last executing test programs: 15.202257156s ago: executing program 3 (id=5133): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) syz_ublk_setup_io_uring(0x29ae, &(0x7f0000000000)={0x0, 0xa470, 0x20, 0x2, 0xa8}, &(0x7f0000000080), 0x0, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(0x0, 0xfffffe01, 0x280000c, 0x10, r1, 0x8000000) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = epoll_create(0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x8, 0x0, r5, 0xffffffffffffffff, &(0x7f0000000180)={0x2000}, 0x3, 0x0, 0x1}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x5, 0x80000, r0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000069d000/0x3000)=nil, 0x3000}, 0x6}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000407000/0x1000)=nil, &(0x7f0000199000/0x800000)=nil, 0x1000, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003010104000000000000000002000e00240001801400018008000100e00000ef070002"], 0x38}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000300)='AQB12q=y\x017890123456789012345678901234567=\x00', 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f1080002"], 0x38}}, 0x20048800) 13.835672394s ago: executing program 3 (id=5135): socket$kcm(0x2d, 0x2, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e06, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) (async) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0) (async) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) (async) syz_emit_ethernet(0x3, &(0x7f0000000180)=ANY=[], 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa) r0 = gettid() (async) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x1, 0x1, 0xa, 0x9, r0}) (async) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (rerun: 64) io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcd}) 10.349256159s ago: executing program 3 (id=5139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x101e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x200000f, 0x4010, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x7045, &(0x7f0000000140)={0x0, 0x6b54, 0x10, 0x3, 0x14c}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r5, r6, &(0x7f0000000a00)=@IORING_OP_FUTEX_WAKE={0x34, 0x20, 0x0, 0x5a, 0x8, &(0x7f0000000940)=[{&(0x7f00000003c0)="1493d397ca8cdf7f8ccafb77df8e47a5249d07efea2000ab083cd2682fde6e166fea90dae94650364d91182b729f9196a6021477c829bc927bb1f3f082f156937aabe05d07e094fe54e991264865bfb5f22e9923d15e3a7fa2b8caeee76082b7968bbcb3c49650f24e28bc60c658b738135f14f2085a8f129a6a1f5f72cc9767102ecd3d", 0x84}, {&(0x7f0000000480)="aaaf16b13521df3c89913ddd9a5f", 0xe}, {&(0x7f00000004c0)="a42d3a2415beb8caa0b6b544ec9b18d5ab1a6769b2214ab5a49c0e7486b842d2cfa575bde167486f58d2da9a2e4014b35133f06ee75b54ff13df04056f8c4cce0f3f6919dcb5ba1e", 0x48}, {&(0x7f0000000540)="feb5fc96a0301ea814a0c178bea5f26f4f983d5de97ac2ec3ec537bbedf20472179584dd651b", 0x26}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="90e5884875252fc5b2ffd08db576ed3406ecd00eb0ff37a6962377bfeaa6660b8053260ad0f6b499f9b03653017b0923c0fd09227cf2e08120b5e55e3395d9eafc1982e60d7cc2e4027ae453e34de519b0d73c438a5b3bcaf144d0f77ecf7b3ab8c94f61ae811e1d3a04d965b07ee37f97f902e82a", 0x75}, {&(0x7f0000000700)="b6706e12ae9cc46e24ee48d8e7eef68e62ed99d8ef250ce285dce28a84569927370d161baed66adbdea79f72f5a80fac789b38711364b4a78efc67a1b1b4d6b092047bb47724c1002589231e1556898aa4c65fbd5f7c25f75829db8e9174d30aa6a838fab7e7f85ec3e4b81adcfd", 0x6e}, {&(0x7f0000000780)="6c0a724f2ea8fa07661e265c93c7825ee61a678ca7efdd68336dc4c8447da9c0185aad9d4cf3cae5e9b863e3a46543780432c1fb9dd241341accd4131f8b8374a663e1d9c75b212a6f4a4c0886f34b392acfdf67a13c81e166f07971142f3e6a9a77d29cf9cd94d8ef1df4fea2009f491e93c9537573b1caf8b051f08fae8e1bde640050117e76ac98d1726cbf79a07897254b72ba49c600833545", 0x9b}, {&(0x7f0000000840)="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", 0xfa}], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xffe0, 0x7}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x28, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x9}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880) 8.933585462s ago: executing program 2 (id=5141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}}, 0x24004881) 8.732916398s ago: executing program 3 (id=5143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x118}], 0x1}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={r5, 0x1, 0x10}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="08000800050006000000140000004589907864010102ffffffff32970000000000000000"], 0x24) 8.173810381s ago: executing program 2 (id=5144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079b0380000000000ae000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 7.757765742s ago: executing program 2 (id=5146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4840) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x1100, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) write(r2, &(0x7f0000000080), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000019100), 0x40000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x175) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000019140)) r7 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000240)={0x76, &(0x7f00000190c0)=ANY=[@ANYRES32=r2], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) 7.331828508s ago: executing program 1 (id=5148): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000070000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6.793836731s ago: executing program 4 (id=5149): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07daf57ebcfa3fd03477"], 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f0000003600)) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001640)=""/154, 0x9a}, 0x3}, {{0x0, 0x300, 0x0}, 0x3}, {{&(0x7f0000002cc0)=@l2tp, 0x80, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x0, 0x0) 6.537616826s ago: executing program 1 (id=5150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0xb8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_ACT={0x88, 0x1, [@m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x46}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) r5 = socket(0x1d, 0x6, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) lstat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0)) sendmsg$nl_xfrm(r3, 0x0, 0x40000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) unshare(0x2c020400) socket$unix(0x1, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000300)) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 6.502575752s ago: executing program 4 (id=5151): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 5.978134578s ago: executing program 4 (id=5153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000040000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000020000000000330000000200000000000000000000000000ffffac1414aa000000000001000000000000000000000000000020010000000000000000000000000000000004d26c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 5.707141501s ago: executing program 2 (id=5155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x8050) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0xa, 0x8, 0xa}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x28000600) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000010c0)=ANY=[], 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000d00)="1c0382e8d168cfb3e0282ef00f298de336fe581936d83a29beae07b4f989bb4aa7662e815fafa341b42a6387abdece22515ef873c5fefe5d159e19a636418eb11b8e91f157f8da10305a8aff0b9bf445ecfb1ab3468801aa545bfc775a113638f34600eb046841b35babb14e0c4b0c82a51bb07aa4e01ee7ba62a2616a256018948420e0902a9257425f1983169714abc2723f5dbaed77c24c331aee2fd206b14e388fbcf7bbbde174f5d4053a3f670c1cd5372660f8fa149d83a07d69e83ecb146d9abb6667982d02da1995a1fe9c9752c3195ef370b1cd99dd0b28759e374d48d9235cd6c093c158d468aef800da44e3111a60b322385461ac76f2af62b3b9ca10d2f9db492624abd75e3032beb67efd1ef13cf8fa5ddbc2944260a6472b7611f448be56cb2faedc7f8c472953221f0bba8ca726c1febddfefe238ec437749acbbd401541f9eabec18c8084326fd7373c56497a08718b5bbf8bdebecda3e478575c61ca9ef9c06e396f602d90eb6fe059a9665673fd2b9f6ef4b294eb13f5aa9f19b252c39420c2be9b16b76d18596a4d06ae5c5b93129b4368a072245357e7e2f5826a1f8677237f2a8e8e3d08145a31a284cca6aa0840df5a885e33a8b01a8d45af73a78bfadfd42b1350e220f9986c0089f130da449a6a4197d951298883c6e29a9cb2484d730ea42a34c3e78679d023f3ec726b031365815400e10ce5fb0162fb7458bbfc12c620292ea6b209ab220a00109a9dbefa433c98b1db80ada5d463133d915d16566c41d5bc4d526d928fa6d37583c1a147a5d671021e8c220a60eec4d6f450d806cdb35dd852be527057c7b0195d5f496acab5272afde761a77f5ad35ff6f3bf8dde9e9cd1479be7446dd8efdf4e3195bb5eb4af08c94595d65341cf5150b8187e35976f6081cd490b8a26560232b9658aa458fe8ac0582a12535c1c1de9fc961843f3596a2178b217a99e29eafa2a3bccd336902f91a08748ba4062cb40c1dfc30bf43b4d1efbc301c584effd758607a10a0a31c5a6e3aa31ea7a098caa664e7a9bf273015a9be5afb7ccce49643e7d10b4ad9727652f0c79f2cbe36fa840824270b5e5080751deb34e83c8fb03f9f5c44cde06b7b283635084cdb0769a2d7ddcabec96a89ba4f5d9d77a425a48ae26b4271ed92fafb236fb24b5644f7ebfe72e9e30b5f11fc2ca531c16fa06fa7996e2de2cee44039e4b038d775574abcf99f6d0adb8531655d74386832a52f5d4bfe8c1f4a8f143fefd0688e9be5c82492f6da41337443aeb46518f1db43b713c86076c69163398066804c8ca3b980c2d78370724ed20ea978f56689cc6248f755855a422a2271e15e109641b68b8e4ca98752c4364211af180d0f22096e6c87c513eb7ce99165114a6622b87e7b381a658b63c10b1aede005df73888d6551fccf191d34c64a764a283d8954a36ddcfeb51ec3b332bc42f79894e1c87989a19a09161acf90418a0c76c5c08fdf770870ed9c9ff602ee8d8ac1bdf510ecef150dec7d82e43c5f7c22428cccc7206f4929621356851539d17362c171f2891e6ba71d34cbfe231a6fdf5bddbc6079b42b2f69c6d12f75b84f60d396d0d8d97f0126ab9ed33796f83d3c40baba699c0bbb01c2b2c2a97b0e653a1917cbd6c5f421e2380c534152545c05cf5a73043f4b88c494353caca4178e1fa86bfdc78e398f7459832ec3e5fdb184c4f0eb13bfccd284ef336f440f3e9b3055a5ed253eaa6fa7a75e729db4c2d76a0d7d412c181f79ed0ea96c6273f1ae39a102088718a1a6cf720fd1f3aab81f6f812a1435496c051b5e545853ca6961016ca2d66bf252107fba82512db52cd64a6c2438e8f42d96be963ad55d836231473c931e0f8eb6cf69eafd3d43125d5cc82ee06596a9b79579f5953caa1451093b7c3e0898abb7b230fa6d5d2ff78b8cc23a02ee302983a273cc443f294ea38f8ccb90c5f9f029f4ca8cae93b19bf1e18695dce3abe04222d804765d9da11fb38d99dd315f8f41969e6c0524b03c750a88aacc63221bbde01f5521f05fa1635189ab001ce3a4aff22233c1170a90e45072cfe043731ed8f58914c78e0a4817630ef9fc591eb9ee291d827c53b9d4247e8b00be34890a07cf029d829fa511f8718bd0256f1d6fcf32424e856ffec5ad7214baee8fac4198647d53e3821fc5b8629865e7b4e19792635ba1b99682753c4ac01202e38cf7809eb9070d46876fc7dbef577c47425660b45bd282b7beefe9737bae5f4b9c8ac7d135f54ebf495dff3d62a7a168f2fcfbb3659313c903f48a9b31780692ab0588b5684fbd2090ec398325561cca67baca1eac89e614d06ad9b006528b1fa570f89ae2672ba4969f297ba2448beccf9af5500f55865a99fc1d41f61966a551cfd86af8b1c38a39e90ee86c491bbeed408665fe54201f13791143ac6668609598d0df5ce804f18dc3e04524099fb91df320ffa128e8fe24028654a3c8b366f62975f0ecd04526cec8395f97a3cc94fa7e2ce9070ff1c4f1fa6efd40e6432aaf69f894c7778b31131553cc1a80b7b51de6d10dbd0182a7681c773d268851fb73ae6a16528e11fda6c1116ca065ff2822376728461779abfb4a4731e96d99a95f61cf4ec3053ee42ab09d23157eb6e7643e31974445c64169027c6fbe8cbcd7b25f011712b9eb66946c558c07d44f7185fe150870eaa0ead6bcc383f04a8f04bf945089b4e65f4497329b20ec9a719aae5c406184dfa46eb7f3fcf2aa83a9219587306f45a592306fea0659be3422fe5008820964660ff281c476d0236f374ce770e3fa314393496eb7099e0e3d2c6150bf8c9a6b0a7cb58d7ea467da00ec4b9a6015f8031785869f44b513ee80fa12f537c0135df1f4f56243d3c1096306eeb0b75e4b3f29ff5066554bf7a9410327cf5f5c1ac7888f96c2f765c69cfbc42bd4f6dc5a22858f8cf0807f863623e26fb562d78899cfe1cbd1ca3f9c6d5e998933290769c5c9b61fbcf4bbd3010fdcb7192e94129d48753daad722b2dd030d6329fda2aeea28c8e507226415d5a6409e6f44c25cb8cb4f6edcd1b7169e0ab8dc69069ccf0f7e31285a9d98b2db6c91d15b2049ac5b369d1d3381a517ce4ce50d24752d7556d29feeccb7305e994beb9c1e913b9503586f9525fa8638d1c4c6ce04d9beea582287a0dfba479b27403a9e06b18e8f84185763b4476710f09a5dd1d149596f0297af1355b6f947ab66ecbce590b0244e8a711f83bd86ab2c54254be2cea2b8c5207c2ddf712c400a2521f32e361c5c9f604913ca7798f85e11a298bf9f3eb803cc7a1c59a23c89cf3bb4e21ef4f57d830b83b48e77d4224fe989d8992a52c458def5af930a29d73f39f393075f130f78b78da8", 0x959, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r6 = mmap$IORING_OFF_CQ_RING(0x0, 0xb5a6, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) r7 = mmap$IORING_OFF_SQES(0x0, 0x2, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, r7, &(0x7f0000000100)=@IORING_OP_EPOLL_WAIT={0x3b, 0x38, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x20000000}], 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x30, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@fallback=r5, 0xffffffffffffffff, 0x17, 0x8}, 0x20) 5.542292972s ago: executing program 0 (id=5156): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x46}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.346344609s ago: executing program 4 (id=5157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x8c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_ACT={0x5c, 0x1, [@m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x46}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.269932115s ago: executing program 0 (id=5158): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) mprotect(&(0x7f0000af8000/0x2000)=nil, 0x2000, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec773000) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x9ca86080, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1fd) open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) link(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x80800, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x40000008}) 5.091939584s ago: executing program 1 (id=5159): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000d2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7b000/0x4000)=nil, &(0x7f00001a5000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x7, 0x3b6}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000140)={0x2, 0x80000, r0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x41}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xe, 0x0, 0xfffffff4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r8, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000009c0)={0xd1, 0x2, 0x5d00000, 0x40, "992f445b918290812bea4c6cbb3431ab52d35040a40ef9b7dcfef2bf68664782bda7a1d8d94f9af6065a2361f58a8b910c4caf781624965bc6311158cd1f5c190605919910ec00b488d53cdbee7ca8447012da851d588a2758da32ef2756b0595f71b1aabf19680a7ca49516df5ab159a68fddbd1d5a1445f796dea11c69258dc8e2348c528d3efc31a8bcfb611fdf3943aac55c15434d5a90fea3f5f5c33620d9045b3a08a7bf913f6a8ddde0c74741ea4f6159d3721c18dd"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x35, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000001f76f740000000006605000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000000000ff5800000300000085100000ffffffff852000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000d30c00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018000000090000000000000003000000b7080000000000007b8af8ff00000000b70800000d0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000000000000025d537dc2481e2be85000000a5000000bf91001c6e5889b18f0000000000007c1b96d4b5ef32f8fa6f6256223800000000000000000000000000000000000000000000000000670b8c836bc621de7f9341d1245e9e447c8786d494c9cd833faefe80595f503d3bc5b9480ed7cf5a44105a53ea2358f7203a91ba7f0ac396189dbc52623a54865b656496257b9d94991dd8a06956b24afdd7991e93cf85aeaac8425785830c4fd23cf724f538b54d4daa65116eed4539a79d30612492c12b0a42830131444bd45115f1bd55aaa21451452d74f4197aece9321e3f2eeb6fd5ad0a30cb9e03a6f9945162aa3dd8dd39ce29ff6c6da167cef26ecc5b67a6471e352cceaec1b05a3d8493946b5051eacc45eaa466982ca34b9cb4b1221d9e3291ade051cc2626f7179634e9518b8be0d7b14ec92b8575b78f246ac6c0c4ea8d75109102d02b0962bb397109dd8e20022030600eff496715fce1247c0dab64f9c42dab0e89132a85e572ec4960883e60b226f8b74fa69c5926c1b483fa144e43d55c51de07616a8272d2fe88bc3bcc18932eec2603cdedee188e798e27543a1867659c1a54361637b5e36ee77deec0a2f07ec66591e99c1c58c36d7ede92c4a63f3d03b14f08b126bbf125d2f9"], &(0x7f00000005c0)='GPL\x00', 0xfffffffa, 0xd4, &(0x7f0000000600)=""/212, 0x0, 0x4e, '\x00', r6, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x8, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0x4, 0xa}, {0x2, 0x2, 0x10, 0x5}, {0x2, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xd, 0x1}, {0x0, 0x2, 0x7, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='6\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="ee60b85b30702b3d0017dc383b6cea583c07cdeb4b858cc30364e5692eb3c7aee8f5f6dcb0c1f7bfcecc3af9e67306cadfb83087e200951f3ea97e8149ce1aeaed728389e185653695ece09d692652f1b09cb6242b0a2651919927fba7bf9485440b4328ce", @ANYRES32=r9, @ANYBLOB, @ANYRES64=r7], 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0xff, 0x0, {{0x17, 0x4, 0x0, 0x25, 0x5c, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x11, 0x3, 0x6, [{@local, 0x7}, {@loopback, 0xffffffff}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xffff}]}, @ssrr={0x89, 0xf, 0x59, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x4e, 0x3, 0x8, [{@broadcast, 0xffffff00}]}]}}}}}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex=r10, r4, 0x23, 0x2018, 0x0, @value=r11, @void, @void, @void, r7}, 0x20) io_uring_enter(r2, 0x6145, 0x7725, 0x17, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(r12, 0x4b40, &(0x7f0000000100)=""/13) 4.672184178s ago: executing program 3 (id=5160): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="40235d0000005d2165c11233090a7596590411275042e09fa06d01ed23a333406a3b4e52ecc2df8103cf2b1d49f2b0258b74e21aa1878469eae38dcf83963bb13cc0c63985c65deb39e3d79613837eb2a1d2142bf45e4eb32378c5c4665e26bcc45344e1759809e8c0010467759c23d2f43ccf2f2d8a9da3"], &(0x7f0000000080)=ANY=[@ANYBLOB="000304bc7753118157fa9f775d"]}, &(0x7f0000001d40)={0x1c, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f00000018c0)={0xa1, 0x1, 0x400, "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"}, 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3, 0x4}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000a000110000000000000000000500000a44000000010a010400000000000000000a000004090001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x7fffffff}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x80000000, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000120001030000000000000000000000004e22ff0f00000000000000000000e000"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff00000000004000300"], 0x50}}, 0x0) syz_clone(0x648c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001ec0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x808) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) sendto$inet6(r9, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, 0x0, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) syz_usb_connect$midi(0x5, 0x77, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xee, 0x81, 0x0, 0x20, 0x2}, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="050f14000203100b0c100a0fa00000000000010cdd939c4bc24d4002f4a1d1d9861c3d7c33f464d4f6064e1e05f402ff2c2355945ac7430b79445fa676bd28c0acaaed0e98cfc9ddb128812e6b539a274945082e0c3f2e30055d48861047703ba0973b9e585e"]}) 4.509951187s ago: executing program 4 (id=5161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, 0xffffffffffffffff, 0x11}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x40, 0x7fff0000}]}) pause() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000009000000000000003a678403d05e6c3e412c4a017c"], 0x30, 0x180}], 0x1, 0x2000c000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="74ebdfa977f58304559b74e6", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="f7ffff73e056a6ffe49d0eee5d5428d905de62ffffff16ff"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r7, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381"], 0x460}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000408000000000000000000000000000000020000000000000100010000000000d4010500ac1414aa0000000000000000000000000000000033", @ANYRESOCT=r2, @ANYBLOB="14e1cef7c96d848ba0781f624f4ad8fa5d9a77555132989b0a2cc0bbece6ed15ed45149ee49b9e67b702020f80d2f58994ebd977405e8fa560da40aa3557da9634297d2594a662b62bafaba9004ea5eca2dbda106624430d230e91954abf29b244e0858f43211bcddab7bde7b6f456ab13eac2457fc88c7080f6ed6110eaa59278b570e51f13f9c1d98a9a2541147e27e1b833a9df8ff6dc1350a9d168a782c3717e01a23d18bbfc57620e14750e8efb364818e2e38c6435af52f03e94453a69356f8b59d3aa55f04882148b48359a08c00a8a30898104b265", @ANYRES64=r4], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}], 0x559, 0x80) r12 = dup3(r11, r2, 0x0) recvmmsg$unix(r12, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x4, 0xffffffffffffffff, 0x1}) 4.454120398s ago: executing program 2 (id=5162): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000fbff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0) syz_usb_connect$uac2(0x5, 0xeb, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0xf3, 0x50, 0x5, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa, 0x7, 0x4a, 0x32}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, [0xc, 0xa, 0x0, 0x1]}, @sample_rate={0x11, 0x24, 0xd, 0x6, 0x2, 0x2, [0x3, 0x0, 0x0, 0x2, 0x3]}, @extension_unit={0xa, 0x24, 0x9, 0x4, 0x8000, 0x0, "067265"}, @selector_unit={0x6, 0x24, 0xb, 0x0, 0x1, "bd"}, @sample_rate={0x13, 0x24, 0xd, 0x1, 0x2, 0x3, [0x3, 0x2, 0x3, 0x3, 0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xfe}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x7, 0x55, "99e3bae39ffa06"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0x4, ',', 'A'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0xe, 0x1, {0x8, 0x25, 0x1, 0x0, 0xc, 0x6, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0xda, 0x7a, "", "8a"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x15}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x90, 0xd8, 0x0, {0x8, 0x25, 0x1, 0x2, 0x33, 0x9, 0x6}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0x9, 0x4, 0x9, 0x40, 0x5}, 0x96, &(0x7f0000000600)={0x5, 0xf, 0x96, 0x4, [@generic={0x67, 0x10, 0x3, "649b5bf2c68891a9f3dde8ff7e20669880f997cf3940219eb73d0780dc4dae91b21198a4a07d62ebe3b85df991c177d9c38d3cd59edbf084a02e9139d7cd20063a5fe78b78e0165b84aa1d45e7e12523058713b293e69c1e5f5ce7d309d978d3a2a4090b"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xd7, 0x6, 0x5, 0xf00, 0xd, [0x3f00, 0xc0, 0xc0ff, 0xff0000, 0x1fe00cf, 0x0]}, @ptm_cap={0x3}]}, 0x1, [{0x2a, &(0x7f00000006c0)=@string={0x2a, 0x3, "a0dca21741d8bc3d744af9d4a32763c44464313bfb610a78342dcd2aab219928a19849caafebe979"}}]}) r2 = syz_open_dev$audion(0x0, 0x3, 0x1) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) write$binfmt_register(r2, &(0x7f0000001080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x56f, 0x3a, 'net/nfsfs\x00', 0x3a, '\xe5]!+!', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x46]}, 0x39) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000001040)='net/nfsfs\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r4, 0x9d7ff000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000001c0)=0x3, 0x4) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x37, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x46cb040427044be0, 0x4, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x81, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xf1, 0xca, 0x1, 0xff, 0x80}, 0x7f, &(0x7f00000000c0)={0x5, 0xf, 0x7f, 0x2, [@generic={0x66, 0x10, 0xf, "c446c2fb318cf1af7affe70c98fec240f42a007ff812372f9c9d3a079c0ca3469dfa28e60807884e31bcc74f23ca1a32696f0dfd372e2de9f88aeff29b9ed1602d2efcc13529c6512a0b97a7652fa8fbc9fb0b72b8e689984971a40051580d4b144e3d"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "1c889d2c7351b5e1855dc70823a4c2ea"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x404}}, {0xd7, &(0x7f0000000180)=@string={0xd7, 0x3, "0e1d8f14ca69b7eed097ff85e8995daf2b12316efdeb9590e99ed65a8e6a959687a1217f620813255b934cf4d2b3381dccdb1c8619ce7b28cda61b774032fd12b5ec6f1a66d98a6d871e7af21428bc1a2a84e373dad78ba5be4d69d8e8f53c8cd29a5956f52151b0a323fee3984295116d447bc62414b98154718578a5f540a75910e3fcf552050f80d2807610f83c6a354d677f3a36f350babb53b21fe6a08a4d6fdd746bf4af0f2ec1bba6c22f99c1ce6ae78cd981f4d39e95c41ff4339ce99cad605337ba0f3f51e1ca5d37cc5eeda14fb2ef59"}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "b7aa54ce519098143a4e417ea8e9442b1c61c1ef1d0d945b66e4e5f88391330f383ea67742c35836492bfb64343bf6471e6eb20d4fadab84da2861120a0a8069770646beea777521152695caff132882a075c759c1c1708ee4fac430aee86274cf68602fc3adb6edd2ad7d512a15e2dddeea56dd9858fbd764cb0e7ec9b66fdd64d2a14bdb89d476419a0eb9ce0baac31c57f3abd8f7f1e9a66e5a8c5c803cbf230542756b263a4e9ada7e77baacefac897b25269b1a176136e0af7bea696ff4b21811ece3e4c327f79ba0857e1a87247a846ff1bc21d135703234aee6ad81fc52447160f7914d614d9261c0574b"}}, {0x14, &(0x7f0000000380)=@string={0x14, 0x3, "8458c765e25debf20f7f55024d12574fe746"}}, {0x25, &(0x7f00000003c0)=@string={0x25, 0x3, "b199e9ac1162accae1836aeeca9fb047f2881ba3112a3423e91021dad4e37f31ff1862"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc07}}]}) 4.180298266s ago: executing program 0 (id=5163): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07daf57ebcfa3fd03477"], 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f0000003600)) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001640)=""/154, 0x9a}, 0x3}, {{0x0, 0x500, 0x0}, 0x3}, {{&(0x7f0000002cc0)=@l2tp, 0x80, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x0, 0x0) 3.53131887s ago: executing program 0 (id=5164): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_delrule={0x44, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x20, 0x20, 0x0, 0x8, 0x3, 0x0, 0x2}, [@FRA_DST={0x14, 0x7, @loopback}, @FRA_SRC={0x14, 0x2, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048015}, 0x20044084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, r2, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0xbb80) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r6, &(0x7f0000000080)=""/237, 0xed, 0x5) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00005db000/0xf000)=nil, &(0x7f0000429000/0x4000)=nil, 0x6, &(0x7f0000000000)=[{0xcdd, 0x5b1d, 0x10000}, {0x1000, 0x1, 0xff}, {0x4, 0x6, 0x100000001}, {0x0, 0xbd, 0x6}, {0x3ff, 0x0, 0x1}, {0x0, 0x9, 0x1}, {0x8, 0x1, 0x9}, {0xffffffff, 0x40}, {0xee94, 0x7, 0x6}], 0x9, 0xaa38, 0x20, 0x8, 0x20, 0x42}) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x400d01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(r6, &(0x7f00000002c0)='./file0\x00', 0x401) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c00018008000100000001001400000011000100000000000000000a000a00"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000240)={0x2, 0xa4}, 0x2) 2.486917369s ago: executing program 0 (id=5165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4840) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x1100, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) write(r2, &(0x7f0000000080), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000019100), 0x40000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x175) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000019140)) r7 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000240)={0x76, &(0x7f00000190c0)=ANY=[@ANYRES32=r2], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) 2.429939285s ago: executing program 1 (id=5166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0xc8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x9c, 0x2, [@TCA_BPF_ACT={0x98, 0x1, [@m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x3c, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x46}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) r5 = socket(0x1d, 0x6, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) lstat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0)) sendmsg$nl_xfrm(r3, 0x0, 0x40000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) unshare(0x2c020400) socket$unix(0x1, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000300)) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 2.089224198s ago: executing program 3 (id=5167): socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6341300", "a9929027e915050000000000000041be"}, 0x0, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) ioctl$DVB_DEMUX_DMX_GET_STC(0xffffffffffffffff, 0xc0106f32, &(0x7f0000000780)={0x50b}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002400000000098000000060a010603000000000000000200000a0900010073797a30000000000900020073797a30000000006c0004802c0001800e000100696d6d6564696174650000001800028008000140000000010c00028008000100313233343c00"], 0x12c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255, 0x0, r10}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2101, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1e, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 882.236153ms ago: executing program 2 (id=5168): syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x6, &(0x7f00005fe000/0x1000)=nil, &(0x7f0000ca6000/0x2000)=nil, 0xb1f3, 0x0, 0x0, 0x7dc, 0x58, 0xa, 0x0, 0x40}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_getnexthop={0x18, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x118}], 0x1}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={r5, 0x1, 0x10}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="08000800050006000000140000004589907864010102ffffffff32970000000000000000"], 0x24) 193.415449ms ago: executing program 1 (id=5171): syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x6, &(0x7f00005fe000/0x1000)=nil, &(0x7f0000ca6000/0x2000)=nil, 0xb1f3, 0x0, 0x0, 0x7dc, 0x58, 0xa, 0x0, 0x40}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_getnexthop={0x18, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20004082}, 0x40) kernel console output (not intermixed with test programs): , SerialNumber=3 [ 1003.533505][T11586] usb 2-1: Product: syz [ 1003.533519][T11586] usb 2-1: Manufacturer: syz [ 1003.533533][T11586] usb 2-1: SerialNumber: syz [ 1003.573136][T11586] usb 2-1: config 0 descriptor?? [ 1003.595454][T11586] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1003.646977][T11586] usb 2-1: Detected FT-X [ 1003.857359][ T5706] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1003.875357][T22582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.912616][T22582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.016458][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 1004.017252][ T5706] usb 4-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=38.9c [ 1004.018319][ T5706] usb 4-1: config 7 has an invalid interface number: 162 but max is 1 [ 1004.018340][ T5706] usb 4-1: config 7 has an invalid interface number: 23 but max is 1 [ 1004.018359][ T5706] usb 4-1: config 7 has an invalid interface descriptor of length 2, skipping [ 1004.018374][ T5706] usb 4-1: config 7 has no interface number 0 [ 1004.018389][ T5706] usb 4-1: config 7 has no interface number 1 [ 1004.018436][ T5706] usb 4-1: config 7 interface 23 altsetting 48 bulk endpoint 0x5 has invalid maxpacket 1023 [ 1004.018458][ T5706] usb 4-1: config 7 interface 23 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1004.018480][ T5706] usb 4-1: config 7 interface 162 has no altsetting 0 [ 1004.018496][ T5706] usb 4-1: config 7 interface 23 has no altsetting 0 [ 1004.021443][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.021467][ T5706] usb 4-1: Product: syz [ 1004.021481][ T5706] usb 4-1: Manufacturer: syz [ 1004.021495][ T5706] usb 4-1: SerialNumber: syz [ 1004.219480][T22585] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4858'. [ 1004.300700][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4858'. [ 1004.366885][T11586] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1004.368712][T11586] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1004.370016][T11586] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1004.397587][ T8818] net_ratelimit: 360 callbacks suppressed [ 1004.397607][ T8818] bond5: (slave gretap2): failed to get link speed/duplex [ 1004.397649][ T8818] bond4: (slave dummy0): failed to get link speed/duplex [ 1004.397677][ T8818] bond2: (slave gretap2): failed to get link speed/duplex [ 1004.397706][ T8818] bond2: (slave gretap2): failed to get link speed/duplex [ 1004.397734][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1004.397762][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1004.397790][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1004.397817][ T8818] bond3: (slave gretap1): failed to get link speed/duplex [ 1004.397845][ T8818] bond3: (slave gretap3): failed to get link speed/duplex [ 1004.427647][T22576] netlink: Invalid conntrack helper [ 1004.480756][T11586] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1004.509817][T11586] usb 2-1: USB disconnect, device number 11 [ 1004.558956][T11586] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1004.559281][T11586] ftdi_sio 2-1:0.0: device disconnected [ 1004.647496][ T5706] usb 4-1: USB disconnect, device number 17 [ 1004.702081][T22591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1004.702104][T22591] netlink: 'syz.2.4859': attribute type 2 has an invalid length. [ 1004.993936][T22595] FAULT_INJECTION: forcing a failure. [ 1004.993936][T22595] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.993969][T22595] CPU: 1 UID: 0 PID: 22595 Comm: syz.4.4860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.993994][T22595] Tainted: [L]=SOFTLOCKUP [ 1004.994001][T22595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1004.994012][T22595] Call Trace: [ 1004.994019][T22595] [ 1004.994028][T22595] dump_stack_lvl+0xe8/0x150 [ 1004.994060][T22595] should_fail_ex+0x410/0x560 [ 1004.994087][T22595] should_failslab+0xa8/0x100 [ 1004.994113][T22595] __kmalloc_cache_noprof+0xa3/0x600 [ 1004.994132][T22595] ? __kasan_kmalloc+0x93/0xb0 [ 1004.994153][T22595] ? ovs_nla_get_identifier+0x72/0xd0 [ 1004.994264][T22595] ? ovs_nla_get_identifier+0x72/0xd0 [ 1004.994302][T22595] ovs_nla_get_identifier+0x72/0xd0 [ 1004.994337][T22595] ovs_flow_cmd_new+0x494/0xea0 [ 1004.994368][T22595] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1004.994440][T22595] ? __kmalloc_noprof+0x38c/0x720 [ 1004.994462][T22595] ? __nla_parse+0x40/0x60 [ 1004.994500][T22595] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1004.994525][T22595] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1004.994556][T22595] genl_family_rcv_msg_doit+0x233/0x340 [ 1004.994585][T22595] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1004.994622][T22595] ? bpf_lsm_capable+0x9/0x20 [ 1004.994638][T22595] ? security_capable+0x7e/0x2c0 [ 1004.994674][T22595] genl_rcv_msg+0x614/0x7a0 [ 1004.994700][T22595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.994720][T22595] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1004.994750][T22595] netlink_rcv_skb+0x226/0x4a0 [ 1004.994771][T22595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.994787][T22595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.994821][T22595] ? down_read+0x2be/0x330 [ 1004.994845][T22595] genl_rcv+0x28/0x40 [ 1004.994863][T22595] netlink_unicast+0x7bd/0x940 [ 1004.994896][T22595] netlink_sendmsg+0x813/0xb40 [ 1004.994919][T22595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.994942][T22595] ? apparmor_socket_sendmsg+0x98/0x360 [ 1004.994964][T22595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.994980][T22595] sock_sendmsg_nosec+0x13a/0x180 [ 1004.994999][T22595] ____sys_sendmsg+0x54e/0x850 [ 1004.995042][T22595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1004.995074][T22595] ? import_iovec+0x73/0xa0 [ 1004.995100][T22595] ___sys_sendmsg+0x2a5/0x360 [ 1004.995124][T22595] ? __lock_acquire+0x747/0x2de0 [ 1004.995142][T22595] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.995173][T22595] ? __fget_files+0x2a/0x420 [ 1004.995186][T22595] ? __fget_files+0x3a2/0x420 [ 1004.995205][T22595] __x64_sys_sendmsg+0x1b1/0x290 [ 1004.995219][T22595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1004.995243][T22595] do_syscall_64+0x166/0x520 [ 1004.995256][T22595] ? trace_irq_disable+0x3b/0x140 [ 1004.995267][T22595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.995278][T22595] ? clear_bhb_loop+0x70/0xc0 [ 1004.995290][T22595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.995300][T22595] RIP: 0033:0x7ffba5b9e159 [ 1004.995311][T22595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.995326][T22595] RSP: 002b:00007ffba69bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.995338][T22595] RAX: ffffffffffffffda RBX: 00007ffba5e25fa0 RCX: 00007ffba5b9e159 [ 1004.995346][T22595] RDX: 000000000000c040 RSI: 0000200000000100 RDI: 0000000000000003 [ 1004.995353][T22595] RBP: 00007ffba69bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.995359][T22595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.995365][T22595] R13: 00007ffba5e26038 R14: 00007ffba5e25fa0 R15: 00007ffba5f4fa48 [ 1004.995381][T22595] [ 1005.696683][T22610] netlink: 'syz.0.4867': attribute type 1 has an invalid length. [ 1005.851171][T22610] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1005.918688][T22618] netlink: 'syz.0.4867': attribute type 10 has an invalid length. [ 1005.918702][T22618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4867'. [ 1006.018104][T22622] netlink: 'syz.1.4868': attribute type 1 has an invalid length. [ 1006.051347][T22616] bond7: (slave gretap7): Enslaving as a backup interface with an up link [ 1006.070142][T22617] dummy0: left promiscuous mode [ 1006.078335][T22617] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 1006.091985][T22618] dummy0: entered promiscuous mode [ 1006.104665][T22618] bond7: (slave dummy0): Releasing backup interface [ 1006.187616][T22628] netlink: 'syz.1.4868': attribute type 10 has an invalid length. [ 1006.187638][T22628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1006.227214][T22622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1006.267139][T22630] loop2: detected capacity change from 0 to 7 [ 1006.273451][T22630] Dev loop2: unable to read RDB block 7 [ 1006.273495][T22630] loop2: unable to read partition table [ 1006.273687][T22630] loop2: partition table beyond EOD, truncated [ 1006.273719][T22630] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1006.330823][T22625] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 1006.487694][T22637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4873'. [ 1006.732675][T22626] dummy0: left promiscuous mode [ 1006.767141][T22626] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 1007.003223][T22628] dummy0: entered promiscuous mode [ 1007.010947][T22628] bond6: (slave dummy0): Releasing backup interface [ 1008.280190][T22678] loop2: detected capacity change from 0 to 7 [ 1008.341173][T22678] Dev loop2: unable to read RDB block 7 [ 1008.341219][T22678] loop2: unable to read partition table [ 1008.341429][T22678] loop2: partition table beyond EOD, truncated [ 1008.341447][T22678] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1008.610132][T22682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1008.995054][T11605] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1009.147832][T11605] usb 3-1: Using ep0 maxpacket: 8 [ 1009.446642][T22168] net_ratelimit: 251 callbacks suppressed [ 1009.446658][T22168] bond1: (slave gretap1): failed to get link speed/duplex [ 1009.446731][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1009.480387][ T8787] bond5: (slave gretap2): failed to get link speed/duplex [ 1009.480429][ T8787] bond4: (slave dummy0): failed to get link speed/duplex [ 1009.502620][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1009.502695][T22168] bond3: (slave gretap3): failed to get link speed/duplex [ 1009.502724][T22168] bond3: (slave gretap1): failed to get link speed/duplex [ 1009.502945][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 1009.555924][ T8811] bond1: (slave gretap1): failed to get link speed/duplex [ 1009.559216][ T8818] bond2: (slave gretap2): failed to get link speed/duplex [ 1009.925024][ T30] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1010.087042][ T30] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1010.088445][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.088468][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1010.090112][T22704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.091331][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1010.091359][ T30] usb 4-1: SerialNumber: syz [ 1010.991369][ T30] usb 4-1: 0:2 : does not exist [ 1011.194077][T22720] netlink: 'syz.4.4897': attribute type 11 has an invalid length. [ 1011.279529][T22721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4897'. [ 1011.350256][ T30] usb 4-1: USB disconnect, device number 18 [ 1011.386111][T22721] veth0_macvtap: left promiscuous mode [ 1011.622506][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.761697][T22724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4898'. [ 1011.945852][T11605] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1011.945902][T11605] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1011.947924][T11605] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1011.947945][T11605] usb 3-1: can't read configurations, error -71 [ 1012.146892][ T5681] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1012.217795][ T31] kauditd_printk_skb: 348 callbacks suppressed [ 1012.217813][ T31] audit: type=1326 audit(1790256286.428:26655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.218039][ T31] audit: type=1326 audit(1790256286.428:26656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.224523][ T31] audit: type=1326 audit(1790256286.428:26657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.224573][ T31] audit: type=1326 audit(1790256286.428:26658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.224613][ T31] audit: type=1326 audit(1790256286.428:26659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.224665][ T31] audit: type=1326 audit(1790256286.428:26660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.224703][ T31] audit: type=1326 audit(1790256286.428:26661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.232681][ T31] audit: type=1326 audit(1790256286.438:26662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.232734][ T31] audit: type=1326 audit(1790256286.438:26663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.257738][ T31] audit: type=1326 audit(1790256286.438:26664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22727 comm="syz.4.4900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1012.358864][ T5681] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1012.485139][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.485170][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.485188][ T5681] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1012.485225][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.549157][ T5681] usb 4-1: config 0 descriptor?? [ 1012.840105][ T5681] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1012.924961][T22731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4900'. [ 1012.924985][T22731] netlink: 'syz.4.4900': attribute type 2 has an invalid length. [ 1013.400502][T22742] netlink: 'syz.0.4902': attribute type 8 has an invalid length. [ 1014.344963][T11586] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 1014.528809][T22749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4905'. [ 1014.545981][T22168] net_ratelimit: 326 callbacks suppressed [ 1014.546000][T22168] bond5: (slave gretap2): failed to get link speed/duplex [ 1014.546039][T22168] bond1: (slave gretap1): failed to get link speed/duplex [ 1014.546069][T22168] bond1: (slave gretap1): failed to get link speed/duplex [ 1014.546098][T22168] bond3: (slave gretap3): failed to get link speed/duplex [ 1014.546127][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1014.546156][T22168] bond3: (slave gretap1): failed to get link speed/duplex [ 1014.546185][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1014.546214][T22168] bond1: (slave gretap1): failed to get link speed/duplex [ 1014.546248][T22168] bond4: (slave dummy0): failed to get link speed/duplex [ 1014.660018][ T8803] bond4: (slave dummy0): failed to get link speed/duplex [ 1015.129243][ T30] usb 4-1: USB disconnect, device number 19 [ 1015.186109][ T863] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1015.346196][ T863] usb 5-1: Using ep0 maxpacket: 16 [ 1015.349115][ T863] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 4.02 [ 1015.370185][T22764] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1015.382454][ T863] usb 5-1: config 255 has too many interfaces: 236, using maximum allowed: 32 [ 1015.382472][ T863] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 236 [ 1015.384539][ T863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1015.384565][ T863] usb 5-1: SerialNumber: syz [ 1015.429567][ T863] ftdi_sio 5-1:255.0: FTDI USB Serial Device converter detected [ 1015.432994][ T863] ftdi_sio ttyUSB0: unknown device type: 0x402 [ 1016.239448][ T30] usb 5-1: USB disconnect, device number 49 [ 1016.240516][ T30] ftdi_sio 5-1:255.0: device disconnected [ 1016.524938][ T5681] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1016.664935][ T5681] usb 3-1: device descriptor read/64, error -71 [ 1016.725904][T22771] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 1016.904971][ T5681] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1017.034989][ T5681] usb 3-1: device descriptor read/64, error -71 [ 1017.145589][ T5681] usb usb3-port1: attempt power cycle [ 1017.497816][ T5681] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1017.545361][ T5681] usb 3-1: device descriptor read/8, error -71 [ 1017.784987][ T5681] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1017.806955][ T5681] usb 3-1: device descriptor read/8, error -71 [ 1017.925586][ T5681] usb usb3-port1: unable to enumerate USB device [ 1018.325651][ T863] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 1018.490365][ T863] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1018.492055][ T863] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1018.492091][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1018.492105][ T863] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.492117][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1018.492130][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1018.493023][ T863] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1018.493067][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1018.493095][ T863] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.493107][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1018.493120][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1018.493972][ T863] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1018.494017][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1018.494042][ T863] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.494064][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1018.494097][ T863] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1018.601064][ T863] usb 5-1: string descriptor 0 read error: -22 [ 1018.601152][ T863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.699846][ T863] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1018.800384][T22800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4923'. [ 1018.868477][ T31] kauditd_printk_skb: 331 callbacks suppressed [ 1018.868495][ T31] audit: type=1326 audit(1790256293.068:26996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1018.868537][ T31] audit: type=1326 audit(1790256293.078:26997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1018.931951][ T31] audit: type=1326 audit(1790256293.138:26998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1018.959576][ T31] audit: type=1326 audit(1790256293.138:26999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1018.962792][ T31] audit: type=1326 audit(1790256293.168:27000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1018.962889][ T31] audit: type=1326 audit(1790256293.168:27001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1018.963062][ T31] audit: type=1326 audit(1790256293.168:27002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1019.066616][ T31] audit: type=1326 audit(1790256293.278:27003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1019.068837][ T31] audit: type=1326 audit(1790256293.278:27004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1019.068962][ T31] audit: type=1326 audit(1790256293.278:27005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22803 comm="syz.2.4921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d77b9e159 code=0x7ffc0000 [ 1019.530463][T22804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1019.530487][T22804] netlink: 'syz.2.4921': attribute type 2 has an invalid length. [ 1019.565616][ T69] net_ratelimit: 357 callbacks suppressed [ 1019.565630][ T69] bond3: (slave gretap3): failed to get link speed/duplex [ 1019.565652][ T69] bond2: (slave gretap2): failed to get link speed/duplex [ 1019.637947][T22168] bond5: (slave gretap2): failed to get link speed/duplex [ 1019.655619][ T69] bond2: (slave gretap2): failed to get link speed/duplex [ 1019.655651][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1019.655669][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 1019.655717][ T69] bond4: (slave dummy0): failed to get link speed/duplex [ 1019.655745][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1019.655769][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1019.676428][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1020.648845][T22842] netlink: 'syz.0.4932': attribute type 4 has an invalid length. [ 1020.716019][T22851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1021.537980][T22859] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1021.721208][ T5681] usb 5-1: USB disconnect, device number 50 [ 1022.329066][T22871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.891261][T22882] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1022.891293][T22882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.892747][T22882] vhci_hcd vhci_hcd.0: Device attached [ 1022.917117][T22882] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 1022.917144][T22882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.917266][T22882] vhci_hcd vhci_hcd.0: Device attached [ 1022.920526][T22882] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 1022.920541][T22882] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1022.920565][T22882] vhci_hcd vhci_hcd.0: Device attached [ 1022.946542][T22882] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 1022.946564][T22882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.946607][T22882] vhci_hcd vhci_hcd.0: Device attached [ 1022.960013][T22890] vhci_hcd: connection closed [ 1022.961909][T22888] vhci_hcd: connection closed [ 1022.961990][T22886] vhci_hcd: connection closed [ 1022.977791][T22884] vhci_hcd: connection closed [ 1022.986760][ T8787] vhci_hcd vhci_hcd.3: stop threads [ 1022.986788][ T8787] vhci_hcd vhci_hcd.3: release socket [ 1022.986809][ T8787] vhci_hcd vhci_hcd.3: disconnect device [ 1022.994357][ T8787] vhci_hcd vhci_hcd.3: stop threads [ 1022.994376][ T8787] vhci_hcd vhci_hcd.3: release socket [ 1022.994395][ T8787] vhci_hcd vhci_hcd.3: disconnect device [ 1023.078280][ T8787] vhci_hcd vhci_hcd.3: stop threads [ 1023.078308][ T8787] vhci_hcd vhci_hcd.3: release socket [ 1023.078355][ T8787] vhci_hcd vhci_hcd.3: disconnect device [ 1023.080017][ T8787] vhci_hcd vhci_hcd.3: stop threads [ 1023.080034][ T8787] vhci_hcd vhci_hcd.3: release socket [ 1023.080074][ T8787] vhci_hcd vhci_hcd.3: disconnect device [ 1023.127293][ T863] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1023.435680][ T5681] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1023.564931][ T5681] usb 3-1: device descriptor read/64, error -71 [ 1023.805532][ T5681] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1023.935112][ T5681] usb 3-1: device descriptor read/64, error -71 [ 1024.045368][ T5681] usb usb3-port1: attempt power cycle [ 1024.385611][ T5681] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1024.405536][ T5681] usb 3-1: device descriptor read/8, error -71 [ 1024.645728][ T5681] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1024.646501][ T8787] net_ratelimit: 300 callbacks suppressed [ 1024.646514][ T8787] bond2: (slave gretap2): failed to get link speed/duplex [ 1024.646582][ T8787] bond5: (slave gretap2): failed to get link speed/duplex [ 1024.646604][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 1024.646630][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 1024.646656][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 1024.646683][ T8787] bond3: (slave gretap3): failed to get link speed/duplex [ 1024.646702][ T8787] bond2: (slave gretap2): failed to get link speed/duplex [ 1024.646718][ T8787] bond3: (slave gretap1): failed to get link speed/duplex [ 1024.646738][ T8787] bond4: (slave dummy0): failed to get link speed/duplex [ 1024.741259][ T5681] usb 3-1: device descriptor read/8, error -71 [ 1024.757656][ T8818] bond4: (slave dummy0): failed to get link speed/duplex [ 1024.845421][ T5681] usb usb3-port1: unable to enumerate USB device [ 1024.949970][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4948'. [ 1025.866070][ T30] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1026.024990][T11586] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1026.096319][ T30] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1026.098419][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.100431][ T30] usb 4-1: config 0 descriptor?? [ 1026.118579][ T30] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1026.188757][T11586] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1026.189931][T11586] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1026.189980][T11586] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1026.191990][T11586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.192009][T11586] usb 1-1: Product: syz [ 1026.192016][T11586] usb 1-1: Manufacturer: syz [ 1026.192023][T11586] usb 1-1: SerialNumber: syz [ 1026.338290][T11587] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1026.642419][ T5681] usb 1-1: USB disconnect, device number 62 [ 1026.651220][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1026.682572][T22930] FAULT_INJECTION: forcing a failure. [ 1026.682572][T22930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.682615][T22930] CPU: 0 UID: 0 PID: 22930 Comm: syz.2.4953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.682639][T22930] Tainted: [L]=SOFTLOCKUP [ 1026.682647][T22930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1026.682658][T22930] Call Trace: [ 1026.682666][T22930] [ 1026.682674][T22930] dump_stack_lvl+0xe8/0x150 [ 1026.682705][T22930] should_fail_ex+0x410/0x560 [ 1026.682731][T22930] _copy_from_user+0x2d/0xb0 [ 1026.682755][T22930] __sys_bpf+0x2e7/0xd90 [ 1026.682784][T22930] ? __pfx___sys_bpf+0x10/0x10 [ 1026.682816][T22930] ? __fget_files+0x2a/0x420 [ 1026.682856][T22930] ? ksys_write+0x242/0x270 [ 1026.682884][T22930] ? __pfx_ksys_write+0x10/0x10 [ 1026.682915][T22930] __x64_sys_bpf+0xba/0xd0 [ 1026.682934][T22930] do_syscall_64+0x166/0x520 [ 1026.682955][T22930] ? trace_irq_disable+0x3b/0x140 [ 1026.682973][T22930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.682991][T22930] ? clear_bhb_loop+0x70/0xc0 [ 1026.683013][T22930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.683032][T22930] RIP: 0033:0x7f3d77b9e159 [ 1026.683050][T22930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.683065][T22930] RSP: 002b:00007f3d78b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1026.683083][T22930] RAX: ffffffffffffffda RBX: 00007f3d77e25fa0 RCX: 00007f3d77b9e159 [ 1026.683096][T22930] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000008 [ 1026.683107][T22930] RBP: 00007f3d78b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.683118][T22930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.683128][T22930] R13: 00007f3d77e26038 R14: 00007f3d77e25fa0 R15: 00007f3d77f4fa48 [ 1026.683156][T22930] [ 1026.710640][ T30] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1026.925384][T11586] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1027.080638][T11586] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1027.081861][T11586] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1027.081878][T11586] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1027.085055][T11586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.085078][T11586] usb 5-1: Product: syz [ 1027.085091][T11586] usb 5-1: Manufacturer: syz [ 1027.085126][T11586] usb 5-1: SerialNumber: syz [ 1027.396383][T11587] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1027.396619][T11587] ath9k_htc: Failed to initialize the device [ 1027.398986][ T5681] usb 1-1: ath9k_htc: USB layer deinitialized [ 1027.409009][T11586] kaweth 5-1:1.0: Firmware present in device. [ 1027.589761][ T30] gspca_cpia1: usb_control_msg 03, error -71 [ 1027.589894][ T30] cpia1 4-1:0.0: unexpected systemstate: 00 [ 1027.598031][ T30] usb 4-1: USB disconnect, device number 20 [ 1027.691872][T11586] kaweth 5-1:1.0: Error reading configuration (-71), no net device created [ 1027.692755][T11586] kaweth 5-1:1.0: probe with driver kaweth failed with error -5 [ 1027.714980][ T5681] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1027.720207][T11586] usb 5-1: USB disconnect, device number 51 [ 1027.874996][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 1027.876147][ T5681] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 1027.877298][ T5681] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1027.877345][ T5681] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1027.879373][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.879394][ T5681] usb 1-1: Product: syz [ 1027.879407][ T5681] usb 1-1: Manufacturer: syz [ 1027.879420][ T5681] usb 1-1: SerialNumber: syz [ 1027.951618][ T5681] ldusb 1-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 1027.993327][ T31] kauditd_printk_skb: 135 callbacks suppressed [ 1027.993349][ T31] audit: type=1326 audit(1790256302.198:27141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22941 comm="syz.1.4958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b4339e159 code=0x0 [ 1027.996117][T22942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.997736][T22942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.165767][T11586] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1028.249840][T22949] ldusb 1-1:1.0: Write buffer overflow, 2147478912 bytes dropped [ 1028.249889][T22949] ldusb 1-1:1.0: Write buffer overflow, 2147478912 bytes dropped [ 1028.251209][T22949] ldusb 1-1:1.0: Write buffer overflow, 2147478912 bytes dropped [ 1028.251295][T22949] ldusb 1-1:1.0: Write buffer overflow, 2147478912 bytes dropped [ 1028.254076][ T863] usb 1-1: USB disconnect, device number 63 [ 1028.254195][ C1] ldusb 1-1:1.0: usb_submit_urb failed (-19) [ 1028.278903][ T863] ldusb 1-1:1.0: LD USB Device #0 now disconnected [ 1028.317387][T11586] usb 2-1: Using ep0 maxpacket: 8 [ 1028.318163][T11586] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1028.319496][T11586] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1028.319518][T11586] usb 2-1: config 179 has no interface number 0 [ 1028.319587][T11586] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1028.319610][T11586] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1028.319634][T11586] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 249, changing to 11 [ 1028.319655][T11586] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1028.319676][T11586] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1028.319713][T11586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.341854][T22943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1028.352106][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1028.545505][ T31] audit: type=1326 audit(1790256302.758:27142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1028.545764][ T31] audit: type=1326 audit(1790256302.758:27143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1028.548044][ T31] audit: type=1326 audit(1790256302.758:27144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1028.548471][ T863] usb 2-1: USB disconnect, device number 12 [ 1028.548519][ T31] audit: type=1326 audit(1790256302.758:27145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1028.548562][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1028.548582][ T31] audit: type=1326 audit(1790256302.758:27146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1028.548610][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1028.548624][ T31] audit: type=1326 audit(1790256302.758:27147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1028.548778][ T31] audit: type=1326 audit(1790256302.758:27148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1028.549288][ T31] audit: type=1326 audit(1790256302.758:27149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1028.549510][ T31] audit: type=1326 audit(1790256302.758:27150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.3.4963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4414f9e159 code=0x7ffc0000 [ 1029.000224][T22956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4963'. [ 1029.000265][T22956] netlink: 'syz.3.4963': attribute type 2 has an invalid length. [ 1029.334973][ T863] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1029.479196][T22985] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4972'. [ 1029.479217][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4972'. [ 1029.480069][T22979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1029.493400][ T863] usb 1-1: Using ep0 maxpacket: 32 [ 1029.501050][ T863] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1029.537574][ T863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.537601][ T863] usb 1-1: Product: syz [ 1029.537615][ T863] usb 1-1: Manufacturer: syz [ 1029.537629][ T863] usb 1-1: SerialNumber: syz [ 1029.584575][ T863] usb 1-1: config 0 descriptor?? [ 1029.675081][ T8818] net_ratelimit: 390 callbacks suppressed [ 1029.675097][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1029.675120][ T8818] bond3: (slave gretap3): failed to get link speed/duplex [ 1029.675137][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1029.675152][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1029.675168][ T8818] bond2: (slave gretap2): failed to get link speed/duplex [ 1029.675184][ T8818] bond5: (slave gretap2): failed to get link speed/duplex [ 1029.675199][ T8818] bond2: (slave gretap2): failed to get link speed/duplex [ 1029.728385][ T8818] bond4: (slave dummy0): failed to get link speed/duplex [ 1029.728425][ T8818] bond3: (slave gretap1): failed to get link speed/duplex [ 1029.785077][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1030.119683][ T863] usb 1-1: selecting invalid altsetting 3 [ 1030.119708][ T863] comedi comedi5: could not set alternate setting 3 in high speed [ 1030.119724][ T863] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1030.279400][ T863] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 1030.305297][ T863] usb 1-1: USB disconnect, device number 64 [ 1030.588790][ T5706] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1030.747314][ T5706] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1030.748654][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1030.748679][ T5706] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1030.748728][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1030.748748][ T5706] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1030.748784][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.806398][ T5706] usb 2-1: config 0 descriptor?? [ 1030.829561][ T863] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1030.995007][ T863] usb 5-1: Using ep0 maxpacket: 32 [ 1031.001519][ T863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1031.001570][ T863] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1031.018148][ T863] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1031.018175][ T863] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1031.018192][ T863] usb 5-1: config 14 has no interface number 0 [ 1031.018207][ T863] usb 5-1: config 14 has no interface number 1 [ 1031.018265][ T863] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1031.018286][ T863] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1031.018308][ T863] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1031.018331][ T863] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1031.018355][ T863] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1031.018388][ T863] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.018411][ T863] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1031.018427][ T863] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1031.106858][ T863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.106884][ T863] usb 5-1: Product: syz [ 1031.106897][ T863] usb 5-1: Manufacturer: syz [ 1031.106910][ T863] usb 5-1: SerialNumber: syz [ 1031.118264][ T5706] hdpvr 2-1:0.0: firmware version 0x1e dated Š [ 1031.276526][T23015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.276922][T23015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.315898][T23017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4982'. [ 1031.656348][T23025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4985'. [ 1031.656363][T23025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4985'. [ 1031.656378][T23025] netlink: 'syz.3.4985': attribute type 6 has an invalid length. [ 1031.673007][ T863] legousbtower 5-1:14.57: interrupt endpoints not found [ 1031.740626][ T863] legousbtower 5-1:14.228: get version request failed: -71 [ 1031.740810][ T863] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 1031.793425][ T5706] hdpvr 2-1:0.0: Could not setup controls [ 1031.806361][ T863] usb 5-1: USB disconnect, device number 52 [ 1031.813513][ T5706] hdpvr 2-1:0.0: registering videodev failed [ 1031.842023][ T5706] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 1031.871757][ T5706] usb 2-1: USB disconnect, device number 13 [ 1031.885048][ T5681] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1032.035038][ T5681] usb 1-1: Using ep0 maxpacket: 16 [ 1032.035905][ T5681] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1032.040592][ T5681] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 1032.040618][ T5681] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 1032.040636][ T5681] usb 1-1: config 166 has no interface number 0 [ 1032.040650][ T5681] usb 1-1: config 166 has no interface number 1 [ 1032.040696][ T5681] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1032.040716][ T5681] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1032.040747][ T5681] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1032.040768][ T5681] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1032.040791][ T5681] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1032.040814][ T5681] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1032.040836][ T5681] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1032.040859][ T5681] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1032.040879][ T5681] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1032.040902][ T5681] usb 1-1: config 166 interface 177 has no altsetting 0 [ 1032.040918][ T5681] usb 1-1: config 166 interface 34 has no altsetting 0 [ 1032.043929][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.043954][ T5681] usb 1-1: Product: syz [ 1032.043968][ T5681] usb 1-1: Manufacturer: syz [ 1032.043981][ T5681] usb 1-1: SerialNumber: syz [ 1032.266275][T23032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4986'. [ 1032.446468][ T5681] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 1032.488029][T23036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.649449][ T5681] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 1032.735081][T23044] netlink: 'syz.3.4989': attribute type 1 has an invalid length. [ 1032.856798][T23044] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1032.914478][T23044] netlink: 'syz.3.4989': attribute type 10 has an invalid length. [ 1032.914494][T23044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4989'. [ 1032.974674][ T5681] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 1033.078620][T23047] bond11: (slave gretap8): Enslaving as a backup interface with an up link [ 1033.078721][T23051] dummy0: left promiscuous mode [ 1033.099020][T23051] bond11: (slave dummy0): Enslaving as a backup interface with an up link [ 1033.115514][ T5681] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1033.115535][ T5681] uvcvideo 1-1:166.34: No valid video chain found. [ 1033.141501][ T5681] usb 1-1: USB disconnect, device number 65 [ 1033.233977][T23044] dummy0: entered promiscuous mode [ 1033.243999][T23044] bond11: (slave dummy0): Releasing backup interface [ 1033.493824][T23059] FAULT_INJECTION: forcing a failure. [ 1033.493824][T23059] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.493857][T23059] CPU: 0 UID: 0 PID: 23059 Comm: syz.3.4994 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.493883][T23059] Tainted: [L]=SOFTLOCKUP [ 1033.493890][T23059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1033.493901][T23059] Call Trace: [ 1033.493909][T23059] [ 1033.493917][T23059] dump_stack_lvl+0xe8/0x150 [ 1033.493952][T23059] should_fail_ex+0x410/0x560 [ 1033.493980][T23059] should_failslab+0xa8/0x100 [ 1033.494006][T23059] __kmalloc_noprof+0xfe/0x720 [ 1033.494026][T23059] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1033.494053][T23059] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1033.494088][T23059] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1033.494121][T23059] genl_family_rcv_msg_doit+0xda/0x340 [ 1033.494152][T23059] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1033.494183][T23059] ? apparmor_capable+0x126/0x170 [ 1033.494215][T23059] ? bpf_lsm_capable+0x9/0x20 [ 1033.494233][T23059] ? security_capable+0x7e/0x2c0 [ 1033.494263][T23059] genl_rcv_msg+0x614/0x7a0 [ 1033.494293][T23059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.494315][T23059] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1033.494354][T23059] netlink_rcv_skb+0x226/0x4a0 [ 1033.494384][T23059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.494409][T23059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1033.494452][T23059] ? down_read+0x2be/0x330 [ 1033.494491][T23059] genl_rcv+0x28/0x40 [ 1033.494511][T23059] netlink_unicast+0x7bd/0x940 [ 1033.494550][T23059] netlink_sendmsg+0x813/0xb40 [ 1033.494578][T23059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.494605][T23059] ? apparmor_socket_sendmsg+0x98/0x360 [ 1033.494628][T23059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.494646][T23059] sock_sendmsg_nosec+0x13a/0x180 [ 1033.494670][T23059] ____sys_sendmsg+0x54e/0x850 [ 1033.494702][T23059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.494737][T23059] ? import_iovec+0x73/0xa0 [ 1033.494766][T23059] ___sys_sendmsg+0x2a5/0x360 [ 1033.494791][T23059] ? __lock_acquire+0x747/0x2de0 [ 1033.494813][T23059] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.494867][T23059] ? __fget_files+0x2a/0x420 [ 1033.494893][T23059] ? __fget_files+0x3a2/0x420 [ 1033.494928][T23059] __x64_sys_sendmsg+0x1b1/0x290 [ 1033.494956][T23059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1033.495002][T23059] do_syscall_64+0x166/0x520 [ 1033.495025][T23059] ? trace_irq_disable+0x3b/0x140 [ 1033.495044][T23059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.495064][T23059] ? clear_bhb_loop+0x70/0xc0 [ 1033.495088][T23059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.495106][T23059] RIP: 0033:0x7f4414f9e159 [ 1033.495124][T23059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.495139][T23059] RSP: 002b:00007f4415f41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.495159][T23059] RAX: ffffffffffffffda RBX: 00007f4415225fa0 RCX: 00007f4414f9e159 [ 1033.495173][T23059] RDX: 000000000000c040 RSI: 0000200000000100 RDI: 0000000000000003 [ 1033.495186][T23059] RBP: 00007f4415f41090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.495198][T23059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.495209][T23059] R13: 00007f4415226038 R14: 00007f4415225fa0 R15: 00007f441534fa48 [ 1033.495240][T23059] [ 1033.717879][ T5681] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1033.879214][ T5681] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1033.882773][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.882834][ T5681] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1033.939805][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.939833][ T5681] usb 3-1: Product: syz [ 1033.939847][ T5681] usb 3-1: Manufacturer: syz [ 1033.939860][ T5681] usb 3-1: SerialNumber: syz [ 1034.083680][T23063] syzkaller1: entered promiscuous mode [ 1034.083703][T23063] syzkaller1: entered allmulticast mode [ 1034.347696][ T5706] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1034.383249][ C0] usb 3-1: received EP1 urb->status = -71 [ 1034.393296][ T5681] usb 3-1: unable to init card! (ret=-71) [ 1034.394436][ T5681] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -71 [ 1034.418214][ T5681] usb 3-1: USB disconnect, device number 48 [ 1034.495958][ T5706] usb 1-1: Using ep0 maxpacket: 8 [ 1034.496805][ T5706] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1034.498002][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.539280][ T5706] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1034.539297][ T5706] pvrusb2: ********** [ 1034.539303][ T5706] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1034.539313][ T5706] pvrusb2: Important functionality might not be entirely working. [ 1034.539320][ T5706] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1034.539330][ T5706] pvrusb2: ********** [ 1034.686627][ T8803] net_ratelimit: 339 callbacks suppressed [ 1034.686649][ T8803] bond2: (slave gretap2): failed to get link speed/duplex [ 1034.686715][ T8803] bond3: (slave gretap3): failed to get link speed/duplex [ 1034.739337][ T2350] pvrusb2: Invalid write control endpoint [ 1034.776358][ T8803] bond4: (slave dummy0): failed to get link speed/duplex [ 1034.776401][ T8803] bond1: (slave gretap1): failed to get link speed/duplex [ 1034.776430][ T8803] bond1: (slave gretap1): failed to get link speed/duplex [ 1034.776456][ T8803] bond1: (slave gretap1): failed to get link speed/duplex [ 1034.776484][ T8803] bond3: (slave gretap1): failed to get link speed/duplex [ 1034.776511][ T8803] bond2: (slave gretap2): failed to get link speed/duplex [ 1034.776537][ T8803] bond5: (slave gretap2): failed to get link speed/duplex [ 1034.839241][ T8818] bond3: (slave gretap3): failed to get link speed/duplex [ 1034.876392][T23072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1034.904536][T23071] syzkaller0: entered promiscuous mode [ 1034.904552][T23071] syzkaller0: entered allmulticast mode [ 1035.593383][ T5706] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1035.759186][ T5706] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1035.762715][ T5706] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.762746][ T5706] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1035.762769][ T5706] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.762801][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.817769][ T5706] usb 3-1: config 0 descriptor?? [ 1035.845375][ T2350] pvrusb2: Invalid write control endpoint [ 1035.849780][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1035.849793][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1035.849801][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1035.849810][ T2350] pvrusb2: Device being rendered inoperable [ 1035.934615][ T2350] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1035.934658][ T2350] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1036.109249][T11605] usb 1-1: USB disconnect, device number 66 [ 1036.210177][T23099] netlink: 'syz.3.5008': attribute type 1 has an invalid length. [ 1036.261723][ T2350] pvrusb2: Attached sub-driver cx25840 [ 1036.261740][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1036.261750][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1036.370173][T23099] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1036.461338][T23111] __nla_validate_parse: 1 callbacks suppressed [ 1036.461358][T23111] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5010'. [ 1036.530441][ T5706] hid-multitouch 0003:0EEF:72C4.0037: ignoring exceeding usage max [ 1036.533228][ T5706] hid-multitouch 0003:0EEF:72C4.0037: unbalanced collection at end of report description [ 1036.534104][ T5706] hid-multitouch 0003:0EEF:72C4.0037: probe with driver hid-multitouch failed with error -22 [ 1037.004913][T11586] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1037.156406][T11586] usb 4-1: Using ep0 maxpacket: 8 [ 1037.167717][T11586] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1037.167768][T11586] usb 4-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1037.170238][T11586] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1037.178513][T11586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.178538][T11586] usb 4-1: Product: syz [ 1037.178551][T11586] usb 4-1: Manufacturer: syz [ 1037.178564][T11586] usb 4-1: SerialNumber: syz [ 1037.194264][T23114] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1037.399965][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.401948][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.436689][T11586] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1037.436742][T11586] usb 4-1: MIDIStreaming interface descriptor not found [ 1037.485023][T11605] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1037.613450][T11586] usb 4-1: USB disconnect, device number 21 [ 1037.622207][T11605] usb 1-1: device descriptor read/64, error -71 [ 1037.786583][T18991] udevd[18991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.864899][T11605] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1037.995070][T11605] usb 1-1: device descriptor read/64, error -71 [ 1038.085551][T11586] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1038.105496][T11605] usb usb1-port1: attempt power cycle [ 1038.165221][ T31] kauditd_printk_skb: 151 callbacks suppressed [ 1038.165239][ T31] audit: type=1326 audit(1790256312.378:27302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.1.5019" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b4339e159 code=0x0 [ 1038.257359][T11586] usb 4-1: Using ep0 maxpacket: 16 [ 1038.262314][T11586] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1038.262360][T11586] usb 4-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 1038.263339][T11586] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1038.265758][T11586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.265782][T11586] usb 4-1: Product: syz [ 1038.265795][T11586] usb 4-1: Manufacturer: syz [ 1038.265807][T11586] usb 4-1: SerialNumber: syz [ 1038.273092][T23114] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1038.286415][ T5731] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1038.360085][ T5706] usb 3-1: USB disconnect, device number 49 [ 1038.436121][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 1038.475638][T11605] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1038.498742][T11605] usb 1-1: device descriptor read/8, error -71 [ 1038.519868][T11586] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1038.519920][T11586] usb 4-1: MIDIStreaming interface descriptor not found [ 1038.610462][T11586] usb 4-1: USB disconnect, device number 22 [ 1038.721835][T18991] udevd[18991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.735677][T11605] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1038.755773][T11605] usb 1-1: device descriptor read/8, error -71 [ 1038.871913][T11605] usb usb1-port1: unable to enumerate USB device [ 1039.448116][T11605] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1039.594960][T11605] usb 4-1: Using ep0 maxpacket: 16 [ 1039.595710][T11605] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1039.599108][T11605] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1039.599157][T11605] usb 4-1: config 0 has no interface number 0 [ 1039.599194][T11605] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1039.599213][T11605] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1039.604750][T11605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.605352][T11605] usb 4-1: Product: syz [ 1039.605368][T11605] usb 4-1: Manufacturer: syz [ 1039.605381][T11605] usb 4-1: SerialNumber: syz [ 1039.627570][T11605] usb 4-1: config 0 descriptor?? [ 1039.631323][T23160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1039.631469][T23160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1039.699584][ T8818] net_ratelimit: 289 callbacks suppressed [ 1039.699604][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1039.699651][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1039.699678][ T8818] bond3: (slave gretap3): failed to get link speed/duplex [ 1039.699733][ T8818] bond1: (slave gretap1): failed to get link speed/duplex [ 1039.699781][ T8818] bond3: (slave gretap1): failed to get link speed/duplex [ 1039.699809][ T8818] bond5: (slave gretap2): failed to get link speed/duplex [ 1039.699860][ T8818] bond2: (slave gretap2): failed to get link speed/duplex [ 1039.699893][ T8818] bond4: (slave dummy0): failed to get link speed/duplex [ 1039.699919][ T8818] bond2: (slave gretap2): failed to get link speed/duplex [ 1039.807036][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1039.838716][T11605] asix 4-1:0.34: probe with driver asix failed with error -71 [ 1039.868393][T11605] usb 4-1: USB disconnect, device number 23 [ 1039.871772][T23172] binder: 23171:23172 ioctl c0189375 200000000280 returned -22 [ 1039.879145][T23172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5028'. [ 1039.879164][T23172] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5028'. [ 1039.891628][T23172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5028'. [ 1039.892529][T23172] binder: BINDER_SET_CONTEXT_MGR already set [ 1039.892540][T23172] binder: 23171:23172 ioctl 4018620d 200000004a80 returned -16 [ 1040.174977][ T5681] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1040.305854][T23174] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5029'. [ 1040.305877][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5029'. [ 1040.306183][ T5681] usb 3-1: device descriptor read/64, error -71 [ 1040.429496][ T31] audit: type=1326 audit(1790256314.638:27303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.429629][ T31] audit: type=1326 audit(1790256314.638:27304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.445981][ T31] audit: type=1326 audit(1790256314.648:27305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.446036][ T31] audit: type=1326 audit(1790256314.648:27306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.446097][ T31] audit: type=1326 audit(1790256314.648:27307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.446135][ T31] audit: type=1326 audit(1790256314.648:27308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.446174][ T31] audit: type=1326 audit(1790256314.648:27309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.446231][ T31] audit: type=1326 audit(1790256314.648:27310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.446270][ T31] audit: type=1326 audit(1790256314.648:27311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.0.5030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511439e159 code=0x7ffc0000 [ 1040.582823][ T5681] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1040.688532][T23178] netlink: 'syz.3.5031': attribute type 2 has an invalid length. [ 1040.688547][T23178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1040.725070][ T5681] usb 3-1: device descriptor read/64, error -71 [ 1040.728179][T23178] : entered promiscuous mode [ 1040.767911][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1040.790148][T23176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1040.790171][T23176] netlink: 'syz.0.5030': attribute type 2 has an invalid length. [ 1040.836744][ T5681] usb usb3-port1: attempt power cycle [ 1041.174947][ T5681] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1041.175381][T23186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5034'. [ 1041.202363][ T5681] usb 3-1: device descriptor read/8, error -71 [ 1041.441106][ T5681] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1041.466669][ T5681] usb 3-1: device descriptor read/8, error -71 [ 1041.575485][ T5681] usb usb3-port1: unable to enumerate USB device [ 1041.662163][ T5731] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1041.662223][ T5731] usb 5-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 1041.666589][ T5731] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1041.666622][ T5731] usb 5-1: can't read configurations, error -71 [ 1042.226082][T23199] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5039'. [ 1042.226205][T23199] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5039'. [ 1042.375016][T23201] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5041'. [ 1042.387534][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5041'. [ 1042.660743][T23212] netlink: 'syz.0.5043': attribute type 8 has an invalid length. [ 1042.660765][T23212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1042.704299][T23212] veth1_to_team: entered promiscuous mode [ 1042.718537][T23212] gretap0: entered promiscuous mode [ 1042.724576][T23212] veth1_to_team: left promiscuous mode [ 1042.736862][T23212] gretap0: left promiscuous mode [ 1042.946681][T23217] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5040'. [ 1043.210453][T23217] syzkaller1: entered promiscuous mode [ 1043.210476][T23217] syzkaller1: entered allmulticast mode [ 1043.676304][T23230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1044.073015][T23236] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5051'. [ 1044.073139][T23236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5051'. [ 1044.771680][T23250] ifb2: left promiscuous mode [ 1044.775324][ T8787] net_ratelimit: 290 callbacks suppressed [ 1044.775381][ T8787] bond3: (slave gretap3): failed to get link speed/duplex [ 1044.775453][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 1044.775515][ T8787] bond2: (slave gretap2): failed to get link speed/duplex [ 1044.775582][ T8787] bond4: (slave dummy0): failed to get link speed/duplex [ 1044.775643][ T8787] bond3: (slave gretap1): failed to get link speed/duplex [ 1044.775686][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 1044.775745][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 1044.775786][ T8787] bond2: (slave gretap2): failed to get link speed/duplex [ 1044.785080][ T8787] bond5: (slave gretap2): failed to get link speed/duplex [ 1044.885849][ T8787] bond2: (slave gretap2): failed to get link speed/duplex [ 1045.525518][T11587] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1045.676208][T11587] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1045.681516][T11587] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1045.681546][T11587] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1045.681568][T11587] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1045.681590][T11587] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1045.681626][T11587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.755350][T23256] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1045.755482][T23256] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1046.946489][ T863] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1047.057017][ T30] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1047.208736][T11587] pegasus 3-1:1.0: can't reset MAC [ 1047.209263][T11587] pegasus 3-1:1.0: probe with driver pegasus failed with error -5 [ 1047.237286][ T863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1047.237338][ T863] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1047.241605][ T863] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1047.241643][ T863] usb 5-1: can't read configurations, error -71 [ 1047.281953][ T30] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1047.301211][ T30] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 1047.301239][ T30] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1047.301256][ T30] usb 1-1: config 0 has no interface number 0 [ 1047.301283][ T30] usb 1-1: config 0 interface 205 has no altsetting 0 [ 1047.362251][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.362393][ T30] usb 1-1: Product: syz [ 1047.362407][ T30] usb 1-1: Manufacturer: syz [ 1047.362420][ T30] usb 1-1: SerialNumber: syz [ 1047.362623][T11587] usb 3-1: USB disconnect, device number 54 [ 1047.450884][ T30] usb 1-1: config 0 descriptor?? [ 1047.467111][ T30] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1047.467162][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 1047.529529][ T30] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1047.530349][ T30] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1047.530402][ T30] usb 1-1: media controller created [ 1047.533846][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1047.650532][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 1047.707003][ T30] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1047.739567][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input87 [ 1047.757172][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 1047.757220][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 1047.778083][ T30] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1047.784703][ T30] usb 1-1: USB disconnect, device number 71 [ 1047.897511][ T30] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1048.320463][T23280] netlink: 'syz.3.5065': attribute type 1 has an invalid length. [ 1048.522911][T23280] bond13: entered promiscuous mode [ 1048.523405][T23280] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1048.706506][T23284] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1048.706805][T23284] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1048.706816][T23284] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1048.897766][ T5681] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1049.006791][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5069'. [ 1049.030184][T23284] bond13: (slave wireguard0): making interface the new active one [ 1049.030218][T23284] wireguard0: entered promiscuous mode [ 1049.075826][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 1049.077680][ T5681] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1049.097753][ T5681] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1049.097781][ T5681] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1049.097803][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1049.097842][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1049.097853][ T5681] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1049.097878][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1049.097899][ T5681] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1049.097911][ T5681] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1049.097945][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.137359][T23284] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 1049.208380][ T5681] usb 1-1: config 0 descriptor?? [ 1049.496222][ T5681] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1049.847469][T22168] net_ratelimit: 296 callbacks suppressed [ 1049.847491][T22168] bond3: (slave gretap3): failed to get link speed/duplex [ 1049.847530][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1049.847559][T22168] bond1: (slave gretap1): failed to get link speed/duplex [ 1049.847589][T22168] bond3: (slave gretap1): failed to get link speed/duplex [ 1049.847618][T22168] bond1: (slave gretap1): failed to get link speed/duplex [ 1049.847646][T22168] bond5: (slave gretap2): failed to get link speed/duplex [ 1049.847687][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1049.847734][T22168] bond4: (slave dummy0): failed to get link speed/duplex [ 1049.957250][ T8811] bond4: (slave dummy0): failed to get link speed/duplex [ 1049.957351][ T8811] bond2: (slave gretap2): failed to get link speed/duplex [ 1050.241984][ T8818] IPVS: starting estimator thread 0... [ 1050.397098][T23307] IPVS: using max 30 ests per chain, 72000 per kthread [ 1050.463762][T23311] loop2: detected capacity change from 0 to 7 [ 1050.521329][T23311] Dev loop2: unable to read RDB block 7 [ 1050.521424][T23311] loop2: unable to read partition table [ 1050.521825][T23311] loop2: partition table beyond EOD, truncated [ 1050.521923][T23311] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1050.860910][T23313] ifb2: entered allmulticast mode [ 1050.919045][ T30] usb 1-1: USB disconnect, device number 72 [ 1050.950878][ T30] usblp0: removed [ 1051.144434][T23323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1051.611100][T23336] netlink: 'syz.1.5081': attribute type 1 has an invalid length. [ 1051.844678][T23336] bond7: entered promiscuous mode [ 1051.856189][T23336] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1051.986407][ T5731] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1052.004915][ T863] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1052.151518][ T5731] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1052.165238][ T863] usb 2-1: Using ep0 maxpacket: 16 [ 1052.172562][ T5731] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1052.172623][ T5731] usb 4-1: config 0 has no interface number 0 [ 1052.172691][ T5731] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1052.172731][ T5731] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1052.172788][ T5731] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1052.225986][ T863] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1052.239808][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.239868][ T5731] usb 4-1: Product: syz [ 1052.239898][ T5731] usb 4-1: Manufacturer: syz [ 1052.239929][ T5731] usb 4-1: SerialNumber: syz [ 1052.269558][ T863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.269584][ T863] usb 2-1: Product: syz [ 1052.269597][ T863] usb 2-1: Manufacturer: syz [ 1052.269611][ T863] usb 2-1: SerialNumber: syz [ 1052.297937][ T5731] usb 4-1: config 0 descriptor?? [ 1052.321650][ T863] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1052.321676][ T863] r8152-cfgselector 2-1: config 0 descriptor?? [ 1052.546684][T23342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.547443][T23342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.660162][ T5731] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input89 [ 1052.679731][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.679982][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.680194][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.680397][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.680599][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.680802][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.681008][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.681228][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.681426][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.681628][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.681827][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.682022][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.682220][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.682414][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.682605][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.682804][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.682999][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.683194][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.683386][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.683579][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.683785][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.683979][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.684171][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.684378][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.684602][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.684856][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.692171][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.692389][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.692591][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.692796][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.700964][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.708454][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.708668][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.708865][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.709063][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.716689][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.724018][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.724225][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.724429][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.731740][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.739081][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.739285][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.739492][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.739697][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.747067][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.754413][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.754639][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.755143][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.755350][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.762629][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.762875][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.763072][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.763275][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.763482][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.763677][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.763880][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.764083][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.764291][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.764498][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.764709][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.764930][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.765129][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.765327][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.765527][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.765726][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.765928][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.766138][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.766339][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.766543][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.766748][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.766950][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.767143][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.774480][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.781886][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.782113][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.782314][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.782512][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.782715][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.782908][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.783101][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.790568][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.790798][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.791016][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.798350][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.798558][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.798759][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.798952][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.806224][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.806552][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.813902][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.814134][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.821424][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.828829][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.829039][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.836578][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.836792][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.836993][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.844254][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.844461][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.844668][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.844865][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.852129][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.859510][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.859720][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.859924][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.860134][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.860330][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.867650][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.867862][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.868060][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.868258][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.868450][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.868652][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.868845][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.869039][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.869233][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.876779][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.884120][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.891552][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.891771][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.891998][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.892217][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.892431][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.892642][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.892850][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.893058][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.893253][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.893464][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.893673][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.893884][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.901323][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.908724][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.908951][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.909158][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.912479][ T5731] usb 4-1: USB disconnect, device number 24 [ 1052.916493][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 1052.916522][ C1] usb 4-1: hanwang_irq - usb_submit_urb failed with result -19 [ 1054.346882][T23338] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1054.346940][T23338] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1054.346956][T23338] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1054.520133][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.520197][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.822804][ T30] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 1054.954784][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1055.143069][ T31] kauditd_printk_skb: 137 callbacks suppressed [ 1055.143105][ T31] audit: type=1326 audit(1790256329.348:27449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.144646][ T31] audit: type=1326 audit(1790256329.348:27450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.147892][ T31] audit: type=1326 audit(1790256329.358:27451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.148046][ T31] audit: type=1326 audit(1790256329.358:27452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.177681][ T31] audit: type=1326 audit(1790256329.388:27453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.177773][ T31] audit: type=1326 audit(1790256329.388:27454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.177843][ T31] audit: type=1326 audit(1790256329.388:27455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.233472][ T31] audit: type=1326 audit(1790256329.438:27456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.233571][ T31] audit: type=1326 audit(1790256329.438:27457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.238859][ T31] audit: type=1326 audit(1790256329.448:27458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23377 comm="syz.4.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1055.285285][ T8811] net_ratelimit: 282 callbacks suppressed [ 1055.285345][ T8811] bond1: (slave gretap1): failed to get link speed/duplex [ 1055.285396][ T8811] bond1: (slave gretap1): failed to get link speed/duplex [ 1055.285455][ T8811] bond2: (slave gretap2): failed to get link speed/duplex [ 1055.285514][ T8811] bond3: (slave gretap3): failed to get link speed/duplex [ 1055.285581][ T8811] bond4: (slave dummy0): failed to get link speed/duplex [ 1055.285641][ T8811] bond3: (slave gretap1): failed to get link speed/duplex [ 1055.285682][ T8811] bond5: (slave gretap2): failed to get link speed/duplex [ 1055.285750][ T8811] bond1: (slave gretap1): failed to get link speed/duplex [ 1055.285807][ T8811] bond2: (slave gretap2): failed to get link speed/duplex [ 1055.395497][T22168] bond2: (slave gretap2): failed to get link speed/duplex [ 1055.528028][T23382] syzkaller0: entered promiscuous mode [ 1055.528052][T23382] syzkaller0: entered allmulticast mode [ 1055.532659][T23382] tipc: Enabled bearer , priority 0 [ 1055.553607][T23381] tipc: Resetting bearer [ 1055.711727][T23381] tipc: Disabling bearer [ 1055.856902][T23391] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1055.857015][T23391] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1055.921697][T23378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5094'. [ 1055.923922][T23378] netlink: 'syz.4.5094': attribute type 2 has an invalid length. [ 1056.295100][ T5681] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1056.450290][ T5681] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1056.450365][ T5681] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1056.472154][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.472276][ T5681] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.472317][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.482858][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.482959][ T5681] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.483001][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.492298][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.492397][ T5681] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.492437][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.507284][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.507383][ T5681] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.507438][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.526866][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.526976][ T5681] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.527033][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.548922][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.549021][ T5681] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.549064][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.567141][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.567243][ T5681] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.567284][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.581890][ T5681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.581997][ T5681] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.582051][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.609032][ T5681] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1056.609087][ T5681] usb 1-1: Product: syz [ 1056.609118][ T5681] usb 1-1: Manufacturer: syz [ 1056.609134][ T5681] usb 1-1: SerialNumber: syz [ 1056.720728][ T5681] usb 1-1: config 0 descriptor?? [ 1056.823330][ T5681] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1056.911406][T23367] GUP no longer grows the stack in syz.2.5089 (23367): 200000155000-200000200000 (200000154000) [ 1056.911444][T23367] CPU: 1 UID: 0 PID: 23367 Comm: syz.2.5089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1056.911472][T23367] Tainted: [L]=SOFTLOCKUP [ 1056.911479][T23367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1056.911492][T23367] Call Trace: [ 1056.911501][T23367] [ 1056.911510][T23367] dump_stack_lvl+0xe8/0x150 [ 1056.911545][T23367] __get_user_pages+0x23b6/0x2750 [ 1056.911605][T23367] get_user_pages_remote+0x307/0xb10 [ 1056.911639][T23367] ? __pfx_mtree_load+0x10/0x10 [ 1056.911672][T23367] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1056.911697][T23367] ? __access_remote_vm+0xa3/0x6f0 [ 1056.911725][T23367] ? __access_remote_vm+0x42c/0x6f0 [ 1056.911757][T23367] __access_remote_vm+0x222/0x6f0 [ 1056.911794][T23367] ? __pfx___access_remote_vm+0x10/0x10 [ 1056.911831][T23367] proc_pid_cmdline_read+0x46b/0x900 [ 1056.911860][T23367] ? __asan_memset+0x22/0x50 [ 1056.911896][T23367] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1056.911928][T23367] ? rw_verify_area+0x24a/0x4c0 [ 1056.911960][T23367] vfs_readv+0x57c/0x850 [ 1056.911983][T23367] ? __pfx_futex_wake+0x10/0x10 [ 1056.912011][T23367] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1056.912044][T23367] ? __pfx_vfs_readv+0x10/0x10 [ 1056.912080][T23367] ? __fget_files+0x2a/0x420 [ 1056.912111][T23367] ? __fget_files+0x3a2/0x420 [ 1056.912135][T23367] ? __fget_files+0x2a/0x420 [ 1056.912171][T23367] __x64_sys_preadv+0x19c/0x2b0 [ 1056.912194][T23367] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1056.912224][T23367] do_syscall_64+0x166/0x520 [ 1056.912248][T23367] ? trace_irq_disable+0x3b/0x140 [ 1056.912267][T23367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.912287][T23367] ? clear_bhb_loop+0x70/0xc0 [ 1056.912311][T23367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.912331][T23367] RIP: 0033:0x7f3d77b9e159 [ 1056.912350][T23367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.912366][T23367] RSP: 002b:00007f3d78b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1056.912386][T23367] RAX: ffffffffffffffda RBX: 00007f3d77e25fa0 RCX: 00007f3d77b9e159 [ 1056.912400][T23367] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005 [ 1056.912413][T23367] RBP: 00007f3d77c3506b R08: 0000000000006a76 R09: 0000000000000000 [ 1056.912426][T23367] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 1056.912439][T23367] R13: 00007f3d77e26038 R14: 00007f3d77e25fa0 R15: 00007f3d77f4fa48 [ 1056.912471][T23367] [ 1057.241922][ T5681] usb 1-1: USB disconnect, device number 73 [ 1057.277441][ T5681] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1057.598808][ T5731] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1057.786206][ T5731] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1057.790105][ T5731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.790125][ T5731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 1057.790151][ T5731] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1057.790175][ T5731] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1057.790205][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.794021][ T5731] usb 4-1: config 0 descriptor?? [ 1058.037939][T23417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.296621][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296658][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296685][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296700][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296727][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296753][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296779][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296795][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296821][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.296848][ T5731] logitech-djreceiver 0003:046D:C532.0038: unknown main item tag 0x0 [ 1058.513026][ T5731] usb 4-1: USB disconnect, device number 25 [ 1058.557126][T23424] ifb2: left allmulticast mode [ 1058.723866][T23426] loop2: detected capacity change from 0 to 7 [ 1058.738766][T23426] Dev loop2: unable to read RDB block 7 [ 1058.738808][T23426] loop2: unable to read partition table [ 1058.740807][T23426] loop2: partition table beyond EOD, truncated [ 1058.740879][T23426] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1059.207759][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1059.333700][T23428] nvme_fabrics: missing parameter 'transport=%s' [ 1059.333718][T23428] nvme_fabrics: missing parameter 'nqn=%s' [ 1059.354045][T23434] tipc: Cannot configure node identity twice [ 1059.385494][ T863] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1059.535607][ T863] usb 3-1: Using ep0 maxpacket: 8 [ 1059.537409][ T863] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1059.538902][ T863] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.538925][ T863] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1059.538988][ T863] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1059.598184][ T863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.598209][ T863] usb 3-1: Product: syz [ 1059.598223][ T863] usb 3-1: Manufacturer: syz [ 1059.598236][ T863] usb 3-1: SerialNumber: syz [ 1060.123066][T23446] syzkaller1: entered promiscuous mode [ 1060.123110][T23446] syzkaller1: entered allmulticast mode [ 1060.305099][ T8805] net_ratelimit: 345 callbacks suppressed [ 1060.305120][ T8805] bond2: (slave gretap2): failed to get link speed/duplex [ 1060.305173][ T8805] bond1: (slave gretap1): failed to get link speed/duplex [ 1060.305607][ T8805] bond2: (slave gretap2): failed to get link speed/duplex [ 1060.305666][ T8805] bond5: (slave gretap2): failed to get link speed/duplex [ 1060.305700][ T8805] bond3: (slave gretap1): failed to get link speed/duplex [ 1060.305735][ T8805] bond3: (slave gretap3): failed to get link speed/duplex [ 1060.305803][ T8805] bond4: (slave dummy0): failed to get link speed/duplex [ 1060.305840][ T8805] bond1: (slave gretap1): failed to get link speed/duplex [ 1060.307017][T22167] bond1: (slave gretap1): failed to get link speed/duplex [ 1060.417791][T22167] bond1: (slave gretap1): failed to get link speed/duplex [ 1060.515612][ T863] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1060.515652][ T863] usb 3-1: clock source 0 is not valid, cannot use [ 1060.516181][ T863] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1060.516600][ T863] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1060.689924][ T863] usb 3-1: USB disconnect, device number 55 [ 1061.042753][T23462] netlink: 'syz.2.5121': attribute type 1 has an invalid length. [ 1061.216297][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.297291][T23467] netlink: 'syz.2.5121': attribute type 10 has an invalid length. [ 1061.306363][T23467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5121'. [ 1061.478459][T23462] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1061.550140][T23465] bond5: (slave gretap4): Enslaving as a backup interface with an up link [ 1061.603850][T23466] bond4: (slave dummy0): Releasing backup interface [ 1061.640293][T23466] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 1061.700308][T23467] dummy0: entered promiscuous mode [ 1061.711162][T23467] bond5: (slave dummy0): Releasing backup interface [ 1062.235689][ T863] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1062.391786][ T863] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1062.412760][ T863] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1062.412788][ T863] usb 2-1: config 0 has no interface number 0 [ 1062.412829][ T863] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1062.448604][ T863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.448632][ T863] usb 2-1: Product: syz [ 1062.448646][ T863] usb 2-1: Manufacturer: syz [ 1062.448660][ T863] usb 2-1: SerialNumber: syz [ 1062.478424][ T863] usb 2-1: config 0 descriptor?? [ 1062.841226][T23485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1063.242752][ T863] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1063.258872][T11587] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1063.315654][ T863] usb 2-1: USB disconnect, device number 15 [ 1063.434754][T11587] usb 3-1: Using ep0 maxpacket: 32 [ 1063.454523][T11587] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1063.454593][T11587] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 1063.482164][T11587] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1063.513649][T11587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.513675][T11587] usb 3-1: Product: syz [ 1063.513689][T11587] usb 3-1: Manufacturer: syz [ 1063.513702][T11587] usb 3-1: SerialNumber: syz [ 1063.814373][ T31] kauditd_printk_skb: 142 callbacks suppressed [ 1063.814393][ T31] audit: type=1326 audit(1790256338.018:27601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1063.814687][ T31] audit: type=1326 audit(1790256338.018:27602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1063.880460][ T31] audit: type=1326 audit(1790256338.078:27603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1063.880512][ T31] audit: type=1326 audit(1790256338.078:27604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1063.880553][ T31] audit: type=1326 audit(1790256338.078:27605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1063.905958][ T31] audit: type=1326 audit(1790256338.098:27606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1063.946273][ T31] audit: type=1326 audit(1790256338.148:27607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1063.946393][ T31] audit: type=1326 audit(1790256338.148:27608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1064.009566][ T31] audit: type=1326 audit(1790256338.218:27609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1064.010234][ T31] audit: type=1326 audit(1790256338.218:27610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23535 comm="syz.4.5128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba5b9e159 code=0x7ffc0000 [ 1064.972251][T23571] nvme_fabrics: missing parameter 'transport=%s' [ 1064.972293][T23571] nvme_fabrics: missing parameter 'nqn=%s' [ 1065.250847][ T30] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1065.254946][ T863] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1065.385881][ T8803] net_ratelimit: 223 callbacks suppressed [ 1065.385912][ T8803] bond1: (slave gretap1): failed to get link speed/duplex [ 1065.388486][ T8803] bond2: (slave gretap2): failed to get link speed/duplex [ 1065.388590][ T8803] bond2: (slave gretap2): failed to get link speed/duplex [ 1065.388812][ T8803] bond5: (slave gretap2): failed to get link speed/duplex [ 1065.388892][ T8803] bond3: (slave gretap1): failed to get link speed/duplex [ 1065.388986][ T8803] bond1: (slave gretap1): failed to get link speed/duplex [ 1065.391574][ T8803] bond3: (slave gretap3): failed to get link speed/duplex [ 1065.391647][ T8803] bond1: (slave gretap1): failed to get link speed/duplex [ 1065.485008][ T863] usb 1-1: Using ep0 maxpacket: 8 [ 1065.500643][ T863] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1065.546589][ T863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.546615][ T863] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1065.546707][ T863] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1065.550131][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1065.550355][ T30] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1065.556167][ T8805] bond1: (slave gretap1): failed to get link speed/duplex [ 1065.556274][ T8805] bond3: (slave gretap3): failed to get link speed/duplex [ 1065.650320][ T30] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1065.650741][ T863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.650762][ T863] usb 1-1: Product: syz [ 1065.650775][ T863] usb 1-1: Manufacturer: syz [ 1065.650788][ T863] usb 1-1: SerialNumber: syz [ 1065.709026][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.709057][ T30] usb 2-1: Product: Ðœ [ 1065.709071][ T30] usb 2-1: Manufacturer: à “ [ 1065.709114][ T30] usb 2-1: SerialNumber: Ð’ [ 1065.781983][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1065.782086][T23592] netlink: 'syz.3.5133': attribute type 2 has an invalid length. [ 1065.990309][ T30] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1066.046298][ T30] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1066.046326][ T30] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1066.049389][ T30] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1066.249341][T23591] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.249356][T23591] binder: 23586:23591 ioctl 4018620d 200000004a80 returned -16 [ 1066.249531][T23591] binder: 23586:23591 ioctl c0306201 2000000004c0 returned -22 [ 1066.252752][T23591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.253322][T23591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.049421][ T5714] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1067.230947][ T863] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1067.230974][ T863] usb 1-1: clock source 0 is not valid, cannot use [ 1067.235449][ T863] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1067.235699][ T5714] usb 5-1: device descriptor read/64, error -71 [ 1067.235957][ T863] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1067.347852][ T30] usb 2-1: USB disconnect, device number 16 [ 1067.475909][ T5714] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1067.621036][ T5714] usb 5-1: device descriptor read/64, error -71 [ 1067.726075][ T5714] usb usb5-port1: attempt power cycle [ 1067.788586][ T863] usb 1-1: USB disconnect, device number 74 [ 1067.991219][T23618] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5136'. [ 1068.075586][ T5714] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1068.096273][ T5714] usb 5-1: device descriptor read/8, error -71 [ 1068.368379][ T5714] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1068.425396][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.454547][ T5714] usb 5-1: device descriptor read/8, error -71 [ 1068.556156][ T5714] usb usb5-port1: unable to enumerate USB device [ 1068.690422][T23621] syzkaller1: entered promiscuous mode [ 1068.690444][T23621] syzkaller1: entered allmulticast mode [ 1068.723236][T11587] appletouch 3-1:1.0: Failed to read mode from device. [ 1068.723432][T11587] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1068.842620][ T8516] udevd[8516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1069.829600][T23614] usb 3-1: USB disconnect, device number 56 [ 1070.955586][ T69] net_ratelimit: 200 callbacks suppressed [ 1070.955608][ T69] bond2: (slave gretap2): failed to get link speed/duplex [ 1070.955642][ T69] bond2: (slave gretap2): failed to get link speed/duplex [ 1070.955669][ T69] bond5: (slave gretap2): failed to get link speed/duplex [ 1070.955695][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1070.955721][ T69] bond3: (slave gretap3): failed to get link speed/duplex [ 1070.955747][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1070.955772][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1070.955799][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 1071.065731][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 1071.065829][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1071.431531][T23647] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5142'. [ 1071.489981][T23652] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5143'. [ 1071.670277][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5142'. [ 1071.692780][T23652] syzkaller1: entered promiscuous mode [ 1071.692795][T23652] syzkaller1: entered allmulticast mode [ 1072.004550][T23660] FAULT_INJECTION: forcing a failure. [ 1072.004550][T23660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.004601][T23660] CPU: 0 UID: 0 PID: 23660 Comm: syz.4.5145 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.004626][T23660] Tainted: [L]=SOFTLOCKUP [ 1072.004633][T23660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1072.004643][T23660] Call Trace: [ 1072.004651][T23660] [ 1072.004659][T23660] dump_stack_lvl+0xe8/0x150 [ 1072.004691][T23660] should_fail_ex+0x410/0x560 [ 1072.004718][T23660] _copy_from_iter+0x1d3/0x1660 [ 1072.004747][T23660] ? __alloc_skb+0x46f/0x7a0 [ 1072.004771][T23660] ? __pfx__copy_from_iter+0x10/0x10 [ 1072.004790][T23660] ? kasan_check_range+0x93/0x2c0 [ 1072.004818][T23660] ? netlink_sendmsg+0x650/0xb40 [ 1072.004834][T23660] ? skb_put+0x112/0x210 [ 1072.004858][T23660] netlink_sendmsg+0x6c0/0xb40 [ 1072.004874][T23660] ? lockdep_hardirqs_on+0x7b/0x110 [ 1072.004906][T23660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.004932][T23660] ? apparmor_socket_sendmsg+0x98/0x360 [ 1072.004956][T23660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.004972][T23660] sock_sendmsg_nosec+0x13a/0x180 [ 1072.004994][T23660] ____sys_sendmsg+0x54e/0x850 [ 1072.005026][T23660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1072.005060][T23660] ? import_iovec+0x73/0xa0 [ 1072.005086][T23660] ___sys_sendmsg+0x2a5/0x360 [ 1072.005110][T23660] ? __lock_acquire+0x747/0x2de0 [ 1072.005133][T23660] ? __pfx____sys_sendmsg+0x10/0x10 [ 1072.005190][T23660] ? __fget_files+0x2a/0x420 [ 1072.005212][T23660] ? __fget_files+0x3a2/0x420 [ 1072.005246][T23660] __x64_sys_sendmsg+0x1b1/0x290 [ 1072.005274][T23660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1072.005319][T23660] do_syscall_64+0x166/0x520 [ 1072.005341][T23660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.005361][T23660] ? clear_bhb_loop+0x70/0xc0 [ 1072.005384][T23660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.005403][T23660] RIP: 0033:0x7ffba5b9e159 [ 1072.005421][T23660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.005436][T23660] RSP: 002b:00007ffba69bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.005457][T23660] RAX: ffffffffffffffda RBX: 00007ffba5e25fa0 RCX: 00007ffba5b9e159 [ 1072.005471][T23660] RDX: 000000000000c040 RSI: 0000200000000100 RDI: 0000000000000003 [ 1072.005483][T23660] RBP: 00007ffba69bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.005503][T23660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.005514][T23660] R13: 00007ffba5e26038 R14: 00007ffba5e25fa0 R15: 00007ffba5f4fa48 [ 1072.005544][T23660] [ 1072.835944][T23614] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1072.869646][T23664] nvme_fabrics: missing parameter 'transport=%s' [ 1072.869664][T23664] nvme_fabrics: missing parameter 'nqn=%s' [ 1072.895606][T23670] loop2: detected capacity change from 0 to 7 [ 1072.897204][T23670] Dev loop2: unable to read RDB block 7 [ 1072.897242][T23670] loop2: unable to read partition table [ 1072.897415][T23670] loop2: partition table beyond EOD, truncated [ 1072.897473][T23670] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1072.995583][T23614] usb 3-1: Using ep0 maxpacket: 8 [ 1073.003225][T23614] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1073.022649][T23614] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.022677][T23614] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1073.022732][T23614] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1073.024872][T23614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.024896][T23614] usb 3-1: Product: syz [ 1073.024910][T23614] usb 3-1: Manufacturer: syz [ 1073.024924][T23614] usb 3-1: SerialNumber: syz [ 1073.665332][T23680] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5152'. [ 1073.665491][T23680] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5152'. [ 1074.048911][T23614] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1074.048939][T23614] usb 3-1: clock source 0 is not valid, cannot use [ 1074.053968][T23614] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1074.102318][T23614] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1074.312292][T23614] usb 3-1: USB disconnect, device number 57 [ 1074.719004][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.274152][ T5731] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1075.380922][T23701] lo: entered allmulticast mode [ 1075.437727][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 1075.440029][ T5731] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1075.443787][ T5731] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1075.443829][ T5731] usb 2-1: config 0 has no interface number 0 [ 1075.443915][ T5731] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1075.443952][ T5731] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1075.443990][ T5731] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1075.444029][ T5731] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1075.444114][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.478072][ T5731] usb 2-1: config 0 descriptor?? [ 1075.544297][T23699] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5160'. [ 1075.650828][ T5731] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1075.833276][ T5681] usb 2-1: USB disconnect, device number 17 [ 1075.842872][ T5681] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1075.897330][T11587] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1075.969619][T23697] syz_tun: entered promiscuous mode [ 1075.972270][T23697] syz_tun: left promiscuous mode [ 1076.044887][T11587] usb 4-1: Using ep0 maxpacket: 32 [ 1076.046995][T11587] usb 4-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 1076.048328][T11587] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.048374][T11587] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.050913][T11587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.050935][T11587] usb 4-1: Product: syz [ 1076.050949][T11587] usb 4-1: Manufacturer: syz [ 1076.050962][T11587] usb 4-1: SerialNumber: syz [ 1076.060438][ T5731] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1076.255310][ T69] net_ratelimit: 288 callbacks suppressed [ 1076.255330][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1076.255383][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 1076.255452][ T69] bond2: (slave gretap2): failed to get link speed/duplex [ 1076.255491][ T69] bond5: (slave gretap2): failed to get link speed/duplex [ 1076.255559][ T69] bond3: (slave gretap3): failed to get link speed/duplex [ 1076.255761][ T69] bond2: (slave gretap2): failed to get link speed/duplex [ 1076.255851][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1076.255943][ T69] bond1: (slave gretap1): failed to get link speed/duplex [ 1076.288674][ T5731] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1076.297263][ T5731] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1076.297323][ T5731] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 13243, setting to 1024 [ 1076.297363][ T5731] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1076.297432][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.370646][T23706] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1076.375465][T23706] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1076.648291][T23717] IPv6: NLM_F_CREATE should be specified when creating new route [ 1076.854731][T23706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.883284][T23706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.909316][T11587] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1076.909393][T11587] usb 4-1: MIDIStreaming interface descriptor not found [ 1076.975784][ T181] bond1: (slave gretap1): failed to get link speed/duplex [ 1076.975850][ T8805] bond1: (slave gretap1): failed to get link speed/duplex [ 1077.082983][T11587] usb 4-1: USB disconnect, device number 26 [ 1077.294974][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.622032][T23723] nvme_fabrics: missing parameter 'transport=%s' [ 1077.622052][T23723] nvme_fabrics: missing parameter 'nqn=%s' [ 1077.785234][T11587] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1077.956602][T11587] usb 1-1: Using ep0 maxpacket: 8 [ 1077.972040][T11587] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1077.973431][T11587] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.973452][T11587] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1077.973529][T11587] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1078.023128][T11587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.023154][T11587] usb 1-1: Product: syz [ 1078.023193][T11587] usb 1-1: Manufacturer: syz [ 1078.023207][T11587] usb 1-1: SerialNumber: syz [ 1078.318708][T23710] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1078.683219][T12720] Bluetooth: hci0: Reading Intel version command failed (-110) [ 1078.800261][ T5731] usb 3-1: USB disconnect, device number 58 [ 1079.417743][T11587] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1079.417778][T11587] usb 1-1: clock source 0 is not valid, cannot use [ 1079.418208][T11587] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1079.420216][T11587] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1079.687382][T11587] usb 1-1: USB disconnect, device number 75 [ 1079.871880][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.005563][ C0] BUG: TASK stack guard page was hit at ffffc90009847fa8 (stack is ffffc90009848000..ffffc90009850000) [ 1080.005614][ C0] Oops: stack guard page: 0000 [#1] SMP KASAN PTI [ 1080.023097][ C0] CPU: 0 UID: 0 PID: 23737 Comm: syz.2.5168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.034142][ C0] Tainted: [L]=SOFTLOCKUP [ 1080.038483][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1080.048731][ C0] RIP: 0010:__lock_acquire+0x29/0x2de0 [ 1080.054222][ C0] Code: 90 55 41 57 41 56 41 55 41 54 53 48 81 ec e8 00 00 00 65 48 8b 05 7f 15 f2 11 48 89 84 24 e0 00 00 00 65 48 8b 05 4f 15 f2 11 <48> 89 44 24 08 45 31 f6 83 3d b8 47 d7 0e 00 0f 84 90 14 00 00 48 [ 1080.073851][ C0] RSP: 0000:ffffc90009847fb8 EFLAGS: 00010096 [ 1080.079944][ C0] RAX: ffff888033693e80 RBX: 0000000000000000 RCX: 0000000000000002 [ 1080.087930][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ed5c920 [ 1080.095921][ C0] RBP: ffff888033693e80 R08: 0000000000000000 R09: 0000000000000000 [ 1080.103911][ C0] R10: ffffc900098481e0 R11: fffff52001309042 R12: ffffffff8ed5c920 [ 1080.111987][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1080.115204][T23752] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1080.123603][T23752] syzkaller1: entered promiscuous mode [ 1080.123623][T23752] syzkaller1: entered allmulticast mode [ 1080.140145][ C0] FS: 00007f3d78b3f6c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 1080.149273][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1080.155882][ C0] CR2: ffffc90009847fa8 CR3: 000000005e71e000 CR4: 00000000003526f0 [ 1080.163884][ C0] Call Trace: [ 1080.167189][ C0] [ 1080.170145][ C0] lock_acquire+0x115/0x350 [ 1080.174671][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1080.180411][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1080.186084][ C0] ip_route_output_key_hash+0xf4/0x2a0 [ 1080.191655][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1080.197314][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1080.203407][ C0] ip_route_output_flow+0x2a/0x150 [ 1080.208560][ C0] ipvlan_process_v4_outbound+0x2f8/0x740 [ 1080.214314][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1080.220607][ C0] ? dst_release+0x79/0x1b0 [ 1080.225173][ C0] ? skb_pull+0xb9/0x1d0 [ 1080.229429][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1080.234456][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1080.239418][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1080.244723][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1080.249781][ C0] ? __bfs+0x153/0x290 [ 1080.253871][ C0] ? check_noncircular+0xdb/0x150 [ 1080.258893][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1080.264013][ C0] ? lockdep_unlock+0x5c/0xd0 [ 1080.268719][ C0] ? __lock_acquire+0x1511/0x2de0 [ 1080.273748][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1080.279129][ C0] ? ip_output+0x29f/0x450 [ 1080.283548][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1080.288745][ C0] ip_finish_output2+0xbda/0x10b0 [ 1080.293772][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1080.298969][ C0] ip_output+0x29f/0x450 [ 1080.303206][ C0] ? ip_output+0x5a/0x450 [ 1080.307550][ C0] ? __pfx_ip_output+0x10/0x10 [ 1080.312329][ C0] NF_HOOK+0x605/0x660 [ 1080.316539][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1080.321122][ C0] ? __ip_vs_get_out_rt+0xc62/0x1420 [ 1080.326523][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.331473][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1080.336842][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1080.341540][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1080.346745][ C0] ? ip_vs_in_stats+0xc0/0x430 [ 1080.351616][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1080.356926][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1080.362125][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1080.366803][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1080.371754][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1080.376882][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1080.382341][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1080.387455][ C0] nf_hook_slow+0xc5/0x220 [ 1080.391972][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.396837][ C0] nf_hook+0x22a/0x3a0 [ 1080.400906][ C0] ? nf_hook+0xa1/0x3a0 [ 1080.405049][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1080.409634][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.414474][ C0] ? __ip_local_out+0x152/0x6a0 [ 1080.419331][ C0] __ip_local_out+0x558/0x6a0 [ 1080.424045][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.428892][ C0] ip_local_out+0x2a/0x190 [ 1080.433327][ C0] ipvlan_process_v4_outbound+0x448/0x740 [ 1080.439083][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1080.445381][ C0] ? dst_release+0x79/0x1b0 [ 1080.449903][ C0] ? skb_pull+0xb9/0x1d0 [ 1080.454138][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1080.459158][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1080.464000][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1080.469123][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1080.474149][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1080.479253][ C0] ? lapic_next_event+0x11/0x20 [ 1080.484091][ C0] ? clockevents_program_event+0x491/0x630 [ 1080.489884][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1080.496027][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1080.501391][ C0] ? irqentry_exit+0x218/0x910 [ 1080.506144][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1080.511354][ C0] ip_finish_output2+0xbda/0x10b0 [ 1080.516364][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1080.521576][ C0] ip_output+0x29f/0x450 [ 1080.525830][ C0] ? ip_output+0x5a/0x450 [ 1080.530162][ C0] ? __pfx_ip_output+0x10/0x10 [ 1080.534908][ C0] NF_HOOK+0x605/0x660 [ 1080.538976][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1080.543549][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.548409][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1080.553769][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1080.558437][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1080.563628][ C0] ? ip_vs_in_stats+0xc0/0x430 [ 1080.568379][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1080.573655][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1080.578935][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1080.583603][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1080.588524][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1080.593624][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1080.598977][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1080.604074][ C0] nf_hook_slow+0xc5/0x220 [ 1080.608475][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.613305][ C0] nf_hook+0x22a/0x3a0 [ 1080.617353][ C0] ? nf_hook+0xa1/0x3a0 [ 1080.621488][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1080.626067][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.630900][ C0] ? __ip_local_out+0x152/0x6a0 [ 1080.635740][ C0] __ip_local_out+0x558/0x6a0 [ 1080.640404][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.645238][ C0] ip_local_out+0x2a/0x190 [ 1080.649635][ C0] ipvlan_process_v4_outbound+0x448/0x740 [ 1080.655362][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1080.661590][ C0] ? dst_release+0x79/0x1b0 [ 1080.666080][ C0] ? skb_pull+0xb9/0x1d0 [ 1080.670311][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1080.675318][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1080.680155][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1080.685267][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1080.690279][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1080.695374][ C0] ? lapic_next_event+0x11/0x20 [ 1080.700228][ C0] ? clockevents_program_event+0x491/0x630 [ 1080.706041][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1080.712178][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1080.717564][ C0] ? irqentry_exit+0x218/0x910 [ 1080.722315][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1080.727522][ C0] ip_finish_output2+0xbda/0x10b0 [ 1080.732530][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1080.737711][ C0] ip_output+0x29f/0x450 [ 1080.741944][ C0] ? ip_output+0x5a/0x450 [ 1080.746254][ C0] ? __pfx_ip_output+0x10/0x10 [ 1080.750995][ C0] NF_HOOK+0x605/0x660 [ 1080.755133][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1080.759701][ C0] ? __ip_vs_get_out_rt+0xc62/0x1420 [ 1080.764988][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.769828][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1080.775198][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1080.779861][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1080.785049][ C0] ? __pfx_tcp_state_transition+0x10/0x10 [ 1080.790859][ C0] ? ip_vs_in_hook+0xd91/0x1c90 [ 1080.795713][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1080.800983][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1080.805648][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1080.810738][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1080.815835][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1080.821202][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1080.826292][ C0] nf_hook_slow+0xc5/0x220 [ 1080.830688][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.835516][ C0] nf_hook+0x22a/0x3a0 [ 1080.839566][ C0] ? nf_hook+0xa1/0x3a0 [ 1080.843710][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1080.848285][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.853130][ C0] ? __ip_local_out+0x152/0x6a0 [ 1080.857980][ C0] __ip_local_out+0x558/0x6a0 [ 1080.862651][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.867494][ C0] ip_local_out+0x2a/0x190 [ 1080.871894][ C0] ipvlan_process_v4_outbound+0x448/0x740 [ 1080.877594][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1080.882785][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1080.889016][ C0] ? ipvlan_queue_xmit+0x80a/0x16b0 [ 1080.894205][ C0] ? skb_pull+0xb9/0x1d0 [ 1080.898441][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1080.903471][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1080.908323][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1080.913434][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1080.918486][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1080.923675][ C0] ? lapic_next_event+0x11/0x20 [ 1080.928512][ C0] ? clockevents_program_event+0x491/0x630 [ 1080.934312][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1080.940454][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1080.945931][ C0] ? irqentry_exit+0x218/0x910 [ 1080.950683][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1080.955888][ C0] ip_finish_output2+0xbda/0x10b0 [ 1080.960895][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1080.966073][ C0] ip_output+0x29f/0x450 [ 1080.970301][ C0] ? ip_output+0x5a/0x450 [ 1080.974645][ C0] ? __pfx_ip_output+0x10/0x10 [ 1080.979419][ C0] NF_HOOK+0x605/0x660 [ 1080.983484][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1080.988070][ C0] ? __ip_vs_get_out_rt+0xc62/0x1420 [ 1080.993387][ C0] ? __pfx_dst_output+0x10/0x10 [ 1080.998234][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1081.003596][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1081.008267][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.013448][ C0] ? ip_vs_in_stats+0xc0/0x430 [ 1081.018208][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1081.023488][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.028672][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1081.033341][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1081.038276][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.043374][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1081.048731][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.053835][ C0] nf_hook_slow+0xc5/0x220 [ 1081.058249][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.063085][ C0] nf_hook+0x22a/0x3a0 [ 1081.067141][ C0] ? nf_hook+0xa1/0x3a0 [ 1081.071273][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1081.075850][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.080681][ C0] ? __ip_local_out+0x152/0x6a0 [ 1081.085526][ C0] __ip_local_out+0x558/0x6a0 [ 1081.090197][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.095029][ C0] ip_local_out+0x2a/0x190 [ 1081.099426][ C0] ipvlan_process_v4_outbound+0x448/0x740 [ 1081.105129][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1081.111362][ C0] ? dst_release+0x79/0x1b0 [ 1081.115892][ C0] ? skb_pull+0xb9/0x1d0 [ 1081.120138][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1081.125153][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1081.129992][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1081.135113][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1081.140129][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1081.145242][ C0] ? lapic_next_event+0x11/0x20 [ 1081.150075][ C0] ? clockevents_program_event+0x491/0x630 [ 1081.155905][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1081.162052][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1081.167422][ C0] ? irqentry_exit+0x218/0x910 [ 1081.172181][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1081.177397][ C0] ip_finish_output2+0xbda/0x10b0 [ 1081.182444][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1081.187630][ C0] ip_output+0x29f/0x450 [ 1081.191881][ C0] ? ip_output+0x5a/0x450 [ 1081.196213][ C0] ? __pfx_ip_output+0x10/0x10 [ 1081.200962][ C0] NF_HOOK+0x605/0x660 [ 1081.205119][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1081.209694][ C0] ? __ip_vs_get_out_rt+0xc62/0x1420 [ 1081.214970][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.219821][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1081.225195][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1081.229868][ C0] ? trace_irq_disable+0x3b/0x140 [ 1081.234886][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.240082][ C0] ? ip_vs_in_stats+0xc0/0x430 [ 1081.244837][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1081.250118][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.255302][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1081.259984][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1081.265080][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.270180][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1081.275569][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.280671][ C0] nf_hook_slow+0xc5/0x220 [ 1081.285094][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.289925][ C0] nf_hook+0x22a/0x3a0 [ 1081.293977][ C0] ? nf_hook+0xa1/0x3a0 [ 1081.298110][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1081.302688][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.307528][ C0] ? __ip_local_out+0x152/0x6a0 [ 1081.312372][ C0] __ip_local_out+0x558/0x6a0 [ 1081.317035][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.321869][ C0] ip_local_out+0x2a/0x190 [ 1081.326293][ C0] ipvlan_process_v4_outbound+0x448/0x740 [ 1081.332003][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1081.338228][ C0] ? dst_release+0x79/0x1b0 [ 1081.342714][ C0] ? skb_pull+0xb9/0x1d0 [ 1081.346970][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1081.351983][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1081.356836][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1081.361939][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1081.366959][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1081.372069][ C0] ? lapic_next_event+0x11/0x20 [ 1081.376914][ C0] ? clockevents_program_event+0x491/0x630 [ 1081.382714][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1081.388888][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1081.394350][ C0] ? irqentry_exit+0x218/0x910 [ 1081.399127][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1081.404329][ C0] ip_finish_output2+0xbda/0x10b0 [ 1081.409350][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1081.414539][ C0] ip_output+0x29f/0x450 [ 1081.418765][ C0] ? ip_output+0x5a/0x450 [ 1081.423081][ C0] ? __pfx_ip_output+0x10/0x10 [ 1081.427827][ C0] NF_HOOK+0x605/0x660 [ 1081.431887][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1081.436464][ C0] ? __ip_vs_get_out_rt+0xc62/0x1420 [ 1081.441742][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.446621][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1081.451998][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1081.456665][ C0] ? trace_irq_disable+0x3b/0x140 [ 1081.461695][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.466877][ C0] ? ip_vs_in_stats+0xc0/0x430 [ 1081.471628][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1081.476920][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.482103][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1081.486766][ C0] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 1081.492246][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1081.497179][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.502312][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1081.507688][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.512795][ C0] nf_hook_slow+0xc5/0x220 [ 1081.517223][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.522057][ C0] nf_hook+0x22a/0x3a0 [ 1081.526135][ C0] ? nf_hook+0xa1/0x3a0 [ 1081.530270][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1081.534865][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.539721][ C0] ? __ip_local_out+0x152/0x6a0 [ 1081.544566][ C0] __ip_local_out+0x558/0x6a0 [ 1081.549247][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.554089][ C0] ip_local_out+0x2a/0x190 [ 1081.558487][ C0] ipvlan_process_v4_outbound+0x448/0x740 [ 1081.564197][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1081.570430][ C0] ? dst_release+0x79/0x1b0 [ 1081.574917][ C0] ? skb_pull+0xb9/0x1d0 [ 1081.579160][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1081.584167][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1081.589000][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1081.594099][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1081.599133][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1081.604265][ C0] ? lapic_next_event+0x11/0x20 [ 1081.609198][ C0] ? clockevents_program_event+0x491/0x630 [ 1081.614996][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1081.621140][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1081.626692][ C0] ? irqentry_exit+0x218/0x910 [ 1081.631463][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1081.636662][ C0] ip_finish_output2+0xbda/0x10b0 [ 1081.641678][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1081.646861][ C0] ip_output+0x29f/0x450 [ 1081.651186][ C0] ? ip_output+0x5a/0x450 [ 1081.655515][ C0] ? __pfx_ip_output+0x10/0x10 [ 1081.660263][ C0] NF_HOOK+0x605/0x660 [ 1081.664325][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1081.668899][ C0] ? __ip_vs_get_out_rt+0xc62/0x1420 [ 1081.674168][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.679006][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1081.684375][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1081.689057][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.694248][ C0] ? ip_vs_in_stats+0xc0/0x430 [ 1081.698998][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1081.704295][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.709491][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1081.714169][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1081.719093][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.724208][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1081.729599][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.734736][ C0] nf_hook_slow+0xc5/0x220 [ 1081.739242][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.744099][ C0] nf_hook+0x22a/0x3a0 [ 1081.748170][ C0] ? nf_hook+0xa1/0x3a0 [ 1081.752315][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1081.756895][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.761731][ C0] ? __ip_local_out+0x152/0x6a0 [ 1081.766572][ C0] __ip_local_out+0x558/0x6a0 [ 1081.771244][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.776077][ C0] ip_local_out+0x2a/0x190 [ 1081.780487][ C0] ipvlan_process_v4_outbound+0x448/0x740 [ 1081.786214][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1081.792452][ C0] ? dst_release+0x79/0x1b0 [ 1081.796944][ C0] ? skb_pull+0xb9/0x1d0 [ 1081.801199][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1081.806229][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1081.811074][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1081.816175][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1081.821187][ C0] ? __bfs+0x153/0x290 [ 1081.825259][ C0] ? check_noncircular+0xdb/0x150 [ 1081.830266][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1081.835369][ C0] ? lockdep_unlock+0x5c/0xd0 [ 1081.840034][ C0] ? __lock_acquire+0x1511/0x2de0 [ 1081.845041][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1081.850417][ C0] ? ip_output+0x29f/0x450 [ 1081.854818][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1081.860015][ C0] ip_finish_output2+0xbda/0x10b0 [ 1081.865033][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1081.870217][ C0] ip_output+0x29f/0x450 [ 1081.874444][ C0] ? ip_output+0x5a/0x450 [ 1081.878765][ C0] ? __pfx_ip_output+0x10/0x10 [ 1081.883629][ C0] NF_HOOK+0x605/0x660 [ 1081.887708][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1081.892360][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.897205][ C0] ? __pfx_tcp_wfree+0x10/0x10 [ 1081.902072][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1081.907437][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1081.912114][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.917302][ C0] ? ip_vs_in_stats+0xc0/0x430 [ 1081.922052][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1081.927323][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1081.932500][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1081.937164][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1081.942084][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.947180][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1081.952530][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1081.957628][ C0] nf_hook_slow+0xc5/0x220 [ 1081.962023][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.966870][ C0] nf_hook+0x22a/0x3a0 [ 1081.970921][ C0] ? nf_hook+0xa1/0x3a0 [ 1081.975052][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1081.979627][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.984458][ C0] ? __ip_local_out+0x152/0x6a0 [ 1081.989324][ C0] __ip_local_out+0x558/0x6a0 [ 1081.994005][ C0] ? __pfx_dst_output+0x10/0x10 [ 1081.998837][ C0] ip_local_out+0x2a/0x190 [ 1082.003234][ C0] ipvlan_process_v4_outbound+0x448/0x740 [ 1082.008972][ C0] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 1082.015226][ C0] ? dst_release+0x79/0x1b0 [ 1082.019747][ C0] ? skb_pull+0xb9/0x1d0 [ 1082.023983][ C0] ipvlan_queue_xmit+0xabf/0x16b0 [ 1082.029005][ C0] ipvlan_start_xmit+0x4a/0x130 [ 1082.033845][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1082.038950][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1082.043978][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1082.049090][ C0] ? __lock_acquire+0x747/0x2de0 [ 1082.054013][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1082.059375][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 1082.064292][ C0] ? ip_output+0x29f/0x450 [ 1082.068701][ C0] ? ip_finish_output2+0x972/0x10b0 [ 1082.073928][ C0] ip_finish_output2+0xbda/0x10b0 [ 1082.078942][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1082.084137][ C0] ip_output+0x29f/0x450 [ 1082.088389][ C0] ? ip_output+0x5a/0x450 [ 1082.092712][ C0] ? __pfx_ip_output+0x10/0x10 [ 1082.097477][ C0] NF_HOOK+0x605/0x660 [ 1082.101540][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1082.106123][ C0] ? __pfx_dst_output+0x10/0x10 [ 1082.110959][ C0] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 1082.116338][ C0] ip_vs_nat_xmit+0x76a/0xb40 [ 1082.121003][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1082.126206][ C0] ? ip_vs_in_stats+0xc0/0x430 [ 1082.130954][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1082.136226][ C0] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 1082.141458][ C0] ip_vs_in_hook+0xe02/0x1c90 [ 1082.146124][ C0] ? ip_vs_out_hook+0x99f/0x1030 [ 1082.151047][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1082.156178][ C0] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 1082.161552][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1082.166656][ C0] nf_hook_slow+0xc5/0x220 [ 1082.171076][ C0] ? __pfx_dst_output+0x10/0x10 [ 1082.175917][ C0] nf_hook+0x22a/0x3a0 [ 1082.179975][ C0] ? nf_hook+0xa1/0x3a0 [ 1082.184119][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1082.188707][ C0] ? __pfx_dst_output+0x10/0x10 [ 1082.193559][ C0] __ip_local_out+0x558/0x6a0 [ 1082.198253][ C0] ? __pfx_dst_output+0x10/0x10 [ 1082.203093][ C0] ip_local_out+0x2a/0x190 [ 1082.207502][ C0] ? __ip_queue_xmit+0x65/0x1b10 [ 1082.212425][ C0] __ip_queue_xmit+0x10df/0x1b10 [ 1082.217346][ C0] ? __ip_queue_xmit+0x65/0x1b10 [ 1082.222267][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1082.227375][ C0] __tcp_transmit_skb+0x2d18/0x47c0 [ 1082.232604][ C0] ? lock_acquire+0x115/0x350 [ 1082.237273][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1082.242820][ C0] ? ktime_get+0x45/0x220 [ 1082.247130][ C0] ? ktime_get+0x45/0x220 [ 1082.251531][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1082.257696][ C0] tcp_connect+0x22f1/0x54e0 [ 1082.262281][ C0] ? __pfx_tcp_connect+0x10/0x10 [ 1082.267203][ C0] ? __asan_memset+0x22/0x50 [ 1082.271786][ C0] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1082.278095][ C0] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 1082.283889][ C0] ? sk_setup_caps+0x94f/0xbc0 [ 1082.288647][ C0] ? sk_setup_caps+0x29/0xbc0 [ 1082.293310][ C0] tcp_v4_connect+0x1051/0x1950 [ 1082.298151][ C0] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1082.303353][ C0] __inet_stream_connect+0x258/0xe00 [ 1082.308683][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1082.313697][ C0] ? __pfx___inet_stream_connect+0x10/0x10 [ 1082.319516][ C0] ? inet_stream_connect+0x51/0xa0 [ 1082.324657][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1082.329932][ C0] inet_stream_connect+0x66/0xa0 [ 1082.334858][ C0] __sys_connect+0x316/0x450 [ 1082.339454][ C0] ? __pfx___sys_connect+0x10/0x10 [ 1082.344561][ C0] ? lockdep_softirqs_on+0x11e/0x190 [ 1082.349826][ C0] __x64_sys_connect+0x7a/0x90 [ 1082.354596][ C0] do_syscall_64+0x166/0x520 [ 1082.359174][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.365224][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1082.369888][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.375779][ C0] RIP: 0033:0x7f3d77b9e159 [ 1082.380181][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.399787][ C0] RSP: 002b:00007f3d78b3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1082.408190][ C0] RAX: ffffffffffffffda RBX: 00007f3d77e25fa0 RCX: 00007f3d77b9e159 [ 1082.416173][ C0] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000009 [ 1082.424148][ C0] RBP: 00007f3d77c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1082.432132][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.440119][ C0] R13: 00007f3d77e26038 R14: 00007f3d77e25fa0 R15: 00007f3d77f4fa48 [ 1082.448166][ C0] [ 1082.451200][ C0] Modules linked in: [ 1082.455094][ C0] ---[ end trace 0000000000000000 ]--- [ 1082.460540][ C0] RIP: 0010:__lock_acquire+0x29/0x2de0 [ 1082.460559][ C0] Code: 90 55 41 57 41 56 41 55 41 54 53 48 81 ec e8 00 00 00 65 48 8b 05 7f 15 f2 11 48 89 84 24 e0 00 00 00 65 48 8b 05 4f 15 f2 11 <48> 89 44 24 08 45 31 f6 83 3d b8 47 d7 0e 00 0f 84 90 14 00 00 48 [ 1082.460569][ C0] RSP: 0000:ffffc90009847fb8 EFLAGS: 00010096 [ 1082.460579][ C0] RAX: ffff888033693e80 RBX: 0000000000000000 RCX: 0000000000000002 [ 1082.460586][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ed5c920 [ 1082.460593][ C0] RBP: ffff888033693e80 R08: 0000000000000000 R09: 0000000000000000 [ 1082.460600][ C0] R10: ffffc900098481e0 R11: fffff52001309042 R12: ffffffff8ed5c920 [ 1082.460608][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1082.460614][ C0] FS: 00007f3d78b3f6c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 1082.460623][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1082.460631][ C0] CR2: ffffc90009847fa8 CR3: 000000005e71e000 CR4: 00000000003526f0 [ 1082.460647][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1082.562509][ C0] Kernel Offset: disabled [ 1082.566942][ C0] Rebooting in 86400 seconds..