last executing test programs: 11.946777215s ago: executing program 0 (id=3171): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe13, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3, 0x2, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) (fail_nth: 12) 11.659174691s ago: executing program 0 (id=3173): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) epoll_create1(0x80000) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x6e23, @empty}, {0x1, @random="ae43373c43d6"}, 0x40, {0x2, 0x4e20, @multicast1}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x42401, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x10000) close(r7) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket(0x10, 0x803, 0x2) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, 0x0, 0x42) close(0xffffffffffffffff) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040c50f80b00000010000100009040003050300020009210000330122050009058100"/54], 0x0) 11.543765967s ago: executing program 3 (id=3175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r4 = socket$inet6(0xa, 0x3, 0x7) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xeffd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.304817903s ago: executing program 0 (id=3191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r3, 0x407, 0xb) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'pim6reg\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setrlimit(0x2, &(0x7f00000000c0)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x400c, 0x2) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "062a759ef8c25fb352aadfc2ea56e4ba"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc811}, 0x5002) 8.298678796s ago: executing program 3 (id=3193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffdffffffffffe, 0x3, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109"], 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0xb7}, 0x1, 0x0, 0x0, 0x40804}, 0x20000041) sendto$inet6(r3, &(0x7f0000000880)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d270012000200000049935ade4a460c89b6ec2069e91b4123b243da377aaae6ac0cff3959547f509058ba86c902000000004a32000400160012000a0000000000", 0x78, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'dh\x00', 0x11, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) 6.670680747s ago: executing program 1 (id=3208): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x6af, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x33, 0x35, 0x2c, 0x20, 0x5c6, 0x900c, 0xfe1b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69d, 0x2, 0x2, 0xc, 0x80, 0x0, [{{0x9, 0x4, 0x4, 0x3, 0xb, 0x3d, 0x45, 0x95, 0xb, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "a35c98"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x10, 0x3, 0x80}}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x1, 0x5, [@generic={0x101, 0x11, "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"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x9, 0xf}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x4, 0xbd, 0xb, [@generic={0xbd, 0x6, "23b0a889a4ff443b5145f76e2ac6c1eb46c778027602ff3a4eb70ec9303eecb2dc2d675801714e464bcc49db106d5761db0e01d595b909a151d13e943fb68e3619a75e75777b00a7f5c32ea8c70e1f75c52c3e6add8c8b5288f866e9221b7153457f4a572e3397432342c50f2ce8b45272a28bb659f1d633539d5755f14f806b09abd855376e10d3b8eca1ea54e96c3a779ecc2552960a2320740db5272b788a9e03ba352010ab0924ec6fff763284dadc26117c1aa359ddcd19bf"}, @generic={0x32, 0x11, "0917e9770da79e4c7e6f4021a6221b5b547392abedd0e141b1f72e1c37b65ed1ee02dfe63b41adffecdc8ce9adde3a92"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9e, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x7, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xad, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x7f, 0x3, 0x1c, [@generic={0x5f, 0x30, "31385a7cc8edb3930c34360a22c179eb4986e7188700eedf95779d6ace0f6fed705116cd445301d0cb0af2dc49c582b0cb10c71eddea955f13c3d79d6c9334d74eac901931ecf7a677e7c5c3e187b9ae5ba9dba28c44248a5080d93822"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x8, 0xf}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x6, 0x9, 0xc, [@generic={0x27, 0x9, "03f44333f6ef7021e6725e4e11e7bcc455c5ca34de1d11f9234ed04b7cf1343e69e442d040"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x0, 0x10, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x5, 0xe1f8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x5, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x1, 0x1, [@generic={0x8e, 0x24, "67447bef4e50eba4699de2caca238fb41398b10c486c886498f6c03ff75273de75cfd177217b2fbb1fab8dcab5d22e16cdf6f26d860d9f9afe56143bb986002706d3d585e5ed1d8d589cd1303d14c6a2ff9672c920baaafba6028963ecbf2a998021ee8611b3b661fe12d0820ddf4fa0cd4c4312e4fdddd6933a261b5e9053e5ca80793216718608440f1a9e"}]}}]}}, {{0x9, 0x4, 0x97, 0x5c, 0x8, 0xd1, 0x5f, 0x44, 0x8, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0x58, 0xf7, "b10638"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xae, 0x1, 0x3, 0xb, "722756516156aac3cc"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "1f431e"}, {0x5, 0x24, 0x0, 0xc01}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x6, 0xf2}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @acm={0x4, 0x24, 0x2, 0xf}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x81, 0xd7, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x8, 0x600}]}], [{{0x9, 0x5, 0x4, 0x8, 0x8, 0x1, 0x63, 0x5, [@generic={0xa4, 0xd, "9e9df4ed54e1715e5512cf739f3989d9a856d90db4702187936d7ba35e2c851151303aa0aee7155f05271cc1a3a17f50dc50316ea0dd65e40ca6623bce1662165ee18ceda61222f96b443e11bb860c0e0f0fcff83962fddba6a55c42cc10e698f006a8b050e90fb447b9dd366e68f04606517ad4e749c936bfd1f6974584bcd06bf1e934b925488f3c2cca3b54aa6c090ef92b518e1a8f305538c45e9fff7570ad78"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0x1, 0xd, [@generic={0x66, 0x6, "b7efd407f17fc2d4ac235c39b9b4facea108e818ec3bc04f66783069a9d7bb4e30b537ba4f33fcf73efa32d218a927d4a86510ba55147413a750cdfb23af232b586199d9431c745df6c36b94e65bdbee11f85469e4ae59c08901ae2aaf939a5e3f15eb0a"}, @generic={0x6e, 0xb, "ad6acfa2bf5aac29a5249061a9ea5c7120f5b1911c450bb932bedbf5b2b62b2ecf008b0f00d0ff7e652d19165ff4d990482a4fd484e3ebb576e1219dc20dc781b2a89df51382371102c48a06d793322117ed861e2553c9dfce4be9236eee6ca748a6d554bcd17e576fde105b"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x6, 0x8, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x2, 0x7}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0xd, 0x2, 0x69}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x4, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x0, 0x3, 0x9f, [@generic={0x9d, 0x30, "fcfb3a9ef9b4a444dae228c5a1c1f5536a2accb504aee4ae0082507a5a4e5bc8cec000109013f5eb1e6b8211d64cc58d184bf416d535fbe2d685d9c3174bf310f242bbfa3b3eddaab2b96befc03c6fb1a3cc47e22180f9444e3551e2b8db0e02b3dfb2fd8915c4919ef3d6871b333d1017a635ecfc7ddee920a27ea57dcdaabcd53aa66955ec2792843ce4b1fc7baa676b8b39775aa3a5eb22bfd6"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xb808}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x7, 0x6, 0xbf}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xd, 0x3, 0xc2, 0x20, 0x2}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x13, 0x4, 0x2, 0x19}]}, 0x4, [{0x69, &(0x7f0000000100)=@string={0x69, 0x3, "5ada6bc99fc07f75bd2c0c4a1244125a019c9a11fc36a98cb65698a4e44c5b76c0e8e923747accfdffc8e38246ec8d07adc28dd6f69527b16d6a1db33ca2f92b5eb063be845e0a6d68252004e0d1eaeaac6fe260d1389ed6f7bb73bc3c0979af7f0ba5bef23f75"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.235554003s ago: executing program 0 (id=3211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x8e, 0x8, 0x8, 0x2, 0x68}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x68, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x5a, 0x68, 0x0, 0xc0, 0x2f, 0x0, @empty, @broadcast}, {{}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5b8b]}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x7, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x3, 0x7f}, 0x2, {0x4, 0x11, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0) 5.131417713s ago: executing program 0 (id=3212): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x5a6b9abbf8e4b4c2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0xd3, 0x28, 0x40, 0x7d15, 0x31b2, 0x574b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0xfc, 0x3, 0x8, 0x2, 0x50, 0x0, [], [{{0x9, 0x5, 0xd, 0x2, 0x8, 0x2, 0x20, 0x6}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0x3, 0x7}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x9, 0x84, 0x8}}]}}]}}]}}, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r9, 0x0, 0x0}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8", 0x1}], 0x1}, 0x0, 0x24000890, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x41, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000640)={{0x8, 0x2, 0x5, 0x3, 'syz1\x00', 0x8}, 0x0, [0x2, 0x8, 0x8, 0x80000002, 0x8, 0xffb, 0x4, 0x40, 0x6, 0xffff, 0x2, 0x1, 0x80000000, 0x9, 0x5, 0x3f, 0x51, 0x8, 0x6, 0x5, 0xa7, 0x8a, 0x3, 0x5, 0xff, 0x7fff, 0xffffaca7, 0x401, 0x5, 0x0, 0x9, 0x3, 0x0, 0x3, 0x9, 0xb, 0x0, 0x7fff, 0x7f, 0x5fc, 0x8da95e8, 0x80, 0x0, 0x0, 0x100, 0xda, 0x6d, 0x3b00, 0x80000001, 0x3, 0xfffffff7, 0x0, 0x1, 0xfffffffe, 0x6, 0x5, 0x1000006, 0x80, 0x6, 0xfff, 0x9, 0x7, 0x0, 0xfffffffb, 0x4dd8, 0x10001, 0x4, 0x1, 0x0, 0xc, 0xc, 0x7, 0x3, 0xdbd, 0x6, 0x619, 0xfffffff8, 0x1, 0x400, 0x7, 0xa84, 0x9, 0xeb18, 0x7, 0xb9, 0x10000, 0x9, 0x100000, 0xe8f, 0xa75, 0x6d9, 0x3, 0x8, 0x8000000, 0x800, 0xf242, 0xffff, 0x9, 0x9, 0xffff, 0x8, 0x80, 0x9, 0x9, 0xcb, 0xd, 0x81, 0x80000001, 0x5, 0x6, 0x2, 0x0, 0x6, 0x1, 0x4, 0xba, 0x6, 0x1, 0x7, 0x6, 0x3, 0x5, 0x5, 0x5315, 0x4, 0x4, 0x3, 0x4]}) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r12, 0x431, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfc}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) write$FUSE_INIT(r10, &(0x7f0000004200)={0x50, 0x0, r13, {0x7, 0x1f, 0x800, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x5, {0x1, 0xfffffffffffffffc, 0x7, 0x4, 0x6, 0x0, {0xfffffffffffe, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0x0, 0xffffffff, 0x400000, 0x0, 0xc000, 0x1, r14, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 5.06891587s ago: executing program 3 (id=3213): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, &(0x7f0000000180)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) ioctl$int_out(r3, 0x2, &(0x7f0000000040)) 3.248076927s ago: executing program 3 (id=3220): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = msgget$private(0x0, 0x200) msgsnd(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r4, &(0x7f0000000f40)={0x0, ""/255}, 0x107, 0xffffffffffffffff, 0x2000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x5c}}, 0x24000800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0xc) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_usb_connect(0x5, 0x36, &(0x7f0000003040)={{0x12, 0x1, 0x310, 0x88, 0x87, 0x80, 0x20, 0xc72, 0xd, 0xa1d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x3, 0x30, 0xa, [{{0x9, 0x4, 0xcb, 0x2, 0x2, 0x51, 0xb1, 0x18, 0x2, [], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x3, 0x18, 0x10}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0x3, 0xf5}}]}}]}}]}}, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000008001060034002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="7b5584d4", @ANYRES32, @ANYBLOB="08001b"], 0x5c}}, 0x0) 2.530985298s ago: executing program 2 (id=3222): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001600)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000400)="2abe5a8d5904b37f44eebcfeaafbd9836e04b8ed504d887ad79c152bbe4478cb80bb9acdf408b57775f114f24687fee8b74a86d3a183d73b21b28f1c0f75c520973352a01e84d4ff4ce58836737e406da4d7ccb86c258c8c188b2d56d00c9e29bc2b5571c2acf5c42ecc8a3a20f8ffd76314d6ea3ed2588ed095e18b2ab218080f8d4ab59632d3a32e3aa973503ddae32c0ab2250cf16f0e17d3eff080cbe591ede2118100b7a25cddf909b5779c48a04de7a1bd7da92ffda18fc4268e881d1fb330060ab8217ecac41d9904c048dd200a889d9ab3a80b36", 0xd8}, {&(0x7f0000000500)="108234dcddd587279d5d59b73d8d30bc7fb9d2b96352d1b8b2031e588cdcaf387a7cce252fe3116237e890b34ecd3a7af2133f469b234efc3399469a25227968f8da61ad5fb3924cea623021341005ddcec67914933bc995e9c86dd9a2446d78a9b1369dc69af683b5f513979ae2e4fcb07d9b125397fed32a589ea26dcfbb591bb27f72583717c7a0aaf7a561900cb6497dd9", 0x93}], 0x2, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r3, r1]}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r0, r1, r3, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r4, r4, r3, r4, 0xffffffffffffffff]}}], 0x98, 0x4000}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000008c0)="3519140a80f6c618d82783ef8d2ff08e4599f37cd034b41d8e70faf9730ba18b692f65f99904ff91b3c4f5fc5404797da206ead8e05899c5a0de33b24d128da44d231d41b47ab04b7fc2", 0x4a}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="100000800100000001000000", @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0], 0x28, 0x4000080}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a40)="ea308af31aa3aeb8e15ea90e2847a00681a082300fca206c8443a44371b2604040a2f981082a6cddbd8ffc5a1254d721f76edf1aef189e75da51e735edc5d277fd0ce925796c2c868acfde19c3e400f0c7fbb4fd332699d74f25189a1bd60e65c81d11ff944f9e57a9ef065ff19c9a989ebe140cd9e756c660580b40466fab3f7e3673409274", 0x86}, {&(0x7f0000000b00)="c94164b8f306860c26bd0e8d6ff93f5e3e4be508063c219b387b9a54bb692fb276e6d3c4ae976a", 0x27}, {&(0x7f00000005c0)="7811cbe215f8311d4a07f01f6b5beeba255f12db0de96c5457469ab24515ba7345a4716315dd5736", 0x28}], 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="200000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="140000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1854ef000000000000c4d4a86b51ea67e9aff63438f6001ca5c7c200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x64, 0x20000044}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d80)="459bd06015b23689f5f25bf59c2dd54df5e007b2e39f39a3894b165f69497f05da566bfe9f291142b86453a9d4887fc708085e32a01f54b0d29ebebf0a8fee8485f8ae38d76da735f16d2bcf59cfd36aa07403c4a655d9f3e511ef43e5758a408aaeaeef16d92581a44e5230ca957a74bf63", 0x72}], 0x1, 0x0, 0x0, 0x10040}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000e40)="fae9505c29c9af31c159e6971edbacd43ce97fa29b4468584f1a7612e623d9cbb25aaab63fecfc8ef0ade354ae994b354f6ccd3a4a5514288f4ff5c1249ed947690a2324f82c66c83e8b8e91e36b71cca89b382664058fa5902d", 0x5a}, {&(0x7f0000000f80)="55d74172a2e1dfc4a68e5c0fe024b6c078b32810dbdd2848ba6ea4d25adf05811e1026c4736865da446a3a46008e549f2568d1ff6f7fe3ee48e51a07f3823e77fd9fd9feaf5ca5278d43990587202e34088dfdae723f040e52a014b59639681300bc2775a837ebfc976748bd3b5e0f1983bfef335a3607b615ac3bfe62c78a3fd836837de60e7865a3277b463ba7cf9ca8b19645f0407c94259eece6b9f9732bc51929942f1954e15922cb95bfe775fc00310109e5839f9521a3a178b90983977f7799dc61993afb1c542c9c7d0b7bfcba8ee577", 0xd4}, {&(0x7f0000000ec0)="dccaa26d212fbaf239e5d58db03815a73248f99f732f8eec473ec95a00f9020281675f25aac7c0f5717a958bb336c7", 0x2f}, {&(0x7f0000000600)="9eed", 0x2}, {&(0x7f0000000680)="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", 0xfc}, {&(0x7f0000007080)="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", 0x1000}], 0x6, &(0x7f0000001200)=ANY=[@ANYBLOB="790e873d01b9", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c0000000100000001000000140000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="300000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="140000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x104, 0xc050}}], 0x5, 0x95bc8e4b45259b05) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x22020600) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$getflags(r5, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0x2, 0x3, 0x3c76, 0x4}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001002a000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000f20000000000a01040000000000000000070000000900010073797a310000000028000000000a030000000000000000000a00000008000240000000000900010073797a300000000014000000110001ffde000000000000000000000a328a44464dac54fa283aab1474ac1eec12bea3d7f2977a58244f7f7f767e3fca62d900c1112e1ecaab68700d5b99a4f1f721274febc9824afe9713c9948cc9440e5c89fb7e1ac0544b07990000000000"], 0x98}}, 0x0) fsetxattr$security_capability(r4, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x2000)=nil, 0x2000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x9, 0x10, 0x1, 0x7ffc1ffb}]}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x20000, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, {0xa, 0x0, 0x0, @empty, 0x3}, 0x0, {[0x0, 0x8000003]}}, 0x5c) 2.125607028s ago: executing program 4 (id=3223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x8e, 0x8, 0x8, 0x2, 0x68}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x68, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x5a, 0x68, 0x0, 0xc0, 0x2f, 0x0, @empty, @broadcast}, {{}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5b8b]}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x7, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x3, 0x7f}, 0x2, {0x4, 0x11, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0) 2.078921927s ago: executing program 4 (id=3224): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0xc) sendto$packet(r0, &(0x7f0000000200)="05174305", 0xfffffffffffffe87, 0xc040, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 1.963074054s ago: executing program 0 (id=3225): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001916b"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) socket$kcm(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0xa59, &(0x7f0000000380)={0x0, 0xe4a7, 0x8, 0x0, 0x199, 0x0, r4}, &(0x7f0000000040), &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x61, 0x3a, '//\x9f*^', 0x3a, '/dev/ppp\x00', 0x3a, './file0', 0x3a, [0x4f]}, 0x36) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x9) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 1.962487245s ago: executing program 4 (id=3226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x8e, 0x8, 0x8, 0x2, 0x68}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) syz_emit_ethernet(0x68, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x5a, 0x68, 0x0, 0xc0, 0x2f, 0x0, @empty, @broadcast}, {{}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5b8b]}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x7, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x3, 0x7f}, 0x2, {0x4, 0x11, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0) 1.808008715s ago: executing program 1 (id=3227): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x2) 1.787417558s ago: executing program 4 (id=3228): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="540000000206050000000000000000000700000405000100070000000900020073797a31000000000c0007800800120000000451050005000a0000000500045840d7cf000d000300686173683a6e6574000000004a48b0c1b741ec39a67e591f729042463a12556e1b266c2d852290679357f249ab2baa0fb76a944bf1c5324184574be4a39327bde1b8661bbe801bffc8c74fc866cdd3e4a587a84e43362607233c1f0718d41a460858f9bb1032403948a333a2814caa5bb6cbda50a1b7ce19bc21248d6061554d9a93db007dbdcbec25fd559a405c86364aaacd88107103e21ad693052bff2543c1"], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x1c, 0x12, 0x1ea, 0x0}) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc809}, 0x20004804) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) openat$mixer(0xffffff9c, &(0x7f0000002380), 0x20100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x60, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x50598e46050492df}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000040) close(r12) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r12, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) write$FUSE_STATX(r0, &(0x7f0000002140)={0x130, 0x0, r1, {0x100000001, 0xffffffff, 0x0, '\x00', {0x2000, 0x0, 0x3, 0x6, r2, r3, 0x4000, '\x00', 0x6, 0xc, 0x8, 0x9, {0x40000000000000, 0x7}, {0x41}, {0x6, 0x800}, {0x26d4, 0x1}, 0x1000, 0xea, 0x2, 0xaa9}}}, 0x130) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600b00, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010002000000000000001c000000", @ANYRES32=r11, @ANYBLOB="8000a6040a000100aaaaaa41aabb0000"], 0x28}, 0x1, 0x1000000, 0x0, 0x11}, 0x0) 1.689696555s ago: executing program 1 (id=3229): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.548207884s ago: executing program 1 (id=3230): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, &(0x7f0000000180)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) ioctl$int_out(r3, 0x2, &(0x7f0000000040)) 1.464616238s ago: executing program 2 (id=3231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d04, 0x0, 0x9eb9}]}) r3 = signalfd4(r2, &(0x7f0000000700)={[0x7, 0x101]}, 0x8, 0x800) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x11e, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$PPPIOCGMRU(r4, 0x541b, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe88, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_ACT={0xe58, 0x4, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0x9568}, {0x9, 0xf2, 0x688d, 0x7, 0x5, 0x2}, {0x2, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x20004, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0x2e, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x77e, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0x2, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x2000008, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3, 0xfffffffc}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0x8fff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x4, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0x400000c, 0xfffffc01, 0x1, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0x2, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x239}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0x10003, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffc02, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x10001, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x2, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xfffffffa}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x1, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0xfffe, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0xe, 0x0, 0xffffffff, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x96, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0xd}, {0xe, 0xf09, 0x1, 0x4, 0x3, 0x45}, {0xffeffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x103, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x7, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x7, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {}, {0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x2}, {0x0, 0x1}, {0x1, 0x4e2ac20550e7fa09}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}}, 0x0) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r5, 0x300, 0x70bd25, 0x7fff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYRES16=r5, @ANYBLOB="000126bd7000fcdbdf2505000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) 1.380975296s ago: executing program 4 (id=3232): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000340)="b453831802b8c51e332adb1bddd120e57c501bbddeafac6432efc43e451914c6825f2d61c572f3e4d4581e85cbc7f3a12830fa400e25a69b6c380fca9d848e4a5b63b1129e49a6338bececbbc03b5ce145a746b3fa23c9234c", 0x59}, {&(0x7f0000000400)="f7c936aca4bc254908537d2c85912183f5465cd387b37596e72485691add245202fc3eb3d5e020fab42e8bfde6177961a7faf413d544dcbd0bbf2ed84db54f505d9e35c87b00dc559065c5b26a58b399bb7869056ef5edfe39a495026e0aed73f95ba4ca56de2bcdd1c345e775804a0bb967031cd84d7b0dca4464726d4beb083ea6468e3f5b9086926dcf53f7a1bf5991bca70902b64caaf58de9de9db3944d64093edc942071311a0f033e7be286ec6821", 0xb2}, {&(0x7f0000000500)="db760d2bb9a54eeddb2c4c2323a6964cc8a87f72f978b0694de98b879d7aeaaa16cb2fbccbdde947f6532aafe98e68baa7bb2d5ff21efa73f21b3b4d47053288dcad0299f11feea1b278667c56ae00b8c35ac758140d3987556a6c385407286d48f2891a1459bb31be96a1043cba4b6b5513c15557535c266a8aefa1fd187b6324a4", 0x82}, {&(0x7f00000005c0)="fe5b1b14596b7cad836b21118c2567b520925ac7b1a8c27611c846ecd41b84568b9e6d9af0719dcb7cf6085de35aafa2b47715ad5e40771f0ae803273f5de9504ea5fffdff08c2fcb9f5a04a18976dc15af737e11ead31abd03e6ccadb763f666fa6d4229b27c51ac8dfba2afc9528e761181dad8df9eccdd8e38509ed97032cbe0d0d59c1aeac6564963b6e67b96f61799def1a768fb2026437c6d04e39a561b8a9e555c079b12ebc5285a2e189d55b4c91d3578ab43a243f914fb03e824f84bb187cf004", 0xc5}, {&(0x7f0000002740)="a0ba850bf4afba5e1053187cce55379d3c2b50d4813876047840294c94b0854d1a8a879baab8fc0ef92e144f436268f7dde27c659521e7fcf3bf9435342773304874df153743b60ff9894807d019a6d88fc91367c4864930d86dcc4c7aa871f823b6846c36dd6f0182112f8e1de5b7f99e03aa7df4cb7f350cce553aff603cb6d2e0c82322f38b754d34bc785fa702b70f8e397d0824579b99a8ac86317b4c66744c3f49206bdc0519daff87bc569f2e1f36d4a728363abe", 0xb8}, {&(0x7f0000000240)="0b20875590982ec1b1d6be5a4814338e58647a15af813ce3b77c32fed3d4e7e9db22", 0x22}], 0x6, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r0, r1, r1]}}], 0x9c, 0x4000800}}, {{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="d1353af083c5641d9e38dd86272c3d9530a4cf0bffb1256e2fdb0b4aa10b7b099c3e90505501512c1cdc7a5d7f7da6e37e5a89154e3eca233cfbcf9eb69662c1f11a2cdf213f790b1a7d498c0fbbff003824c62af176fd056cab39e0ba14cfcff225ff2569f0fc1aa5b3f3c67e1c612e28bd0a07dd601b88220f59a5d62e2db6bfd0d8e6e60f4bbd09b61cf041be500df4e1f6c775b001d85f0c369008c9afec2395480aa68adf6a5950919b35ebaa2e34aee811a3522a03279069d8b2bc9cf61361dfe9979c94408025f5ed0c882e2875fdaaa452fd94f7efb94150d79f96fe85c73833f037", 0xe6}, {&(0x7f0000000b00)="96a6cf71c87daa875b48c4cf3d699a639279e844b7c718ae415a38dc8448d96a0d6b727128e248010a38160f1cb8e30e11f88f8b1244ca16484849a52e61679fbaef63621d6af82618f7782011f572d377be47f453092d10b6449e824547f763bd51589fdc4443e4beb32f054019", 0x6e}, {&(0x7f00000006c0)="0200000000000800046556eb848ebcb959117a12e96ed6a67366d2505613e09eefef764b7601971b5f06020da373632de22c4136d98b27d65283ec0c154d039a2d9dc7dab847a2b2c41b99eabe9ffb7bbc71bc71cd25df0ecd1ff9d2dbbc2683e21351236ce1e2081c1910a0641ab77bf26d951fd5de2f70bc7184376bb96d23e0b592bf599398b41d9c039ba19e3d057dbb49acb63c4b0a7ce20fbd21aef6c56e82f397", 0xa4}], 0x3, 0x0, 0x0, 0x80}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000c80)="e8ea86fdea2fc99ec82b633d47af30387a33abb7d2d8cc7497e7710f7ed63f40955d81b2a92e49624bb4aa21eea6bb56f4129a7be66560e5c980b34c9b0dc7d580899723103689ebce9611a9915b82e4f79ef6f793b0e648801d", 0x5a}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="ddc89916b04c57b1da8a7cee8236e3689a6600092714def14fe75d569364e082461c363577207f0ef661691c0c059acbe7350fa3f96bc4af3acd8ec36dacc196c05cb6b48222b10eaed7b4cf3b0f1abd1b0c2d48f63727bdcd845425111763f56c1ccfe9e56f8b188680ca9ef3537641dde0063990fb29aa94f1578b97b8284807727cf1c314429c3d59732af82be59b86e04b", 0x93}, {&(0x7f0000001dc0)="f9ee72bbda961bff9b9761ea80c6874fdb0d00263130ada0b9221b1872438aa5567952a5d646739c9114815e3db84a859ae008f03ba9160a173ba725c7b453844982f00081c6c314deea3c6e13094a78ac0075a5f3582b52ccbc8cae648db7f461343208f70b71cc2bfbcffbabbf93da133cf7a2ad6a178800d575bf275bcc04a031f65070b570d441c1f6a02d3f81007421ff8568ff49", 0x97}, {&(0x7f0000001e80)="d3e2c18c0ac9971d7467d04fc8c54f5d3bb9eaa12423c47eeb9ac8eeb623f663b4f4827ce9d492e8e40ed77838e3d239d2310f725e6859a45e8693afc4", 0x3d}, {&(0x7f0000001ec0)="278c85885d7e373a753c48b0ba2efa7632eda0c208876d9a5f507d27eb546491f78e201889fca2ef1524a4b9a616346963e40bebce6e89ded46a2f75d97b830aae013ce74f73d8316b8fd78c8b52ec8f8fca", 0x52}, {&(0x7f0000001f80)="30d516e24fb4493ed057deb8ed16e08802a16421001e8cd3f955838b978dc182540d6d1aef8f17e1b48eb1f38eb90eb5a056a7e2d2d03d414b0e618d426636652d7a2cf342401fb1619ce081a897a9c575e9e909c6ee12a9289399016546a77affbd4c28e163d56f5d3401f470f8c38ccec586d606", 0x75}, {&(0x7f0000002000)="68a723bfc95131127abbee902b26f8410106a4e4ea3d015361e2157a052ec79228b7d32c4e0b32c940866d7261fc59af1c4c6ca0d23a37863d59a98cbbdc2613a54d436e5dc2fda9dd8c2e9bdf5855b654fae2ab4190992dcd36a767ee14ead3aceb24edae42a23a3b0a50c7caf3dfc9c1d44f75912c0223f52c56622890408d3d71ef", 0x83}, {&(0x7f00000023c0)="3708a57808b33788eff9190e4dcbffae2198a30402403da26ebcd9db6b96a3521fda9f0c75ffc46b906de88cd6efbfa7c439d8aaa41bd9199858f5d4495a69421a5065e7b570b0bfb0d19d3641a22069f52d610bdbce92f776406f5f35b30d1d1ad9fb2a2e4144e03c0be5b1bfb3065df9b9e2b0a1b8ebc5759d459c4baccd0254c7991ffe1d8b56610c1ed949326af17f75f3d3f4609acbe824d69cecb904acdc774c23ee41b16d29e5216a7d9c59f70062dc717701", 0xb6}], 0x9, &(0x7f0000002100)=[@cred={{0x18}}], 0x18, 0x4000000}}, {{&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000021c0)="167c4cf09b7454405d90ad57cd14027dddfa6e297a0085f0dbbba7cdd1ca89b3bb42751d3fbe60e22e5f56f2da4570051cc0633abec91a9a2bc381ad4caaa826ea4e477070087a423c39cf3a2bc95f9d284f25dd6a98d55210d867eef6873697c56cfcd6a090aad0dc669dd9b72770455092fd2c9353a9d7376a727cbde3176d2df1de420ccd12bb37fb5e592ff4bb252ad6e3202530eaccc640fa01966c2f201a05b1359b96e3b4bdf2", 0xaa}, {&(0x7f0000002280)="2fdccb0eca109f19702a2b77cc23ee5e9e422cc39bfaa68085038b6a7d9a8addf6d7540b898f987cac0649a08f15019bf9e6e8f9d977c6b70f580d350c393abb85", 0x41}, {&(0x7f0000002300)="65f810ed714d68d696bbb404634ed22dec22f9c06fc2f165e15916eb576a5f269a87faf2d75ca4b436c119e6a4a08ed0c989fef397a4fa20b1d2891d8513c88313212e0a569ee8e5d0c477f3f8d144ff7244efd24b8a9cee38319c9cdbc189db79ff3bfe2a162fe292e0b20dfb06a0e936b1b21fd0cf3a7f8b045b3136a6e7f9614c7d7e373a6f46c650a79fa63a1a6ee42bff92d9fa24d7f4b69a5e20b986ca", 0xa0}, {&(0x7f0000002980)="b205919e8afc81355fa1ca3e8e7a921668c04d6000822f8a2cbc64702121aa9620d99736159f07c62870f76ef3c59d3ced24a3f46cfd3a96505bf7f1490f079b79babc8ac8c3262646b91debf958cdfef63ea9b0262dbdb1e1f34e9c3df4bb230847a985da6cb4a029cf6f35738b8ae6bf2f1487a3e1e7827ff8421793023b988aec72e6e79138bc3f7b98f89c9889ae78ddf9b37f4096734e1470808f6493f994f8454499fb1bdac3f8d1142f9c727263e93193b384b0820c1f0f89fd944ea8c5f542e21730b95a912286d80627699baf53", 0xd2}, {&(0x7f00000024c0)="90e9adc71079e39b57602cb2a5c1aaf62759d526baea62296e7e8c3cdf1a68ce9cb82bec10ab56dad11ee9c8ad7425e858a102450647a3d412d263da2d47cdd75a37adfebf3ff38eb357fcaf3d125d3868712612635429dd1df74a27caaa749db378beee98b64801f0f2319097fcda5ede79f77a67c925e2275214688b76f386271c561b01de47c2dc79f22ee00b70f1212e531d101469a2ef2957b9ebfc6777278ef6d0069a7eff832ba356ea5b8b54c7d04620c12506b38ea9bc1e8e78dc63", 0xc0}, {&(0x7f0000002580)="b217cfa4822c30055b7f269942954231", 0x10}, {&(0x7f00000025c0)="09ec057a50d236d65f25be717927ad5fe4b151082a6e39b5e55af13d751f8d0e1888e7a7c47147a4b2fc81ad728d225b730bf71faa82a9d052679e4aad245554c3579fe25bc8b1765b39", 0x4a}, {&(0x7f00000026c0)="4b9d89e2dbc8ff399314ac23bd54aac91ec0f0355249625e19f53ede068f221cd44dd08ef15c2a60b70d44a9045f282a3f6677cd7e7892e93cc4a35db94a4d8b299b76826139f03aed5b186528b2242c2cf0850b8bbbd3ce1479d71833ed9386d5fa0519fa2901f0085c7cf7e6406dc254f3e2b37b", 0x75}, {&(0x7f00000007c0)="21ac5b108281358a4c864930512212067fedb766c8748d449dc018c7fadec8888e5e20a218b36e15ba292277da19409f8aa863cfcf02c9fc4f2a274305304cc700472425bcd13b5e152b3392b272e0e6057360a6cf5a32fc040e6c8ff939f5e912f1b9ad28728440b1b818fb8a6ece39fd2d87204af41e45fc3c9b386cbf776041f5f8e5c2e72eae401eea4c099b39de77a3756f2c4db20ae7be0172136f7b84ea1520cb3346513f17c786e6773561931774866065df964a856ffd24f9651dba4a65d45422e8fa7f8a6c181c8f296eba4212ea5d481c74bc0ab6d8559cca088df2194728107f8df54b16b8327fb1a32c7017be", 0xf3}], 0x9, &(0x7f00000028c0)=[@rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x38, 0x20008001}}], 0x4, 0x4000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xfffff) 1.250704896s ago: executing program 2 (id=3233): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001e80)={'ip6tnl0\x00', &(0x7f0000001e00)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x8, 0xe54, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x8000081, 0x200}}) 1.230648807s ago: executing program 2 (id=3234): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600010000800000000056a705251e638294ff0051f60a84c9f4d4938037e786a6d072c6c95300"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000ac0)={0x1d}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000b00)={{r2}, "15d1a494fcaf2acb0411686e40cc13446ee8fc494f144578eb92b7b1b194d1781f872f4cc184f86acd775cdc2755aad0f0d152944b7bd9286ddf07feaaa3fcca6dbec5377317b588777302d5e7bec7a027276b0cfae53cb00a0382fa497c21c62f2ba2be20412dcbf7033a88b0e62df000412f7430ad8b7065815e0310160eafa44b8c65f375d6e9c46cf7cedec8ff21871a573890bf015c1688196aaad6980bdd9d13be08740ae1a9a439e7638465fd6dab056d85e9c32137d6a73683ee0af1c8da7147e747ae85c4f83f430cbe8af5e521ab74bada34fb52fd8d1e4d510a7a93c0dcda28114177ce53f3b8398555913f624d4524a599c8e32abaef43cc7ae72d97ec1bd9a34f3cd11cf1db67b852b8e865355863bbd1d776917e271f264d1355a29e1a57c7408f41c2a6034b9b54e0a266e600cf76c44945374b31cd7e163401908927325cff16cfe23b529562c9f7830211956a33d6e641ee615dd3cee3484c6ba9995d9e385864bdc98b69e10a4ea844ab8f2522ddda53af458be18b5b780057eb287dff6dd1ee742219b47318a547fef1aa63e42038cac18be5c286ad2e6710391eccc2bf71c8245cb6d73937a8589859c44f6455477b4a9ad59181686cdf918a94594cba55371d6e7b6e45ddffadc17589b87d0e131781759aff88ae09a03a389ae221fdcb18ef6088f114daea1a33f6488719360efc45e1e68d532985709e2addd812a256a80cb3e2dc3757b081597f0ec898c6a1e3450d22747737140bf1f097ff7af387c585ade4d66d45726ecbed433828bad2a9ee0468fb787fb17af1fe25dac6d52774f4d6111b5af6c09c292679b8df1921fa4b577311a2dadec927970e4495fedaf8aa5da129e612513048b4f9aea21724ea1c6e7b1f3a5929d5d7906c141e8daa51b08c6de08c5b4c4a52ec37a45627dab1f672ccbdb13e86640c3664c2186d97accc9773a48926d555d21d34040873c9744a1fa532f9ff67d4fa5779057c2f4d4bb6d24abcbe7169ad0f06bb42e4bd1fd695217e927df4814b3a2669fe8f67d2800e505362ffa93524f773c95ae37e1354325a0b5e8a1fb8882df1ffbd91fbdfb3362d456bf3509731760bafc79c33da2c4f4237d1e729208af2a16655771e8b9a23881ae0fe6c1c36b765ab723376468552a4fb35e1e7d8324aa516557aa088269da63dee5009be14c73723ca738eb9512fe419dd954124588844001c071ceb3eeb27bf2c635ac344fe7ffbc9166c756c76d27dc777fa68f4cf620cc0ee3258e7901fba16731bfb90bbd860e3d968d2e29de159ecf7c05dddd47a1e94a36df7bcec49072f86a9c18975a2a09799ffaf860d2a6a4187d17340ff6c7bd23c60d7873ed688873c47a7ab7f8a7d9ce35683fd9041b4d5183672c0993784baafb6ac93f8afd5f2aa233b803ce4894d1fc731940bf312da102d10465d163f8c19544738b0e9314495327851e1f2416312d976294e0bbec7d35f3029bc0a65fc81f16bf79acab17caee6d6e1007c5ae4648a350d0fbd87a28f070c576f5148cd6fff8f36e5db960f0fcc020b29932c308b889ccd0883349018d6795c3ea40f356cc936c50412c0513546c27dd7970d98e3a9ff304b0e9b36647866b535957f76bd9e32fa1a5aa9ea0dea6833e2139b347ac1dc46ebf91b32952595ed8ee0b226b900ddc7b9aefdb4e2b85d87034d32feaec4684214605baa096572e82084e7369674f759e4ae545154d902bbf5f81b1dea604bf3f6b9f5c3e1661c7e3cec9f9b298ea83389fe2140316581c4add1dcdae28a67a206c56c8630308748b6a1a7a2bbb674fe2b7e989c00e583e364921a48ffe3c99257561b2a44fc0672a85bf8bd9360242dfc98c87c393c0d3f2f774c49b9a0c70118195c2e7030311007697be94b360b445d631f864bc52b04ca38ac2b4c8354c290f039202fc85430fd2850bd2b6b3cd2fa4eee27e1af07f068ee6cab6947f686083be3a77a55d1b51f3eec84b76f4423b965ef99a280ae1d1be108b3ec0323859e158f8bd2e51cb3d9f86815d403e779ed29e76c3c53395d24b1ab26b573520cacd38b93f60610e5cc036a3a1a99025469d38dbe05cda970681b4dfda30be16e2c6176cb4cbcced21e01b809504247dc13b1cf69dfdcf6d8579cd07804fc714515e3ea19018f42553ecc667f48d94754ec0ef4f32ff1b9fdeb573840a16a3d812896c0206e7426824fdf6557a9d76a0768e0de5871eba886fd25f7dc14165eb46eb06ee0b2abfda777b332fcff6534c0b0ee0b0751acb06ef591b79ab07dcb1738703d30b45c0c891b0ac5c68093bb05abc135cf52a71936223f8b6396a2958adeb815c28712d8c4facdeaed9cd53e9050b9b8928d5136d2327922500fec7d54e041087ea1afd81d6f63ae77b37c39096034259f57d4f146460529f39d71d1effd21b90042b6b0780133e717f0ec38561f6c24c0dab884e87cd99c4de41aca4e620409f1376b82df06e8910a9bd506fbc8d54c84b5b5f0b0e5b93633cb2c8933d52fe4658e75c985b909c38978e1c42af31397cdd15e1645a271ca1444b01b5bb547b8fd58a2dada81d28ecfb599c422307ce814f9702f1b7b6afd4fb8f4cb61c05da4bfbf8e6ae5729cc1216abd4ae7b390f1a0453370ab78538e148667083a851d753c37d9f5670f9d337251247cf696d00c3e16373f701c3652c5a94925135cc7ec79cc581ac2911afd1fc4bbcf9122a7344fff9452083b4716a48e64d657a9ade829c2bf623e3bad626e871a31dbb700c85443ccb4a3561b8ffbfa083ec9fa99555467ac04ef6e97c3545fd944cb3deb499baf4aa618666ede515fe672409202139f16ac6ea426695d53bd283d84b4519eac72e6899dc00e9b7e0ebf5aa51058601e69d268c9a94ece0a36b2a6775cbd9b20b9c8d2ee37643078fccaee70fe7fa78dd4e244e2490cabe4ae4604852e4206becb021243f5cfcf31db9607f083a74834d0c8434e1d33744e92ffd1df1290c6839cb666c1824214c51edc025fcb9da9f2308889ae77dfd3d6edcebcf4487a10a52ef1d7e0bf48ded4dc8fa6a58d56f07ab23cba8e50828dfc9c14508df43a205d6574de17e789f7113622703e429188e7fbfd3bc9bb6d44160ac2258745b5b43ad5732d57cff34813ec5232694bf5307cb04f56cfad1ce20f8eb50dea8b3069a7fb81e3272efafa5af7f463238453aed0ad880ea1e5515b7b269d77c3fa4a95a1f14d7ea01d49ba6c403a7c1ec5bcd03f5c4a04f8006f854ffa48c9bbda36f8b8f35b18afcfd2426c7c07a2a39915bdddd66940d3211f7c216435210ddd2340814658cac0bce55a8fff7995678a38333d294de1192b87da6b06e191d0c5cf2bfee9c179280853663f7a1c32a60ef6f554f8653c20cb46cc8da7e306f673636a7b5146cd2b2041f317870929713b0178694709cb59b34d17936ea0b1d622756aeaebe25835f94ed245f1687511eb98fadfecd05a51b4a9ab61cf800a23ce3331ce1b6ba8b41d4a82cb7e12fcaba4bbf2ec14cbdb3df502659a386849c839583346b4efc0720500e18b59b4c96ab177a93500164375422b1abf15c78686cab9a3ad6500904ae8fbf6eae0fcf52170e2745761538bba4e7fb742877115341e8e10140c10ed5a148f6a80573911c4542f8a6064f84b87479227a146c1d3df8fe2b16d287d81a7420070db07d776b410f1c2572db5fdf02a193917b83cfe49b928e5a523b3eaa127c605e82b6187a22826ee95d0528b2277d65e9df120938f64a917ae1cca547384fbbec858965404761af13e5d95291738cb26a25d8c8e58b341bf436b5a4cc028827ef22a7691347d6aaa3bb22e3175686d9c6445c24788a1b11c96965391dc94c96fca3dd1e0d5c078266156a4191f93f0216f993a064525b56021deebac9a85d3d74229de0dd71f29d3e6836e7e11f493fc7d9faa42bda5d1d50fa9df2e2bfe393d50e18505c81753a19eaba0c94cb82c1200ac05843bd7251d49cb8fab5aad9692a495b9da60294f0bc16462e09b76f69ff93664239df4bdd686e1471f798242ec1f95aae458333db35ff5371e66f99d7b97797f9a70ffa593b3a4ab551a3ae4867952345bc406896741f028abeb11ad160030f41c61d820dee2f0e9025af5b943daa593c42ca52187ee185d9e7592011c23fe7aa33128b69b37972756e5fc925b251cf2f31891e77fe8904c73774802ee85d4bb465604a96894fd2b5739c9cfad17817869567f970615fcd2735d22605716ad44c753382af377a824d03a618707a878c3ab42469d1ea82aa9445fe89c6645e2dab52f4d8914bec9dba3785fc6d9eee515bb2d559fb1c2df0430e2d5aa9b0cd1eca8d4fc4921bd095354e7973af89013a9b028f6c9123115a7cca05c1230ca0cde8214b95d96bfb124d5e69b5882f9aeffcfd5159ef2d79c25bc62a59c0102e61c30af12d6eb185f86810762ef885c946ea00a5373fdf4072f65a499f2260dea67687952179e7352de83c07b7b2e6d3a42b87190638143db3b7149ed1c5a899b7873530f568eb06b9904e07603dc24fb742eb423ea0ec9ed941880ff35aa13621a3cac41768da29b7bee9b3e4eeb19e75b5e6f7df33e39e7884ece10276d9f381507cd00964623e05046f859e129afad01493e6e2969500cd23b0805882a6534071b5f8305e08902766a6de2678f90bc740f339af8c5c6edfa510ce6fb2b1eb12d9e5ddf7235481571e1c4ac4474d8deb1c1694c22ab78612373e8d8b8aa91ca1aefd5de56ebf01cc2425173345459a91ab6a13d8c43192d3036c97a98d521a3f0bd74a7eaad9cb6ca51bb9be3ede388ece44802b37496b829d33a3474f0346118a9783070bdc983b289133a2c96bbc7c5c892c95dd802d6337afab71b7564d25ee0ad2f67e9628afbb5f38bda3bf03480d1a791c2b583e78a00fd7ef29a55a495e42e5ab69eb27542ae526585affc47bedf4236a9b87dcb4767ff49544e1c0e04bc37905bd62e23e9e3448753021233fc41acee87845e817fc6d8f97605272a503371f40a61007863b8389b60ae46582720ad4602ee71d676eeb26fd1ec634c02ca14dc028cc2f245331adb9312ad961a841df5e687321a89ce0325035b221da605fa933f9a549c325dd46fdf602354755c3572fcff159a61212aeeda7a37345e4a032a524a0cf5d1a895905387bb375e1e121359ac8da1e7ad266636efbecf30c0e19224717dea0d106a742c0403de11419f4143a1d2704f52e6256bf7a39a49d981ef5f1d8a27ab1a165239142364a133f54b223f8688475d5a908ddc220c642fe37d7cdb140a689162ed064e2fc444a038a158aba5e1dbe748448c939964b0373159d41d0b5c4e08e27a78c1895ec7754d9a119eb26a9433d060e2dd9e8ba74f51027d37f0f886603cdcd69a009b5905565c02d34e9490e3b76d4573106194d46123d3a58aecc4122d015bead4bfab7247081a3c744a4113434248324ac29de884b33c0a6882608128e54eb3082367e47324fd8fa626d73a625c9945942a70d5e03b5386028c04ce04917e6b36ab4492e4fbef18380746dd8e91bc7138e9d5bcfe8549a1c2ff82ac596bdb0fce7090990c043e9cd3a05df5e8221fbdcf1dcde61ff62c33be95b2a1c61a7ac5a1bd50ea170d32794aba5d7594af275bb7142115dbdff9bff551d903f83d7d70640ef1ad3297f213943ddda2c6d7dd3baf476ebdd0a85f212f576bee2175da475b5f2c42018f32d6f33fd648bffdf0dc94e73f74a5b5847429ad1f88bfaa9cd2111e5c4e"}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x201, 0x400000, 0x2, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 1.167878024s ago: executing program 2 (id=3235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x8e, 0x8, 0x8, 0x2, 0x68}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x68, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x5a, 0x68, 0x0, 0xc0, 0x2f, 0x0, @empty, @broadcast}, {{}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5b8b]}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x7, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x3, 0x7f}, 0x2, {0x4, 0x11, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0) 1.115917548s ago: executing program 2 (id=3236): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) open_by_handle_at(r1, &(0x7f00000000c0)=@isofs={0x14, 0x1, {0x9, 0x5, 0x9, 0xac, 0x0, 0x11c1}}, 0x80) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4ac0d0", 0x5}, {&(0x7f0000000400)="9ffd729dbae96124252639abd7540abd68f6013d24bf653c416382d8c61fb3c9369fc5cba020b12d1e50640cd4f91dced996db5bddd9f42d750099be8321db18e6f9794b4b3030de9c27e217d2c6ac1eb99f7f76e16b51c4e3c7bb527e62c78f7dabb2d9e6f9b32ddbae71b12521735dd1f00d9dc753a274e6a50393d0fef6dddce0064b3d20220fe05517904304ced6505d0bb0e97a0dfba5331d2605fb795c71f350f6", 0xa4}], 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000380), 0x8, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r7) r8 = inotify_init() r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0xb8, 0x12, 0x105, 0x0, 0x25dfdbfd, "", [@policy={0xa8, 0x7, {{@in=@empty, @in6=@mcast2, 0x4e21, 0x6, 0x4e20, 0x0, 0xa, 0x0, 0xa0, 0x67}, {0x43, 0x1, 0x18e8, 0x0, 0xff80000000000000, 0x2, 0x9, 0x5471}, {0xd48a, 0x1, 0x6, 0x8000}, 0x10001, 0x6e6bb2, 0x0, 0x1, 0x0, 0x2}}]}, 0xb8}}, 0x4000800) inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x80000006) readv(r6, 0x0, 0x0) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r4}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000)=r10, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18, 0x4000010}, 0x4000038) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x1100}, 0x2062) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000003c0)) 945.258096ms ago: executing program 1 (id=3237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "962aa48c1f3480c2ac47abc2e2f6e0050992816a00"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (fail_nth: 4) 578.55891ms ago: executing program 1 (id=3238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x82, 0x2}]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000000)=""/167, 0xa7, 0x59) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0xffffe000) r4 = semget$private(0x0, 0x3, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, &(0x7f0000000080)) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000340)=""/88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653c, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0xffe0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5202) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, 0x0, &(0x7f00000004c0)) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x800, 0x1, 0x0, 0x0}], 0x1}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x6, &(0x7f00000001c0), 0x4) r11 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r11, 0xc0cc5605, &(0x7f0000000040)={0x8, @vbi={0x3, 0x8001, 0x6, 0x32314752, [0x5, 0x400], [0x7, 0x6], 0x2}}) 412.801553ms ago: executing program 4 (id=3239): unshare(0x6a040000) r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="58c0e8bae42c0fe8bdf795b00994db801593518c974db2203b74e695040d2c9f2c3496ab3aa08c45023c6c77fd6e9ccb4cf2c9885b536185f74d40ac385923d11990841b9596d9129f0a565ef205da3f7bbd5cb09b2210051ecdda6e20ea108eaea68ba58a53f446db1598ff59bf94bf4e1749edb4d065b82120033bcaf01889dd81381abe885032f2c2f15d73828d65d839652b4402312ba82d9df95c4966a81a6c0a24a3025a7feff0cec1e3b77e442304a4ca1fe6d516cde88d197fb26de0c5f24403db89870d65da4cb763ae49eaf38a155547e9aafcf04cb6dadc1e760e9c1da7acc9f6afbac76fb44750d5f607aa72a985be38d229b8a7f6f848c0fa91edc5243192d2ee40e65abe7caab40a5e2ba95a3e6a69eb1bd3769b54ee7aa5360430b7f5e51589106eba39e12861a1d0b8f13c154100d0fbb0ba760f41470cb6b1904cb85bd8c5e4394ac77ce0468cce003cda723f72aeda6c766ddf96fccdb018769e77c6c2c0786dc85dc9438a75ad96c9f87c8d9a6f0353ef8f43070e4232b955e3f9b182aa66ae59f06529c685efc18d0384f5d79174ba85959e434e7b833040dcbf739e17c083b4c67042ff783f9aae8522ebf118700400c80035f686057c9a95108316d7a37e2fb90691b44cbe0e77ec66d08f0cb6b86ca7e1530a5122cad2170154c68cee7611542774534e9ed151295e80ea9ede97e1a05845baccc45ae42fcd9171fb6517793507260e8273e0357feb85572d4d2b695ad16574568c4e17effb582c751bdbb172a7fcc5d2034b8469e95748158c27e68d2d226e57e0f8e37ed5714280a87a15422c1825a5a2f734ec1ea4a7a71ce13df577f904cae48ee8f6be9f4e5a6cd101267673727ce343690335c479e3fced545d62d66f2aa2e12c74321d1ae0713fbf678db1a4d98e2583de3e4c1207a1b3ef0528bf4c979e7f46a9981acee9307e11e487a41d8ef6408df077e184a4368d5e22e75b528d27e626541076df37f3869c0022c0c9b6d41cc6874ae1e9cef8c4816b84f7a93e2a404691abee20c1fe78a9c91b64e06f2a5b2ffe5c0386f1341b130bb071dafb680bdb76cc61da6a8dcf65a38410c4fff0c8feae4eb36688c84ea493b4b993ee476625385a750c6592287721be80af5e4917646d37e503296667918b4fc572d36f20f23032df0703dcfcdb2edd0318750252a2693c0e446b394f710d8aec13b792681b667ef092e78d779fbaa02c0462f58ee92761278a6a2de26d5514f118a88013fb5ee84a4e8951b7273686c47840e2941d41b632ed15912cb6cea9d4bd5b8b1f713c391612f641eb7b6ce66f4b1a97da59b8e90ac9a855a7ebf07a8372cda66ddf04b73aa2fc11ffeb276572d1ff23f0dea2e1abe5e38ae315df083103fc702a00bf38cd8b4f7d52b4e7944a7c99ffb743cb878280957c840d480d6adf64a06a37ef71fa1b4674e8e2844dafe919961791fe61be794b6e8e9866d97b96c97b8a5e0f32658b0a07f707aa24690652fdbf538c08e982c21dfed05975c8d1d1281c2f65c1fd71f19f78bbb800a21311a5c14a50b11c7de69abe9c347398cfdccfe6816ffaae09a982b3847833996e8798c7e807ebd61ee013f7d1711f148291b10d7ee47f8d9ca645df551451d9c41cf4057ce4b63060dab137445458f41b5839c612f3b3f8b39690a66ee2e7cf796052bf0b90e0e1be2fd87ee1f265ea3930a980d117573765357a57cd6263ecff5511107114c8311d9fe9665d4dfed59c74e04f6410bffb8c57224a4ba391ac0b9121f3083e0c4ad52c036d57dda6e1e21b184561dce5556cb1148d6894ec2bf9d6a52d5bafd1f59e52d4d30acadf9f3c11ffbc6ba17441f66dd10b8ebb27a2316be64111a8f11b3384ce89628ba1cea730934451ff7b29ab813bc6c8ecbd5538fc2d581a8b6848eea60db2836b29da9e7c1c813717b18b860bb5ff6120453797bfa5ce95d0236137d1f726463932c788b6eebe00437df73bb1088b198ff1ce72cba8157ab5ca82b7030dd76ba5dac3ac333de636aec4be333dd68d652257706a1eabdb304f01f763ece502b4f9cefb870cc96e258a8073c94ca67738811e6a4d2ebe92a7323fe2a29218e8ace1547c9580680c6f595f17ba6e56109ce31176157f08fe911b43ad111d84d919f4774e0896b0933041551e4116187ed93e4cf2fc7af572fe4ae6affec258007de3175ef99f44843213ea73f2b051bffb703cb19f6001dd5f4c4d5a248150e7ea96ec2a9fa196e60149767c6bb0d78370f7d61e67a6e8d60fd881fcbf2705480fd5579dbad96665488c85848f638ef036d01b13f43593ae7f99d52bd7f5994d663a9cdc01134a03dec835af6b3ec9ffd16ba2381a8575414b092cffba58b0d9e58e58c3a09be7d77a3cb23b74567bc8906b47edd552f48736e7cb41a4cefc73c1d9ba274d39042d4a2afe0aa0e6a06a7ae7933d8320d4b17511609f53dc4478e95895a1fbfe3b3c7727c0dc88e8726dfdfeba18998985e4f1268ac0f26ca69a65f4d82dcf4e451af14413f643a2c3f3bb00c3f1af5a56bc231023144d1995f9713f288622a5fac78a55824ce5791a2562e1d017b30ab0b599fa440812db16af0cf945d9257faf66ee1f48d9b247cb9b8b7c43f8bbc1959e250d944ba96f1d2f6017d8b83980ec4ab3f52eeeadd3b46eddfc0150745f06c215198124d6643799ba166f5825f3f2fe4ff4dbcc98a90027088dddcd47e8555baccfe469333ac72c8b733a4969adc9c640c633d880f51f78c5a3e491bfcdf40263e384a1e18109fe34ba45e66af1d32c9ee873524c5acd5d94061152e7f3089afe6e8c35dc980de6a3adaf1bf371ded4f4f3099c505c685d08db26086ca314b5f142a977df96bfdd12d7c2674cd66fbc93b5e4befec9f90cbdbd65424b7a2a756af23c77e329a477ed8afc4bfd78c97c47a484ec60f391ce7a8fa976b4e138a2faca3825dffd62c706b75d66971b17200ff912ff7768ebb3921e705b582d7e418131cd5af63620e48f02cb4b8f6c55c5e07b2cd561c1edf76dac09d4322ff3ea949aa42db106d33252f45afaf0b9e339d5ff8c73d52823320af6c70eb826d1514b9d4f004ee890ebbef5b77d6fdecf56a5234c501a0abd38246191a1ef5184d89fc2c2f2ff863e2e4e1c409e6a26323c8ee968140570723fcf50ce391bfd9f52c674134a48e6a7349830e2136531f7e762341df774a698de5145e5c9a168b329dd21f2c3f400364eeb609ec6a3547b8ef1a47d1dce5b5e50485ac497b9415ea6a35ff7898cfa3cbae678e4b37c50a775a069fddd5d84931f5f80c77f6bd12a3f8da843d7c8a46c7a260f31a574f01eb0c9bba6c10d516a5fc5c1cff6ef1d0009469ab9046b1e0351a86b4b3faa9e486f86952810fcba2adce553f47aa6e52978d6038f79eff7bb5e3796322c7a2df67e4016e689a6cb2c3613220c0e04a06f7d331a089f4febd7302b50cfed8e688dbf709476014819841c6702ed733e047cf464396ef5bf38391d4ffc1aca22db9b37cdcdb170c5b4f51b2a4f6cb5fd71e84755100d3e783c0a2c563ea8f32d0dfcef47a241abf3480eb0c176fe2afbba8da4b6479d51323cd224528b8e4f766a2ff4f011f973b91479fbf1d0f15e939756de7276465f9fd759930a8d402e898c6dfd8f17b244e35a58d1c1f7cacca684eaa5e32c9eda766a6a36cc0f9cbaf149a61f3296449434310274564c189e4888a610f273328557cd2e7c3688281bcd5fda93be2a58b8cd642ac10e0ead96b9d414b362c20c0c39a1321766e29ef1f36f61701d5aefef6d80c535eee00ce70db2d0f148783bc586089233ed7188a42a1cc07f7645197f083b9f6a4e9cab281b0daa0ff13dee6d3868fe131e324d7cdf94ca5d6f900fd0b6ad2fa7ca58d14cf916c530d172fa627799e6471085495c6fe1aabd47e283e2679b6e14231e4d611afe5f488d96a28f948433cca579f36e08ca1132c70297b75cef74f685e32d7da1fb43ceb6b303f9faf742c818326e5c84c6d4e5c7da8a4bd0111728e3d8c75c2c29df3472a261fa2a8a8ef102a40a30fe9e6b4dd9012413800e49bb7bb2d83d23a4738441255a39946a7feed4f413bcf2c41798b46f9001e0b61d76d7fb20e25c2b067df3b6b3e4b30a1f1139f3c129e6614ab41c609f6a90cdc191982e6109c31eaeee196132b894d9fbeb45208580d82b6299acee3a4916f16858f4bd6778c22a250619304a849d0c8c47d59adb55c6637c30a41a4eeb276245e46713adf362090ca060ff0afec7710b673dfd844c7af0940547b8fba12ea3cff96a1c934efdde5eded84f82d2ce3fcb9a64f30bdcc9a8bed0dc0397eaa918a09bce93ec327385be756c35f856f0960dc3f3a0ae50593d32119b6823c9adef126d1885e76ccd6c0e29f5d5190287da3e6d678ccbf46a291926d7b34e5543383b506701cf06eb8b4222947752564f53329b4709024fa8529863953b98134d0e6670bec652a75449a28a0ffbcf30d83a492704182aa96fca299595a5fa963e0bdce00904bf68aed1072de1bb3a16d5fb038da134e95353693de0855df566ea974d51385dbece097f3b540ddf749116446e9ee11dd835d89cbee43171e817e9c8cd9a558330952ada17dff3b127888c5979acc60604a162c3792afa50ef777f8da7fa4749e592fe4ae1dd7e837d82aac1d6bc6af3c0bd6bbd5dd424f1cf8a0e6da91a36101b26e974b7b00eca70cf53a82cbfcd1c10ccc63de22e067b05ae031f3dd71cc5eca8661f6d048396cb9b62943722f362e2574e772a550b79b7819ef6ef628cb5ede6f3c971a6bc7a42e2da7705e1c95a6fd8d0fcbe09252c2fae46c349b87f7487a34aec214f169934930a90d67fa22d22d66d282f6a659a469f41ef632d00cb7456d34eff9b38f6a02421cdfcde851334bd061a1fe12f05cebb241eb67f4079720cf7c7ed7e05df968ad1698522464c1ab1922117f0c49de0554834bb459901ff3561df19b19ae5569c2208da078d17ad17f7748f333f931bb8554deb11da2810c8bf11b2928b2c088351", 0xdf6}], 0x1}}], 0x1, 0x9200000000000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x9, 0x402) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r7], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x3c4, 0x38}, 0xc) openat$pfkey(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000a000000000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x50) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) syz_io_uring_setup(0x2738, &(0x7f0000000440)={0x0, 0x5be0, 0x1, 0x1, 0xac}, 0x0, &(0x7f0000000240)) 157.228318ms ago: executing program 3 (id=3240): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @dev, 0x5}, 0x1c) r1 = syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newtaction={0x14, 0x76, 0x129, 0xfffffffc}, 0x14}}, 0x0) r1 = socket$inet6(0xa, 0x802, 0xa80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x68}}, @NFCTH_STATUS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4400c000}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x20, 0x2, 0x2, 0x903, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000001100)=0x8000002, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x1, 0x7, 0x3b1bbb64582817d9, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x103}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}]}, 0x94}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) close_range(r5, 0xffffffffffffffff, 0x400000000000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): [ T5918] dvb-usb: could not initialize remote control. [ 836.023727][ T5918] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 836.045767][T17170] bond1: option mode: unable to set because the bond device has slaves [ 836.107360][ T5918] usb 4-1: USB disconnect, device number 56 [ 836.259714][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2792'. [ 836.295597][ T5918] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 836.329094][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'. [ 836.425752][T17174] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 836.525101][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2793'. [ 836.844560][ T24] ftdi_sio 5-1:251.2: FTDI USB Serial Device converter detected [ 836.877015][ T24] ftdi_sio ttyUSB0: unknown device type: 0x9276 [ 836.898848][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2793'. [ 836.940226][ T24] usb 5-1: USB disconnect, device number 58 [ 836.951982][ T24] ftdi_sio 5-1:251.2: device disconnected [ 836.959963][T17188] FAULT_INJECTION: forcing a failure. [ 836.959963][T17188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 836.975695][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2793'. [ 836.976844][T17188] CPU: 1 UID: 0 PID: 17188 Comm: syz.4.2796 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.976878][T17188] Tainted: [L]=SOFTLOCKUP [ 836.976885][T17188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 836.976896][T17188] Call Trace: [ 836.976905][T17188] [ 836.976912][T17188] dump_stack_lvl+0xe8/0x150 [ 836.976942][T17188] should_fail_ex+0x412/0x560 [ 836.976972][T17188] prepare_alloc_pages+0x22a/0x650 [ 836.977000][T17188] __alloc_frozen_pages_noprof+0x12f/0x380 [ 836.977023][T17188] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 836.977048][T17188] ? __pfx_policy_nodemask+0x10/0x10 [ 836.977071][T17188] ? do_raw_spin_lock+0x12b/0x2f0 [ 836.977092][T17188] alloc_pages_mpol+0x232/0x4a0 [ 836.977117][T17188] alloc_pages_noprof+0xa8/0x190 [ 836.977140][T17188] get_free_pages_noprof+0xf/0x80 [ 836.977160][T17188] do_proc_control+0x1a7/0xe40 [ 836.977192][T17188] proc_control_compat+0x137/0x190 [ 836.977222][T17188] ? __pfx_proc_control_compat+0x10/0x10 [ 836.977260][T17188] usbdev_ioctl+0x1390/0x2120 [ 836.977289][T17188] ? __fget_files+0x2a/0x420 [ 836.977314][T17188] ? __pfx_usbdev_ioctl+0x10/0x10 [ 836.977337][T17188] ? __fget_files+0x3a0/0x420 [ 836.977360][T17188] ? __fget_files+0x2a/0x420 [ 836.977384][T17188] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 836.977408][T17188] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 836.977431][T17188] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 836.977454][T17188] ? __fget_files+0x3a0/0x420 [ 836.977482][T17188] ? fput+0xa0/0xd0 [ 836.977503][T17188] ? ksys_write+0x242/0x270 [ 836.977541][T17188] __do_fast_syscall_32+0x20d/0x640 [ 836.977563][T17188] ? do_fast_syscall_32+0x33/0x70 [ 836.977582][T17188] ? asm_int80_emulation+0x1a/0x20 [ 836.977599][T17188] ? do_int80_emulation+0x274/0x4d0 [ 836.977618][T17188] ? trace_irq_disable+0x3b/0x150 [ 836.977645][T17188] do_fast_syscall_32+0x33/0x70 [ 836.977665][T17188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 836.977687][T17188] RIP: 0023:0xf703ef6c [ 836.977703][T17188] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 836.977719][T17188] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 836.977738][T17188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0105500 [ 836.977751][T17188] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 836.977763][T17188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 836.977774][T17188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 836.977785][T17188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 836.977811][T17188] [ 837.343950][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 837.708647][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 838.059980][T17205] netlink: 'syz.4.2803': attribute type 8 has an invalid length. [ 838.096037][T17205] netlink: 'syz.4.2803': attribute type 4 has an invalid length. [ 838.126801][T17205] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2803'. [ 838.600008][T17216] binder: 17208:17216 ioctl 4018620d 0 returned -22 [ 838.747819][T17222] veth5: left promiscuous mode [ 840.132835][T17233] FAULT_INJECTION: forcing a failure. [ 840.132835][T17233] name failslab, interval 1, probability 0, space 0, times 0 [ 840.198485][T17233] CPU: 1 UID: 0 PID: 17233 Comm: syz.1.2809 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.198516][T17233] Tainted: [L]=SOFTLOCKUP [ 840.198523][T17233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 840.198535][T17233] Call Trace: [ 840.198542][T17233] [ 840.198551][T17233] dump_stack_lvl+0xe8/0x150 [ 840.198582][T17233] should_fail_ex+0x412/0x560 [ 840.198615][T17233] should_failslab+0xa8/0x100 [ 840.198638][T17233] __kmalloc_cache_noprof+0x88/0x660 [ 840.198666][T17233] ? nl80211_prepare_wdev_dump+0x55f/0x6a0 [ 840.198693][T17233] ? nl80211_dump_station+0x430/0xdd0 [ 840.198716][T17233] ? __kmalloc_cache_noprof+0x15b/0x660 [ 840.198747][T17233] nl80211_dump_station+0x430/0xdd0 [ 840.198773][T17233] ? kasan_save_track+0x3e/0x80 [ 840.198811][T17233] ? __pfx_nl80211_dump_station+0x10/0x10 [ 840.198875][T17233] ? __pfx_nl80211_dump_station+0x10/0x10 [ 840.198909][T17233] genl_dumpit+0x10b/0x1b0 [ 840.198933][T17233] netlink_dump+0x722/0xe80 [ 840.198969][T17233] ? __pfx_netlink_dump+0x10/0x10 [ 840.199009][T17233] ? genl_start+0x499/0x6c0 [ 840.199033][T17233] __netlink_dump_start+0x5cb/0x7e0 [ 840.199066][T17233] genl_family_rcv_msg_dumpit+0x213/0x310 [ 840.199089][T17233] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 840.199107][T17233] ? genl_get_cmd+0x7f4/0x930 [ 840.199128][T17233] ? __pfx_genl_start+0x10/0x10 [ 840.199142][T17233] ? __pfx_genl_dumpit+0x10/0x10 [ 840.199158][T17233] ? __pfx_genl_done+0x10/0x10 [ 840.199176][T17233] ? __dev_queue_xmit+0x274/0x38a0 [ 840.199205][T17233] genl_rcv_msg+0x5e8/0x7a0 [ 840.199229][T17233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 840.199247][T17233] ? __pfx_nl80211_dump_station+0x10/0x10 [ 840.199278][T17233] ? __lock_acquire+0x6b5/0x2cf0 [ 840.199309][T17233] netlink_rcv_skb+0x232/0x4b0 [ 840.199333][T17233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 840.199354][T17233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 840.199391][T17233] ? down_read+0x272/0x2e0 [ 840.199409][T17233] ? genl_rcv+0xd/0x40 [ 840.199427][T17233] genl_rcv+0x28/0x40 [ 840.199441][T17233] netlink_unicast+0x80f/0x9b0 [ 840.199469][T17233] ? __pfx_netlink_unicast+0x10/0x10 [ 840.199491][T17233] ? netlink_sendmsg+0x650/0xb40 [ 840.199512][T17233] ? skb_put+0x11b/0x210 [ 840.199540][T17233] netlink_sendmsg+0x813/0xb40 [ 840.199572][T17233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.199598][T17233] ? aa_sock_msg_perm+0xf1/0x1b0 [ 840.199623][T17233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 840.199642][T17233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.199665][T17233] ____sys_sendmsg+0xa68/0xad0 [ 840.199692][T17233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.199716][T17233] ? kstrtoull+0x12f/0x1d0 [ 840.199745][T17233] ___sys_sendmsg+0x2a5/0x360 [ 840.199769][T17233] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.199788][T17233] ? get_pid_task+0x20/0x1f0 [ 840.199812][T17233] ? get_pid_task+0x20/0x1f0 [ 840.199835][T17233] ? get_pid_task+0x20/0x1f0 [ 840.199882][T17233] ? __fget_files+0x2a/0x420 [ 840.199905][T17233] ? __fget_files+0x3a0/0x420 [ 840.199937][T17233] __sys_sendmsg+0x183/0x260 [ 840.199959][T17233] ? __pfx___sys_sendmsg+0x10/0x10 [ 840.199995][T17233] __do_fast_syscall_32+0x20d/0x640 [ 840.200017][T17233] ? do_fast_syscall_32+0x33/0x70 [ 840.200035][T17233] ? asm_int80_emulation+0x1a/0x20 [ 840.200051][T17233] ? do_int80_emulation+0x274/0x4d0 [ 840.200070][T17233] ? trace_irq_disable+0x3b/0x150 [ 840.200096][T17233] do_fast_syscall_32+0x33/0x70 [ 840.200117][T17233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.200138][T17233] RIP: 0023:0xf7fa3f6c [ 840.200155][T17233] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 840.200171][T17233] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 840.200191][T17233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 840.200203][T17233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 840.200214][T17233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.200225][T17233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 840.200236][T17233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.200262][T17233] [ 840.615965][ C1] hrtimer: interrupt took 407912839 ns [ 840.667507][T17236] netlink: 'syz.3.2810': attribute type 10 has an invalid length. [ 840.846862][T17236] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 840.964703][T17240] xt_TCPMSS: Only works on TCP SYN packets [ 840.978314][T17236] bond2: option mode: unable to set because the bond device has slaves [ 841.073675][T17240] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 841.123872][T17240] bond2: (slave macvlan4): Enslaving as an active interface with an up link [ 841.636187][T17253] __nla_validate_parse: 178 callbacks suppressed [ 841.636206][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 841.783891][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2816'. [ 841.981988][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 841.993779][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 842.268448][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 842.434182][T17272] binder: 17267:17272 ioctl 4018620d 0 returned -22 [ 843.138233][ T9] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 843.149227][ T9] usb 3-1: config index 0 descriptor too short (expected 65166, got 130) [ 843.157712][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.178629][ T9] usb 3-1: config index 1 descriptor too short (expected 65166, got 130) [ 843.187092][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.208375][ T9] usb 3-1: config index 2 descriptor too short (expected 65166, got 130) [ 843.216831][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.233828][ T9] usb 3-1: config index 3 descriptor too short (expected 65166, got 130) [ 843.263161][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.293643][ T9] usb 3-1: config index 4 descriptor too short (expected 65166, got 130) [ 843.316647][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.436506][ T9] usb 3-1: config index 5 descriptor too short (expected 65166, got 130) [ 843.458400][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.486208][ T9] usb 3-1: config index 6 descriptor too short (expected 65166, got 130) [ 843.507440][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.542775][ T9] usb 3-1: config index 7 descriptor too short (expected 65166, got 130) [ 843.563080][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.615480][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 843.642738][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.670927][ T9] usb 3-1: Product: syz [ 843.684021][ T9] usb 3-1: Manufacturer: syz [ 843.706395][ T9] usb 3-1: SerialNumber: syz [ 843.767896][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 843.817747][T16299] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 844.027714][T17287] netlink: 'syz.4.2822': attribute type 21 has an invalid length. [ 844.035929][T17287] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2822'. [ 844.213014][T17255] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2815'. [ 844.345189][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.389571][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.437320][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.474023][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.652626][ T5911] usb 3-1: USB disconnect, device number 50 [ 844.908220][T16299] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 844.931220][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 844.942098][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 844.953308][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 844.964223][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 845.262972][T16299] ath9k_htc: Failed to initialize the device [ 845.481926][ T5911] usb 3-1: ath9k_htc: USB layer deinitialized [ 845.891374][T17324] binder: 17314:17324 ioctl 4018620d 0 returned -22 [ 846.550285][T17334] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 846.774983][T17342] __nla_validate_parse: 79 callbacks suppressed [ 846.774996][T17342] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2839'. [ 846.890689][T16299] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 847.030257][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.049731][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.060348][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.069834][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.079133][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.089700][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.100657][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.111598][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.121914][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 847.390580][T16299] usb 1-1: Using ep0 maxpacket: 8 [ 847.413962][T16299] usb 1-1: unable to get BOS descriptor or descriptor too short [ 847.432012][T16299] usb 1-1: config 4 interface 0 has no altsetting 0 [ 847.444968][T16299] usb 1-1: string descriptor 0 read error: -22 [ 847.467023][T16299] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 847.537881][T16299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.546178][ T5937] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 847.602233][T16299] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 847.644670][T16299] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 847.662800][T16299] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 847.679334][T16299] usb 1-1: media controller created [ 847.700653][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 847.742868][ T5937] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 847.789855][ T5937] usb 3-1: config 0 has no interface number 0 [ 847.795997][ T5937] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 847.823258][T16299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.842929][ T5937] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 847.855112][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.865610][ T5937] usb 3-1: Product: syz [ 847.875001][ T5937] usb 3-1: Manufacturer: syz [ 847.896214][ T5937] usb 3-1: SerialNumber: syz [ 847.920660][T17357] netlink: 'syz.4.2843': attribute type 10 has an invalid length. [ 847.930291][ T5937] usb 3-1: config 0 descriptor?? [ 847.935940][T17352] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 847.955821][T17338] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 847.959846][T17357] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 847.993162][T17357] bond1: option mode: unable to set because the bond device has slaves [ 848.015925][T17357] xt_TCPMSS: Only works on TCP SYN packets [ 848.037677][T17357] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 848.048466][T17357] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 848.152284][T17352] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 849.069366][T16299] zl10353_read_register: readreg error (reg=127, ret==0) [ 849.388310][ T5911] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 849.539065][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 849.548905][ T5911] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 849.558892][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.566943][ T5911] usb 5-1: Product: syz [ 849.571790][ T5911] usb 5-1: Manufacturer: syz [ 849.576704][ T5911] usb 5-1: SerialNumber: syz [ 849.584602][ T5911] usb 5-1: config 0 descriptor?? [ 849.663758][T16299] usb 1-1: USB disconnect, device number 50 [ 849.795716][ T5911] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 849.894174][T17384] bond1: option mode: unable to set because the bond device has slaves [ 849.915076][T17384] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 850.204666][T17389] netlink: 'syz.1.2852': attribute type 1 has an invalid length. [ 851.011399][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.083221][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.040265][ T5937] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 852.125652][ T5937] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 852.149180][ T5937] asix 3-1:0.188: probe with driver asix failed with error -71 [ 852.213387][ T5937] usb 3-1: USB disconnect, device number 51 [ 852.388726][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 852.479697][ T5911] usb write operation failed. (-71) [ 852.509771][ T5911] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 852.575604][ T5911] dvbdev: DVB: registering new adapter (Terratec H7) [ 852.579193][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 852.588137][ T5911] usb 5-1: media controller created [ 852.588505][ T5937] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 852.635778][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 852.638730][ T5911] usb read operation failed. (-71) [ 852.652445][ T9] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 852.656544][T17432] __nla_validate_parse: 148 callbacks suppressed [ 852.656562][T17432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2864'. [ 852.661051][ T9] usb 4-1: config 8 has no interface number 0 [ 852.708829][ T9] usb 4-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 852.733100][ T9] usb 4-1: config 8 interface 203 has no altsetting 0 [ 852.748713][ T5911] usb write operation failed. (-71) [ 852.760022][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 852.769327][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 852.775698][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.777071][ T5911] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 852.785029][ T9] usb 4-1: Product: syz [ 852.807136][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 852.820535][ T5937] usb 3-1: config 4 interface 0 has no altsetting 0 [ 852.831062][ T5937] usb 3-1: string descriptor 0 read error: -22 [ 852.837529][ T5937] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 852.849371][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.861914][ T9] usb 4-1: Manufacturer: syz [ 852.872334][ T9] usb 4-1: SerialNumber: syz [ 852.888000][ T5937] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 852.932300][ T5937] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 852.947507][ T5911] usb 5-1: USB disconnect, device number 59 [ 852.980076][ T5937] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 852.995286][ T5937] usb 3-1: media controller created [ 853.037206][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.132406][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.142022][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.151767][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.161742][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.170850][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.183239][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.193116][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.203531][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.213119][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 853.248511][T17419] veth25: left promiscuous mode [ 853.717255][T17444] pim6reg: entered allmulticast mode [ 854.107746][T17454] binder: 17451:17454 ioctl 4018620d 0 returned -22 [ 854.532445][T17444] pim6reg: left allmulticast mode [ 854.823764][ T9] usb 4-1: USB disconnect, device number 57 [ 854.888413][ T796] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 855.058208][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 855.301143][ T796] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 855.321703][ T796] usb 1-1: config 1 has no interface number 1 [ 855.328264][ T796] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 855.339681][ T796] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 855.354036][ T796] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.374171][ T796] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 855.385539][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.393879][ T796] usb 1-1: Product: syz [ 855.401835][ T796] usb 1-1: Manufacturer: syz [ 855.408125][ T796] usb 1-1: SerialNumber: syz [ 855.540322][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 855.573069][ T5937] usb 3-1: USB disconnect, device number 52 [ 855.728449][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 855.737569][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 855.802825][ T9] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 855.812526][T17473] bond0: entered promiscuous mode [ 855.819388][ T9] usb 4-1: config 8 has no interface number 0 [ 855.826775][T17473] bond_slave_0: entered promiscuous mode [ 855.834647][ T796] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 855.838331][T17473] bond_slave_1: entered promiscuous mode [ 855.842899][ T9] usb 4-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 855.898098][ T9] usb 4-1: config 8 interface 203 has no altsetting 0 [ 855.901216][T17473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.914154][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 855.928255][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.949803][ T9] usb 4-1: Product: syz [ 855.958631][ T9] usb 4-1: Manufacturer: syz [ 855.967194][ T9] usb 4-1: SerialNumber: syz [ 856.436269][T17457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.448797][T17457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.481203][T17480] binder: BINDER_SET_CONTEXT_MGR already set [ 856.488266][T17480] binder: 17478:17480 ioctl 4018620d 80000040 returned -16 [ 856.512252][T17480] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 856.714442][T17482] bond1: option mode: unable to set because the bond device has slaves [ 856.788905][T17482] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 856.838407][T17483] bond0: left promiscuous mode [ 856.843287][T17483] bond_slave_0: left promiscuous mode [ 856.856336][T17483] bond_slave_1: left promiscuous mode [ 856.955235][ T796] usb 1-1: USB disconnect, device number 51 [ 857.009886][T17487] pim6reg: entered allmulticast mode [ 857.080564][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.213310][T17491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 857.292241][T17491] batadv0: entered promiscuous mode [ 857.311511][T17491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 857.337448][T17491] bond2: (slave macvlan2): making interface the new active one [ 857.356311][T17491] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 857.710770][T17487] pim6reg: left allmulticast mode [ 858.059983][ T9] usb 4-1: USB disconnect, device number 58 [ 858.578445][T17526] __nla_validate_parse: 202 callbacks suppressed [ 858.578458][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 858.724266][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 858.808789][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 858.817960][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 858.831942][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 858.889145][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 859.033981][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 859.089674][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 859.102418][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 859.112739][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 859.278386][ T796] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 859.420687][ T796] usb 1-1: device descriptor read/64, error -71 [ 859.531107][T17548] bond1: option mode: unable to set because the bond device has slaves [ 859.555621][T17548] bond1: (slave netdevsim0): Enslaving as an active interface with a down link [ 859.574780][T17549] pim6reg: entered allmulticast mode [ 859.682701][ T796] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 859.819127][ T796] usb 1-1: device descriptor read/64, error -71 [ 859.940022][ T796] usb usb1-port1: attempt power cycle [ 860.030394][T16299] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 860.141843][T17563] loop6: detected capacity change from 0 to 7 [ 860.152588][ T6487] Dev loop6: unable to read RDB block 7 [ 860.158431][ T6487] loop6: unable to read partition table [ 860.165374][ T6487] loop6: partition table beyond EOD, truncated [ 860.168226][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 860.179322][T16299] usb 4-1: device descriptor read/64, error -71 [ 860.193879][T17563] Dev loop6: unable to read RDB block 7 [ 860.200232][T17563] loop6: unable to read partition table [ 860.207460][T17563] loop6: partition table beyond EOD, truncated [ 860.222332][T17563] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 860.241313][ T5192] Dev loop6: unable to read RDB block 7 [ 860.247313][ T5192] loop6: unable to read partition table [ 860.254042][ T5192] loop6: partition table beyond EOD, truncated [ 860.308154][ T796] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 860.331917][T17549] pim6reg: left allmulticast mode [ 860.338962][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 860.358725][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 860.370456][ T796] usb 1-1: device descriptor read/8, error -71 [ 860.378555][ T9] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 860.394949][ T9] usb 5-1: config 8 has no interface number 0 [ 860.411107][ T9] usb 5-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 860.425275][T16299] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 860.438313][ T9] usb 5-1: config 8 interface 203 has no altsetting 0 [ 860.481588][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 860.500496][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.518790][ T9] usb 5-1: Product: syz [ 860.527062][ T9] usb 5-1: Manufacturer: syz [ 860.540007][ T9] usb 5-1: SerialNumber: syz [ 860.591310][T16299] usb 4-1: device descriptor read/64, error -71 [ 860.624060][ T796] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 860.662053][ T796] usb 1-1: device descriptor read/8, error -71 [ 860.711262][T16299] usb usb4-port1: attempt power cycle [ 860.788548][ T796] usb usb1-port1: unable to enumerate USB device [ 861.058237][T16299] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 861.078992][T16299] usb 4-1: device descriptor read/8, error -71 [ 861.391582][T16299] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 861.421298][T16299] usb 4-1: device descriptor read/8, error -71 [ 861.488461][T17573] netlink: 'syz.2.2912': attribute type 10 has an invalid length. [ 861.549513][T16299] usb usb4-port1: unable to enumerate USB device [ 862.058354][ T796] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 862.232894][ T796] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 862.247255][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.264080][ T796] usb 3-1: Product: syz [ 862.273721][ T796] usb 3-1: Manufacturer: syz [ 862.282213][ T796] usb 3-1: SerialNumber: syz [ 862.388246][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 862.538487][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 862.546615][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 862.557058][ T24] usb 1-1: config 8 has an invalid interface number: 203 but max is 0 [ 862.567569][ T24] usb 1-1: config 8 has no interface number 0 [ 862.574374][ T24] usb 1-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 862.596359][ T24] usb 1-1: config 8 interface 203 has no altsetting 0 [ 862.607356][ T24] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 862.617021][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.626066][ T24] usb 1-1: Product: syz [ 862.635907][ T24] usb 1-1: Manufacturer: syz [ 862.645327][ T24] usb 1-1: SerialNumber: syz [ 863.004239][ T9] usb 5-1: USB disconnect, device number 60 [ 863.185759][T17596] syz_tun: entered promiscuous mode [ 863.196336][T17596] bond0: entered promiscuous mode [ 863.208636][T17596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.350738][ T796] rtl8150 3-1:1.0: couldn't reset the device [ 863.362839][ T796] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 864.028584][T17608] IPv6: NLM_F_CREATE should be specified when creating new route [ 864.102721][T17609] __nla_validate_parse: 349 callbacks suppressed [ 864.102740][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'. [ 864.124001][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'. [ 864.380388][T17614] bond1: option mode: unable to set because the bond device has slaves [ 864.450746][ T796] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 864.496971][T17614] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 864.522954][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2927'. [ 864.538310][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'. [ 864.637771][ T796] usb 4-1: device descriptor read/64, error -71 [ 864.843476][T16299] usb 3-1: USB disconnect, device number 53 [ 864.908209][ T796] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 865.048919][ T796] usb 4-1: device descriptor read/64, error -71 [ 865.110206][ T24] usb 1-1: USB disconnect, device number 56 [ 865.168889][ T796] usb usb4-port1: attempt power cycle [ 865.705884][T17622] binder: 17618:17622 ioctl 4018620d 0 returned -22 [ 865.738175][ T796] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 865.763787][ T796] usb 4-1: device descriptor read/8, error -71 [ 865.797688][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 865.815551][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 865.823802][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 865.834162][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 865.841852][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 865.995070][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 866.078209][ T796] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 866.122905][ T796] usb 4-1: device descriptor read/8, error -71 [ 866.151745][ T6075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.158207][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 866.182727][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.195196][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.205786][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 866.215247][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.231880][ T24] usb 2-1: config 0 descriptor?? [ 866.248458][ T796] usb usb4-port1: unable to enumerate USB device [ 866.286584][ T6075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.361336][ T6075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.479832][ T6075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.700218][ T24] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 866.887200][T17627] chnl_net:caif_netlink_parms(): no params data found [ 866.912052][ T6075] bridge_slave_1: left allmulticast mode [ 866.926596][ T6075] bridge_slave_1: left promiscuous mode [ 866.947112][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.977407][ T6075] bridge_slave_0: left allmulticast mode [ 866.983312][ T6075] bridge_slave_0: left promiscuous mode [ 866.991140][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.196142][ T6075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.262721][ T6075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.273145][ T6075] bond0 (unregistering): Released all slaves [ 867.286679][ T6075] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 867.324676][ T6075] batadv0: left promiscuous mode [ 867.362099][ T6075] bond1 (unregistering): Released all slaves [ 867.899303][T17665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2939'. [ 867.938933][ T5840] Bluetooth: hci0: command tx timeout [ 868.086616][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 868.193199][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 868.230567][ T6075] hsr_slave_0: left promiscuous mode [ 868.236841][ T6075] hsr_slave_1: left promiscuous mode [ 868.262878][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.278149][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.304668][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.323282][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.433086][ T6075] veth1_macvtap: left promiscuous mode [ 868.517754][ T6075] veth0_macvtap: left promiscuous mode [ 868.533687][ T6075] veth1_vlan: left promiscuous mode [ 868.543171][ T6075] veth0_vlan: left promiscuous mode [ 868.684372][ T796] usb 2-1: USB disconnect, device number 48 [ 869.199289][ T6075] team0 (unregistering): Port device team_slave_0 removed [ 869.295207][T17627] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.302566][T17627] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.310265][T17627] bridge_slave_0: entered allmulticast mode [ 869.317602][T17627] bridge_slave_0: entered promiscuous mode [ 869.326600][T17627] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.333974][T17627] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.341515][T17627] bridge_slave_1: entered allmulticast mode [ 869.349350][T17627] bridge_slave_1: entered promiscuous mode [ 869.363855][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.413152][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.480905][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.494377][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.504549][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.534754][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.556798][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.566370][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.575969][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.589800][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 869.600848][T17694] bond0: left promiscuous mode [ 869.630013][T17698] netlink: 'syz.1.2948': attribute type 25 has an invalid length. [ 869.637864][T17698] netlink: 'syz.1.2948': attribute type 1 has an invalid length. [ 869.664348][T17698] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.677577][T17700] netlink: 'syz.0.2949': attribute type 10 has an invalid length. [ 869.718843][T17627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.771066][T17627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.824594][T17704] bond1: option mode: unable to set because the bond device has slaves [ 869.846272][T17706] FAULT_INJECTION: forcing a failure. [ 869.846272][T17706] name failslab, interval 1, probability 0, space 0, times 0 [ 869.862709][T17627] team0: Port device team_slave_0 added [ 869.862900][T17706] CPU: 1 UID: 0 PID: 17706 Comm: syz.1.2951 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.862926][T17706] Tainted: [L]=SOFTLOCKUP [ 869.862933][T17706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 869.862945][T17706] Call Trace: [ 869.862953][T17706] [ 869.862962][T17706] dump_stack_lvl+0xe8/0x150 [ 869.862991][T17706] should_fail_ex+0x412/0x560 [ 869.863022][T17706] should_failslab+0xa8/0x100 [ 869.863044][T17706] __kmalloc_noprof+0xe8/0x760 [ 869.863072][T17706] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 869.863098][T17706] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 869.863124][T17706] genl_family_rcv_msg_doit+0xd9/0x330 [ 869.863150][T17706] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 869.863176][T17706] ? apparmor_capable+0x137/0x1a0 [ 869.863198][T17706] ? bpf_lsm_capable+0x9/0x20 [ 869.863219][T17706] ? security_capable+0x7e/0x2c0 [ 869.863251][T17706] genl_rcv_msg+0x61c/0x7a0 [ 869.863282][T17706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 869.863300][T17706] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 869.863321][T17706] ? __pfx_nl80211_authenticate+0x10/0x10 [ 869.863345][T17706] ? __pfx_nl80211_post_doit+0x10/0x10 [ 869.863366][T17706] ? __lock_acquire+0x6b5/0x2cf0 [ 869.863398][T17706] netlink_rcv_skb+0x232/0x4b0 [ 869.863422][T17706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 869.863442][T17706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 869.863477][T17706] ? down_read+0x272/0x2e0 [ 869.863496][T17706] ? genl_rcv+0xd/0x40 [ 869.863515][T17706] genl_rcv+0x28/0x40 [ 869.863530][T17706] netlink_unicast+0x80f/0x9b0 [ 869.863560][T17706] ? __pfx_netlink_unicast+0x10/0x10 [ 869.863583][T17706] ? netlink_sendmsg+0x650/0xb40 [ 869.863605][T17706] ? skb_put+0x11b/0x210 [ 869.863633][T17706] netlink_sendmsg+0x813/0xb40 [ 869.863665][T17706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.863692][T17706] ? aa_sock_msg_perm+0xf1/0x1b0 [ 869.863718][T17706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.863737][T17706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.863760][T17706] ____sys_sendmsg+0xa68/0xad0 [ 869.863787][T17706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.863809][T17706] ? kstrtoull+0x12f/0x1d0 [ 869.863840][T17706] ___sys_sendmsg+0x2a5/0x360 [ 869.863863][T17706] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.863884][T17706] ? get_pid_task+0x20/0x1f0 [ 869.863909][T17706] ? get_pid_task+0x20/0x1f0 [ 869.863936][T17706] ? get_pid_task+0x20/0x1f0 [ 869.863985][T17706] ? __fget_files+0x2a/0x420 [ 869.864007][T17706] ? __fget_files+0x3a0/0x420 [ 869.864037][T17706] __sys_sendmsg+0x183/0x260 [ 869.864058][T17706] ? __pfx___sys_sendmsg+0x10/0x10 [ 869.864096][T17706] __do_fast_syscall_32+0x20d/0x640 [ 869.864118][T17706] ? do_fast_syscall_32+0x33/0x70 [ 869.864136][T17706] ? asm_int80_emulation+0x1a/0x20 [ 869.864153][T17706] ? do_int80_emulation+0x274/0x4d0 [ 869.864171][T17706] ? trace_irq_disable+0x3b/0x150 [ 869.864198][T17706] do_fast_syscall_32+0x33/0x70 [ 869.864236][T17706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 869.864264][T17706] RIP: 0023:0xf7fa3f6c [ 869.864281][T17706] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 869.864297][T17706] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 869.864316][T17706] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002940 [ 869.864329][T17706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 869.864340][T17706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 869.864350][T17706] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 869.864361][T17706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 869.864387][T17706] [ 870.100192][ T5840] Bluetooth: hci0: command tx timeout [ 870.105275][T17627] team0: Port device team_slave_1 added [ 870.353419][T17704] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 870.662102][T17725] binder: 17720:17725 ioctl 4018620d 0 returned -22 [ 871.011359][T17627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.064740][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.348392][T17737] binder: 17728:17737 ioctl 4018620d 0 returned -22 [ 871.408197][T17627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.434720][T17627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.458175][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.498534][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.506890][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.515079][T17627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.754245][T17627] hsr_slave_0: entered promiscuous mode [ 871.778478][T17627] hsr_slave_1: entered promiscuous mode [ 871.788519][T17627] debugfs: 'hsr0' already exists in 'hsr' [ 871.800778][T17627] Cannot create hsr debugfs directory [ 872.111231][ T5840] Bluetooth: hci0: command tx timeout [ 873.062173][T17766] binder: 17762:17766 ioctl 4018620d 0 returned -22 [ 874.057822][T17785] binder: 17777:17785 ioctl 4018620d 0 returned -22 [ 874.188307][ T5840] Bluetooth: hci0: command tx timeout [ 874.380596][T17627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 874.420648][T17627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 874.444562][T17627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 874.821938][T17794] netlink: 'syz.4.2966': attribute type 25 has an invalid length. [ 874.841139][T17794] netlink: 'syz.4.2966': attribute type 1 has an invalid length. [ 874.857318][T17794] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.879199][T17627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 874.933775][T17797] bridge1: entered promiscuous mode [ 875.259072][T17627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.305393][T17627] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.375025][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.382193][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.446196][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.453382][ T6075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.693048][T17827] __nla_validate_parse: 99 callbacks suppressed [ 875.693066][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2975'. [ 875.695853][T17627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.740915][T17830] pim6reg: entered allmulticast mode [ 875.870895][T17835] binder: 17828:17835 ioctl 4018620d 0 returned -22 [ 875.962307][T17627] veth0_vlan: entered promiscuous mode [ 875.992513][T17627] veth1_vlan: entered promiscuous mode [ 876.011788][T17627] veth0_macvtap: entered promiscuous mode [ 876.030350][T17627] veth1_macvtap: entered promiscuous mode [ 876.049656][T17627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.066231][T17627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.223930][T15254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.234138][T15254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.412837][T17844] program syz.0.2978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 876.543853][T16583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.556991][T16583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.578829][T17830] pim6reg: left allmulticast mode [ 877.060881][T17856] netlink: 'syz.4.2979': attribute type 25 has an invalid length. [ 877.069847][T17856] netlink: 'syz.4.2979': attribute type 1 has an invalid length. [ 877.080005][T17856] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.362147][ T6075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.388298][ T6075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.637906][ T6075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.672889][ T6075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.683997][T17876] netlink: 'syz.3.2982': attribute type 10 has an invalid length. [ 877.697260][T17876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2982'. [ 877.786581][T17876] batman_adv: batadv0: Adding interface: virt_wifi0 [ 877.819679][T17876] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.872538][T17876] batman_adv: batadv0: Interface activated: virt_wifi0 [ 877.977000][T17885] binder: 17879:17885 ioctl 4018620d 0 returned -22 [ 878.058314][T17884] netlink: 'syz.1.2987': attribute type 25 has an invalid length. [ 878.089577][T17884] netlink: 'syz.1.2987': attribute type 1 has an invalid length. [ 878.152640][T17884] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.744712][T17904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2991'. [ 878.891147][T17912] binder: 17900:17912 ioctl c0d05605 80000540 returned -22 [ 879.229849][T17905] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2989'. [ 879.373025][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 879.383512][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 879.399073][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 879.516926][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 879.524739][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 879.574609][T17911] syz.1.2992 (17911): drop_caches: 2 [ 879.686701][ T7174] syz_tun (unregistering): left allmulticast mode [ 879.742518][ T7174] bond0: (slave syz_tun): Releasing backup interface [ 879.988379][T17923] netlink: 'syz.4.2994': attribute type 10 has an invalid length. [ 880.020508][T17923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2994'. [ 880.090005][ T49] bond2: (slave macvlan4): link status definitely down, disabling slave [ 880.121702][ T49] macvlan3: entered promiscuous mode [ 881.049151][T17964] netlink: 'syz.2.3001': attribute type 25 has an invalid length. [ 881.073605][T17964] netlink: 'syz.2.3001': attribute type 1 has an invalid length. [ 881.083878][T17964] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.551914][ T5834] Bluetooth: hci5: command tx timeout [ 881.794292][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 881.808723][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 881.843530][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 881.924687][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 881.979257][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 882.024057][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 882.132481][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 882.187339][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 882.262493][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 882.343381][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 882.380417][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.387665][T17977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.804277][T17996] pim6reg: entered allmulticast mode [ 882.824445][T18002] netlink: 'syz.2.3007': attribute type 10 has an invalid length. [ 882.872477][T17920] chnl_net:caif_netlink_parms(): no params data found [ 883.023122][T17994] pim6reg: left allmulticast mode [ 883.076098][T18008] bridge_slave_0: left allmulticast mode [ 883.113641][T18008] bridge_slave_0: left promiscuous mode [ 883.138847][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.153871][T18008] bridge_slave_1: left allmulticast mode [ 883.160257][T18008] bridge_slave_1: left promiscuous mode [ 883.166013][T18008] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.176746][T18008] bond0: (slave bond_slave_0): Releasing backup interface [ 883.186895][T18008] bond0: (slave bond_slave_1): Releasing backup interface [ 883.258625][T18008] team0: Port device team_slave_0 removed [ 883.265217][T18020] binder: 18015:18020 ioctl 4018620d 0 returned -22 [ 883.277221][T18008] team0: Port device team_slave_1 removed [ 883.290485][T18008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.299032][T18008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.307931][T18008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.316154][T18008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.365035][T18008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 883.391526][T18011] pim6reg: entered allmulticast mode [ 883.488998][T17920] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.497786][T17920] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.505318][T17920] bridge_slave_0: entered allmulticast mode [ 883.512446][T17920] bridge_slave_0: entered promiscuous mode [ 883.578286][T17920] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.586651][T17920] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.595016][T17920] bridge_slave_1: entered allmulticast mode [ 883.603947][T17920] bridge_slave_1: entered promiscuous mode [ 883.688203][ T5840] Bluetooth: hci5: command tx timeout [ 883.853956][T17920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.874508][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 883.881669][T18006] pim6reg: left allmulticast mode [ 883.907280][T17920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.368976][ T5911] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 884.558859][T17920] team0: Port device team_slave_0 added [ 884.591638][T17920] team0: Port device team_slave_1 added [ 884.637069][T17920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.644314][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.675172][T17920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.685963][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 884.697361][ T5911] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 884.706485][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.716040][T17920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.735749][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.762947][ T5911] usb 3-1: config 0 descriptor?? [ 884.775713][T18030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 884.783343][T17920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.892534][T18038] bond1: option mode: unable to set because the bond device has slaves [ 884.964336][T17920] hsr_slave_0: entered promiscuous mode [ 884.975469][T17920] hsr_slave_1: entered promiscuous mode [ 884.982134][T17920] debugfs: 'hsr0' already exists in 'hsr' [ 884.987944][T17920] Cannot create hsr debugfs directory [ 885.115901][T18038] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 885.251110][ T5911] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 885.546162][T18030] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 885.614773][T18030] bond1 (unregistering): Released all slaves [ 885.824588][ T5840] Bluetooth: hci5: command tx timeout [ 885.960480][T17920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.011042][T18049] bridge_slave_0: left allmulticast mode [ 886.016767][T18049] bridge_slave_0: left promiscuous mode [ 886.030329][T18049] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.097022][T18049] bridge_slave_1: left allmulticast mode [ 886.115145][T18049] bridge_slave_1: left promiscuous mode [ 886.128708][T18049] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.150064][T18049] bond0: (slave bond_slave_0): Releasing backup interface [ 886.193231][T18049] bond0: (slave bond_slave_1): Releasing backup interface [ 886.240536][T18049] team0: Port device team_slave_0 removed [ 886.250234][T18049] team0: Port device team_slave_1 removed [ 886.257194][T18049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.270211][T18049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.286368][T18049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.298530][T18049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.327129][T18049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 886.378743][ T5911] usb 3-1: reset full-speed USB device number 54 using dummy_hcd [ 886.556188][T17920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.603116][T18068] pim6reg: entered allmulticast mode [ 886.677389][T17920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.073482][T17920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.253036][ T5919] usb 3-1: USB disconnect, device number 54 [ 887.428828][T18068] pim6reg: left allmulticast mode [ 887.878283][ T5840] Bluetooth: hci5: command tx timeout [ 888.358200][ T9] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 888.574662][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 888.592765][ T9] usb 5-1: config 0 has no interface number 0 [ 888.635703][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 888.649305][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 888.664938][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 888.676227][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.708265][T17920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 888.718817][ T9] usb 5-1: config 0 descriptor?? [ 888.724283][T18095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 888.741361][T17920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 888.744072][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 888.802804][T17920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 888.858185][ T796] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 888.867588][T17920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 889.450102][T17920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.468714][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 889.481780][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 889.504789][T17920] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.546438][ T796] usb 3-1: config 8 has an invalid interface number: 203 but max is 0 [ 889.555870][ T796] usb 3-1: config 8 has no interface number 0 [ 889.569283][ T796] usb 3-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 889.598031][ T796] usb 3-1: config 8 interface 203 has no altsetting 0 [ 889.612769][ T796] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 889.622160][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.644537][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.651648][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.662930][ T796] usb 3-1: Product: syz [ 889.675054][ T796] usb 3-1: Manufacturer: syz [ 889.680476][ T796] usb 3-1: SerialNumber: syz [ 889.684673][T15254] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.692186][T15254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.943602][T17920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.955682][T18099] __nla_validate_parse: 142 callbacks suppressed [ 889.955702][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.008811][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.099336][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.111535][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.124172][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.134703][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.144743][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.167065][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.177740][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3035'. [ 890.187593][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.250332][ T5911] usb 5-1: USB disconnect, device number 61 [ 890.345337][T17920] veth0_vlan: entered promiscuous mode [ 890.361506][T17920] veth1_vlan: entered promiscuous mode [ 890.393046][T17920] veth0_macvtap: entered promiscuous mode [ 890.403161][T17920] veth1_macvtap: entered promiscuous mode [ 890.431513][T17920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.450176][T17920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.474164][T15254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.506613][T15254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.568751][T15254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.580927][T15254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.725169][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.738202][T13706] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 890.759090][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.855503][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.871322][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.920327][T13706] usb 5-1: Using ep0 maxpacket: 32 [ 890.956042][T13706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 890.996247][T13706] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 891.012966][T13706] usb 5-1: config 8 has no interface number 0 [ 891.032526][T13706] usb 5-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 891.077585][T18138] pim6reg: entered allmulticast mode [ 891.090864][T13706] usb 5-1: config 8 interface 203 has no altsetting 0 [ 891.123082][T13706] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 891.150573][T13706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.174802][T13706] usb 5-1: Product: syz [ 891.183979][T13706] usb 5-1: Manufacturer: syz [ 891.201816][T13706] usb 5-1: SerialNumber: syz [ 891.447349][T18131] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.454576][T18131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.611641][ T796] usb 3-1: USB disconnect, device number 55 [ 891.946919][T18138] pim6reg: left allmulticast mode [ 892.078531][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 892.225111][T18150] program syz.2.3042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.288217][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 892.295483][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 892.307377][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 135: 111, using maximum allowed: 30 [ 892.324116][ T9] usb 4-1: config 0 interface 0 altsetting 135 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 892.337760][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 892.358109][ T9] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 892.377134][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.388864][ T9] usb 4-1: Product: syz [ 892.393079][ T9] usb 4-1: SerialNumber: syz [ 892.412843][ T9] usb 4-1: config 0 descriptor?? [ 892.508540][T18155] binder: 18152:18155 ioctl 4018620d 0 returned -22 [ 892.801551][ T9] usb 4-1: USB disconnect, device number 67 [ 892.880305][T18160] binder: 18157:18160 ioctl 4018620d 0 returned -22 [ 892.939700][T15254] macvlan3: left promiscuous mode [ 894.070433][T18169] bridge1: left promiscuous mode [ 894.124073][ T9] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 894.236441][T13706] usb 5-1: USB disconnect, device number 62 [ 894.279959][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 894.307339][ T9] usb 4-1: config 0 has no interface number 0 [ 894.325031][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 894.345269][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 894.357598][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 894.372467][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.401480][ T9] usb 4-1: config 0 descriptor?? [ 894.411465][T18167] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 894.433289][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 894.766856][T13333] usb 4-1: USB disconnect, device number 68 [ 894.772951][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 894.998738][T18181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.117651][T18182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.171099][T18191] pim6reg: entered allmulticast mode [ 895.436862][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 895.448566][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 895.456871][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 895.465614][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 895.475262][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 895.997043][T15522] syz_tun (unregistering): left allmulticast mode [ 896.014397][T15522] bond0: (slave syz_tun): Releasing backup interface [ 896.138882][T18191] pim6reg: left allmulticast mode [ 896.185281][T15254] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.266031][T18195] chnl_net:caif_netlink_parms(): no params data found [ 896.293236][T15254] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.410578][T15254] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.500921][T18195] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.535418][T18195] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.544956][T18195] bridge_slave_0: entered allmulticast mode [ 896.553922][T18195] bridge_slave_0: entered promiscuous mode [ 896.566362][T18195] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.574541][T18195] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.583373][T18195] bridge_slave_1: entered allmulticast mode [ 896.592460][T18195] bridge_slave_1: entered promiscuous mode [ 896.615627][T15254] bond1: (slave netdevsim0): Releasing active interface [ 896.630408][T15254] macvlan2: entered promiscuous mode [ 896.673455][T15254] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.773371][T18195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.788416][T13706] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 896.793368][T18195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.864216][T18195] team0: Port device team_slave_0 added [ 896.878758][T18195] team0: Port device team_slave_1 added [ 897.306894][T13706] usb 4-1: Using ep0 maxpacket: 32 [ 897.403562][T18223] binder: 18220:18223 ioctl 4018620d 0 returned -22 [ 897.448703][T13706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 897.491242][T13706] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 897.507549][T18224] __nla_validate_parse: 349 callbacks suppressed [ 897.507568][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.523682][T13706] usb 4-1: config 8 has no interface number 0 [ 897.528675][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.547326][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.557641][T13706] usb 4-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 897.581806][T13706] usb 4-1: config 8 interface 203 has no altsetting 0 [ 897.606914][T13706] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 897.618291][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.627537][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.636426][ T5840] Bluetooth: hci3: command tx timeout [ 897.651881][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.662932][T13706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.681602][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.690587][T13706] usb 4-1: Product: syz [ 897.704915][T13706] usb 4-1: Manufacturer: syz [ 897.718116][T13706] usb 4-1: SerialNumber: syz [ 897.728298][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.737993][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.772772][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 897.958612][T18195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.981507][T18195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.043459][T18195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.169414][T18195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.183662][T18195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.286929][T18195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.300194][T15254] bridge_slave_1: left allmulticast mode [ 898.306259][T15254] bridge_slave_1: left promiscuous mode [ 898.312516][T15254] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.365789][T15254] bridge_slave_0: left allmulticast mode [ 898.375769][T15254] bridge_slave_0: left promiscuous mode [ 898.384752][T15254] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.476470][T18231] binder: 18228:18231 ioctl 4018620d 0 returned -22 [ 898.800407][T15254] bond1 (unregistering): (slave macvlan3): Releasing active interface [ 898.817259][T15254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.833585][T15254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.844220][T15254] bond0 (unregistering): Released all slaves [ 898.857768][T15254] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 898.866134][T15254] macvlan2: left promiscuous mode [ 898.873994][T15254] batadv0: left promiscuous mode [ 898.887593][T15254] bond1 (unregistering): Released all slaves [ 899.460639][T18195] hsr_slave_0: entered promiscuous mode [ 899.511043][T18195] hsr_slave_1: entered promiscuous mode [ 899.531773][T18195] debugfs: 'hsr0' already exists in 'hsr' [ 899.590481][T18195] Cannot create hsr debugfs directory [ 899.617965][T18243] syz_tun: entered allmulticast mode [ 899.626948][T18237] syz_tun: left allmulticast mode [ 899.708730][ T5840] Bluetooth: hci3: command tx timeout [ 899.751121][T13706] usb 4-1: USB disconnect, device number 69 [ 900.450045][T18262] pim6reg: entered allmulticast mode [ 900.542963][T15254] hsr_slave_0: left promiscuous mode [ 900.551344][T15254] hsr_slave_1: left promiscuous mode [ 900.561841][T15254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.577019][T15254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.595233][T15254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.611547][T15254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.782465][T15254] veth1_macvtap: left promiscuous mode [ 900.790052][T15254] veth0_macvtap: left allmulticast mode [ 900.795596][T15254] veth0_macvtap: left promiscuous mode [ 900.801412][T15254] veth1_vlan: left promiscuous mode [ 900.807847][T15254] veth0_vlan: left promiscuous mode [ 901.158190][T13706] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 901.203142][T15254] team0 (unregistering): Port device team_slave_1 removed [ 901.216815][T15254] team0 (unregistering): Port device team_slave_0 removed [ 901.311940][T13706] usb 2-1: not running at top speed; connect to a high speed hub [ 901.321230][T13706] usb 2-1: config 3 has an invalid interface number: 47 but max is 1 [ 901.330381][T13706] usb 2-1: config 3 has no interface number 0 [ 901.342781][T13706] usb 2-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 901.352790][T13706] usb 2-1: config 3 interface 1 has no altsetting 0 [ 901.362533][T13706] usb 2-1: config 3 interface 47 has no altsetting 0 [ 901.374345][T13706] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 901.384130][T13706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.394272][T13706] usb 2-1: Product: syz [ 901.398701][T13706] usb 2-1: Manufacturer: syz [ 901.403401][T13706] usb 2-1: SerialNumber: syz [ 901.440420][T18262] pim6reg: left allmulticast mode [ 901.743679][T18284] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 901.771276][T18271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.788334][ T5840] Bluetooth: hci3: command tx timeout [ 901.888641][T18271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.303532][T18271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.419992][T18271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.569463][T18302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.682842][T13706] usb 2-1: selecting invalid altsetting 0 [ 902.718534][T18298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.804417][T18308] netlink: 'syz.0.3076': attribute type 2 has an invalid length. [ 902.896000][T13706] usb 2-1: USB disconnect, device number 49 [ 903.088848][ T7278] udevd[7278]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.871148][ T5840] Bluetooth: hci3: command tx timeout [ 903.993948][T18195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 904.140458][T18195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 904.145748][T18332] FAULT_INJECTION: forcing a failure. [ 904.145748][T18332] name failslab, interval 1, probability 0, space 0, times 0 [ 904.167525][T18332] CPU: 1 UID: 0 PID: 18332 Comm: syz.1.3081 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.167554][T18332] Tainted: [L]=SOFTLOCKUP [ 904.167561][T18332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.167572][T18332] Call Trace: [ 904.167580][T18332] [ 904.167588][T18332] dump_stack_lvl+0xe8/0x150 [ 904.167619][T18332] should_fail_ex+0x412/0x560 [ 904.167651][T18332] should_failslab+0xa8/0x100 [ 904.167672][T18332] ? do_getname+0x2e/0x250 [ 904.167694][T18332] kmem_cache_alloc_noprof+0x87/0x650 [ 904.167721][T18332] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 904.167750][T18332] do_getname+0x2e/0x250 [ 904.167771][T18332] ? user_path_at+0x1e/0x160 [ 904.167797][T18332] user_path_at+0x2a/0x160 [ 904.167826][T18332] __se_sys_mount+0x2dc/0x420 [ 904.167856][T18332] ? __pfx___se_sys_mount+0x10/0x10 [ 904.167884][T18332] ? __ia32_sys_mount+0x20/0xc0 [ 904.167911][T18332] __do_fast_syscall_32+0x20d/0x640 [ 904.167933][T18332] ? do_fast_syscall_32+0x33/0x70 [ 904.167954][T18332] ? asm_int80_emulation+0x1a/0x20 [ 904.167973][T18332] ? do_int80_emulation+0x274/0x4d0 [ 904.167993][T18332] ? trace_irq_disable+0x3b/0x150 [ 904.168028][T18332] do_fast_syscall_32+0x33/0x70 [ 904.168051][T18332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 904.168072][T18332] RIP: 0023:0xf7fa3f6c [ 904.168089][T18332] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 904.168103][T18332] RSP: 002b:00000000f544550c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 904.168121][T18332] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002080 [ 904.168134][T18332] RDX: 0000000000000000 RSI: 0000000000e00803 RDI: 0000000000000000 [ 904.168146][T18332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 904.168157][T18332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 904.168169][T18332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 904.168196][T18332] [ 904.520779][T18195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 904.633022][T18195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 904.833484][T18195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.891978][T18195] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.932927][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.940378][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.974851][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.982047][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.133488][T18362] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 905.174251][T18195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.287649][T18195] veth0_vlan: entered promiscuous mode [ 905.307939][T18195] veth1_vlan: entered promiscuous mode [ 905.326604][T18367] __nla_validate_parse: 138 callbacks suppressed [ 905.326624][T18367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3087'. [ 905.445032][T18376] : renamed from bridge_slave_0 (while UP) [ 905.452543][T18370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.497552][T18195] veth0_macvtap: entered promiscuous mode [ 905.530134][T18195] veth1_macvtap: entered promiscuous mode [ 905.581263][T18378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.591072][T18195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.607059][T18195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.647965][ T3542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.697822][T18370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.705846][ T6075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.726427][ T6075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.759612][ T6075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.938869][T18391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 906.030734][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 906.040507][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 906.145331][T16583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.157462][T16583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.244839][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.277958][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.851304][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 906.909211][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 906.967840][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 907.024901][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 907.074925][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 907.106134][T18418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 907.988721][T18430] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 908.457121][T18443] syzkaller0: entered promiscuous mode [ 908.462816][T18443] syzkaller0: entered allmulticast mode [ 908.994787][T18454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.179506][T18454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.243964][T18454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.668573][T18464] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 911.689278][T18486] FAULT_INJECTION: forcing a failure. [ 911.689278][T18486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.728145][T18486] CPU: 0 UID: 0 PID: 18486 Comm: syz.2.3113 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.728170][T18486] Tainted: [L]=SOFTLOCKUP [ 911.728174][T18486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 911.728181][T18486] Call Trace: [ 911.728186][T18486] [ 911.728191][T18486] dump_stack_lvl+0xe8/0x150 [ 911.728214][T18486] should_fail_ex+0x412/0x560 [ 911.728235][T18486] _copy_from_user+0x2d/0xb0 [ 911.728249][T18486] kstrtouint_from_user+0xd6/0x180 [ 911.728267][T18486] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 911.728285][T18486] ? __pfx___mutex_trylock_common+0x10/0x10 [ 911.728305][T18486] proc_fail_nth_write+0x8e/0x210 [ 911.728317][T18486] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 911.728331][T18486] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 911.728342][T18486] vfs_write+0x29a/0xb90 [ 911.728362][T18486] ? __pfx_vfs_write+0x10/0x10 [ 911.728378][T18486] ? __fget_files+0x2a/0x420 [ 911.728396][T18486] ? __fget_files+0x3a0/0x420 [ 911.728409][T18486] ? __fget_files+0x2a/0x420 [ 911.728426][T18486] ksys_write+0x150/0x270 [ 911.728442][T18486] ? __pfx_ksys_write+0x10/0x10 [ 911.728460][T18486] ? asm_int80_emulation+0x1a/0x20 [ 911.728473][T18486] do_int80_emulation+0x173/0x4d0 [ 911.728484][T18486] ? trace_irq_disable+0x3b/0x150 [ 911.728498][T18486] ? asm_int80_emulation+0x1a/0x20 [ 911.728508][T18486] ? clear_bhb_loop+0x40/0x90 [ 911.728518][T18486] ? clear_bhb_loop+0x40/0x90 [ 911.728530][T18486] asm_int80_emulation+0x1a/0x20 [ 911.728540][T18486] RIP: 0023:0xf715572b [ 911.728550][T18486] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 911.728559][T18486] RSP: 002b:00000000f53ec4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 911.728570][T18486] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53ec5d0 [ 911.728577][T18486] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 911.728583][T18486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 911.728589][T18486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 911.728595][T18486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 911.728610][T18486] [ 912.448230][T18225] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 912.495690][T18494] __nla_validate_parse: 76 callbacks suppressed [ 912.495702][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3115'. [ 912.628439][T18499] binder: 18495:18499 ioctl 4018620d 0 returned -22 [ 912.652818][ T9] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 912.664759][T18225] usb 2-1: Using ep0 maxpacket: 16 [ 912.669558][T18225] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 912.669598][T18225] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 912.669613][T18225] usb 2-1: config 0 interface 0 has no altsetting 0 [ 912.669632][T18225] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 912.669645][T18225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.674464][T18225] usb 2-1: config 0 descriptor?? [ 913.038153][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 913.198119][ T9] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 913.360811][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 913.374652][ T9] usb usb3-port1: attempt power cycle [ 913.567125][T18468] syz.0.3109 (18468): drop_caches: 2 [ 913.713845][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.724226][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.739229][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.748777][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.758992][ T9] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 913.767511][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.780930][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 913.787578][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.819142][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.828906][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.888622][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 913.928198][ T9] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 913.982091][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 913.992453][ T9] usb usb3-port1: unable to enumerate USB device [ 914.414078][T18521] netlink: zone id is out of range [ 914.419302][T18521] netlink: zone id is out of range [ 914.640552][T18225] usb 2-1: string descriptor 0 read error: -71 [ 914.649270][T18225] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 914.658147][T13333] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 914.667411][T18527] FAULT_INJECTION: forcing a failure. [ 914.667411][T18527] name failslab, interval 1, probability 0, space 0, times 0 [ 914.682449][T18527] CPU: 0 UID: 0 PID: 18527 Comm: syz.3.3125 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.682483][T18527] Tainted: [L]=SOFTLOCKUP [ 914.682490][T18527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 914.682501][T18527] Call Trace: [ 914.682508][T18527] [ 914.682516][T18527] dump_stack_lvl+0xe8/0x150 [ 914.682545][T18527] should_fail_ex+0x412/0x560 [ 914.682576][T18527] should_failslab+0xa8/0x100 [ 914.682598][T18527] __kmalloc_cache_noprof+0x88/0x660 [ 914.682672][T18527] ? sctp_add_bind_addr+0x8c/0x370 [ 914.682696][T18527] ? __pfx_sctp_get_port_local+0x10/0x10 [ 914.682721][T18527] sctp_add_bind_addr+0x8c/0x370 [ 914.682742][T18527] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 914.682766][T18527] sctp_do_bind+0x5b2/0x9d0 [ 914.682796][T18527] sctp_connect_new_asoc+0x270/0x6b0 [ 914.682818][T18527] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 914.682844][T18527] ? __local_bh_enable_ip+0xd0/0x130 [ 914.682936][T18527] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 914.682961][T18527] ? security_sctp_bind_connect+0x7e/0x2c0 [ 914.682990][T18527] sctp_sendmsg+0x1528/0x2c10 [ 914.683024][T18527] ? __pfx_sctp_sendmsg+0x10/0x10 [ 914.683056][T18527] ? aa_sk_perm+0x15a/0x960 [ 914.683083][T18527] ? aa_sk_perm+0x82d/0x960 [ 914.683115][T18527] ? __pfx_aa_sk_perm+0x10/0x10 [ 914.683143][T18527] ? sock_rps_record_flow+0x19/0x400 [ 914.683166][T18527] ? inet_sendmsg+0x2f4/0x370 [ 914.683200][T18527] ____sys_sendmsg+0x894/0xad0 [ 914.683228][T18527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.683274][T18527] ___sys_sendmsg+0x2a5/0x360 [ 914.683299][T18527] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.683322][T18527] ? kstrtoull+0x12f/0x1d0 [ 914.683372][T18527] ? __fget_files+0x2a/0x420 [ 914.683392][T18527] ? __fget_files+0x3a0/0x420 [ 914.683417][T18527] __sys_sendmmsg+0x2e7/0x4e0 [ 914.683437][T18527] ? __pfx___sys_sendmmsg+0x10/0x10 [ 914.683472][T18527] ? fput+0xa0/0xd0 [ 914.683491][T18527] ? ksys_write+0x242/0x270 [ 914.683520][T18527] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 914.683549][T18527] __do_fast_syscall_32+0x20d/0x640 [ 914.683572][T18527] ? do_fast_syscall_32+0x33/0x70 [ 914.683591][T18527] ? asm_int80_emulation+0x1a/0x20 [ 914.683606][T18527] ? do_int80_emulation+0x274/0x4d0 [ 914.683623][T18527] ? trace_irq_disable+0x3b/0x150 [ 914.683648][T18527] do_fast_syscall_32+0x33/0x70 [ 914.683666][T18527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 914.683685][T18527] RIP: 0023:0xf7fa4f6c [ 914.683702][T18527] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 914.683718][T18527] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 914.683737][T18527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800025c0 [ 914.683750][T18527] RDX: 0000000000000002 RSI: 00000000119eed40 RDI: 0000000000000000 [ 914.683761][T18527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 914.683771][T18527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 914.683780][T18527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 914.683805][T18527] [ 914.685478][T18225] usb 2-1: USB disconnect, device number 50 [ 914.828509][T13333] usb 5-1: Using ep0 maxpacket: 32 [ 915.167300][T13333] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 915.373881][T13333] usb 5-1: config 0 has no interface number 0 [ 915.412757][T13333] usb 5-1: config 0 interface 196 altsetting 1 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 915.477631][T13333] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x8E has invalid maxpacket 528 [ 915.503940][T13333] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 915.521873][T13333] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 915.547775][T13333] usb 5-1: config 0 interface 196 has no altsetting 0 [ 915.566295][T13333] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 915.580100][T13333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.595624][T13333] usb 5-1: Product: syz [ 915.604686][T13333] usb 5-1: Manufacturer: syz [ 915.615866][T13333] usb 5-1: SerialNumber: syz [ 915.627219][T13333] usb 5-1: config 0 descriptor?? [ 915.715699][T18521] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 916.468262][ T5911] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 916.488260][T18565] input: syz0 as /devices/virtual/input/input35 [ 916.590530][T18567] netlink: 'syz.3.3138': attribute type 10 has an invalid length. [ 916.619682][ T5911] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 916.637990][ T5911] usb 2-1: config 0 has no interface number 0 [ 916.653239][ T5911] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 916.679842][ T5911] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 916.691619][ T5911] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 916.702939][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.714464][ T5911] usb 2-1: config 0 descriptor?? [ 916.722545][T18557] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 916.756022][ T5911] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 917.126288][ T5911] usb 2-1: USB disconnect, device number 51 [ 917.126305][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 917.413100][T13333] ipheth 5-1:0.196: Unable to find endpoints [ 917.499269][T13333] usb 5-1: USB disconnect, device number 63 [ 919.310310][T18608] __nla_validate_parse: 63 callbacks suppressed [ 919.310323][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 919.365474][T18610] netlink: 'syz.2.3152': attribute type 10 has an invalid length. [ 919.404182][T18610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3152'. [ 919.888288][ T24] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 920.090068][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 920.102077][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 920.115241][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.501384][ T24] usb 3-1: config 0 descriptor?? [ 920.872624][ T24] ath6kl: Failed to submit usb control message: -71 [ 920.882877][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 920.890309][ T24] ath6kl: Unable to send get target info: -71 [ 920.905928][ T24] ath6kl: Failed to init ath6kl core: -71 [ 920.912633][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 920.951349][ T24] usb 3-1: USB disconnect, device number 60 [ 921.032146][T18642] FAULT_INJECTION: forcing a failure. [ 921.032146][T18642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.057841][T18642] CPU: 1 UID: 0 PID: 18642 Comm: syz.1.3157 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.057870][T18642] Tainted: [L]=SOFTLOCKUP [ 921.057877][T18642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 921.057889][T18642] Call Trace: [ 921.057897][T18642] [ 921.057906][T18642] dump_stack_lvl+0xe8/0x150 [ 921.057936][T18642] should_fail_ex+0x412/0x560 [ 921.057967][T18642] _copy_from_user+0x2d/0xb0 [ 921.057989][T18642] cmsghdr_from_user_compat_to_kern+0x51b/0x810 [ 921.058033][T18642] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 921.058067][T18642] ____sys_sendmsg+0x240/0xad0 [ 921.058088][T18642] ? start_block_group_remapping+0x435/0x2760 [ 921.058118][T18642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.058151][T18642] ___sys_sendmsg+0x2a5/0x360 [ 921.058174][T18642] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.058195][T18642] ? kstrtoull+0x12f/0x1d0 [ 921.058249][T18642] ? __fget_files+0x2a/0x420 [ 921.058273][T18642] ? __fget_files+0x3a0/0x420 [ 921.058306][T18642] __sys_sendmmsg+0x2e7/0x4e0 [ 921.058331][T18642] ? __pfx___sys_sendmmsg+0x10/0x10 [ 921.058369][T18642] ? fput+0xa0/0xd0 [ 921.058392][T18642] ? ksys_write+0x242/0x270 [ 921.058424][T18642] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 921.058453][T18642] __do_fast_syscall_32+0x20d/0x640 [ 921.058476][T18642] ? do_fast_syscall_32+0x33/0x70 [ 921.058494][T18642] ? asm_int80_emulation+0x1a/0x20 [ 921.058512][T18642] ? do_int80_emulation+0x274/0x4d0 [ 921.058531][T18642] ? trace_irq_disable+0x3b/0x150 [ 921.058555][T18642] do_fast_syscall_32+0x33/0x70 [ 921.058577][T18642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.058599][T18642] RIP: 0023:0xf7fa3f6c [ 921.058617][T18642] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 921.058634][T18642] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 921.058654][T18642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001e80 [ 921.058668][T18642] RDX: 0000000000000001 RSI: 0000000004000045 RDI: 0000000000000000 [ 921.058680][T18642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.058691][T18642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 921.058703][T18642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.058730][T18642] [ 921.848242][T13333] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 921.999562][ T5911] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 922.020669][T13333] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.031615][T13333] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 922.046210][T13333] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 922.055638][T13333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 922.064027][T13333] usb 2-1: SerialNumber: syz [ 922.074352][T13333] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 922.083271][T13333] usb-storage 2-1:1.0: USB Mass Storage device detected [ 922.093334][T13333] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 922.162729][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 922.175664][ T5911] usb 5-1: config 2 has an invalid interface number: 178 but max is 0 [ 922.184160][ T5911] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 922.192981][ T5911] usb 5-1: config 2 has no interface number 0 [ 922.200208][ T5911] usb 5-1: config 2 interface 178 altsetting 243 endpoint 0xC has invalid maxpacket 32, setting to 8 [ 922.211246][ T5911] usb 5-1: config 2 interface 178 altsetting 243 has a duplicate endpoint with address 0xC, skipping [ 922.222331][ T5911] usb 5-1: config 2 interface 178 has no altsetting 0 [ 922.232447][ T5911] usb 5-1: string descriptor 0 read error: -22 [ 922.239823][ T5911] usb 5-1: New USB device found, idVendor=06be, idProduct=d001, bcdDevice=51.19 [ 922.248950][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.269812][ T5911] gspca_main: nw80x-2.14.0 probing 06be:d001 [ 922.366557][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 922.366573][ T30] audit: type=1326 audit(1771301980.506:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 922.395718][ T30] audit: type=1326 audit(1771301980.516:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 922.423402][ T30] audit: type=1326 audit(1771301980.536:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 922.472376][ T30] audit: type=1326 audit(1771301980.536:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 922.482961][ T5911] gspca_nw80x: reg_w err -71 [ 922.495041][ T30] audit: type=1326 audit(1771301980.536:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 922.518277][ T5911] nw80x 5-1:2.178: probe with driver nw80x failed with error -71 [ 922.526435][ T30] audit: type=1326 audit(1771301980.536:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 922.558963][ T30] audit: type=1326 audit(1771301980.536:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 922.581185][ T30] audit: type=1326 audit(1771301980.536:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 922.604941][ T30] audit: type=1326 audit(1771301980.566:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 922.636664][ T30] audit: type=1326 audit(1771301980.616:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.1.3161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 922.710811][ T5911] usb 5-1: USB disconnect, device number 64 [ 923.198237][ T5911] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 923.278918][ T24] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 923.412089][ T5911] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 923.552827][ T5911] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 923.562394][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 923.579616][ T5911] usb 1-1: can't read configurations, error -61 [ 923.585894][ T24] usb 3-1: config 0 has no interface number 0 [ 923.593862][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 923.605956][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 923.617129][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 923.626775][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.645515][ T24] usb 3-1: config 0 descriptor?? [ 923.652914][T18684] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 923.673939][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 923.718522][ T5911] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 923.879259][ T5911] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 923.891146][ T5911] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 923.899510][ T5911] usb 1-1: can't read configurations, error -61 [ 923.906770][ T5911] usb usb1-port1: attempt power cycle [ 924.248236][ T5911] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 924.279507][ T5911] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 924.304044][ T5911] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 924.316427][ T5911] usb 1-1: can't read configurations, error -61 [ 924.431592][ T9] usb 3-1: USB disconnect, device number 61 [ 924.451581][ T5911] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 924.488945][ T5911] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 924.499593][ T5911] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 924.508270][ T5911] usb 1-1: can't read configurations, error -61 [ 924.523143][ T5911] usb usb1-port1: unable to enumerate USB device [ 924.702007][T18712] vivid-007: disconnect [ 924.716222][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'. [ 924.729175][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'. [ 924.743282][ T5911] usb 2-1: USB disconnect, device number 52 [ 924.943018][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 924.952857][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 924.964309][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 924.975815][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 924.985559][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 924.995263][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 925.004813][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 925.014221][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 925.482282][T18709] vivid-007: reconnect [ 925.701857][T18725] FAULT_INJECTION: forcing a failure. [ 925.701857][T18725] name failslab, interval 1, probability 0, space 0, times 0 [ 925.761553][T18725] CPU: 1 UID: 0 PID: 18725 Comm: syz.4.3186 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.761582][T18725] Tainted: [L]=SOFTLOCKUP [ 925.761589][T18725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 925.761598][T18725] Call Trace: [ 925.761605][T18725] [ 925.761612][T18725] dump_stack_lvl+0xe8/0x150 [ 925.761642][T18725] should_fail_ex+0x412/0x560 [ 925.761675][T18725] should_failslab+0xa8/0x100 [ 925.761696][T18725] ? skb_clone+0x212/0x3a0 [ 925.761716][T18725] kmem_cache_alloc_noprof+0x87/0x650 [ 925.761743][T18725] ? __netlink_lookup+0xc6/0x8b0 [ 925.761785][T18725] skb_clone+0x212/0x3a0 [ 925.761811][T18725] __netlink_deliver_tap+0x404/0x850 [ 925.761848][T18725] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.761874][T18725] netlink_deliver_tap+0x19c/0x1b0 [ 925.761900][T18725] netlink_unicast+0x7e3/0x9b0 [ 925.761931][T18725] ? __pfx_netlink_unicast+0x10/0x10 [ 925.761955][T18725] ? netlink_sendmsg+0x650/0xb40 [ 925.761978][T18725] ? skb_put+0x11b/0x210 [ 925.762008][T18725] netlink_sendmsg+0x813/0xb40 [ 925.762042][T18725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.762068][T18725] ? aa_sock_msg_perm+0xf1/0x1b0 [ 925.762094][T18725] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 925.762112][T18725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.762132][T18725] ____sys_sendmsg+0xa68/0xad0 [ 925.762154][T18725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.762172][T18725] ? kstrtoull+0x12f/0x1d0 [ 925.762197][T18725] ___sys_sendmsg+0x2a5/0x360 [ 925.762216][T18725] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.762233][T18725] ? get_pid_task+0x20/0x1f0 [ 925.762254][T18725] ? get_pid_task+0x20/0x1f0 [ 925.762273][T18725] ? get_pid_task+0x20/0x1f0 [ 925.762312][T18725] ? __fget_files+0x2a/0x420 [ 925.762330][T18725] ? __fget_files+0x3a0/0x420 [ 925.762355][T18725] __sys_sendmsg+0x183/0x260 [ 925.762372][T18725] ? __pfx___sys_sendmsg+0x10/0x10 [ 925.762402][T18725] __do_fast_syscall_32+0x20d/0x640 [ 925.762421][T18725] ? do_fast_syscall_32+0x33/0x70 [ 925.762436][T18725] ? asm_int80_emulation+0x1a/0x20 [ 925.762450][T18725] ? do_int80_emulation+0x274/0x4d0 [ 925.762468][T18725] do_fast_syscall_32+0x33/0x70 [ 925.762485][T18725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 925.762502][T18725] RIP: 0023:0xf704ef6c [ 925.762516][T18725] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 925.762530][T18725] RSP: 002b:00000000f52de50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 925.762546][T18725] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000080000280 [ 925.762556][T18725] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.762566][T18725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 925.762575][T18725] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 925.762584][T18725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.762606][T18725] [ 926.365337][T18739] mmap: syz.0.3191 (18739): VmData 37646336 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 926.708175][ T796] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 926.868106][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 927.003672][ T9] IPVS: starting estimator thread 0... [ 927.078347][T13333] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 927.098500][T18759] IPVS: using max 56 ests per chain, 134400 per kthread [ 927.238496][T13333] usb 5-1: Using ep0 maxpacket: 32 [ 927.257530][T13333] usb 5-1: unable to get BOS descriptor or descriptor too short [ 927.274151][T13333] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 927.283616][T13333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.294648][T13333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.322578][T13333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 927.333135][T13333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.341521][T13333] usb 5-1: Product: syz [ 927.345997][T13333] usb 5-1: Manufacturer: syz [ 927.350944][T13333] usb 5-1: SerialNumber: syz [ 927.616620][T18753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.625567][T18753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.688815][T18753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.715264][T18753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.743635][T18753] fuse: Bad value for 'fd' [ 927.761941][T18753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.782118][T18753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.802958][T18775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.832079][T18775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.839088][T18776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.018927][T18776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.114001][T13333] usb 5-1: 0:2 : does not exist [ 928.239467][T16299] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 928.298433][ T5937] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 928.311279][T13333] usb 5-1: USB disconnect, device number 65 [ 928.375333][ T6487] udevd[6487]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.497534][ T5937] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 928.508379][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.518389][T16299] usb 3-1: Using ep0 maxpacket: 16 [ 928.530163][ T5937] usb 2-1: Product: syz [ 928.535088][ T5937] usb 2-1: Manufacturer: syz [ 928.540963][T16299] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 928.555642][T16299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.588808][T18786] syzkaller0: entered promiscuous mode [ 928.594435][T18786] syzkaller0: entered allmulticast mode [ 928.599053][ T5937] usb 2-1: SerialNumber: syz [ 928.608516][T16299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 928.615845][T16299] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 928.626089][T16299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.644460][T16299] usb 3-1: config 0 descriptor?? [ 929.036930][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 929.049404][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 929.425465][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 929.451188][ T796] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 929.476109][ T796] usb 4-1: can't read configurations, error -71 [ 929.772742][ T5911] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 929.976916][ T5911] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 929.991210][ T5911] usb 1-1: config 0 has no interface number 0 [ 930.002890][ T5911] usb 1-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8 [ 930.013146][ T5911] usb 1-1: config 0 interface 47 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8 [ 930.030337][ T5911] usb 1-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 930.054277][ T5911] usb 1-1: config 0 interface 47 has no altsetting 0 [ 930.067665][ T5911] usb 1-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b [ 930.084292][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.106368][ T5911] usb 1-1: config 0 descriptor?? [ 930.112563][T18795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 930.129417][T18781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.139101][T18781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.147778][T18795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 930.178675][ T5911] usb-storage 1-1:0.47: USB Mass Storage device detected [ 930.672771][T18801] fuse: root generation should be zero [ 930.836535][T16299] usb 3-1: string descriptor 0 read error: -71 [ 930.848607][T16299] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 930.868684][T16299] usb 3-1: USB disconnect, device number 62 [ 931.630743][T16299] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 931.878214][T16299] usb 4-1: Using ep0 maxpacket: 32 [ 931.887286][T16299] usb 4-1: unable to get BOS descriptor or descriptor too short [ 931.891810][T18824] FAULT_INJECTION: forcing a failure. [ 931.891810][T18824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.908385][T18824] CPU: 1 UID: 0 PID: 18824 Comm: syz.2.3221 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.908413][T18824] Tainted: [L]=SOFTLOCKUP [ 931.908421][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.908433][T18824] Call Trace: [ 931.908440][T18824] [ 931.908448][T18824] dump_stack_lvl+0xe8/0x150 [ 931.908485][T18824] should_fail_ex+0x412/0x560 [ 931.908516][T18824] _copy_to_user+0x31/0xb0 [ 931.908538][T18824] simple_read_from_buffer+0xe1/0x170 [ 931.908566][T18824] proc_fail_nth_read+0x1bb/0x230 [ 931.908598][T18824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.908621][T18824] ? rw_verify_area+0x2a6/0x4d0 [ 931.908647][T18824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.908668][T18824] vfs_read+0x20c/0xa70 [ 931.908692][T18824] ? fdget_pos+0x246/0x320 [ 931.908718][T18824] ? __pfx___mutex_lock+0x10/0x10 [ 931.908739][T18824] ? __pfx_vfs_read+0x10/0x10 [ 931.908766][T18824] ? __fget_files+0x2a/0x420 [ 931.908793][T18824] ? __fget_files+0x3a0/0x420 [ 931.908815][T18824] ? __fget_files+0x2a/0x420 [ 931.908853][T18824] ksys_read+0x150/0x270 [ 931.908881][T18824] ? __pfx_ksys_read+0x10/0x10 [ 931.908911][T18824] ? asm_int80_emulation+0x1a/0x20 [ 931.908934][T18824] do_int80_emulation+0x173/0x4d0 [ 931.908955][T18824] ? trace_irq_disable+0x3b/0x150 [ 931.908979][T18824] ? asm_int80_emulation+0x1a/0x20 [ 931.908996][T18824] ? clear_bhb_loop+0x40/0x90 [ 931.909015][T18824] ? clear_bhb_loop+0x40/0x90 [ 931.909036][T18824] asm_int80_emulation+0x1a/0x20 [ 931.909055][T18824] RIP: 0023:0xf715572b [ 931.909072][T18824] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 931.909088][T18824] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 931.909108][T18824] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d5d0 [ 931.909122][T18824] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 931.909133][T18824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 931.909143][T18824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 931.909154][T18824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 931.909181][T18824] [ 931.909254][T16299] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 932.143120][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -EPROTO [ 932.155265][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 932.165660][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 932.180119][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 932.192234][T16299] usb 4-1: config 8 has no interface number 0 [ 932.198933][T16299] usb 4-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 932.211011][ T5937] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 932.223746][ T5937] usb 2-1: USB disconnect, device number 53 [ 932.233525][T16299] usb 4-1: config 8 interface 203 has no altsetting 0 [ 932.255196][T16299] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 932.270541][T16299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.288830][T16299] usb 4-1: Product: syz [ 932.293051][T16299] usb 4-1: Manufacturer: syz [ 932.297702][T16299] usb 4-1: SerialNumber: syz [ 932.310217][T18827] pim6reg: entered allmulticast mode [ 932.462535][ T5937] usb 1-1: USB disconnect, device number 61 [ 932.573889][T18821] __nla_validate_parse: 72 callbacks suppressed [ 932.573912][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.631869][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.658375][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.694293][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.721621][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.743813][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.755908][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.766268][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.809374][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.836298][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 932.921865][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.929363][ T5937] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 932.937081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.998814][T18827] pim6reg: left allmulticast mode [ 933.099717][ T5937] usb 1-1: config 145 has an invalid descriptor of length 0, skipping remainder of the config [ 933.111758][ T5937] usb 1-1: config 145 has 0 interfaces, different from the descriptor's value: 1 [ 933.124494][ T5937] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 933.135646][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.160212][ T5937] usb 1-1: Product: syz [ 933.169817][ T5937] usb 1-1: Manufacturer: syz [ 933.174465][ T5937] usb 1-1: SerialNumber: syz [ 933.575502][T18862] FAULT_INJECTION: forcing a failure. [ 933.575502][T18862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.588935][T18862] CPU: 0 UID: 0 PID: 18862 Comm: syz.1.3237 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.588955][T18862] Tainted: [L]=SOFTLOCKUP [ 933.588959][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 933.588966][T18862] Call Trace: [ 933.588971][T18862] [ 933.588976][T18862] dump_stack_lvl+0xe8/0x150 [ 933.588996][T18862] should_fail_ex+0x412/0x560 [ 933.589013][T18862] _copy_from_iter+0x1d3/0x1670 [ 933.589037][T18862] ? rcu_is_watching+0x15/0xb0 [ 933.589055][T18862] ? __pfx__copy_from_iter+0x10/0x10 [ 933.589073][T18862] ? netlink_sendmsg+0x650/0xb40 [ 933.589087][T18862] ? skb_put+0x11b/0x210 [ 933.589104][T18862] netlink_sendmsg+0x6c0/0xb40 [ 933.589122][T18862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.589138][T18862] ? aa_sock_msg_perm+0xf1/0x1b0 [ 933.589153][T18862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 933.589164][T18862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.589177][T18862] ____sys_sendmsg+0xa68/0xad0 [ 933.589191][T18862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.589203][T18862] ? kstrtoull+0x12f/0x1d0 [ 933.589221][T18862] ___sys_sendmsg+0x2a5/0x360 [ 933.589234][T18862] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.589245][T18862] ? get_pid_task+0x20/0x1f0 [ 933.589260][T18862] ? get_pid_task+0x20/0x1f0 [ 933.589273][T18862] ? get_pid_task+0x20/0x1f0 [ 933.589299][T18862] ? __fget_files+0x2a/0x420 [ 933.589313][T18862] ? __fget_files+0x3a0/0x420 [ 933.589330][T18862] __sys_sendmsg+0x183/0x260 [ 933.589341][T18862] ? __pfx___sys_sendmsg+0x10/0x10 [ 933.589361][T18862] __do_fast_syscall_32+0x20d/0x640 [ 933.589374][T18862] ? do_fast_syscall_32+0x33/0x70 [ 933.589385][T18862] ? asm_int80_emulation+0x1a/0x20 [ 933.589394][T18862] ? do_int80_emulation+0x274/0x4d0 [ 933.589405][T18862] ? trace_irq_disable+0x3b/0x150 [ 933.589420][T18862] do_fast_syscall_32+0x33/0x70 [ 933.589432][T18862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.589444][T18862] RIP: 0023:0xf7fa3f6c [ 933.589455][T18862] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 933.589463][T18862] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 933.589475][T18862] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 933.589483][T18862] RDX: 0000000004000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.589489][T18862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.589495][T18862] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 933.589501][T18862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.589515][T18862] [ 933.921368][ T5911] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 933.932369][T18865] syzkaller1: entered promiscuous mode [ 933.940127][T18865] syzkaller1: entered allmulticast mode [ 934.093316][ T5911] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 934.122517][ T5911] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 934.132578][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.151874][ T5911] usb 3-1: Product: syz [ 934.158170][ T5911] usb 3-1: Manufacturer: syz [ 934.168183][ T5911] usb 3-1: SerialNumber: syz [ 934.194038][ T5911] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 934.208401][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 934.342934][T16299] usb 4-1: USB disconnect, device number 72 [ 934.358219][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 934.374169][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 934.419270][ T9] usb 2-1: config 0 has no interface number 0 [ 934.447134][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 934.481888][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.497552][ T9] usb 2-1: Product: syz [ 934.537688][ T9] usb 2-1: Manufacturer: syz [ 934.560977][ T9] usb 2-1: SerialNumber: syz [ 934.749783][ T9] usb 2-1: config 0 descriptor?? [ 934.763965][ T5911] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 934.900544][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 934.919928][ T9] usb 2-1: selecting invalid altsetting 1 [ 934.920633][ T5911] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 934.953281][ T5911] usb 3-1: media controller created [ 934.969271][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 935.047586][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 935.051253][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 935.145730][T18865] ------------[ cut here ]------------ [ 935.151601][T18865] usb 3-1: BOGUS control dir, pipe 80003f80 doesn't match bRequestType c0 [ 935.161404][T18865] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.1.3238/18865 [ 935.172299][T18865] Modules linked in: [ 935.176448][T18865] CPU: 1 UID: 0 PID: 18865 Comm: syz.1.3238 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.188368][T18865] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 935.192797][T18865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 935.203558][T18865] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 935.209290][T18865] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 935.229320][T18865] RSP: 0018:ffffc9000c73f6e8 EFLAGS: 00010246 [ 935.235388][T18865] RAX: 0000000000000000 RBX: ffff888030886500 RCX: 0000000080003f80 [ 935.243529][T18865] RDX: ffff888058080a20 RSI: ffffffff8c7ed4a0 RDI: ffffffff901e89c0 [ 935.251738][T18865] RBP: 1ffff110041565a8 R08: 00000000000000c0 R09: 0000000000000000 [ 935.259757][T18865] R10: ffffc9000c73f7e0 R11: fffff520018e7f08 R12: ffff888055b35100 [ 935.267753][T18865] R13: ffff888020ab2d40 R14: 0000000080003f80 R15: ffff888058080a20 [ 935.275788][T18865] FS: 0000000000000000(0000) GS:ffff88812556f000(0063) knlGS:00000000f5466b40 [ 935.284812][T18865] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 935.291466][T18865] CR2: 0000000000000000 CR3: 000000005fc94000 CR4: 00000000003526f0 [ 935.299482][T18865] Call Trace: [ 935.302752][T18865] [ 935.305689][T18865] ? __init_swait_queue_head+0xa9/0x150 [ 935.311456][T18865] usb_start_wait_urb+0x12b/0x510 [ 935.316498][T18865] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 935.322148][T18865] usb_control_msg+0x232/0x3e0 [ 935.326936][T18865] ? __ia32_compat_sys_ioctl+0x5ea/0x950 [ 935.332615][T18865] gl861_ctrl_msg+0x207/0x420 [ 935.337305][T18865] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 935.342539][T18865] gl861_i2c_master_xfer+0x439/0x6a0 [ 935.347817][T18865] __i2c_transfer+0x79a/0x2020 [ 935.352621][T18865] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 935.358487][T18865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 935.364285][T18865] ? i2c_transfer+0xc8/0x2d0 [ 935.368918][T18865] i2c_transfer+0x1cc/0x2d0 [ 935.373411][T18865] i2cdev_ioctl_rdwr+0x460/0x740 [ 935.378375][T18865] compat_i2cdev_ioctl+0x59f/0x5c0 [ 935.383479][T18865] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 935.389149][T18865] ? __fget_files+0x3a0/0x420 [ 935.393819][T18865] ? __fget_files+0x2a/0x420 [ 935.398464][T18865] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 935.404000][T18865] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 935.409590][T18865] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 935.415567][T18865] ? do_sock_getsockopt+0x2d3/0x3f0 [ 935.420806][T18865] ? __se_sys_futex_time32+0x3ab/0x440 [ 935.426254][T18865] ? __fget_files+0x3a0/0x420 [ 935.430976][T18865] ? rcu_is_watching+0x15/0xb0 [ 935.435736][T18865] __do_fast_syscall_32+0x20d/0x640 [ 935.440968][T18865] ? do_fast_syscall_32+0x33/0x70 [ 935.445979][T18865] ? asm_int80_emulation+0x1a/0x20 [ 935.451108][T18865] ? do_int80_emulation+0x274/0x4d0 [ 935.456291][T18865] ? trace_irq_disable+0x3b/0x150 [ 935.461333][T18865] do_fast_syscall_32+0x33/0x70 [ 935.466177][T18865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.473514][T18865] RIP: 0023:0xf7fa3f6c [ 935.477593][T18865] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 935.497356][T18865] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 935.505822][T18865] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000707 [ 935.513828][T18865] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.521805][T18865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 935.529801][T18865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 935.537772][T18865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 935.545766][T18865] [ 935.548841][T18865] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 935.556111][T18865] CPU: 1 UID: 0 PID: 18865 Comm: syz.1.3238 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.567029][T18865] Tainted: [L]=SOFTLOCKUP [ 935.571342][T18865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 935.581382][T18865] Call Trace: [ 935.584666][T18865] [ 935.587591][T18865] vpanic+0x56c/0xa60 [ 935.591560][T18865] ? __pfx__printk+0x10/0x10 [ 935.596132][T18865] ? __pfx_vpanic+0x10/0x10 [ 935.600621][T18865] ? is_bpf_text_address+0x292/0x2b0 [ 935.605895][T18865] ? is_bpf_text_address+0x26/0x2b0 [ 935.611085][T18865] panic+0xc5/0xd0 [ 935.614815][T18865] ? __pfx_panic+0x10/0x10 [ 935.619221][T18865] __warn+0x315/0x4f0 [ 935.623185][T18865] ? usb_submit_urb+0x1052/0x18b0 [ 935.628209][T18865] ? usb_submit_urb+0x1052/0x18b0 [ 935.633220][T18865] __report_bug+0x29a/0x540 [ 935.637711][T18865] ? usb_submit_urb+0x1052/0x18b0 [ 935.642718][T18865] ? __pfx___report_bug+0x10/0x10 [ 935.647734][T18865] ? lockdep_hardirqs_on+0x7a/0x110 [ 935.652925][T18865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 935.658728][T18865] report_bug_entry+0x19a/0x290 [ 935.663570][T18865] ? usb_submit_urb+0x1114/0x18b0 [ 935.668580][T18865] ? usb_submit_urb+0x1119/0x18b0 [ 935.673591][T18865] handle_bug+0xca/0x200 [ 935.677828][T18865] exc_invalid_op+0x1a/0x50 [ 935.682315][T18865] asm_exc_invalid_op+0x1a/0x20 [ 935.687153][T18865] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 935.692770][T18865] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 935.712356][T18865] RSP: 0018:ffffc9000c73f6e8 EFLAGS: 00010246 [ 935.718408][T18865] RAX: 0000000000000000 RBX: ffff888030886500 RCX: 0000000080003f80 [ 935.726360][T18865] RDX: ffff888058080a20 RSI: ffffffff8c7ed4a0 RDI: ffffffff901e89c0 [ 935.734313][T18865] RBP: 1ffff110041565a8 R08: 00000000000000c0 R09: 0000000000000000 [ 935.742272][T18865] R10: ffffc9000c73f7e0 R11: fffff520018e7f08 R12: ffff888055b35100 [ 935.750233][T18865] R13: ffff888020ab2d40 R14: 0000000080003f80 R15: ffff888058080a20 [ 935.758207][T18865] ? usb_submit_urb+0x10a3/0x18b0 [ 935.763236][T18865] ? __init_swait_queue_head+0xa9/0x150 [ 935.768770][T18865] usb_start_wait_urb+0x12b/0x510 [ 935.773778][T18865] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 935.779317][T18865] usb_control_msg+0x232/0x3e0 [ 935.784062][T18865] ? __ia32_compat_sys_ioctl+0x5ea/0x950 [ 935.789679][T18865] gl861_ctrl_msg+0x207/0x420 [ 935.794340][T18865] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 935.799524][T18865] gl861_i2c_master_xfer+0x439/0x6a0 [ 935.804796][T18865] __i2c_transfer+0x79a/0x2020 [ 935.809548][T18865] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 935.815342][T18865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 935.821132][T18865] ? i2c_transfer+0xc8/0x2d0 [ 935.825708][T18865] i2c_transfer+0x1cc/0x2d0 [ 935.830197][T18865] i2cdev_ioctl_rdwr+0x460/0x740 [ 935.835123][T18865] compat_i2cdev_ioctl+0x59f/0x5c0 [ 935.840221][T18865] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 935.845837][T18865] ? __fget_files+0x3a0/0x420 [ 935.850498][T18865] ? __fget_files+0x2a/0x420 [ 935.855072][T18865] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 935.860599][T18865] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 935.866042][T18865] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 935.872001][T18865] ? do_sock_getsockopt+0x2d3/0x3f0 [ 935.877181][T18865] ? __se_sys_futex_time32+0x3ab/0x440 [ 935.882622][T18865] ? __fget_files+0x3a0/0x420 [ 935.887287][T18865] ? rcu_is_watching+0x15/0xb0 [ 935.892065][T18865] __do_fast_syscall_32+0x20d/0x640 [ 935.897250][T18865] ? do_fast_syscall_32+0x33/0x70 [ 935.902254][T18865] ? asm_int80_emulation+0x1a/0x20 [ 935.907343][T18865] ? do_int80_emulation+0x274/0x4d0 [ 935.912520][T18865] ? trace_irq_disable+0x3b/0x150 [ 935.917532][T18865] do_fast_syscall_32+0x33/0x70 [ 935.922365][T18865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.928675][T18865] RIP: 0023:0xf7fa3f6c [ 935.932723][T18865] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 935.952313][T18865] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 935.960717][T18865] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000707 [ 935.968678][T18865] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.976630][T18865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 935.984582][T18865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 935.992536][T18865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 936.000503][T18865] [ 936.003901][T18865] Kernel Offset: disabled [ 936.008211][T18865] Rebooting in 86400 seconds..