] audit: type=1326 audit(1790394738.751:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.687912][ T30] audit: type=1326 audit(1790394738.751:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.688408][ T30] audit: type=1326 audit(1790394738.751:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.689616][ T30] audit: type=1326 audit(1790394738.751:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.690752][ T30] audit: type=1326 audit(1790394738.751:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.691081][ T30] audit: type=1326 audit(1790394738.751:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.725937][ T30] audit: type=1326 audit(1790394738.751:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.761446][ T30] audit: type=1326 audit(1790394738.811:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 755.795696][ T30] audit: type=1326 audit(1790394738.861:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17407 comm="syz.4.3664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962999e159 code=0x7ffc0000 [ 756.192420][ T9468] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 756.260896][ T1226] usb 1-1: USB disconnect, device number 10 [ 756.283973][ T5672] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 756.354074][ T9468] usb 5-1: Using ep0 maxpacket: 16 [ 756.356717][ T9468] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 756.366209][ T9468] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 756.401238][ T9468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.401273][ T9468] usb 5-1: Product: syz [ 756.401291][ T9468] usb 5-1: Manufacturer: syz [ 756.401308][ T9468] usb 5-1: SerialNumber: syz [ 756.429922][ T9468] usb 5-1: config 0 descriptor?? [ 756.453750][ T9468] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 756.460205][ T9468] usb 5-1: Detected FT232R [ 756.461944][ T5672] usb 4-1: Using ep0 maxpacket: 16 [ 756.471155][ T5672] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 756.499330][ T5672] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 756.525166][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.525199][ T5672] usb 4-1: Product: syz [ 756.525216][ T5672] usb 4-1: Manufacturer: syz [ 756.525232][ T5672] usb 4-1: SerialNumber: syz [ 756.540819][ T5672] usb 4-1: config 0 descriptor?? [ 756.576967][ T5672] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 756.593830][ T5672] usb 4-1: Detected FT232R [ 756.670795][ T9468] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 756.706215][T17408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3664'. [ 756.832442][ T5672] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 756.868159][T17410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.868858][T17410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.911686][T17410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3665'. [ 756.921831][T17425] openvswitch: netlink: Message has -2 unknown bytes. [ 756.921869][T17425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.968061][T17427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'. [ 757.025541][ T9468] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 757.037937][ T9468] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 757.058796][ T9468] usb 5-1: USB disconnect, device number 31 [ 757.086389][ T9468] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 757.086975][ T9468] ftdi_sio 5-1:0.0: device disconnected [ 757.209148][ T5672] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 757.221187][ T5672] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 757.242288][ T5672] usb 4-1: USB disconnect, device number 123 [ 757.258376][ T5672] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 757.258968][ T5672] ftdi_sio 4-1:0.0: device disconnected [ 757.421829][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 757.553986][ T44] usb 1-1: device descriptor read/64, error -71 [ 757.647359][T17443] FAULT_INJECTION: forcing a failure. [ 757.647359][T17443] name failslab, interval 1, probability 0, space 0, times 0 [ 757.647399][T17443] CPU: 0 UID: 0 PID: 17443 Comm: syz.1.3680 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.647431][T17443] Tainted: [L]=SOFTLOCKUP [ 757.647440][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.647455][T17443] Call Trace: [ 757.647465][T17443] [ 757.647475][T17443] dump_stack_lvl+0xe8/0x150 [ 757.647515][T17443] should_fail_ex+0x410/0x560 [ 757.647547][T17443] ? __alloc_skb+0x1db/0x7a0 [ 757.647577][T17443] should_failslab+0xa8/0x100 [ 757.647610][T17443] ? __alloc_skb+0x1db/0x7a0 [ 757.647636][T17443] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 757.647675][T17443] ? lock_acquire+0x115/0x350 [ 757.647702][T17443] ? __alloc_skb+0x1db/0x7a0 [ 757.647738][T17443] __alloc_skb+0x1db/0x7a0 [ 757.647772][T17443] tcp_stream_alloc_skb+0x3f/0x580 [ 757.647901][T17443] ? __asan_memset+0x22/0x50 [ 757.647926][T17443] tcp_connect+0x1646/0x54e0 [ 757.648023][T17443] ? lock_acquire+0x115/0x350 [ 757.648055][T17443] ? __pfx_tcp_connect+0x10/0x10 [ 757.648080][T17443] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 757.648106][T17443] ? lockdep_hardirqs_on+0x7b/0x110 [ 757.648142][T17443] ? ktime_get_with_offset+0x93/0x2d0 [ 757.648163][T17443] ? seqcount_lockdep_reader_access+0xea/0x100 [ 757.648197][T17443] ? __asan_memset+0x22/0x50 [ 757.648224][T17443] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 757.648304][T17443] ? inet6_hash_connect+0xeb/0x170 [ 757.648384][T17443] tcp_v6_connect+0x14ed/0x1cf0 [ 757.648443][T17443] ? tcp_sendmsg_locked+0x4b02/0x5400 [ 757.648469][T17443] ? tcp_sendmsg+0x2f/0x50 [ 757.648511][T17443] ? __pfx_tcp_v6_connect+0x10/0x10 [ 757.648548][T17443] __inet_stream_connect+0x258/0xe00 [ 757.648587][T17443] ? __pfx___inet_stream_connect+0x10/0x10 [ 757.648613][T17443] ? __kasan_kmalloc+0x93/0xb0 [ 757.648642][T17443] ? __kmalloc_cache_noprof+0x321/0x600 [ 757.648666][T17443] ? __kmalloc_cache_noprof+0x14d/0x600 [ 757.648688][T17443] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 757.648725][T17443] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 757.648759][T17443] tcp_sendmsg_locked+0x4b02/0x5400 [ 757.648814][T17443] ? __lock_acquire+0x747/0x2de0 [ 757.648844][T17443] ? kstrtouint+0x6e/0xe0 [ 757.648871][T17443] ? lock_acquire+0x115/0x350 [ 757.648903][T17443] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 757.648941][T17443] ? tcp_sendmsg+0x21/0x50 [ 757.648971][T17443] ? __local_bh_enable_ip+0xd6/0x140 [ 757.649023][T17443] tcp_sendmsg+0x2f/0x50 [ 757.649050][T17443] ? __pfx_inet6_sendmsg+0x10/0x10 [ 757.649105][T17443] sock_sendmsg_nosec+0x90/0x180 [ 757.649132][T17443] __sys_sendto+0x408/0x5a0 [ 757.649161][T17443] ? ksys_write+0x1e6/0x270 [ 757.649200][T17443] ? __pfx___sys_sendto+0x10/0x10 [ 757.649228][T17443] ? __mutex_unlock_slowpath+0x731/0x900 [ 757.649296][T17443] ? __pfx_ksys_write+0x10/0x10 [ 757.649338][T17443] __x64_sys_sendto+0xde/0x100 [ 757.649369][T17443] do_syscall_64+0x166/0x520 [ 757.649399][T17443] ? trace_irq_disable+0x3b/0x140 [ 757.649422][T17443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.649447][T17443] ? clear_bhb_loop+0x70/0xc0 [ 757.649475][T17443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.649498][T17443] RIP: 0033:0x7f375bf9e159 [ 757.649520][T17443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.649541][T17443] RSP: 002b:00007f375cdfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 757.649566][T17443] RAX: ffffffffffffffda RBX: 00007f375c225fa0 RCX: 00007f375bf9e159 [ 757.649584][T17443] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 757.649599][T17443] RBP: 00007f375cdfa090 R08: 0000200000000140 R09: 000000000000001c [ 757.649616][T17443] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 757.649631][T17443] R13: 00007f375c226038 R14: 00007f375c225fa0 R15: 00007f375c34fa48 [ 757.649668][T17443] [ 757.794479][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 757.806828][ T1226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 757.932436][ T44] usb 1-1: device descriptor read/64, error -71 [ 758.046834][ T44] usb usb1-port1: attempt power cycle [ 758.048822][ T1226] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 758.048865][ T1226] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 758.082504][ T1226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 758.082564][ T1226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 758.082595][ T1226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.136042][ T1226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 758.136344][ T1226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 758.136375][ T1226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.141134][ T1226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 758.141189][ T1226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 758.141218][ T1226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.198238][ T1226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 758.198293][ T1226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 758.198321][ T1226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.229221][ T1226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 758.229277][ T1226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 758.229305][ T1226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.263138][ T1226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 758.263205][ T1226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 758.263234][ T1226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.265652][ T1226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 758.265723][ T1226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 758.265753][ T1226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.270469][ T1226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 758.270524][ T1226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 758.270553][ T1226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.361073][ T1226] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 758.361105][ T1226] usb 3-1: Product: syz [ 758.361122][ T1226] usb 3-1: Manufacturer: syz [ 758.361139][ T1226] usb 3-1: SerialNumber: syz [ 758.387327][ T1226] usb 3-1: config 0 descriptor?? [ 758.414217][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 758.419437][ T1226] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 758.435878][ T44] usb 1-1: device descriptor read/8, error -71 [ 758.608276][T17439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.616670][T17439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.672922][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 758.694016][ T44] usb 1-1: device descriptor read/8, error -71 [ 758.709358][ T9468] usb 3-1: USB disconnect, device number 5 [ 758.709910][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 758.767276][ T9468] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 758.804648][ T44] usb usb1-port1: unable to enumerate USB device [ 759.614194][T17483] syzkaller0: entered promiscuous mode [ 759.614221][T17483] syzkaller0: entered allmulticast mode [ 760.155721][ T9472] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 760.301634][ T9472] usb 4-1: Using ep0 maxpacket: 32 [ 760.302408][ T9472] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 760.305197][ T9472] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 760.305225][ T9472] usb 4-1: config 0 has no interface number 0 [ 760.305271][ T9472] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 760.310199][ T9472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.310231][ T9472] usb 4-1: Product: syz [ 760.310248][ T9472] usb 4-1: Manufacturer: syz [ 760.310265][ T9472] usb 4-1: SerialNumber: syz [ 760.380809][ T9472] usb 4-1: config 0 descriptor?? [ 760.386986][T17497] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 760.458189][T17511] Cannot find del_set index 1 as target [ 760.605614][T17497] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 760.673165][T17520] FAULT_INJECTION: forcing a failure. [ 760.673165][T17520] name failslab, interval 1, probability 0, space 0, times 0 [ 760.673533][T17520] CPU: 1 UID: 0 PID: 17520 Comm: syz.2.3709 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.673585][T17520] Tainted: [L]=SOFTLOCKUP [ 760.673596][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.673610][T17520] Call Trace: [ 760.673620][T17520] [ 760.673630][T17520] dump_stack_lvl+0xe8/0x150 [ 760.673674][T17520] should_fail_ex+0x410/0x560 [ 760.673699][T17520] should_failslab+0xa8/0x100 [ 760.673722][T17520] __kmalloc_noprof+0xfe/0x720 [ 760.673761][T17520] ? skcipher_next_slow+0xee/0x230 [ 760.673914][T17520] ? skcipher_next_slow+0xee/0x230 [ 760.673952][T17520] skcipher_next_slow+0xee/0x230 [ 760.673986][T17520] sm4_avx_ctr_crypt+0x117/0x490 [ 760.674029][T17520] ? __sm4_crypt_blk16+0x6f0/0x6f0 [ 760.674078][T17520] ? __pfx_sm4_avx_ctr_crypt+0x10/0x10 [ 760.674123][T17520] ? __pfx_crypto_ccm_auth+0x10/0x10 [ 760.674204][T17520] ? crypto_ccm_init_crypt+0x52b/0x7b0 [ 760.674261][T17520] crypto_ccm_encrypt+0x346/0x500 [ 760.674299][T17520] bpf_exec_tx_verdict+0x12b0/0x2680 [ 760.674419][T17520] tls_sw_sendmsg+0x1dd0/0x2b50 [ 760.674493][T17520] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 760.674539][T17520] ? sock_rps_record_flow+0x19/0x350 [ 760.674568][T17520] ? inet_send_prepare+0x5b/0x260 [ 760.674595][T17520] ? inet6_sendmsg+0x101/0x120 [ 760.674618][T17520] ? __pfx_inet6_sendmsg+0x10/0x10 [ 760.674641][T17520] sock_sendmsg_nosec+0x90/0x180 [ 760.674661][T17520] sock_write_iter+0x2de/0x3e0 [ 760.674679][T17520] ? __pfx_sock_write_iter+0x10/0x10 [ 760.674734][T17520] do_iter_readv_writev+0x612/0x8c0 [ 760.674761][T17520] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 760.674793][T17520] ? bpf_lsm_file_permission+0x9/0x20 [ 760.674830][T17520] ? security_file_permission+0x75/0x260 [ 760.674882][T17520] ? rw_verify_area+0x203/0x4c0 [ 760.674920][T17520] vfs_writev+0x343/0x990 [ 760.674958][T17520] ? __pfx_vfs_writev+0x10/0x10 [ 760.674989][T17520] ? __fget_files+0x2a/0x420 [ 760.675042][T17520] ? __fget_files+0x3a2/0x420 [ 760.675072][T17520] ? __fget_files+0x2a/0x420 [ 760.675116][T17520] do_writev+0x154/0x2e0 [ 760.675147][T17520] ? __pfx_do_writev+0x10/0x10 [ 760.675197][T17520] do_syscall_64+0x166/0x520 [ 760.675227][T17520] ? trace_irq_disable+0x3b/0x140 [ 760.675249][T17520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.675283][T17520] ? clear_bhb_loop+0x70/0xc0 [ 760.675303][T17520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.675320][T17520] RIP: 0033:0x7f4d09b9e159 [ 760.675356][T17520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.675376][T17520] RSP: 002b:00007f4d0a9a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 760.675400][T17520] RAX: ffffffffffffffda RBX: 00007f4d09e25fa0 RCX: 00007f4d09b9e159 [ 760.675416][T17520] RDX: 0000000000000001 RSI: 00002000000021c0 RDI: 0000000000000003 [ 760.675435][T17520] RBP: 00007f4d0a9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 760.675445][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.675455][T17520] R13: 00007f4d09e26038 R14: 00007f4d09e25fa0 R15: 00007f4d09f4fa48 [ 760.675481][T17520] [ 760.692996][ T44] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 760.876455][ T44] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 760.941348][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 760.998042][ T44] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 760.998147][ T44] usb 2-1: Product: syz [ 760.998192][ T44] usb 2-1: Manufacturer: syz [ 760.998241][ T44] usb 2-1: SerialNumber: syz [ 761.067652][ T44] usb 2-1: config 0 descriptor?? [ 762.021758][T17541] sock: sock_timestamping_bind_phc: sock not bind to device [ 762.060825][T17539] netlink: 'syz.0.3713': attribute type 13 has an invalid length. [ 763.400569][ T9393] usb 2-1: USB disconnect, device number 117 [ 763.971212][ T9472] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 763.971250][ T9472] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 763.972527][ T9472] asix 4-1:0.188: probe with driver asix failed with error -71 [ 763.997617][ T9472] usb 4-1: USB disconnect, device number 124 [ 764.521618][ T9393] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 764.673163][ T9393] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 764.673877][ T9393] usb 2-1: config 0 has no interfaces? [ 764.673914][ T9393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.677674][ T9393] usb 2-1: config 0 descriptor?? [ 764.723293][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 765.332880][T17583] x_tables: duplicate entry at hook 3 [ 765.538070][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 765.538093][ T30] audit: type=1326 audit(1790394748.601:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.538580][ T30] audit: type=1326 audit(1790394748.601:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.623270][ T30] audit: type=1326 audit(1790394748.681:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.623317][ T30] audit: type=1326 audit(1790394748.681:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.623350][ T30] audit: type=1326 audit(1790394748.681:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.624128][ T30] audit: type=1326 audit(1790394748.691:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.624410][ T30] audit: type=1326 audit(1790394748.691:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.624445][ T30] audit: type=1326 audit(1790394748.691:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.639816][ T30] audit: type=1326 audit(1790394748.701:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 765.643180][ T30] audit: type=1326 audit(1790394748.701:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebd19e159 code=0x7ffc0000 [ 766.092173][ T9393] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 766.245301][ T9393] usb 4-1: Using ep0 maxpacket: 16 [ 766.246462][ T9393] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 766.250489][ T9393] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 766.287086][ T9393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.287115][ T9393] usb 4-1: Product: syz [ 766.287133][ T9393] usb 4-1: Manufacturer: syz [ 766.287144][ T9393] usb 4-1: SerialNumber: syz [ 766.320124][ T9393] usb 4-1: config 0 descriptor?? [ 766.341108][ T9393] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 766.369623][ T9393] usb 4-1: Detected FT232R [ 766.440788][T17593] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3729'. [ 766.549222][T17587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.551067][T17587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.580968][T17587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3727'. [ 766.862662][ T9393] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 766.863165][ T9393] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 766.870983][ T9393] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 766.900998][ T9393] usb 4-1: USB disconnect, device number 125 [ 766.917541][ T9393] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 766.927773][ T9393] ftdi_sio 4-1:0.0: device disconnected [ 767.201596][ T44] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 767.364961][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 767.367566][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 767.367621][ T44] usb 5-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=9c.c9 [ 767.368882][ T44] usb 5-1: config index 0 descriptor too short (expected 2466, got 18) [ 767.368902][ T44] usb 5-1: config 40 has too many interfaces: 226, using maximum allowed: 32 [ 767.368918][ T44] usb 5-1: config 40 has an invalid descriptor of length 18, skipping remainder of the config [ 767.368932][ T44] usb 5-1: config 40 has 0 interfaces, different from the descriptor's value: 226 [ 767.371042][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.371062][ T44] usb 5-1: Product: syz [ 767.371074][ T44] usb 5-1: Manufacturer: syz [ 767.371085][ T44] usb 5-1: SerialNumber: syz [ 767.468407][ T9393] usb 2-1: USB disconnect, device number 118 [ 768.279080][ T44] usb 5-1: USB disconnect, device number 32 [ 768.425934][T17615] pimreg: tun_chr_ioctl cmd 2147767506 [ 768.841720][ T5672] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 768.844631][T17625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 768.916953][T17627] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.917609][T17627] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.922108][T17627] bridge0: entered allmulticast mode [ 769.044222][ T5672] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 769.047203][ T5672] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 769.049977][ T5672] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 769.050017][ T5672] usb 4-1: Product: syz [ 769.050035][ T5672] usb 4-1: Manufacturer: syz [ 769.050053][ T5672] usb 4-1: SerialNumber: syz [ 769.111154][ T5672] usb 4-1: config 0 descriptor?? [ 769.337999][T17618] Cannot find del_set index 1 as target [ 769.391679][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 769.411724][ T9393] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 769.464169][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.467931][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.468432][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.468631][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.468854][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.469134][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.469325][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.469701][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.470289][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.470917][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294901760 (4294901760 ns) > initial count (541982730 ns). Using initial count to start timer. [ 769.573389][ T44] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 769.573915][ T9393] usb 2-1: Using ep0 maxpacket: 32 [ 769.590740][ T9393] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 769.617940][ T44] usb 3-1: config 0 has no interfaces? [ 769.618072][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.637494][ T9393] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 769.637607][ T9393] usb 2-1: config 0 has no interface number 0 [ 769.637738][ T9393] usb 2-1: config 0 interface 12 has no altsetting 0 [ 769.697331][ T44] usb 3-1: config 0 descriptor?? [ 769.697838][ T9393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.697930][ T9393] usb 2-1: Product: syz [ 769.697947][ T9393] usb 2-1: Manufacturer: syz [ 769.697963][ T9393] usb 2-1: SerialNumber: syz [ 769.769239][ T9393] usb 2-1: config 0 descriptor?? [ 770.049941][T17646] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3748'. [ 770.160918][T17648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3749'. [ 770.297246][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3743'. [ 770.297286][T17653] bond0: option arp_validate: invalid value (18890) [ 771.198021][ T9393] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 771.198187][ T9393] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 771.198250][ T9393] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 771.198335][ T9393] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 771.273473][ T9393] usb 2-1: USB disconnect, device number 119 [ 771.312208][ T5672] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 771.471601][ T5672] usb 1-1: Using ep0 maxpacket: 32 [ 771.472528][ T5672] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 771.477698][ T5672] usb 1-1: string descriptor 0 read error: -22 [ 771.477843][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.523627][ T9393] usb 4-1: USB disconnect, device number 126 [ 771.545950][ T5672] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 771.812957][ T5672] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 771.865858][ T5672] usb 1-1: USB disconnect, device number 15 [ 772.187350][ T5672] usb 3-1: USB disconnect, device number 6 [ 772.358247][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 772.358270][ T30] audit: type=1326 audit(1790394755.421:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.361747][ T30] audit: type=1326 audit(1790394755.421:7468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.410576][ T30] audit: type=1326 audit(1790394755.471:7469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.410730][ T30] audit: type=1326 audit(1790394755.471:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.410852][ T30] audit: type=1326 audit(1790394755.471:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.427041][ T30] audit: type=1326 audit(1790394755.491:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.427242][ T30] audit: type=1326 audit(1790394755.491:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.427344][ T30] audit: type=1326 audit(1790394755.491:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.435248][ T30] audit: type=1326 audit(1790394755.501:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.435390][ T30] audit: type=1326 audit(1790394755.501:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375bf9e159 code=0x7ffc0000 [ 772.639558][T17679] netlink: 'syz.2.3760': attribute type 4 has an invalid length. [ 772.874287][ T9468] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 773.024982][ T9468] usb 2-1: Using ep0 maxpacket: 16 [ 773.038898][ T9468] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 773.044138][ T9468] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 773.082636][ T9468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.082674][ T9468] usb 2-1: Product: syz [ 773.082696][ T9468] usb 2-1: Manufacturer: syz [ 773.082717][ T9468] usb 2-1: SerialNumber: syz [ 773.114593][ T9468] usb 2-1: config 0 descriptor?? [ 773.129817][ T9468] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 773.140323][ T9468] usb 2-1: Detected FT232R [ 773.174127][T17687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3763'. [ 773.229675][T17687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3763'. [ 773.361711][ T9468] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 773.387335][T17677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.390322][T17677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.440644][T17677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3759'. [ 773.641820][T17693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3766'. [ 773.829049][ T9468] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 773.875538][ T9468] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 773.964690][ T9468] usb 2-1: USB disconnect, device number 120 [ 774.040134][ T9468] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 774.040732][ T9468] ftdi_sio 2-1:0.0: device disconnected [ 774.109483][T17709] input: syz0 as /devices/virtual/input/input121 [ 774.843474][ T9472] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 774.991762][ T9472] usb 1-1: Using ep0 maxpacket: 32 [ 774.992635][ T9472] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 774.999376][ T9472] usb 1-1: string descriptor 0 read error: -22 [ 774.999527][ T9472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.054718][ T9472] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 775.175500][T14021] udevd[14021]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.181144][ T9472] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 775.248613][ T9472] usb 1-1: USB disconnect, device number 16 [ 775.481783][ T5672] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 775.655913][ T5672] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 775.660493][ T5672] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.660557][ T5672] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.660600][ T5672] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 775.660623][ T5672] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.720273][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.720305][ T5672] usb 3-1: Product: syz [ 775.720321][ T5672] usb 3-1: Manufacturer: syz [ 775.720338][ T5672] usb 3-1: SerialNumber: syz [ 775.776003][ T5672] cdc_mbim 3-1:1.0: skipping garbage [ 775.899631][T17752] IPv6: addrconf: prefix option has invalid lifetime [ 776.115053][T17754] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3788'. [ 776.365568][T17759] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 776.367268][T17759] bond1 (unregistering): Released all slaves [ 776.445246][ T5672] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 776.445318][ T5672] cdc_mbim 3-1:1.0: bind() failure [ 776.467899][ T5672] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 776.467949][ T5672] cdc_ncm 3-1:1.1: bind() failure [ 776.539001][ T9393] usb 3-1: USB disconnect, device number 7 [ 777.221778][ T9393] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 777.301648][ T9472] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 777.381560][ T9393] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 777.385325][ T9393] usb 5-1: config index 0 descriptor too short (expected 21576, got 32) [ 777.385347][ T9393] usb 5-1: config 41 has too many interfaces: 138, using maximum allowed: 32 [ 777.385363][ T9393] usb 5-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 777.385378][ T9393] usb 5-1: config 41 has 0 interfaces, different from the descriptor's value: 138 [ 777.385414][ T9393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.471751][ T9472] usb 1-1: Using ep0 maxpacket: 16 [ 777.474445][ T9472] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 777.475638][ T9472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.475673][ T9472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.475699][ T9472] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 777.475744][ T9472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.479058][ T9472] usb 1-1: config 0 descriptor?? [ 777.821208][T17776] netlink: 'syz.4.3796': attribute type 12 has an invalid length. [ 777.821265][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3796'. [ 777.996331][ T9393] usb 5-1: string descriptor 0 read error: -71 [ 777.999419][ T9393] usb 5-1: USB disconnect, device number 33 [ 778.329892][ T9472] hid_parser_main: 64 callbacks suppressed [ 778.329913][ T9472] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 778.329935][ T9472] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 778.329965][ T9472] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 778.329985][ T9472] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 778.330005][ T9472] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 778.402405][ T9472] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input123 [ 778.431948][ T9472] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 778.512159][ T9393] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 778.632040][ T9468] usb 1-1: USB disconnect, device number 17 [ 778.668077][ T9393] usb 2-1: unable to get BOS descriptor or descriptor too short [ 778.668132][ T9393] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 778.685595][ T9393] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.685691][ T9393] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 778.685833][ T9393] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 778.685946][ T9393] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 778.686050][ T9393] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 778.686163][ T9393] usb 2-1: config 1 interface 1 has no altsetting 0 [ 778.740493][ T9393] usb 2-1: string descriptor 0 read error: -22 [ 778.740964][ T9393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.766751][ T9472] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 778.787552][T17812] fido_id[17812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 778.933755][ T9472] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 778.956431][ T9472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.956465][ T9472] usb 3-1: Product: syz [ 778.956482][ T9472] usb 3-1: Manufacturer: syz [ 778.956503][ T9472] usb 3-1: SerialNumber: syz [ 779.272897][ T5782] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 779.308448][T17822] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3807'. [ 779.375342][ T9472] rtl8150 3-1:1.0: couldn't reset the device [ 779.375667][ T9472] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 779.397845][ T9472] usb 3-1: USB disconnect, device number 8 [ 779.432340][ T5782] usb 5-1: Using ep0 maxpacket: 32 [ 779.441063][ T5782] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 779.474983][ T5782] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.494778][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.494808][ T5782] usb 5-1: Product: syz [ 779.494824][ T5782] usb 5-1: Manufacturer: syz [ 779.494841][ T5782] usb 5-1: SerialNumber: syz [ 779.500648][ T5782] usb 5-1: config 0 descriptor?? [ 779.810467][T17818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.937542][T17810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.937854][T17810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.428757][T17844] syzkaller0: entered promiscuous mode [ 780.428786][T17844] syzkaller0: entered allmulticast mode [ 780.457088][T17844] tipc: Started in network mode [ 780.457114][T17844] tipc: Node identity be13fda1b156, cluster identity 4711 [ 780.457372][T17844] tipc: Enabled bearer , priority 0 [ 780.472286][ T9393] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 780.513291][T17839] could not allocate digest TFM handle cbcmac-aes-neon [ 780.558255][T17843] tipc: Resetting bearer [ 780.623394][ T9393] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.625804][ T9393] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 780.625838][ T9393] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.625853][ T9393] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 780.625868][ T9393] usb 4-1: config 1 has no interface number 0 [ 780.625908][ T9393] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.629556][T17843] tipc: Disabling bearer [ 780.643569][ T9393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.643650][ T9393] usb 4-1: Product: syz [ 780.643696][ T9393] usb 4-1: Manufacturer: syz [ 780.643734][ T9393] usb 4-1: SerialNumber: syz [ 780.736022][ T9393] cdc_wdm 4-1:1.128: skipping garbage [ 780.736046][ T9393] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 781.050209][T17849] syzkaller0: entered promiscuous mode [ 781.050238][T17849] syzkaller0: entered allmulticast mode [ 781.341287][ T9393] usb 2-1: USB disconnect, device number 121 [ 782.185033][ T9472] usb 5-1: USB disconnect, device number 34 [ 782.872520][ T5782] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 783.042686][ T5782] usb 5-1: Using ep0 maxpacket: 16 [ 783.053481][ T5782] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 783.055149][ T5782] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 783.055187][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 783.064496][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.064530][ T5782] usb 5-1: Product: syz [ 783.064545][ T5782] usb 5-1: Manufacturer: syz [ 783.064562][ T5782] usb 5-1: SerialNumber: syz [ 783.091377][ T5782] usb 5-1: config 0 descriptor?? [ 783.161974][ T5782] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 783.162003][ T5782] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 783.189707][ T9472] usb 4-1: USB disconnect, device number 127 [ 783.194331][ T1226] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 783.400931][ T1226] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 783.444853][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.444887][ T1226] usb 2-1: Product: syz [ 783.444934][ T1226] usb 2-1: Manufacturer: syz [ 783.444951][ T1226] usb 2-1: SerialNumber: syz [ 783.520641][T17871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.530823][T17871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.974761][ T5782] em28xx 5-1:0.0: chip ID is em2710 [ 784.113317][ T1226] rtl8150 2-1:1.0: couldn't reset the device [ 784.113843][ T1226] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 784.160393][ T1226] usb 2-1: USB disconnect, device number 122 [ 785.040374][ T5782] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 785.042011][ T5782] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 785.042035][ T5782] em28xx 5-1:0.0: No AC97 audio processor [ 785.187130][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 786.051709][ T5782] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 786.239711][ T5782] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 786.251698][ T5782] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.267576][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 786.267606][ T5782] usb 2-1: Product: syz [ 786.267623][ T5782] usb 2-1: Manufacturer: syz [ 786.267640][ T5782] usb 2-1: SerialNumber: syz [ 786.840881][ T5782] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 786.868779][ T5782] usb 2-1: USB disconnect, device number 123 [ 787.158496][ T5782] usblp0: removed [ 787.938918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 787.957144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 787.977857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 794.180309][ T5782] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 794.375048][ T5782] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 794.376288][ T5782] usb 2-1: config index 0 descriptor too short (expected 21576, got 32) [ 794.376316][ T5782] usb 2-1: config 41 has too many interfaces: 138, using maximum allowed: 32 [ 794.376351][ T5782] usb 2-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 794.376373][ T5782] usb 2-1: config 41 has 0 interfaces, different from the descriptor's value: 138 [ 794.376419][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.785986][T17926] netlink: 'syz.1.3837': attribute type 12 has an invalid length. [ 794.786013][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'. [ 795.519717][T17887] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3822'. [ 795.555339][ T5782] usb 2-1: string descriptor 0 read error: -71 [ 795.561381][ T5782] usb 2-1: USB disconnect, device number 124 [ 795.682615][ T9472] usb 5-1: USB disconnect, device number 35 [ 795.685051][ T9472] em28xx 5-1:0.0: Disconnecting em28xx [ 796.067185][ T9472] em28xx: Freeing device [ 796.525479][T17936] Cannot find del_set index 1 as target [ 796.574450][ T9472] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 796.735675][ T9472] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 796.741274][ T9472] usb 5-1: config 0 has no interfaces? [ 796.741317][ T9472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.794101][ T5782] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 796.800256][ T9472] usb 5-1: config 0 descriptor?? [ 796.957253][ T5782] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 796.983446][ T5782] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 797.050377][ T5782] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 797.050410][ T5782] usb 1-1: Product: syz [ 797.050427][ T5782] usb 1-1: Manufacturer: syz [ 797.050444][ T5782] usb 1-1: SerialNumber: syz [ 797.120841][ T5782] usb 1-1: config 0 descriptor?? [ 797.155182][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 797.160235][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 797.186495][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 797.203837][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 797.216418][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 797.391090][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3839'. [ 797.391141][T17935] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 799.472535][ T5615] Bluetooth: hci1: command tx timeout [ 801.742382][T14324] Bluetooth: hci1: command tx timeout [ 801.742430][T14324] Bluetooth: hci0: command 0x0406 tx timeout [ 803.101492][ C1] sched: DL replenish lagged too much [ 805.527486][ T5615] Bluetooth: hci1: command tx timeout [ 807.596152][ T5615] Bluetooth: hci1: command tx timeout [ 809.593903][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.658286][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.694498][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.702705][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 928.020075][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 931.948540][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.956604][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 956.582096][ T31] INFO: task syz.1.3845:17948 blocked for more than 143 seconds. [ 956.582132][ T31] Tainted: G L syzkaller #0 [ 956.582146][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.582158][ T31] task:syz.1.3845 state:D stack:26456 pid:17948 tgid:17946 ppid:15144 task_flags:0x400140 flags:0x00080002 [ 956.582230][ T31] Call Trace: [ 956.582247][ T31] [ 956.582262][ T31] __schedule+0x17db/0x58f0 [ 956.582368][ T31] ? __skb_flow_dissect+0x652a/0x6d50 [ 956.582528][ T31] ? __pfx___schedule+0x10/0x10 [ 956.582566][ T31] ? schedule+0x90/0x2b0 [ 956.582597][ T31] schedule+0x164/0x2b0 [ 956.582628][ T31] schedule_preempt_disabled+0x13/0x30 [ 956.582656][ T31] __mutex_lock+0x7c1/0x1550 [ 956.582693][ T31] ? __mutex_lock+0x5d4/0x1550 [ 956.582729][ T31] ? nfnetlink_rcv_msg+0xa69/0x12b0 [ 956.582869][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 956.582913][ T31] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 956.582953][ T31] nfnetlink_rcv_msg+0xa69/0x12b0 [ 956.582986][ T31] ? unwind_get_return_address+0x4d/0x90 [ 956.583055][ T31] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 956.583110][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 956.583196][ T31] netlink_rcv_skb+0x226/0x4a0 [ 956.583246][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 956.583283][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 956.583332][ T31] ? bpf_lsm_capable+0x9/0x20 [ 956.583369][ T31] ? security_capable+0x7e/0x2c0 [ 956.583451][ T31] nfnetlink_rcv+0x2b9/0x28c0 [ 956.583489][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 956.583529][ T31] ? __local_bh_enable_ip+0xd6/0x140 [ 956.583568][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 956.583596][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 956.583630][ T31] ? __local_bh_enable_ip+0xd6/0x140 [ 956.583659][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 956.583693][ T31] ? __dev_queue_xmit+0x1edc/0x3820 [ 956.583726][ T31] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 956.583758][ T31] ? do_syscall_64+0x166/0x520 [ 956.583801][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 956.583837][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 956.583877][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 956.583923][ T31] ? ref_tracker_free+0x689/0x830 [ 956.583973][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 956.584002][ T31] ? __asan_memcpy+0x40/0x70 [ 956.584043][ T31] ? __skb_clone+0x5c/0x6c0 [ 956.584082][ T31] ? __skb_clone+0x449/0x6c0 [ 956.584122][ T31] ? skb_clone+0x246/0x3a0 [ 956.584159][ T31] ? __netlink_deliver_tap+0x811/0x860 [ 956.584182][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 956.584213][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 956.584235][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 956.584264][ T31] netlink_unicast+0x7bd/0x940 [ 956.584307][ T31] netlink_sendmsg+0x813/0xb40 [ 956.584342][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.584374][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 956.584418][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.584440][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 956.584470][ T31] ____sys_sendmsg+0x54e/0x850 [ 956.584510][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.584554][ T31] ? import_iovec+0x73/0xa0 [ 956.584609][ T31] ___sys_sendmsg+0x2a5/0x360 [ 956.584640][ T31] ? __lock_acquire+0x747/0x2de0 [ 956.584682][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.584755][ T31] ? __fget_files+0x2a/0x420 [ 956.584800][ T31] ? __fget_files+0x3a2/0x420 [ 956.584844][ T31] __sys_sendmmsg+0x273/0x4d0 [ 956.584884][ T31] ? __pfx___sys_sendmmsg+0x10/0x10 [ 956.584915][ T31] ? do_futex+0x3e7/0x4e0 [ 956.584967][ T31] ? lock_acquire+0x115/0x350 [ 956.585012][ T31] ? rcu_is_watching+0x16/0xb0 [ 956.585064][ T31] __x64_sys_sendmmsg+0xa0/0xc0 [ 956.585101][ T31] do_syscall_64+0x166/0x520 [ 956.585132][ T31] ? trace_irq_disable+0x3b/0x140 [ 956.585167][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.585211][ T31] ? clear_bhb_loop+0x70/0xc0 [ 956.585241][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.585265][ T31] RIP: 0033:0x7f375bf9e159 [ 956.585288][ T31] RSP: 002b:00007f375cdd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 956.585315][ T31] RAX: ffffffffffffffda RBX: 00007f375c226090 RCX: 00007f375bf9e159 [ 956.585334][ T31] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 956.585351][ T31] RBP: 00007f375c03506b R08: 0000000000000000 R09: 0000000000000000 [ 956.585366][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.585389][ T31] R13: 00007f375c226128 R14: 00007f375c226090 R15: 00007f375c34fa48 [ 956.585426][ T31] [ 956.585445][ T31] [ 956.585445][ T31] Showing all locks held in the system: [ 956.585456][ T31] locks held by kthreadd/2: 2, last CPU#1: [ 956.585571][ T31] #0: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 956.585674][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 956.585738][ T31] locks held by kworker/0:1/10: 4, on CPU#0: [ 956.585755][ T31] #0: ffff888039a9f940 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.585865][ T31] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.585948][ T31] #2: ffff888051ee9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 956.586099][ T31] #3: ffff88802f2aa0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 956.586172][ T31] locks held by kworker/u8:0/12: 4, last CPU#0: [ 956.586189][ T31] #0: ffff88802b94c940 ((wq_completion)wg-kex-wg1#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.586259][ T31] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.586325][ T31] #2: ffff88805fa75440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 956.586403][ T31] #3: ffff88807cdd2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 956.586475][ T31] locks held by kworker/u8:1/13: 3, last CPU#1: [ 956.586492][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.586556][ T31] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.586622][ T31] #2: ffff88802b223258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 956.586792][ T31] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 956.586809][ T31] #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 956.586880][ T31] locks held by kworker/1:0/25: 3, last CPU#1: [ 956.586897][ T31] #0: ffff8880573de940 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.586968][ T31] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.587050][ T31] #2: ffff888031f35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 956.587122][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 956.587139][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 956.587214][ T31] locks held by kworker/u8:2/38: 4, last CPU#1: [ 956.587231][ T31] #0: ffff88807ec16940 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.587301][ T31] #1: ffffc90000ae7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.587366][ T31] #2: ffff888012281440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 956.587444][ T31] #3: ffff88807bec1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 956.587516][ T31] locks held by kworker/1:1/44: 4, on CPU#1: [ 956.587532][ T31] #0: ffff88807e595940 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.587602][ T31] #1: ffffc90000b47c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.587684][ T31] #2: ffff888055689440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 956.587755][ T31] #3: ffff888031b58d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 956.587827][ T31] locks held by kworker/u8:3/50: 4, last CPU#1: [ 956.587844][ T31] #0: ffff8880120ae940 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.587914][ T31] #1: ffffc90000bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.587979][ T31] #2: ffff888031f35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 956.588051][ T31] #3: ffff88807bec2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 956.588123][ T31] locks held by kworker/u8:4/59: 3, last CPU#0: [ 956.588140][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.588204][ T31] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.588267][ T31] #2: ffff888058820800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 956.588391][ T31] locks held by kworker/u8:5/60: 4, last CPU#0: [ 956.588408][ T31] #0: ffff888020f01140 ((wq_completion)wg-kex-wg1#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.588477][ T31] #1: ffffc9000202fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.588543][ T31] #2: ffff88807ea19440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 956.588613][ T31] #3: ffff88802f2a9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 956.588688][ T31] locks held by kworker/u8:6/144: 3, on CPU#0: [ 956.588705][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.588770][ T31] #1: ffffc90002effc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.588833][ T31] #2: ffff88802b8a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 956.588893][ T31] locks held by kworker/u8:7/1033: 3, last CPU#0: [ 956.588910][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.588975][ T31] #1: ffffc90005007c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.589039][ T31] #2: ffff888059ff0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 956.589097][ T31] locks held by kworker/u8:8/1144: 2, last CPU#0: [ 956.589115][ T31] #0: ffff88801fb34940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.589180][ T31] #1: ffffc900054d7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.589245][ T31] locks held by kworker/0:2/1226: 3, last CPU#0: [ 956.589262][ T31] #0: ffff888039aaad40 ((wq_completion)wg-kex-wg1#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.589333][ T31] #1: ffffc90005717c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.589426][ T31] #2: ffff88802f2a9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 956.589497][ T31] locks held by kworker/u8:9/1270: 4, last CPU#1: [ 956.589513][ T31] #0: ffff888053de5140 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.589582][ T31] #1: ffffc90005897c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 956.589647][ T31] #2: ffff88807d8d1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 956.589718][ T31] #3: ffff88807dbedc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 956.589807][ T31] locks held by udevd/4982: 2, last CPU#1: [ 956.589824][ T31] #0: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 956.589881][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 956.589942][ T31] locks held by dhcpcd/5276: 1, on CPU#0: [ 956.589958][ T31] #0: ffff888033c91d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 956.590040][ T31] locks held by dhcpcd/5277: 5, last CPU#0: [ 956.590057][ T31] #0: ffffffff8ee36730 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 956.590124][ T31] #1: ffff88807efcc378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 956.590191][ T31] #2: ffff8880791f1078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 956.590264][ T31] #3: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 956.590319][ T31] #4: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 956.590390][ T31] locks held by crond/5356: 1, last CPU#1: [ 956.590406][ T31] #0: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 956.590462][ T31] locks held by getty/5373: 2, on CPU#0: