last executing test programs: 11m51.077053469s ago: executing program 4 (id=1053): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x8081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@deltaction={0x108, 0x31, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfc}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffbc1}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x2004c8c4}, 0x2000c8c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a00100068100001c0012800b00010062726964676500"], 0x48}}, 0x20000000) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000440)="8b53b552a60adf4d45190325f867b277a20241d81153584758f433de", 0x1c}], 0x1) 11m50.921231393s ago: executing program 4 (id=1054): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x183001, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x30000019}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) 11m50.655332722s ago: executing program 4 (id=1055): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000540)=0x7fffffff, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0xc0010141, 0x0, 0x8}]}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @meta={0x43465052, 0x474d5026, 0x740a, 0x79f4, 0x288d6627}}) 11m50.434678635s ago: executing program 4 (id=1056): unshare(0x24020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44040000) unshare(0x3c020000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b703000008000000850000006a00000095"], &(0x7f0000005d80)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), &(0x7f00000002c0)={'U+', 0x10}, 0x16, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0100e00080211000001fffffffffffffa97a40d5050730000008c10980c5920f361dd8654cd35c02ccb5d2c"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x8008090) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r8, 0x40187542, 0x0) read$FUSE(r7, &(0x7f0000003040)={0x2020}, 0x2020) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83) 11m49.748449925s ago: executing program 4 (id=1059): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x181081, 0x20) syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x7f, 0x6}, 0xc) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0x21, 0xb1, {0xb1, 0x22, "5f411b150023c0a896df021319efd9e47830569ae6275724139d067a642af70cfe7ed9b57399a3ab407bb12ce1efa14c0b68c6f37ab774528aeefdd8de7211e0a87c1d70d7562e6c20f29ac0f7ced44ab28277b52bb9c4b8fb0c3695a193287432811838cbafbdd029e9ce0f913f9c9b39723617655512239b6913a7c484084c9b516f91ce935fe3c05c47b6c96e78147a1ab7948e29d4076ba1919340f5a983dadc81557e438d3378586893ee4cc5"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000300)=ANY=[@ANYBLOB="000f1d000000050f1df9ffffff03000f000302040003100b0b100102240009fdc80005"], &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x9, 0x8, "97cb263f", "9af98a65"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xde, 0x1, 0x95, 0x1, 0xff, 0x81, 0xf}}}, &(0x7f00000004c0)={0x84, &(0x7f0000000c00)=ANY=[@ANYBLOB="0015c40000005a6b46e359fe226457bc70e8bf8153192d041fe8ad73ffb00870c26c98bd062b388c51f66d3c1d870317ce288e1b2adb9e1f27a6a2d0ba1cdec971c0bb08c42fccf66528542752bf77c70813d908e8c4fba0c847efe03598a18f48baf9f0193fb30170646b59d73951165b1e104a5f08881ff0ace9c8808eaa96190cf476ad65915cc732ed00fc259df6793c4406f2f0cb9b700e51ac7f5017e14e74416de89078dd6a5489d6d6384eb84eedb195914761c55db5e5bb80c98a929f8c78a1bfd5e7fb79d541cabe8983d3e7"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "fdd5"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xee60}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @random="a3029502676a"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "f983"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xb900}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xf}}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) syz_usb_disconnect(r2) dup3(r0, r1, 0x80000) userfaultfd(0x801) (async) r3 = userfaultfd(0x801) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x7, 0x0, 0xa0) unshare(0x34020480) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ppoll(&(0x7f0000000140)=[{r3, 0x2053}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) (async) ppoll(&(0x7f0000000140)=[{r3, 0x2053}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeiH\xe5+\xf0', 0xffffffffffffffff) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeiH\xe5+\xf0', 0xffffffffffffffff) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) 11m49.092497435s ago: executing program 4 (id=1063): r0 = socket$caif_stream(0x25, 0x1, 0x5) connect$caif(r0, &(0x7f0000000040), 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x20, 0x40, 0x107, 0x70bd31, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0xdd}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0xd4}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x8081) writev(r9, &(0x7f0000000940)=[{&(0x7f0000000440)="8b53b552a60adf4d45190325f867b277a20241d81153584758f433de", 0x1c}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 11m48.388942357s ago: executing program 32 (id=1063): r0 = socket$caif_stream(0x25, 0x1, 0x5) connect$caif(r0, &(0x7f0000000040), 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x20, 0x40, 0x107, 0x70bd31, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0xdd}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0xd4}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x8081) writev(r9, &(0x7f0000000940)=[{&(0x7f0000000440)="8b53b552a60adf4d45190325f867b277a20241d81153584758f433de", 0x1c}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 9.10733954s ago: executing program 2 (id=4757): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r1, 0x7}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0x200, 0x7}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x8007, 'syz1\x00', 0x2}, 0x1, [0x6, 0xfbffff7ffffffff6, 0x95, 0x907a, 0xffffffff, 0x60, 0x6, 0xf, 0x5, 0x4, 0xfffffffffffffffd, 0x63, 0x100000000001002, 0x100000000, 0xfffffffffffffffa, 0xc8, 0x8000000051, 0xa5, 0x0, 0xb9, 0x8000000000000000, 0x8, 0x7, 0x7, 0x6, 0x7, 0x1, 0x4f51, 0x4, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x7, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x800, 0x200000003, 0x401, 0x7, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xfffffffffffffffd, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0x2, 0x100, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x4000000000000002, 0x1, 0x9, 0x7, 0xe0000000000000, 0x0, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3f7, 0xffffffffffffcc1c, 0x10000, 0x0, 0x9, 0x100000001, 0x1, 0xf, 0x1f, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x5, 0x400000000000afae, 0x1, 0x8, 0x1, 0xb, 0x3, 0xffff, 0x1, 0x10000, 0x1ff, 0x400000000000c, 0x0, 0x7, 0x5, 0xfffffffffffffffd, 0x3, 0x7, 0xaad, 0x7, 0x2000000000000001, 0x8, 0x6, 0x6, 0x6, 0xf, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x5, 0x40, 0x52a7, 0x83d0, 0x8000, 0x7, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) ptrace(0x10, r5) syz_open_procfs$pagemap(0x0, 0x0) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) r6 = semget$private(0x0, 0x3, 0x401) semop(r6, &(0x7f00000011c0)=[{0x0, 0x7fff, 0x1800}, {0x1, 0x8001, 0x1000}], 0x1f4) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000001580)=[0x5]) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r7, 0x7a9, &(0x7f00000003c0)={{@my=0x1, 0x100}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x58df}) 7.083190566s ago: executing program 1 (id=4769): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x0, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xffff, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xfffffffe, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000030000000001ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000100000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff03000000000000000000000000000000000000000000000004000000000000000000000000804000000000000000000800000000000000000000000000000000440005"], 0xfc}}, 0x48016) 6.845057114s ago: executing program 1 (id=4772): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) openat(r0, 0x0, 0x20c01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000000000000007d6", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 6.453241738s ago: executing program 2 (id=4773): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}, 0x97ffffff}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e80200"], 0x2e8}}], 0x2, 0x0) 6.294992898s ago: executing program 2 (id=4774): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) 6.178751945s ago: executing program 2 (id=4775): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000002c0)={0x0, 0x886f, [0xa969, 0x10000, 0xd, 0x2, 0xfffffffffffffe00, 0x6]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRESOCT=r4, @ANYRESDEC=r2], 0x2f, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="011110000000000000006700000008000300", @ANYRES32=r5, @ANYRES64=r6], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002500)=ANY=[@ANYBLOB="a81c0000", @ANYRES16=r5, @ANYBLOB="002133dee70935dd77", @ANYRES32=r7, @ANYBLOB="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"], 0x1ca8}}, 0x20040015) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="ea1935a0fecdc9de523ab7e163a9f2fd7b598f1a0780e2ffe8d880cd68105d", 0x1f) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x10], 0x1, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x1, 0x3dc], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r12 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f00000002c0)={0x3ff, 0xd64c, 0x8208, 0x0, 0x10000, 0xda, 0xc, 0xe49c}, 0x20) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000825bd7000fddbdf25040000001c000680060005004e22000008000700f242465adcc1974164bca3e1c397bf42715864c89e53fce09f9e18b586f0d232bcae57a8e341509ba16410f6d5fb4d695aeb4ada21b8607178a032d56382a306b919046593ed8cf3c19f33c51f32b0f715682992e5ecfe85ffdaadc921", @ANYRES32=0x0, @ANYBLOB="060001000a00000008000300030000000800030007000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) 5.984603565s ago: executing program 5 (id=4776): socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x800000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x20058) 5.896250103s ago: executing program 2 (id=4777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0xf5ffffff) 5.842901477s ago: executing program 1 (id=4778): socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400021c00000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) 5.721693483s ago: executing program 2 (id=4779): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x5, 0xfffffffffffffffe, 0xe9b, 0x22, 0x20000007, 0x7b, 0x44233, 0x7, 0x81, 0x9c2, 0x10003, 0x1005, 0x1000a, 0x8, 0x0, 0x62], 0x1000, 0x92216}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5}, 0x94) ptrace(0x10, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000140)={0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x1f, 0x0, 0x10400, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) 3.970503789s ago: executing program 5 (id=4786): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r0) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0xe, 0x90100) ioctl$RTC_WIE_OFF(r1, 0x7010) 3.891172486s ago: executing program 0 (id=4787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x38, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa66c, 0x0, 0x1, 0x9, 0xffff, 0x0, 0x9, 0x1]}}]}]}]}, 0x38}, 0x1, 0x3000000000000, 0x0, 0x4810}, 0x10) 3.5926299s ago: executing program 0 (id=4788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000065c0)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a32000000000c0007800800064000200000050005000a000000050001000600000013000300686173683a6e65742c696661636500"], 0x58}}, 0x8040) 3.257699044s ago: executing program 0 (id=4789): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$xdp(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)=@other={0x2008000300000000, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000040)) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) bind$xdp(r0, 0x0, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)=@other={0x2008000300000000, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000040)) (async) 3.222227301s ago: executing program 5 (id=4790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080201010000000000000000020000000900010073797a300000000038000000060a17d5fffffffffffffff5020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0x80}}, 0x0) 3.15100197s ago: executing program 1 (id=4791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = fsopen(0x0, 0x1) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r8, 0x1}}, 0x48) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="650f01ef6436f466f080737ca90f01c30f320f01c8b8006000000f23d80f21f835000000a00f23f8670f01c3faf00fba3985", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@broadcast, 0xffffaa7e}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x7, 0x4, "0990"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 3.050970967s ago: executing program 5 (id=4792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r5, 0x40046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x6d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x12, r2, 0x3c000) 2.715642797s ago: executing program 0 (id=4794): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0xfffffffffffffffd, 0x1) getdents64(r3, 0x0, 0x1a) r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000000100)={0x0, 0x1, r5}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f0000000140)=0x8) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.519562003s ago: executing program 0 (id=4795): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getresuid(0x0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) unshare(0x20040400) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x91, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x20, 0x0, 0x2f}, 0x2c) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468105f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004b00)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x4, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x1d, 0xdf}, 0x8) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0xb1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x51, 0xb1}, 0x8) 2.340141471s ago: executing program 5 (id=4796): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1a3501000000", 0x0, 0x0, 0x10032, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 2.019102553s ago: executing program 5 (id=4797): rt_sigprocmask(0x2, &(0x7f0000000fc0)={[0x8000000000000000]}, &(0x7f0000001000), 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x848, 0x530, 0x160, 0x160, 0x460, 0x460, 0x778, 0x778, 0x778, 0x778, 0x778, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x6}, {0x0, 0x0, 0x4}, 0x40000}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8a8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x250200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e000000000000109022400030000000009"], 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001200000016fed3e4420aeca09a777d231d69d4a9136f367f83f220cc0297ab1aacec6cd68658527764cbbb99195756959ca4c1a7ae8c3eb858932bbcf4295f60a53d2a285f99e686cede85a75a650a376b33c9b855a0ad4f71e68e761a6aead75889f04dc9b80217928f163938da5b26078db770555f8134938e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 910.636941ms ago: executing program 0 (id=4802): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$l2tp6(0xa, 0x2, 0x73) capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x18}, 0x440e0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x9f}) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101a80, 0x0) r5 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x80, 0x9, 0xffff}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x3, 0x8, 0x3, 0x80, 0x3, 0x81, 0xc, 0x40, r7}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x2, 0x0, 0x4, 0x8000000000000000}) 711.965348ms ago: executing program 1 (id=4803): r0 = socket$kcm(0xa, 0x1, 0x106) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x11, 0xa, 0x300) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x91ff}, 0xe07e872420dfefca) 707.835214ms ago: executing program 3 (id=4804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="831026bd7000fced3ec1a495cbf8a072104b"], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x80) 523.055435ms ago: executing program 3 (id=4805): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}], 0x18}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="8e", 0x1}], 0x1, &(0x7f0000001040)=ANY=[], 0x2d8}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmmsg$inet(r2, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x18}}], 0x2, 0x24000000) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xd4, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_LABELS_MASK={0x8, 0x17, [0x2]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x7, 0x4a51, 0x3, 0x0, 0x1, 0x7, 0x10007, 0x7]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x50, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x4}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc6cd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 404.891912ms ago: executing program 3 (id=4806): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {}, 0x550}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 264.097595ms ago: executing program 3 (id=4807): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0xffffffff80002000, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x50) fcntl$setpipe(r1, 0x407, 0x100000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x50, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00000900"], 0x30}}, 0x0) 214.347428ms ago: executing program 3 (id=4808): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x6, 0x2, 0x0, {0x0, 0x9}, {0x4000350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4000005, 0x400, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x3e00, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x3, 0x4}) 49.427936ms ago: executing program 1 (id=4809): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc40, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0xc, 0x4dd1, 0x8, 0xfffffff8, 0x4, 0x5, 0xffffffff}, 0x1c) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', 0x0, 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000020601080000000002000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x44}}, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) dup2(r6, r6) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x18, 0x2) r7 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=4810): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={@remote, 0x0, 0x0, 0x90, 0x0, [{@remote}, {@remote}, {@initdev}, {@multicast2}, {@broadcast}, {@local}, {@initdev}, {@local}, {@initdev}]}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, 0x0, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4b, 0x6, "fc21141add15668c7ccecd9a96baa7e190b537cc4550f60b5c8963d9ee6b6df36a7b2cf19b8e42a8864970405b1ec2a95d80d10dd54eda27bad1676a03bc9463223925562aac5e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000500)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x300, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): yz.3.4267'. [ 923.895053][T19670] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 923.947784][T19665] syzkaller0: entered promiscuous mode [ 923.970024][T19665] syzkaller0: entered allmulticast mode [ 924.010932][T19651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.094398][T19687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.109077][T19687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.142021][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.161012][T19651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.246019][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.324181][T19651] team0: Port device team_slave_0 added [ 924.333813][T19651] team0: Port device team_slave_1 added [ 924.392324][T19651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.406810][T19651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.440898][T19651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.466481][T19651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.480271][T19651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.529208][T19651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.563533][T18736] Bluetooth: hci3: command tx timeout [ 924.731190][T19695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.773457][T19695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.801788][T19651] hsr_slave_0: entered promiscuous mode [ 924.817700][T19651] hsr_slave_1: entered promiscuous mode [ 924.831426][T19651] debugfs: 'hsr0' already exists in 'hsr' [ 924.846682][T19651] Cannot create hsr debugfs directory [ 925.243002][ T48] bridge_slave_1: left allmulticast mode [ 925.269974][ T48] bridge_slave_1: left promiscuous mode [ 925.299576][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.347550][ T48] bridge_slave_0: left allmulticast mode [ 925.381148][ T48] bridge_slave_0: left promiscuous mode [ 925.393906][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.783302][ T48] ip6gretap0 (unregistering): left promiscuous mode [ 926.128414][ T48] bond6 (unregistering): (slave geneve2): Releasing active interface [ 926.169241][ T48] bridge0 (unregistering): left promiscuous mode [ 926.279601][ T48] bond0 (unregistering): left promiscuous mode [ 926.286313][ T48] bond_slave_0: left promiscuous mode [ 926.291971][ T48] bond_slave_1: left promiscuous mode [ 926.297764][ T48] bond5 (unregistering): left promiscuous mode [ 926.307890][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.321742][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.340002][ T48] bond0 (unregistering): (slave bond5): Releasing backup interface [ 926.355250][ T48] bond0 (unregistering): Released all slaves [ 926.369834][ T48] bond1 (unregistering): Released all slaves [ 926.389802][ T48] bond2 (unregistering): Released all slaves [ 926.407316][ T48] bond3 (unregistering): (slave bond4): Releasing backup interface [ 926.426364][ T48] bond4 (unregistering): left promiscuous mode [ 926.438086][ T48] bond3 (unregistering): Released all slaves [ 926.453802][ T48] bond4 (unregistering): Released all slaves [ 926.469218][ T48] bond5 (unregistering): Released all slaves [ 926.485978][ T48] bond6 (unregistering): Released all slaves [ 926.511155][ T48] bond7 (unregistering): Released all slaves [ 926.527457][ T48] bond8 (unregistering): Released all slaves [ 926.550085][ T48] bond9 (unregistering): (slave vcan0): Releasing backup interface [ 926.558087][ T48] vcan0: left promiscuous mode [ 926.569958][ T48] bond9 (unregistering): Released all slaves [ 926.618218][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 926.643999][T18736] Bluetooth: hci3: command tx timeout [ 927.589710][ T5839] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 927.785917][ T5839] usb 2-1: config 15 has an invalid interface number: 122 but max is 1 [ 927.802211][ T5839] usb 2-1: config 15 has an invalid interface number: 242 but max is 1 [ 927.826002][ T5839] usb 2-1: config 15 has an invalid interface number: 4 but max is 1 [ 927.864079][ T5839] usb 2-1: config 15 has 3 interfaces, different from the descriptor's value: 2 [ 927.878504][ T5839] usb 2-1: config 15 has no interface number 0 [ 927.935002][ T5839] usb 2-1: config 15 has no interface number 1 [ 927.953910][ T5839] usb 2-1: config 15 has no interface number 2 [ 927.970933][ T5839] usb 2-1: config 15 interface 122 altsetting 19 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 928.035972][ T5839] usb 2-1: too many endpoints for config 15 interface 242 altsetting 222: 153, using maximum allowed: 30 [ 928.074380][ T5839] usb 2-1: config 15 interface 242 altsetting 222 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 928.099984][ T5839] usb 2-1: config 15 interface 242 altsetting 222 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 928.115467][ T5839] usb 2-1: config 15 interface 242 altsetting 222 endpoint 0x8 has an invalid bInterval 215, changing to 7 [ 928.184059][ T5839] usb 2-1: config 15 interface 242 altsetting 222 has a duplicate endpoint with address 0x9, skipping [ 928.196754][ T5839] usb 2-1: config 15 interface 242 altsetting 222 has 6 endpoint descriptors, different from the interface descriptor's value: 153 [ 928.215653][ T5839] usb 2-1: config 15 interface 4 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 928.264730][ T5839] usb 2-1: config 15 interface 4 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 928.297722][ T5839] usb 2-1: config 15 interface 4 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.354295][ T5839] usb 2-1: config 15 interface 122 has no altsetting 0 [ 928.363096][ T5839] usb 2-1: config 15 interface 242 has no altsetting 0 [ 928.375332][ T5839] usb 2-1: config 15 interface 4 has no altsetting 0 [ 928.410680][ T5839] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a70, bcdDevice=43.5b [ 928.425075][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.456552][T19772] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 928.464578][ T5839] usb 2-1: Product: п [ 928.468888][ T5839] usb 2-1: Manufacturer: 澊궆馓녯㷩锌劍謾숔ᆧ뻎痀ʛ⿳彙噐ꋇ੕뿶㚊䰾ᢞ걚䝹揟甡弌聈묂ꊃￃ쪹ꦅ쒸皟滠ᯨ研Ꮩ补碛Š湫益罔蹙䤺러蘮勽뗑䘺諯꒸곌읕ᾄ爰״䓞炮嬾沋Ἲ㱙셥ೡฃቯಇ꾶団⎇枚힭ꚦᮣ䯪࣌帕櫏⤂ꑌ໔ꮷꙅえ梫﬌鄂䓊샡ꕙ⩡啤⒟릳葳 [ 928.517343][ T5839] usb 2-1: SerialNumber: ы [ 928.722749][T18736] Bluetooth: hci3: command tx timeout [ 928.960200][ T5839] usb 2-1: USB disconnect, device number 17 [ 930.504266][T19651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 930.569533][T19651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 930.664079][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'. [ 930.680398][T19651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 930.739359][T19651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 930.771071][T19651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 930.802338][T19651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.803221][T18736] Bluetooth: hci3: command tx timeout [ 930.880200][T19651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 930.961438][T19651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 930.976694][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4305'. [ 931.631091][T19651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.689617][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.698133][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.701420][T19651] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.881153][T10844] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.888333][T10844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.930674][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.938028][T10844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.170570][T19856] fuse: Unknown parameter '' [ 932.255168][T19651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.430951][T15611] cgroup: fork rejected by pids controller in /syz1 [ 932.768433][T15611] syz_tun (unregistering): left promiscuous mode [ 932.829280][T19651] veth0_vlan: entered promiscuous mode [ 932.951002][T19651] veth1_vlan: entered promiscuous mode [ 933.481263][T19651] veth0_macvtap: entered promiscuous mode [ 933.640773][T19651] veth1_macvtap: entered promiscuous mode [ 933.799495][T19651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.068267][T19651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.228818][ T6106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.254353][ T6106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.279477][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 934.297371][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 934.325364][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 934.365759][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 934.375485][ T6106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.385875][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 934.456514][ T6106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.183510][T16326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.210394][T16326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.358749][T19899] kvm: pic: non byte write [ 935.436294][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 935.436315][ T29] audit: type=1326 audit(1776665989.519:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541066][ T29] audit: type=1326 audit(1776665989.559:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541127][ T29] audit: type=1326 audit(1776665989.559:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541176][ T29] audit: type=1326 audit(1776665989.559:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541253][ T29] audit: type=1326 audit(1776665989.559:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541304][ T29] audit: type=1326 audit(1776665989.559:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541351][ T29] audit: type=1326 audit(1776665989.559:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541399][ T29] audit: type=1326 audit(1776665989.559:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541445][ T29] audit: type=1326 audit(1776665989.559:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.541491][ T29] audit: type=1326 audit(1776665989.559:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19905 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e39c819 code=0x7ffc0000 [ 935.608273][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.608298][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.664404][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4331'. [ 936.318607][T19884] chnl_net:caif_netlink_parms(): no params data found [ 936.484617][T18736] Bluetooth: hci1: command tx timeout [ 936.753370][T19941] pim6reg: entered allmulticast mode [ 936.754287][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.787385][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.804326][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.045001][T19884] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.053637][T19884] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.061011][T19884] bridge_slave_0: entered allmulticast mode [ 937.076159][T19884] bridge_slave_0: entered promiscuous mode [ 937.106437][T19884] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.114262][T19884] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.121633][T19884] bridge_slave_1: entered allmulticast mode [ 937.137805][T19884] bridge_slave_1: entered promiscuous mode [ 937.139420][T19957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 937.197845][ T5931] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 937.275275][T19884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.296159][T19884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.393685][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.411767][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 937.448617][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 937.470096][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 937.470576][T19964] xt_hashlimit: size too large, truncated to 1048576 [ 937.495660][ T5931] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 937.504927][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 937.519260][ T5931] usb 3-1: Product: syz [ 937.527542][ T5931] usb 3-1: Manufacturer: syz [ 937.532273][ T5931] usb 3-1: SerialNumber: syz [ 937.541258][ T5931] usb 3-1: config 0 descriptor?? [ 937.558364][T19953] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 937.680075][T19884] team0: Port device team_slave_0 added [ 937.739467][T19884] team0: Port device team_slave_1 added [ 937.795869][ T48] batadv0: left promiscuous mode [ 937.804271][ T5931] rc_core: IR keymap rc-imon-rsc not found [ 937.811055][ T5931] Registered IR keymap rc-empty [ 937.824702][ T5931] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 937.838666][ T48] hsr_slave_0: left promiscuous mode [ 937.863786][ T5931] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input84 [ 937.880082][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.897226][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.921054][ T5931] usb 3-1: USB disconnect, device number 45 [ 937.933764][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.965717][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.016239][ T48] veth1_macvtap: left promiscuous mode [ 938.026079][ T48] veth0_macvtap: left promiscuous mode [ 938.563984][T18736] Bluetooth: hci1: command tx timeout [ 938.772992][ T5839] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 938.827678][ T48] team_slave_1 (unregistering): left allmulticast mode [ 938.861423][ T48] team0 (unregistering): Port device team_slave_1 removed [ 938.915405][ T48] team_slave_0 (unregistering): left allmulticast mode [ 938.944577][ T48] team0 (unregistering): Port device team_slave_0 removed [ 938.957333][ T5839] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 938.985886][ T5839] usb 6-1: config 1 has no interface number 0 [ 939.005479][ T5839] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 939.035033][ T5839] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 939.071752][ T5839] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 939.111997][ T5839] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.176530][ T5839] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 939.213943][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.241287][ T5839] usb 6-1: Product: syz [ 939.259493][ T5839] usb 6-1: Manufacturer: syz [ 939.273275][ T5839] usb 6-1: SerialNumber: syz [ 939.317556][T19986] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 939.350617][T19986] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 939.426878][ T5839] usb 6-1: Error in usbnet_get_endpoints (-22) [ 939.459677][T19884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.484777][T19884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.559551][T19884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.630707][T19884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.658607][T19884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.742385][T19884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.091619][T19884] hsr_slave_0: entered promiscuous mode [ 940.119855][T19884] hsr_slave_1: entered promiscuous mode [ 940.145702][T19884] debugfs: 'hsr0' already exists in 'hsr' [ 940.207351][T19884] Cannot create hsr debugfs directory [ 940.375207][ T48] IPVS: stop unused estimator thread 0... [ 940.644599][T18736] Bluetooth: hci1: command tx timeout [ 940.774855][T20016] syzkaller1: entered promiscuous mode [ 940.786660][T20016] syzkaller1: entered allmulticast mode [ 940.868963][T20014] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 940.885167][ T5930] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 941.038793][T20021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.055188][T20021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.065235][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.078989][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.080124][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 941.108989][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 941.136597][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 941.160091][ T5930] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 941.180586][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 941.189416][ T5930] usb 3-1: Product: syz [ 941.196365][ T5930] usb 3-1: Manufacturer: syz [ 941.210057][ T5930] usb 3-1: SerialNumber: syz [ 941.244961][ T5930] usb 3-1: config 0 descriptor?? [ 941.257023][T20013] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 941.473675][ T5930] rc_core: IR keymap rc-imon-rsc not found [ 941.475754][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.496054][ T5930] Registered IR keymap rc-empty [ 941.517249][ T5930] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 941.546140][ T5930] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input85 [ 941.666040][ T5930] usb 3-1: USB disconnect, device number 46 [ 941.751163][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.946249][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.015534][ T5930] usb 6-1: USB disconnect, device number 22 [ 942.185154][T20030] fuse: Unknown parameter '' [ 942.362625][ T5839] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 942.565367][ T5839] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 942.617679][ T5839] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 942.649705][ T48] bridge_slave_1: left allmulticast mode [ 942.651638][ T5839] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 942.671650][ T5839] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 942.692612][ T48] bridge_slave_1: left promiscuous mode [ 942.697239][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.707330][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.723406][T18736] Bluetooth: hci1: command tx timeout [ 942.741748][ T48] bridge_slave_0: left allmulticast mode [ 942.749870][ T48] bridge_slave_0: left promiscuous mode [ 942.763617][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.775328][T20032] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 942.959295][ T48] ip6gretap0 (unregistering): left promiscuous mode [ 943.856807][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 943.902801][ T48] tipc: Left network mode [ 944.503472][ T5915] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 944.684437][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 944.716825][ T5915] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.747007][ T5915] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.814459][ T5915] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 944.832121][ T5915] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 944.857400][ T5915] usb 6-1: Product: syz [ 944.876543][ T5915] usb 6-1: Manufacturer: syz [ 944.950218][ T5915] hub 6-1:4.0: USB hub found [ 945.150478][ T5915] hub 6-1:4.0: 2 ports detected [ 945.211511][ T5839] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 945.257946][ T5839] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input86 [ 945.428930][ T5839] usb 3-1: USB disconnect, device number 47 [ 945.435369][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 945.693450][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4382'. [ 945.864477][T19884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 945.881823][T19884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.891687][T19884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 945.911720][T19884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 945.935026][T19884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 945.978027][T19884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 945.992701][ T5839] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 946.028772][T19884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 946.043345][T19884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.134655][ T5967] hub 6-1:4.0: activate --> -90 [ 946.161162][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.176961][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 946.214032][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 946.236287][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 946.306921][ T5839] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 946.334333][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 946.354653][ T5839] usb 3-1: Product: syz [ 946.364998][ T5839] usb 3-1: Manufacturer: syz [ 946.376344][ T5839] usb 3-1: SerialNumber: syz [ 946.410957][ T5839] usb 3-1: config 0 descriptor?? [ 946.444859][T20093] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 946.547246][T19884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.558555][T20116] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4385'. [ 946.584941][T20116] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 946.626317][ T5967] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 946.630685][ T5929] usb 6-1: USB disconnect, device number 23 [ 946.651961][ T5839] rc_core: IR keymap rc-imon-rsc not found [ 946.658271][ T5839] Registered IR keymap rc-empty [ 946.677089][ T5839] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 946.729802][T19884] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.737651][ T5839] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input87 [ 946.807113][ T5839] usb 3-1: USB disconnect, device number 48 [ 946.862140][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.869435][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.882358][T20124] nft_compat: unsupported protocol 1 [ 946.909480][T20124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.930472][T20124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.019982][T16204] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.027282][T16204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.376827][T19884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.788155][ T48] hsr_slave_0: left promiscuous mode [ 947.841244][ T48] hsr_slave_1: left promiscuous mode [ 947.868705][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.869429][T20144] loop5: detected capacity change from 0 to 7 [ 947.901986][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.905372][T20144] Dev loop5: unable to read RDB block 7 [ 947.937745][T20144] loop5: AHDI p1 [ 947.949086][T20144] loop5: partition table partially beyond EOD, truncated [ 947.979250][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.019734][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.211592][ T48] veth1_macvtap: left promiscuous mode [ 948.237370][ T48] veth0_macvtap: left promiscuous mode [ 948.252658][ T48] veth1_vlan: left promiscuous mode [ 948.754848][ T5931] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 948.808593][ T48] team0 (unregistering): Port device macvlan1 removed [ 948.958222][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 948.986275][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.013804][ T5931] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 949.043296][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.059135][ T5931] usb 6-1: config 0 descriptor?? [ 949.097489][ T48] team_slave_1 (unregistering): left allmulticast mode [ 949.102266][T20178] FAULT_INJECTION: forcing a failure. [ 949.102266][T20178] name failslab, interval 1, probability 0, space 0, times 0 [ 949.118627][T20178] CPU: 1 UID: 0 PID: 20178 Comm: syz.2.4396 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.118655][T20178] Tainted: [L]=SOFTLOCKUP [ 949.118662][T20178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 949.118674][T20178] Call Trace: [ 949.118683][T20178] [ 949.118692][T20178] dump_stack_lvl+0xe8/0x150 [ 949.118729][T20178] should_fail_ex+0x412/0x560 [ 949.118760][T20178] should_failslab+0xa8/0x100 [ 949.118777][T20178] ? skb_clone+0x212/0x3a0 [ 949.118802][T20178] kmem_cache_alloc_noprof+0x87/0x650 [ 949.118823][T20178] ? __netlink_lookup+0xc6/0x8b0 [ 949.118854][T20178] skb_clone+0x212/0x3a0 [ 949.118883][T20178] __netlink_deliver_tap+0x404/0x850 [ 949.118917][T20178] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.118938][T20178] netlink_deliver_tap+0x19c/0x1b0 [ 949.118953][T20178] netlink_unicast+0x730/0x8e0 [ 949.118975][T20178] netlink_sendmsg+0x813/0xb40 [ 949.119009][T20178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.119036][T20178] ? aa_sock_msg_perm+0xf1/0x1b0 [ 949.119066][T20178] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 949.119086][T20178] ____sys_sendmsg+0x972/0x9f0 [ 949.119102][T20178] ? __might_fault+0xaf/0x130 [ 949.119120][T20178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.119148][T20178] ? import_iovec+0x73/0xa0 [ 949.119173][T20178] ___sys_sendmsg+0x2a5/0x360 [ 949.119197][T20178] ? __lock_acquire+0x6b5/0x2cf0 [ 949.119230][T20178] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.119269][T20178] ? __fget_files+0x2a/0x420 [ 949.119281][T20178] ? __fget_files+0x3a0/0x420 [ 949.119306][T20178] __x64_sys_sendmsg+0x1bd/0x2a0 [ 949.119336][T20178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.119371][T20178] ? __pfx_ksys_write+0x10/0x10 [ 949.119400][T20178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.119414][T20178] do_syscall_64+0x15f/0xf80 [ 949.119433][T20178] ? trace_irq_disable+0x3b/0x140 [ 949.119448][T20178] ? clear_bhb_loop+0x40/0x90 [ 949.119472][T20178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.119492][T20178] RIP: 0033:0x7fb3ffb9c819 [ 949.119512][T20178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.119530][T20178] RSP: 002b:00007fb4009bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.119552][T20178] RAX: ffffffffffffffda RBX: 00007fb3ffe15fa0 RCX: 00007fb3ffb9c819 [ 949.119564][T20178] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 949.119571][T20178] RBP: 00007fb4009bf090 R08: 0000000000000000 R09: 0000000000000000 [ 949.119579][T20178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.119587][T20178] R13: 00007fb3ffe16038 R14: 00007fb3ffe15fa0 R15: 00007fb3fff3fa48 [ 949.119606][T20178] [ 949.120984][ T48] team0 (unregistering): Port device team_slave_1 removed [ 949.421347][ T48] team_slave_0 (unregistering): left allmulticast mode [ 949.431138][ T48] team0 (unregistering): Port device team_slave_0 removed [ 949.511673][ T5931] elan 0003:04F3:0755.0030: item fetching failed at offset 3/5 [ 949.530879][ T5931] elan 0003:04F3:0755.0030: Hid Parse failed [ 949.537103][ T5931] elan 0003:04F3:0755.0030: probe with driver elan failed with error -22 [ 949.715365][T19884] veth0_vlan: entered promiscuous mode [ 949.737044][T20148] netlink: 'syz.0.4391': attribute type 29 has an invalid length. [ 949.786839][ T5915] usb 6-1: USB disconnect, device number 24 [ 949.827692][T19884] veth1_vlan: entered promiscuous mode [ 949.974801][T19884] veth0_macvtap: entered promiscuous mode [ 950.080628][T19884] veth1_macvtap: entered promiscuous mode [ 950.145518][T19884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.167999][T20189] netlink: 'syz.0.4400': attribute type 11 has an invalid length. [ 950.188109][T19884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.218355][ T5967] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 950.239351][T10849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.285908][T10849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.297389][T10849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.308699][T10849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.311561][ T48] IPVS: stop unused estimator thread 0... [ 950.395170][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.450702][ T5967] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 950.495481][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 950.520085][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 950.537727][ T5967] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 950.548704][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 950.561069][ T5967] usb 3-1: Product: syz [ 950.570064][ T5967] usb 3-1: Manufacturer: syz [ 950.593563][ T5967] usb 3-1: SerialNumber: syz [ 950.613758][ T5967] usb 3-1: config 0 descriptor?? [ 950.626577][T20185] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 950.672065][T10849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.685829][T10849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.704803][T20196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4403'. [ 950.773817][ T5967] rc_core: IR keymap rc-imon-rsc not found [ 950.795642][ T5967] Registered IR keymap rc-empty [ 950.809906][ T5967] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 950.832230][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.846018][ T5967] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input88 [ 950.846323][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.892776][ T5967] usb 3-1: USB disconnect, device number 49 [ 951.427830][T20215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.440473][T20215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.275268][T20246] xt_hashlimit: size too large, truncated to 1048576 [ 952.382533][ T5931] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 952.560914][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4423'. [ 952.574815][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.592550][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 952.616369][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 952.649133][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 952.678538][ T5931] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 952.690650][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 952.700837][ T5931] usb 3-1: Product: syz [ 952.705979][ T5931] usb 3-1: Manufacturer: syz [ 952.710768][ T5931] usb 3-1: SerialNumber: syz [ 952.725862][ T5931] usb 3-1: config 0 descriptor?? [ 952.742184][T20235] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 952.865263][ T5931] rc_core: IR keymap rc-imon-rsc not found [ 952.871281][ T5931] Registered IR keymap rc-empty [ 952.878223][ T5931] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 952.894461][ T5931] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input89 [ 952.981945][ T7657] usb 3-1: USB disconnect, device number 50 [ 953.073097][ T5839] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 953.236273][ T5839] usb 2-1: config 15 has an invalid interface number: 4 but max is 0 [ 953.245624][ T5839] usb 2-1: config 15 has no interface number 0 [ 953.256415][ T5839] usb 2-1: config 15 interface 4 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 953.270259][ T5839] usb 2-1: config 15 interface 4 has no altsetting 0 [ 953.281132][ T5839] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a70, bcdDevice=43.5b [ 953.296148][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.322576][ T5839] usb 2-1: Product: п [ 953.330584][ T5839] usb 2-1: Manufacturer: 澊궆馓녯㷩锌劍謾숔ᆧ뻎痀ʛ⿳彙噐ꋇ੕뿶㚊䰾ᢞ걚䝹揟甡弌聈묂ꊃￃ쪹ꦅ쒸皟滠ᯨ研Ꮩ补碛Š湫益罔蹙䤺러蘮勽뗑䘺諯꒸곌읕ᾄ爰״䓞炮嬾沋Ἲ㱙셥ೡฃቯಇ꾶団⎇枚힭ꚦᮣ䯪࣌帕櫏⤂ꑌ໔ꮷꙅえ梫﬌鄂䓊샡ꕙ⩡啤⒟릳葳 [ 953.379525][ T5839] usb 2-1: SerialNumber: ы [ 953.394865][T20263] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 953.637218][ T5839] usb 2-1: USB disconnect, device number 18 [ 953.893942][T20267] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 953.901621][T20267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 953.908476][T20267] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 953.915023][T20267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 953.921187][T20267] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 953.937121][T20267] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 953.947318][T20267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 953.962677][T20267] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 953.974827][T20267] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 954.249442][ T5931] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 954.295692][T20286] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4433'. [ 954.414840][ T5931] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 954.439609][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.452158][ T5931] usb 3-1: config 0 has no interface number 0 [ 954.472896][ T5931] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 954.520768][ T5931] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 954.549472][ T5931] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 954.567864][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.574166][T20292] input: syz0 as /devices/virtual/input/input90 [ 954.576226][ T5931] usb 3-1: Product: syz [ 954.598363][ T5931] usb 3-1: Manufacturer: syz [ 954.620211][ T5931] usb 3-1: SerialNumber: syz [ 954.648314][ T5931] usb 3-1: config 0 descriptor?? [ 954.857101][T20296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.872245][T20296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.877676][T20275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.897456][T20275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.915479][ T5931] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 954.946873][ T5931] usb 3-1: USB disconnect, device number 51 [ 955.203132][T18736] Bluetooth: hci5: command 0x0c1a tx timeout [ 955.359688][T20313] tipc: Enabling of bearer rejected, failed to enable media [ 955.438664][T20313] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 955.480879][T20313] openvswitch: netlink: Duplicate or invalid key (type 0). [ 955.512573][T20313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.580683][T20313] vlan2: entered promiscuous mode [ 955.586822][T20313] geneve1: entered promiscuous mode [ 955.593458][T20313] vlan2: entered allmulticast mode [ 955.599532][T20313] geneve1: entered allmulticast mode [ 955.681900][T20324] netlink: 'syz.3.4450': attribute type 11 has an invalid length. [ 955.773948][ T5839] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 955.922742][T11512] Bluetooth: hci2: command 0x0c1a tx timeout [ 955.929285][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 955.935786][T18736] Bluetooth: hci3: command 0x0c1a tx timeout [ 955.963804][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 955.975374][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.998056][ T5839] usb 3-1: config 0 has no interfaces? [ 956.013068][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 956.041734][ T5839] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 956.054508][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.063164][ T5839] usb 3-1: Product: syz [ 956.067386][ T5839] usb 3-1: Manufacturer: syz [ 956.072005][ T5839] usb 3-1: SerialNumber: syz [ 956.092563][ T5931] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 956.093564][ T5839] usb 3-1: config 0 descriptor?? [ 956.258626][ T5931] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 956.278055][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.304409][ T5931] usb 2-1: config 0 descriptor?? [ 956.313987][ T5931] cp210x 2-1:0.0: cp210x converter detected [ 956.692050][T20348] bond0: entered promiscuous mode [ 956.697663][T20348] bond_slave_0: entered promiscuous mode [ 956.704815][T20348] bond_slave_1: entered promiscuous mode [ 956.711001][T20348] mac80211_hwsim hwsim119 wlan1: entered promiscuous mode [ 956.894433][T20348] batadv0: entered promiscuous mode [ 956.918314][T20348] debugfs: 'hsr2' already exists in 'hsr' [ 956.934294][T20348] Cannot create hsr debugfs directory [ 956.972053][T20348] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 957.411515][ T5931] usb 2-1: cp210x converter now attached to ttyUSB0 [ 957.463759][ T5931] usb 2-1: USB disconnect, device number 19 [ 957.518628][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 957.576235][ T5931] cp210x 2-1:0.0: device disconnected [ 957.632585][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4464'. [ 958.002873][T18736] Bluetooth: hci3: command 0x0c1a tx timeout [ 958.090624][T18736] Bluetooth: hci1: command 0x0c1a tx timeout [ 958.375190][T20387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.402759][T20387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.566178][ T5930] usb 3-1: USB disconnect, device number 52 [ 958.617329][T20394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.641011][T20394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.669703][T20387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.681383][T20387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.715304][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 958.715320][ T29] audit: type=1326 audit(1776666012.789:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20397 comm="syz.2.4474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3ffb9c819 code=0x0 [ 958.859520][T20386] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4467'. [ 958.944102][T20405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 960.092729][T18736] Bluetooth: hci3: command 0x0c1a tx timeout [ 960.167677][T18736] Bluetooth: hci1: command 0x0c1a tx timeout [ 960.199058][T20420] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4479'. [ 960.245168][T20420] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 960.772585][T20433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.786986][T20433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.162705][ T5929] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 961.182170][T20439] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4486'. [ 961.312623][ T5929] usb 6-1: device descriptor read/64, error -71 [ 961.531495][T20443] ipvlan2: entered promiscuous mode [ 961.546270][T20443] team0: Device ipvlan2 is VLAN challenged and team device has VLAN set up [ 961.565429][ T5929] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 961.722761][ T5929] usb 6-1: device descriptor read/64, error -71 [ 961.844894][ T5929] usb usb6-port1: attempt power cycle [ 962.253177][ T5929] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 962.308301][ T5929] usb 6-1: device descriptor read/8, error -71 [ 962.582817][ T5929] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 962.603380][ T5930] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 962.633263][ T5929] usb 6-1: device descriptor read/8, error -71 [ 962.746302][ T5929] usb usb6-port1: unable to enumerate USB device [ 962.762572][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 962.780099][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.795863][T20468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.805997][ T5930] usb 3-1: config 0 has no interfaces? [ 962.814854][ T5930] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 962.825977][T20468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.833885][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.845429][ T5930] usb 3-1: Product: syz [ 962.850656][ T5930] usb 3-1: Manufacturer: syz [ 962.857303][ T5930] usb 3-1: SerialNumber: syz [ 962.868546][ T5930] usb 3-1: config 0 descriptor?? [ 963.577761][T20484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.605103][T20484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.592564][ T5839] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 964.670092][T20515] fuse: Unknown parameter 'default_p' [ 964.766259][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 964.774239][ T5839] usb 6-1: config 127 has an invalid interface number: 59 but max is 3 [ 964.784993][ T5839] usb 6-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 964.794632][ T5839] usb 6-1: config 127 has an invalid interface number: 89 but max is 3 [ 964.811432][ T5839] usb 6-1: config 127 has an invalid interface number: 216 but max is 3 [ 964.820617][ T5839] usb 6-1: config 127 has an invalid interface number: 59 but max is 3 [ 964.831201][ T5839] usb 6-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 964.845551][ T5839] usb 6-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 964.856846][ T5839] usb 6-1: config 127 has an invalid interface number: 73 but max is 3 [ 964.868601][ T5839] usb 6-1: config 127 has no interface number 0 [ 964.881452][ T5839] usb 6-1: config 127 has no interface number 1 [ 964.888871][ T5839] usb 6-1: config 127 has no interface number 2 [ 964.897548][ T5839] usb 6-1: config 127 has no interface number 3 [ 964.908123][ T5839] usb 6-1: config 127 interface 59 altsetting 166 has an invalid descriptor for endpoint zero, skipping [ 964.920907][ T5839] usb 6-1: config 127 interface 59 altsetting 166 has a duplicate endpoint with address 0x9, skipping [ 964.938779][ T5839] usb 6-1: config 127 interface 59 altsetting 166 has an invalid descriptor for endpoint zero, skipping [ 964.952371][ T5839] usb 6-1: config 127 interface 59 altsetting 166 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 964.969637][ T5839] usb 6-1: config 127 interface 59 altsetting 166 has an invalid descriptor for endpoint zero, skipping [ 964.987243][ T5839] usb 6-1: config 127 interface 59 altsetting 166 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 964.999955][ T5839] usb 6-1: config 127 interface 59 altsetting 166 has a duplicate endpoint with address 0xD, skipping [ 965.012720][ T5839] usb 6-1: config 127 interface 89 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 965.024293][ T5839] usb 6-1: config 127 interface 89 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 965.036750][ T5839] usb 6-1: config 127 interface 89 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 965.048734][ T5839] usb 6-1: config 127 interface 89 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 965.061931][ T5839] usb 6-1: config 127 interface 89 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 965.076739][ T5839] usb 6-1: too many endpoints for config 127 interface 216 altsetting 228: 175, using maximum allowed: 30 [ 965.088593][ T5839] usb 6-1: config 127 interface 216 altsetting 228 has a duplicate endpoint with address 0x8, skipping [ 965.107674][ T5839] usb 6-1: config 127 interface 216 altsetting 228 has a duplicate endpoint with address 0x9, skipping [ 965.128032][ T5839] usb 6-1: config 127 interface 216 altsetting 228 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 965.144331][ T5839] usb 6-1: config 127 interface 216 altsetting 228 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 965.160856][ T5839] usb 6-1: config 127 interface 216 altsetting 228 has 4 endpoint descriptors, different from the interface descriptor's value: 175 [ 965.180050][ T5839] usb 6-1: config 127 interface 59 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 965.196935][ T5839] usb 6-1: config 127 interface 59 altsetting 4 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 965.214736][ T5839] usb 6-1: config 127 interface 59 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 965.226334][ T5839] usb 6-1: config 127 interface 59 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 965.238689][ T5839] usb 6-1: config 127 interface 59 altsetting 4 endpoint 0xE has invalid maxpacket 1015, setting to 64 [ 965.252616][ T5839] usb 6-1: config 127 interface 59 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 965.264964][ T5839] usb 6-1: config 127 interface 59 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 965.276774][ T5839] usb 6-1: config 127 interface 59 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 965.307046][ T5839] usb 6-1: config 127 interface 59 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 965.320008][ T5839] usb 6-1: config 127 interface 73 altsetting 127 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 965.336898][ T5839] usb 6-1: config 127 interface 73 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 965.349006][ T5839] usb 6-1: config 127 interface 59 has no altsetting 0 [ 965.357019][ T5839] usb 6-1: config 127 interface 59 has no altsetting 1 [ 965.371903][ T5839] usb 6-1: config 127 interface 89 has no altsetting 0 [ 965.379378][ T5839] usb 6-1: config 127 interface 216 has no altsetting 0 [ 965.398253][ T7657] usb 3-1: USB disconnect, device number 53 [ 965.433416][ T5839] usb 6-1: config 127 interface 73 has no altsetting 0 [ 965.449051][ T5839] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=ed.58 [ 965.460780][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.470628][ T5839] usb 6-1: Product: 鿁䗗뫔⹝㐻繩꯽㙑뷠粓偌ꔭ꓅羦愍㻭Ӈ⿱勺੃忛䞖橈툯ꀐ꺬烙퐎믴봳쵻滍㈢冀搦⮑끇p됢鲘鑀२潂晫唔鶫質胿膄⥪㦘怛⽼ꈒꐋ䖁肚￰꽗ꬬ鸺患즊ఄ셆ᛘ㠔龅툀獏鮄鞬⹁퐬쇒䏘ꡮ삨㻯믮㫭槱讱䣎悌罨蝖徙㹡幏ᵛ [ 965.504290][ T5839] usb 6-1: Manufacturer: ခ [ 965.509801][ T5839] usb 6-1: SerialNumber: syz [ 965.560986][T20507] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 965.814055][T20535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.842651][ T5930] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 965.846142][T20535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.025928][ T5930] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 966.051599][ T5930] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 966.064294][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.077896][ T5930] usb 3-1: Product: syz [ 966.085605][ T5930] usb 3-1: Manufacturer: syz [ 966.090386][ T5930] usb 3-1: SerialNumber: syz [ 966.114947][ T5930] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 966.132625][ T5839] usb 6-1: USB disconnect, device number 29 [ 966.146361][ T5929] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 966.291763][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:127.59/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.381264][T20531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.400107][T20531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.415183][T20531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.427540][T20531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.444595][T20531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.458135][T20531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.526249][ T5839] usb 3-1: USB disconnect, device number 54 [ 966.557412][T20541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.577477][T20541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.203541][ T5929] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 967.218323][ T5929] ath9k_htc: Failed to initialize the device [ 967.232974][ T5839] usb 3-1: ath9k_htc: USB layer deinitialized [ 967.255412][T20558] fuse: Unknown parameter 'default_p' [ 967.314516][T20560] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4533'. [ 967.323880][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 967.417604][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4534'. [ 967.433818][T20564] batadv0: entered promiscuous mode [ 967.449695][T20564] macvtap1: entered promiscuous mode [ 967.458492][T20564] macvtap1: entered allmulticast mode [ 967.464007][T20564] batadv0: entered allmulticast mode [ 967.469721][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4534'. [ 967.470872][T20564] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 967.495376][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 967.504685][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.513370][T20566] batadv0: left allmulticast mode [ 967.515234][ T9] usb 2-1: config 0 has no interfaces? [ 967.542801][ T5839] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 967.559950][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 967.575000][T20566] batadv0: left promiscuous mode [ 967.575486][T15902] Bluetooth: Patch file not found ar3k/AthrBT_0x279d9a27.dfu [ 967.590784][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.599192][T15902] Bluetooth: Loading patch file failed [ 967.605109][ T9] usb 2-1: Product: syz [ 967.605132][ T9] usb 2-1: Manufacturer: syz [ 967.605149][ T9] usb 2-1: SerialNumber: syz [ 967.610401][ T9] usb 2-1: config 0 descriptor?? [ 967.627693][T15902] ath3k 1-1:0.0: probe with driver ath3k failed with error -110 [ 967.647330][T15902] usb 1-1: USB disconnect, device number 45 [ 967.702628][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 967.710003][ T5839] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 967.720659][ T5839] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 967.730457][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.749288][ T5839] usb 3-1: config 0 descriptor?? [ 967.770522][ T5839] mos7840 3-1:0.0: missing endpoints [ 967.983439][T15902] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 968.147010][T15902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.168014][T15902] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 968.168480][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4536'. [ 968.190573][T15902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 968.216663][T15902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 968.238602][T15902] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 968.257791][T15902] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 968.281451][T15902] usb 1-1: Product: syz [ 968.292240][T15902] usb 1-1: Manufacturer: syz [ 968.306643][T15902] usb 1-1: SerialNumber: syz [ 968.350994][T15902] usb 1-1: config 0 descriptor?? [ 968.369698][T20534] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 968.503307][T15902] rc_core: IR keymap rc-imon-rsc not found [ 968.529794][T15902] Registered IR keymap rc-empty [ 968.555854][T15902] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 968.604231][T15902] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input92 [ 968.835931][T15902] usb 1-1: USB disconnect, device number 46 [ 969.000978][ T5839] usb 3-1: USB disconnect, device number 55 [ 969.078379][T20589] sg_write: data in/out 1919122850/38 bytes for SCSI command 0xa7-- guessing data in; [ 969.078379][T20589] program syz.2.4540 not setting count and/or reply_len properly [ 969.836585][T20601] bond2: entered allmulticast mode [ 969.891134][T20601] macvlan2: entered promiscuous mode [ 969.912251][T20601] macvlan2: entered allmulticast mode [ 969.946070][T20603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.985250][T20601] bond2: entered promiscuous mode [ 969.993775][T20603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.003067][T20601] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 970.024399][T20601] bond2: left promiscuous mode [ 970.107749][ T5839] usb 2-1: USB disconnect, device number 20 [ 970.826194][T20628] fuse: Bad value for 'fd' [ 971.148342][T20613] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 971.154968][T20613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 971.161235][T20613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 971.167790][T20613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 971.175183][T20613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 971.443217][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 971.622881][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 971.632999][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.644083][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 971.654607][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 971.693852][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 971.714869][ T9] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 971.729519][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.745649][ T9] usb 2-1: Product: syz [ 971.756667][ T9] usb 2-1: Manufacturer: syz [ 971.764543][ T9] usb 2-1: SerialNumber: syz [ 972.000426][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.025515][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.075095][T20623] ip6gre1: entered promiscuous mode [ 972.086250][T20623] ip6gre1: entered allmulticast mode [ 972.138439][ T9] usb 2-1: selecting invalid altsetting 0 [ 972.186775][ T5967] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 972.239422][T20678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.268174][T20678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.290108][ T9] usb 2-1: USB disconnect, device number 21 [ 972.359803][ T5967] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 972.376669][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.385549][T14833] udevd[14833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.405074][T18736] Bluetooth: hci5: command 0x0c1a tx timeout [ 972.406339][ T5967] usb 3-1: config 0 has no interface number 0 [ 972.406394][ T5967] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.406419][ T5967] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.406440][ T5967] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 972.406466][ T5967] usb 3-1: config 0 interface 244 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 972.406512][ T5967] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 972.406537][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.416886][ T5967] usb 3-1: config 0 descriptor?? [ 972.496013][T20661] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 972.622607][ T5839] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 972.706886][ T5967] usb 3-1: string descriptor 0 read error: -71 [ 972.717444][ T5967] cypress_m8 3-1:0.244: DeLorme Earthmate USB converter detected [ 972.727125][ T5967] earthmate ttyUSB0: required endpoint is missing [ 972.737522][ T5967] usb 3-1: USB disconnect, device number 56 [ 972.749860][ T5967] cypress_m8 3-1:0.244: device disconnected [ 972.772694][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 972.779553][ T5839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.791478][ T5839] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 972.800843][ T5839] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 972.814781][ T5839] usb 1-1: config 1 interface 1 has no altsetting 0 [ 972.825337][ T5839] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 972.836038][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.844729][ T5839] usb 1-1: Product: syz [ 972.849657][ T5839] usb 1-1: Manufacturer: syz [ 972.859087][ T5839] usb 1-1: SerialNumber: syz [ 973.086752][T20679] syzkaller0: entered promiscuous mode [ 973.093145][T20679] syzkaller0: entered allmulticast mode [ 973.203869][T18736] Bluetooth: hci1: command 0x0c1a tx timeout [ 973.205601][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 973.211999][T11512] Bluetooth: hci0: command 0x0c1a tx timeout [ 973.218961][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 973.226051][ T5839] usb 1-1: selecting invalid altsetting 0 [ 973.265966][ T5929] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 973.320775][ T5839] usb 1-1: USB disconnect, device number 47 [ 973.390826][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4578'. [ 973.420887][ T6524] udevd[6524]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.447924][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4578'. [ 973.474343][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 973.484262][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.516401][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.548125][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 973.561354][ T5929] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 973.573580][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.601462][ T5929] usb 2-1: config 0 descriptor?? [ 974.063805][ T5929] hid-multitouch 0003:0457:07DA.0031: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 974.236722][T20691] loop5: detected capacity change from 0 to 7 [ 974.261353][T20691] loop5: p1 < > p3 p4 [ 974.279943][T20691] loop5: partition table partially beyond EOD, truncated [ 974.305060][T20691] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 974.322141][T20691] loop5: p4 start 33554432 is beyond EOD, truncated [ 974.349384][ T5967] usb 2-1: USB disconnect, device number 22 [ 974.448928][ T5954] udevd[5954]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 974.451749][ T6123] udevd[6123]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 974.622024][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 974.980391][T20743] xt_hashlimit: size too large, truncated to 1048576 [ 975.104264][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4593'. [ 975.495067][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4596'. [ 975.642564][ T5929] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 975.804128][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 975.812943][ T5839] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 975.827754][ T5929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.848209][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 975.876735][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 975.887683][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 975.897921][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 975.913122][ T5929] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 975.931444][ T5929] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 975.955427][ T5929] usb 1-1: Manufacturer: syz [ 975.971478][ T5929] usb 1-1: config 0 descriptor?? [ 975.972653][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 976.006811][ T5839] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 976.024714][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.040977][ T5839] usb 2-1: Product: syz [ 976.048010][ T5839] usb 2-1: Manufacturer: syz [ 976.053200][ T5839] usb 2-1: SerialNumber: syz [ 976.070626][ T5839] usb 2-1: config 0 descriptor?? [ 976.286064][T20779] syzkaller0: entered promiscuous mode [ 976.287864][ T5839] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 976.291658][T20779] syzkaller0: entered allmulticast mode [ 976.438221][T20784] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 976.545845][ T29] audit: type=1326 audit(1776666030.629:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.589727][ T29] audit: type=1326 audit(1776666030.629:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.614276][ T29] audit: type=1326 audit(1776666030.659:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.614458][T20787] macvtap2: entered promiscuous mode [ 976.654252][ T29] audit: type=1326 audit(1776666030.659:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.656378][T20787] macvtap2: entered allmulticast mode [ 976.687652][T20787] dummy0: entered promiscuous mode [ 976.688449][ T29] audit: type=1326 audit(1776666030.659:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.717125][T20787] dummy0: entered allmulticast mode [ 976.728953][T20787] team0: Device macvtap2 failed to register rx_handler [ 976.739020][T20787] dummy0: left allmulticast mode [ 976.740329][ T29] audit: type=1326 audit(1776666030.659:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.764638][T20787] dummy0: left promiscuous mode [ 976.769173][ T29] audit: type=1326 audit(1776666030.659:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.832905][ T29] audit: type=1326 audit(1776666030.659:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.858769][ T29] audit: type=1326 audit(1776666030.659:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.883838][ T29] audit: type=1326 audit(1776666030.659:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20786 comm="syz.5.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f793859c819 code=0x7ffc0000 [ 976.934960][T20791] loop7: detected capacity change from 0 to 7 [ 977.082575][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 977.192803][ T7657] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 977.265842][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 977.276765][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.291757][ T9] usb 3-1: config 0 has no interfaces? [ 977.301769][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 977.311438][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.320682][ T9] usb 3-1: Product: syz [ 977.325718][ T9] usb 3-1: Manufacturer: syz [ 977.332251][ T9] usb 3-1: SerialNumber: syz [ 977.344415][ T9] usb 3-1: config 0 descriptor?? [ 977.353101][ T7657] usb 6-1: Using ep0 maxpacket: 32 [ 977.378540][ T7657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 977.413677][ T7657] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 977.426325][ T7657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 977.448421][ T7657] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 977.472201][ T7657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.480980][ T7657] usb 6-1: Product: syz [ 977.486215][ T7657] usb 6-1: Manufacturer: syz [ 977.490963][ T7657] usb 6-1: SerialNumber: syz [ 977.509539][ T7657] usb 6-1: config 0 descriptor?? [ 977.536187][ T7657] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input93 [ 977.907830][ C1] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 977.907837][ T9] usb 6-1: USB disconnect, device number 30 [ 977.907897][ C1] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 978.027735][T20765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.064660][T20765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.108770][ T5839] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 978.129845][ T5839] usb 2-1: USB disconnect, device number 23 [ 978.239696][T20808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.253873][T20808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.483217][ T5929] rc_core: IR keymap rc-hauppauge not found [ 978.496972][ T5929] Registered IR keymap rc-empty [ 978.505700][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.542660][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.566615][ T5929] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 978.581003][ T5929] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input94 [ 978.596081][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.622994][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.645920][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.673609][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.703753][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.733728][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.772927][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.793937][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.832854][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.863409][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 978.887582][ T5929] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 978.897758][ T5929] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 978.941977][ T5929] usb 1-1: USB disconnect, device number 48 [ 979.312736][ T5929] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 979.477639][ T5929] usb 1-1: config 15 has an invalid interface number: 122 but max is 1 [ 979.491021][ T5929] usb 1-1: config 15 has an invalid interface number: 4 but max is 1 [ 979.512151][ T5929] usb 1-1: config 15 has no interface number 0 [ 979.527018][ T5929] usb 1-1: config 15 has no interface number 1 [ 979.545198][ T5929] usb 1-1: config 15 interface 4 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 979.567976][ T5929] usb 1-1: config 15 interface 122 has no altsetting 0 [ 979.588036][ T5929] usb 1-1: config 15 interface 4 has no altsetting 0 [ 979.620090][ T5929] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a70, bcdDevice=43.5b [ 979.639859][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.661972][ T5929] usb 1-1: Product: п [ 979.676837][ T5929] usb 1-1: Manufacturer: 澊궆馓녯㷩锌劍謾숔ᆧ뻎痀ʛ⿳彙噐ꋇ੕뿶㚊䰾ᢞ걚䝹揟甡弌聈묂ꊃￃ쪹ꦅ쒸皟滠ᯨ研Ꮩ补碛Š湫益罔蹙䤺러蘮勽뗑䘺諯꒸곌읕ᾄ爰״䓞炮嬾沋Ἲ㱙셥ೡฃቯಇ꾶団⎇枚힭ꚦᮣ䯪࣌帕櫏⤂ꑌ໔ꮷꙅえ梫﬌鄂䓊샡ꕙ⩡啤⒟릳葳 [ 979.721307][ T5929] usb 1-1: SerialNumber: ы [ 979.901671][ T7657] usb 3-1: USB disconnect, device number 57 [ 979.984512][T20849] netlink: 'syz.5.4629': attribute type 11 has an invalid length. [ 980.029157][ T5929] usb 1-1: USB disconnect, device number 49 [ 980.630818][T20873] FAULT_INJECTION: forcing a failure. [ 980.630818][T20873] name failslab, interval 1, probability 0, space 0, times 0 [ 980.665105][T20873] CPU: 1 UID: 0 PID: 20873 Comm: syz.5.4637 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.665141][T20873] Tainted: [L]=SOFTLOCKUP [ 980.665149][T20873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 980.665161][T20873] Call Trace: [ 980.665171][T20873] [ 980.665180][T20873] dump_stack_lvl+0xe8/0x150 [ 980.665220][T20873] should_fail_ex+0x412/0x560 [ 980.665258][T20873] should_failslab+0xa8/0x100 [ 980.665290][T20873] __kmalloc_noprof+0xe8/0x760 [ 980.665325][T20873] ? ethnl_default_notify+0x1f5/0xbe0 [ 980.665352][T20873] ? __kmalloc_noprof+0x1b8/0x760 [ 980.665382][T20873] ethnl_default_notify+0x1f5/0xbe0 [ 980.665423][T20873] ? __pfx_ethnl_default_notify+0x10/0x10 [ 980.665463][T20873] ? __pfx_ethnl_set_pause+0x10/0x10 [ 980.665494][T20873] ? mutex_is_locked+0x17/0x50 [ 980.665516][T20873] ? rtnl_is_locked+0x15/0x20 [ 980.665547][T20873] ethnl_default_set_doit+0x6ad/0xad0 [ 980.665589][T20873] genl_family_rcv_msg_doit+0x22a/0x330 [ 980.665623][T20873] ? __asan_memcpy+0x40/0x70 [ 980.665650][T20873] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 980.665696][T20873] ? bpf_lsm_capable+0x9/0x20 [ 980.665725][T20873] ? security_capable+0x7e/0x2c0 [ 980.665763][T20873] genl_rcv_msg+0x61c/0x7a0 [ 980.665801][T20873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 980.665831][T20873] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 980.665862][T20873] ? __pfx_ref_tracker_free+0x10/0x10 [ 980.665892][T20873] ? __asan_memcpy+0x40/0x70 [ 980.665913][T20873] ? __skb_clone+0x63/0x7a0 [ 980.665949][T20873] netlink_rcv_skb+0x232/0x4b0 [ 980.665975][T20873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 980.666012][T20873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 980.666057][T20873] ? down_read+0x270/0x2e0 [ 980.666077][T20873] ? genl_rcv+0xd/0x40 [ 980.666110][T20873] genl_rcv+0x28/0x40 [ 980.666137][T20873] netlink_unicast+0x75c/0x8e0 [ 980.666174][T20873] netlink_sendmsg+0x813/0xb40 [ 980.666212][T20873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.666242][T20873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 980.666275][T20873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 980.666305][T20873] ____sys_sendmsg+0x972/0x9f0 [ 980.666340][T20873] ? __might_fault+0xaf/0x130 [ 980.666371][T20873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 980.666409][T20873] ? import_iovec+0x73/0xa0 [ 980.666437][T20873] ___sys_sendmsg+0x2a5/0x360 [ 980.666461][T20873] ? __lock_acquire+0x6b5/0x2cf0 [ 980.666495][T20873] ? __pfx____sys_sendmsg+0x10/0x10 [ 980.666559][T20873] ? __fget_files+0x2a/0x420 [ 980.666578][T20873] ? __fget_files+0x3a0/0x420 [ 980.666606][T20873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 980.666634][T20873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 980.666670][T20873] ? __pfx_ksys_write+0x10/0x10 [ 980.666704][T20873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.666726][T20873] do_syscall_64+0x15f/0xf80 [ 980.666753][T20873] ? trace_irq_disable+0x3b/0x140 [ 980.666778][T20873] ? clear_bhb_loop+0x40/0x90 [ 980.666802][T20873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.666822][T20873] RIP: 0033:0x7f793859c819 [ 980.666842][T20873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.666859][T20873] RSP: 002b:00007f79393e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.666881][T20873] RAX: ffffffffffffffda RBX: 00007f7938815fa0 RCX: 00007f793859c819 [ 980.666895][T20873] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 980.666908][T20873] RBP: 00007f79393e8090 R08: 0000000000000000 R09: 0000000000000000 [ 980.666920][T20873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.666933][T20873] R13: 00007f7938816038 R14: 00007f7938815fa0 R15: 00007f793893fa48 [ 980.666967][T20873] [ 981.509702][T20881] binder_alloc: 20880: binder_alloc_buf size 16384 failed, no address space [ 981.584357][T20881] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 981.609558][T20883] loop5: detected capacity change from 0 to 7 [ 981.619824][T20883] Dev loop5: unable to read RDB block 7 [ 981.625795][ T7657] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 981.635054][T20883] loop5: AHDI p1 [ 981.640399][T20883] loop5: partition table partially beyond EOD, truncated [ 981.788925][ T7657] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 981.802264][ T7657] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.844408][ T7657] usb 6-1: config 0 has no interface number 0 [ 981.863064][ T7657] usb 6-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 981.916788][ T7657] usb 6-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 981.973826][ T7657] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 982.054296][ T7657] usb 6-1: config 0 interface 244 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 982.135728][ T7657] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 982.175283][ T7657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.238739][ T7657] usb 6-1: config 0 descriptor?? [ 982.265683][T20879] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 982.522721][ T7657] usb 6-1: string descriptor 0 read error: -71 [ 982.553282][ T7657] cypress_m8 6-1:0.244: DeLorme Earthmate USB converter detected [ 982.606551][ T7657] earthmate ttyUSB0: required endpoint is missing [ 982.635825][ T7657] usb 6-1: USB disconnect, device number 31 [ 982.659780][ T7657] cypress_m8 6-1:0.244: device disconnected [ 983.004513][ T5929] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 983.182495][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 983.194695][ T5929] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 983.214825][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.251973][ T5929] usb 1-1: Product: syz [ 983.258277][ T5929] usb 1-1: Manufacturer: syz [ 983.263393][ T5929] usb 1-1: SerialNumber: syz [ 983.272128][ T5929] usb 1-1: config 0 descriptor?? [ 983.294973][ T5929] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 983.581666][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4657'. [ 983.634124][ T5929] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 983.851030][T20935] binder_alloc: 20934: binder_alloc_buf size 32512 failed, no address space [ 983.860853][T20935] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 984.202652][ T5967] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 984.382582][ T5967] usb 3-1: Using ep0 maxpacket: 32 [ 984.395427][ T5967] usb 3-1: config 5 has an invalid interface number: 8 but max is 3 [ 984.404612][ T5967] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 984.433907][ T5967] usb 3-1: config 5 has an invalid interface number: 101 but max is 3 [ 984.443802][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4663'. [ 984.453468][ T5967] usb 3-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 984.479835][ T5967] usb 3-1: config 5 has an invalid interface number: 175 but max is 3 [ 984.510085][ T5967] usb 3-1: config 5 has an invalid interface number: 169 but max is 3 [ 984.541559][ T5967] usb 3-1: config 5 has no interface number 0 [ 984.563153][ T5967] usb 3-1: config 5 has no interface number 1 [ 984.581811][ T5967] usb 3-1: config 5 has no interface number 2 [ 984.592812][ T5967] usb 3-1: config 5 has no interface number 3 [ 984.618947][ T5967] usb 3-1: config 5 interface 8 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 984.639213][ T5967] usb 3-1: config 5 interface 8 altsetting 128 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 984.664933][ T5967] usb 3-1: config 5 interface 8 altsetting 128 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 984.689674][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 984.712015][ T5967] usb 3-1: config 5 interface 101 altsetting 14 endpoint 0x6 has an invalid bInterval 161, changing to 7 [ 984.740872][ T5967] usb 3-1: config 5 interface 101 altsetting 14 endpoint 0x1 has invalid wMaxPacketSize 0 [ 984.765644][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 984.792030][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has a duplicate endpoint with address 0x2, skipping [ 984.834885][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 984.873704][ T5967] usb 3-1: config 5 interface 101 altsetting 14 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 984.917020][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has a duplicate endpoint with address 0x3, skipping [ 984.942943][ T5967] usb 3-1: config 5 interface 101 altsetting 14 bulk endpoint 0x4 has invalid maxpacket 64 [ 984.980716][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 985.011546][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 985.031239][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has an endpoint descriptor with address 0x48, changing to 0x8 [ 985.073136][ T5967] usb 3-1: config 5 interface 101 altsetting 14 endpoint 0x8 has invalid maxpacket 3201, setting to 1024 [ 985.112213][ T5967] usb 3-1: config 5 interface 101 altsetting 14 bulk endpoint 0x8 has invalid maxpacket 1024 [ 985.151487][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has a duplicate endpoint with address 0x6, skipping [ 985.218691][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has a duplicate endpoint with address 0xD, skipping [ 985.256788][ T5967] usb 3-1: config 5 interface 101 altsetting 14 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 985.278721][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 985.296457][ T5967] usb 3-1: config 5 interface 175 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 985.316220][ T5967] usb 3-1: config 5 interface 175 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 985.329668][ T5967] usb 3-1: config 5 interface 175 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 985.392824][ T5967] usb 3-1: config 5 interface 169 altsetting 14 has a duplicate endpoint with address 0x3, skipping [ 985.439358][ T5967] usb 3-1: config 5 interface 169 altsetting 14 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 985.467842][ T5967] usb 3-1: config 5 interface 169 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 985.481552][ T5967] usb 3-1: config 5 interface 169 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 985.496186][ T5967] usb 3-1: config 5 interface 169 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 985.504447][ T9] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 985.507576][ T5967] usb 3-1: config 5 interface 169 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 985.517911][ T9] usb 2-1: config 5 has no interface number 0 [ 985.532621][ T7657] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 985.537545][ T9] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 985.567520][ T9] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 985.571265][ T5967] usb 3-1: config 5 interface 169 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 985.590960][ T5967] usb 3-1: config 5 interface 8 has no altsetting 0 [ 985.598038][ T5967] usb 3-1: config 5 interface 101 has no altsetting 0 [ 985.598197][ T9] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 985.616287][ T5967] usb 3-1: config 5 interface 175 has no altsetting 0 [ 985.616318][ T5967] usb 3-1: config 5 interface 169 has no altsetting 0 [ 985.618895][ T5967] usb 3-1: New USB device found, idVendor=11c9, idProduct=6374, bcdDevice=7b.c3 [ 985.641395][ T9] usb 2-1: config 5 interface 123 has no altsetting 0 [ 985.652850][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.656132][ T9] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 985.661262][ T5967] usb 3-1: Product: с [ 985.671410][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.677919][ T5967] usb 3-1: Manufacturer: 메範篘漻귦ꣂꭐ䓐郋䙰ƙ臑窾ᛞꮷ⌙⹙쮴룋༱᧍휦챻蠵뙲⊉ힺ烴ꆮꋀﴻ桍ڪﳖ챬ꎱ뮆ၓ杹ଡ଼샔ᶧነᬊ澹홆ᝯ눸鰸臌⚂蒣죓杍셂⬺ႲȀ䑳ₚːɁ㒎叭഻䝶╚辅㯺꺗뾮煼퓵뉇v띠ꢈ䧹ƒ癥▪㠷׺邼ତᎍ料⥞숀잉ᇻ谛놅쐒မ膹ꍭ큖 [ 985.688645][ T9] usb 2-1: Product: syz [ 985.717769][ T5967] usb 3-1: SerialNumber: ᠉ [ 985.732649][ T7657] usb 6-1: Using ep0 maxpacket: 32 [ 985.741796][ T7657] usb 6-1: config 164 has an invalid interface number: 7 but max is 0 [ 985.745730][ T9] usb 2-1: Manufacturer: syz [ 985.751650][ T7657] usb 6-1: config 164 has no interface number 0 [ 985.762206][ T7657] usb 6-1: config 164 interface 7 has no altsetting 0 [ 985.773304][ T7657] usb 6-1: New USB device found, idVendor=045e, idProduct=0c5e, bcdDevice=98.d1 [ 985.784419][ T7657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.789764][ T9] usb 2-1: SerialNumber: syz [ 985.802820][ T7657] usb 6-1: Product: syz [ 985.809219][ T7657] usb 6-1: Manufacturer: syz [ 985.820083][ T7657] usb 6-1: SerialNumber: syz [ 985.855507][ T7657] r8152-cfgselector 6-1: Unknown version 0x0000 [ 985.937174][ T5929] usb 1-1: USB disconnect, device number 50 [ 986.073410][T20952] fuse: Bad value for 'fd' [ 986.115658][ T7657] r8152 6-1:164.7: Expected endpoints are not found [ 986.118036][ T9] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 986.151726][ T5967] usb 3-1: USB disconnect, device number 58 [ 986.182184][ T9] usb 2-1: USB disconnect, device number 24 [ 986.190608][ T7657] r8152-cfgselector 6-1: USB disconnect, device number 32 [ 986.855791][T20967] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4672'. [ 986.937133][T20969] syz_tun: entered allmulticast mode [ 987.193394][ T5967] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 987.228908][T20979] netlink: 'syz.2.4671': attribute type 13 has an invalid length. [ 987.370976][ T5967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.396821][ T5967] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 987.430633][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 987.471863][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 987.500707][T20983] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4677'. [ 987.503417][ T5967] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 987.532083][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 987.550665][ T5967] usb 2-1: Product: syz [ 987.560871][ T5967] usb 2-1: Manufacturer: syz [ 987.567388][T20983] netlink: 'syz.0.4677': attribute type 13 has an invalid length. [ 987.579032][ T5967] usb 2-1: SerialNumber: syz [ 987.589606][ T5967] usb 2-1: config 0 descriptor?? [ 987.595707][T20983] netlink: 'syz.0.4677': attribute type 17 has an invalid length. [ 987.608279][T20974] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 987.644179][T20983] gretap0: refused to change device tx_queue_len [ 987.664749][T20983] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 987.714497][ T5967] rc_core: IR keymap rc-imon-rsc not found [ 987.720498][ T5967] Registered IR keymap rc-empty [ 987.848512][ T5967] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 987.860459][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.883750][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.893379][ T5967] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input95 [ 987.967678][T20972] syz_tun: left allmulticast mode [ 988.387169][T20998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4680'. [ 988.617532][ T5967] usb 2-1: USB disconnect, device number 25 [ 988.793126][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 988.973951][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.002755][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 989.021745][ T9] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 989.035161][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.071545][ T9] usb 3-1: config 0 descriptor?? [ 989.723144][T21031] netlink: 'syz.0.4693': attribute type 11 has an invalid length. [ 989.833338][T21036] netlink: 'syz.0.4696': attribute type 11 has an invalid length. [ 989.841520][T21035] netlink: 'syz.0.4696': attribute type 11 has an invalid length. [ 989.854991][T21036] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4696'. [ 989.865833][T21035] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4696'. [ 989.923416][ T5967] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 989.957394][T21040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4698'. [ 990.032685][ T5931] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 990.082640][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 990.091530][ T5967] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.102266][ T5967] usb 6-1: config 0 has no interfaces? [ 990.111480][ T5967] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 990.129206][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.147154][ T5967] usb 6-1: Product: syz [ 990.156341][ T5967] usb 6-1: Manufacturer: syz [ 990.166624][ T5967] usb 6-1: SerialNumber: syz [ 990.184345][ T5967] usb 6-1: config 0 descriptor?? [ 990.224124][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.260465][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.298187][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 990.328744][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 990.363732][ T5931] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 990.380619][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.402348][ T5931] usb 2-1: Product: syz [ 990.412173][ T5931] usb 2-1: Manufacturer: syz [ 990.421222][ T5931] usb 2-1: SerialNumber: syz [ 990.442534][ T5931] usb 2-1: config 0 descriptor?? [ 990.454253][ T5931] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 990.472082][ T5931] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 990.499313][ T5931] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 990.658172][T21033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.669322][T21033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.685824][ T5931] usb 2-1: USB disconnect, device number 26 [ 990.710155][ T5931] garmin_gps 2-1:0.0: device disconnected [ 991.118665][T21055] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4703'. [ 991.135494][T21055] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 991.280056][T21057] loop5: detected capacity change from 0 to 7 [ 991.295831][T21057] Dev loop5: unable to read RDB block 7 [ 991.305741][T21057] loop5: unable to read partition table [ 991.316065][T21057] loop5: partition table beyond EOD, truncated [ 991.323246][T21057] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 991.553427][ T5967] usb 3-1: USB disconnect, device number 59 [ 991.863739][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4709'. [ 992.030900][T21081] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4711'. [ 992.192702][ T5967] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 992.365813][ T5967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.397143][ T5967] usb 2-1: config 0 has no interfaces? [ 992.416331][ T5967] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 992.438992][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.480395][ T5967] usb 2-1: config 0 descriptor?? [ 992.600179][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4713'. [ 992.713103][ T5967] usb 2-1: USB disconnect, device number 27 [ 992.764650][T15902] usb 6-1: USB disconnect, device number 33 [ 993.082817][ T5839] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 993.133121][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.140130][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.243929][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 993.261539][ T5839] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 993.273646][T15902] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 993.295326][ T5839] usb 3-1: config 0 has no interface number 0 [ 993.312749][ T5839] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 993.347785][ T5839] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 993.358079][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.382102][ T5839] usb 3-1: Product: syz [ 993.396227][ T5839] usb 3-1: Manufacturer: syz [ 993.412987][ T5839] usb 3-1: SerialNumber: syz [ 993.428656][ T5839] usb 3-1: config 0 descriptor?? [ 993.449791][ T5839] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 993.470239][ T5839] em28xx 3-1:0.132: Video interface 132 found: [ 993.477657][T15902] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 993.504508][T15902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.548717][T15902] usb 6-1: config 0 has no interface number 0 [ 993.573019][T15902] usb 6-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 993.605637][T15902] usb 6-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 993.642275][T15902] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 993.672241][T15902] usb 6-1: config 0 interface 244 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 993.706108][T15902] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 993.724968][T15902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.756322][T15902] usb 6-1: config 0 descriptor?? [ 993.793349][T21096] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 993.848656][ T5839] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 994.031952][T15902] usb 6-1: string descriptor 0 read error: -71 [ 994.064522][T15902] cypress_m8 6-1:0.244: DeLorme Earthmate USB converter detected [ 994.094968][T15902] earthmate ttyUSB0: required endpoint is missing [ 994.126637][T15902] usb 6-1: USB disconnect, device number 34 [ 994.157107][T15902] cypress_m8 6-1:0.244: device disconnected [ 994.285452][ T5839] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 994.318891][ T5839] em28xx 3-1:0.132: board has no eeprom [ 994.627382][T21109] wg1: entered promiscuous mode [ 994.649188][T21109] wg1: entered allmulticast mode [ 994.656105][ T5839] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 994.686009][ T5839] em28xx 3-1:0.132: analog set to bulk mode. [ 994.708375][ T7657] em28xx 3-1:0.132: Registering V4L2 extension [ 994.745830][ T5839] usb 3-1: USB disconnect, device number 60 [ 994.777980][ T5839] em28xx 3-1:0.132: Disconnecting em28xx [ 995.090606][ T7657] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 995.125722][ T7657] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 995.176355][ T7657] em28xx 3-1:0.132: No AC97 audio processor [ 995.227263][ T7657] usb 3-1: Decoder not found [ 995.241019][ T7657] em28xx 3-1:0.132: failed to create media graph [ 995.262842][ T7657] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 995.380551][ T7657] em28xx 3-1:0.132: Remote control support is not available for this card. [ 995.418557][ T5839] em28xx 3-1:0.132: Closing input extension [ 995.599789][ T5839] em28xx 3-1:0.132: Freeing device [ 995.946486][ T5839] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 996.011899][T21134] netlink: 'syz.0.4726': attribute type 27 has an invalid length. [ 996.047794][T21137] [U] v [ 996.123623][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 996.149887][ T5839] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 996.189868][ T5839] usb 3-1: config 2 has no interface number 0 [ 996.190400][T21141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.218797][ T5839] usb 3-1: config 2 interface 31 has no altsetting 0 [ 996.236855][T21141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.255328][ T5839] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 996.281829][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.314351][ T5839] usb 3-1: Product: syz [ 996.328298][ T5839] usb 3-1: Manufacturer: syz [ 996.338133][ T5839] usb 3-1: SerialNumber: syz [ 996.565957][T21123] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 996.602681][ T5931] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 996.699521][T21148] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 996.755015][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.766200][ T7657] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 996.784156][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.794863][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 996.818551][ T5931] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 996.828065][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.851754][ T5931] usb 1-1: config 0 descriptor?? [ 996.915653][ T7657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 996.929517][ T7657] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 996.960242][ T7657] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 996.985206][ T7657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.007257][ T7657] usb 2-1: config 0 descriptor?? [ 997.009820][T21123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.024654][T21156] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4734'. [ 997.037732][T21123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.046791][T21156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 997.061269][ T5839] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 997.085802][ T5839] usb 3-1: USB disconnect, device number 61 [ 997.303161][ T5931] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 997.444965][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.459804][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.476893][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.491624][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.502922][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.517381][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.524825][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.531797][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.541469][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.550975][ T7657] isku 0003:1E7D:319C.0033: unknown main item tag 0x0 [ 997.588776][ T7657] isku 0003:1E7D:319C.0033: hidraw1: USB HID vff.fd Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 997.657625][ T7657] usb 2-1: USB disconnect, device number 28 [ 997.776970][T21168] fido_id[21168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 997.785709][T21165] fuse: Unknown parameter '' [ 998.336683][T21180] FAULT_INJECTION: forcing a failure. [ 998.336683][T21180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.359068][T21179] loop5: detected capacity change from 0 to 7 [ 998.387271][T21180] CPU: 0 UID: 0 PID: 21180 Comm: syz.3.4739 Tainted: G L syzkaller #0 PREEMPT(full) [ 998.387306][T21180] Tainted: [L]=SOFTLOCKUP [ 998.387323][T21180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 998.387335][T21180] Call Trace: [ 998.387344][T21180] [ 998.387352][T21180] dump_stack_lvl+0xe8/0x150 [ 998.387390][T21180] should_fail_ex+0x412/0x560 [ 998.387424][T21180] _copy_from_user+0x2d/0xb0 [ 998.387445][T21180] ___sys_sendmsg+0x1c6/0x360 [ 998.387468][T21180] ? __lock_acquire+0x6b5/0x2cf0 [ 998.387489][T21180] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.387524][T21180] ? __fget_files+0x2a/0x420 [ 998.387536][T21180] ? __fget_files+0x3a0/0x420 [ 998.387554][T21180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 998.387575][T21180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.387601][T21180] ? __pfx_ksys_write+0x10/0x10 [ 998.387621][T21180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.387635][T21180] do_syscall_64+0x15f/0xf80 [ 998.387653][T21180] ? trace_irq_disable+0x3b/0x140 [ 998.387670][T21180] ? clear_bhb_loop+0x40/0x90 [ 998.387685][T21180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.387697][T21180] RIP: 0033:0x7f501e39c819 [ 998.387710][T21180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.387721][T21180] RSP: 002b:00007f501c5b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.387737][T21180] RAX: ffffffffffffffda RBX: 00007f501e616180 RCX: 00007f501e39c819 [ 998.387746][T21180] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 998.387754][T21180] RBP: 00007f501c5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 998.387762][T21180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.387769][T21180] R13: 00007f501e616218 R14: 00007f501e616180 R15: 00007f501e73fa48 [ 998.387788][T21180] [ 998.390645][T21179] Dev loop5: unable to read RDB block 7 [ 998.608796][T21174] fuse: Unknown parameter '' [ 998.659414][T21179] loop5: AHDI p1 [ 998.678248][T21179] loop5: partition table partially beyond EOD, truncated [ 999.325089][T15902] usb 1-1: USB disconnect, device number 51 [ 999.993119][ T7673] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1000.169201][ T7673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.206510][ T7673] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1000.222628][ T7673] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1000.255175][ T7673] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 1000.295146][ T7673] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1000.320392][ T7673] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1000.343436][ T7673] usb 6-1: Product: syz [ 1000.358959][ T7673] usb 6-1: Manufacturer: syz [ 1000.377942][ T7673] usb 6-1: SerialNumber: syz [ 1000.407177][ T7673] usb 6-1: config 0 descriptor?? [ 1000.430082][T21197] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1000.535255][ T7673] rc_core: IR keymap rc-imon-rsc not found [ 1000.550138][ T7673] Registered IR keymap rc-empty [ 1000.562783][ T5931] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1000.564588][ T7673] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1000.588069][ T7673] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input96 [ 1000.752528][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 1000.781391][ T5931] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1000.805460][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.832020][ T5931] usb 3-1: Product: syz [ 1000.852488][ T5931] usb 3-1: Manufacturer: syz [ 1000.874368][ T5931] usb 3-1: SerialNumber: syz [ 1000.907495][ T5931] usb 3-1: config 0 descriptor?? [ 1000.937905][ T7657] usb 6-1: USB disconnect, device number 35 [ 1001.099065][T21216] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1001.334444][T21199] fuseblk: Bad value for 'source' [ 1001.491077][T21223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.512529][ T7657] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1001.533252][T21223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.559826][ T5931] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1001.562317][T21199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.578806][ T5931] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1001.578905][ T5931] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1001.619098][T21199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.620093][T21230] fuseblk: Bad value for 'source' [ 1001.653573][ T7657] usb 2-1: device descriptor read/64, error -71 [ 1001.737269][ T5931] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1001.792228][ T5931] usb 3-1: USB disconnect, device number 62 [ 1001.792556][ T5839] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1001.902774][ T7657] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1001.974325][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.007801][ T5839] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1002.041091][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.056590][ T7657] usb 2-1: device descriptor read/64, error -71 [ 1002.064306][ T5839] usb 1-1: Product: syz [ 1002.074907][ T5839] usb 1-1: Manufacturer: syz [ 1002.093020][ T5839] usb 1-1: SerialNumber: syz [ 1002.114273][ T5839] usb 1-1: config 0 descriptor?? [ 1002.141042][ T5839] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1002.172984][ T7657] usb usb2-port1: attempt power cycle [ 1002.244418][T21236] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4754'. [ 1002.517645][T21255] FAULT_INJECTION: forcing a failure. [ 1002.517645][T21255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.557469][ T7657] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1002.572828][T21255] CPU: 1 UID: 0 PID: 21255 Comm: syz.3.4758 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.572868][T21255] Tainted: [L]=SOFTLOCKUP [ 1002.572877][T21255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1002.572888][T21255] Call Trace: [ 1002.572897][T21255] [ 1002.572906][T21255] dump_stack_lvl+0xe8/0x150 [ 1002.572943][T21255] should_fail_ex+0x412/0x560 [ 1002.572976][T21255] _copy_from_user+0x2d/0xb0 [ 1002.572996][T21255] video_usercopy+0x36f/0x1450 [ 1002.573024][T21255] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1002.573048][T21255] ? __pfx___video_do_ioctl+0x10/0x10 [ 1002.573075][T21255] ? __pfx_video_usercopy+0x10/0x10 [ 1002.573110][T21255] ? __fget_files+0x2a/0x420 [ 1002.573135][T21255] ? __fget_files+0x2a/0x420 [ 1002.573152][T21255] ? __fget_files+0x3a0/0x420 [ 1002.573174][T21255] v4l2_ioctl+0x18d/0x1e0 [ 1002.573199][T21255] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1002.573221][T21255] __se_sys_ioctl+0xfc/0x170 [ 1002.573246][T21255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.573267][T21255] do_syscall_64+0x15f/0xf80 [ 1002.573295][T21255] ? trace_irq_disable+0x3b/0x140 [ 1002.573320][T21255] ? clear_bhb_loop+0x40/0x90 [ 1002.573344][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.573364][T21255] RIP: 0033:0x7f501e39c819 [ 1002.573383][T21255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.573401][T21255] RSP: 002b:00007f501c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1002.573422][T21255] RAX: ffffffffffffffda RBX: 00007f501e615fa0 RCX: 00007f501e39c819 [ 1002.573438][T21255] RDX: 0000200000000400 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1002.573450][T21255] RBP: 00007f501c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.573463][T21255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.573485][T21255] R13: 00007f501e616038 R14: 00007f501e615fa0 R15: 00007f501e73fa48 [ 1002.573517][T21255] [ 1002.798927][T21228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.831406][T21228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.864729][ T7657] usb 2-1: device descriptor read/8, error -71 [ 1003.102919][ T7657] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1003.134199][ T7657] usb 2-1: device descriptor read/8, error -71 [ 1003.163018][ T5839] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1003.172857][ T5839] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1003.207220][ T5839] usb 1-1: USB disconnect, device number 52 [ 1003.292988][ T7657] usb usb2-port1: unable to enumerate USB device [ 1003.842275][T21267] ipvlan2: entered promiscuous mode [ 1003.866769][T21267] team0: Device ipvlan2 failed to register rx_handler [ 1004.681112][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1004.702603][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1004.771659][T21292] ip6gretap0: entered promiscuous mode [ 1004.799346][T21292] syz_tun: entered promiscuous mode [ 1004.821452][T21292] debugfs: 'hsr1' already exists in 'hsr' [ 1004.837526][T21292] Cannot create hsr debugfs directory [ 1004.883136][ T5929] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1005.043039][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 1005.056739][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.077093][ T5929] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1005.098492][ T5929] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.120419][ T5929] usb 1-1: config 1 interface 2 has no altsetting 0 [ 1005.152038][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1005.171757][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.187236][ T5929] usb 1-1: Product: syz [ 1005.194954][ T5929] usb 1-1: Manufacturer: syz [ 1005.206895][ T5929] usb 1-1: SerialNumber: syz [ 1005.231866][ T5929] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1005.259510][ T5929] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1005.278978][ T5929] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 1005.311822][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1005.314851][ T5929] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1005.368049][ T5929] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1005.388684][ T5929] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 1005.427281][T21289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1005.440884][ T5929] usb 1-1: selecting invalid altsetting 0 [ 1005.467115][T21289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1005.672538][ T5929] usb 1-1: selecting invalid altsetting 0 [ 1005.893848][ T5929] usb 1-1: USB disconnect, device number 53 [ 1006.078598][T14833] udevd[14833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.183785][ T5839] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 1006.355182][ T5839] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1006.386413][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1006.418318][T21318] FAULT_INJECTION: forcing a failure. [ 1006.418318][T21318] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.438290][ T5839] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1006.465651][T21318] CPU: 1 UID: 0 PID: 21318 Comm: syz.0.4781 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.465684][T21318] Tainted: [L]=SOFTLOCKUP [ 1006.465691][T21318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1006.465702][T21318] Call Trace: [ 1006.465710][T21318] [ 1006.465718][T21318] dump_stack_lvl+0xe8/0x150 [ 1006.465756][T21318] should_fail_ex+0x412/0x560 [ 1006.465791][T21318] should_failslab+0xa8/0x100 [ 1006.465820][T21318] __kmalloc_noprof+0xe8/0x760 [ 1006.465845][T21318] ? ethnl_default_set_doit+0x16a/0xad0 [ 1006.465879][T21318] ethnl_default_set_doit+0x16a/0xad0 [ 1006.465907][T21318] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1006.465937][T21318] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1006.465977][T21318] genl_family_rcv_msg_doit+0x22a/0x330 [ 1006.466009][T21318] ? __asan_memcpy+0x40/0x70 [ 1006.466036][T21318] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1006.466081][T21318] ? bpf_lsm_capable+0x9/0x20 [ 1006.466111][T21318] ? security_capable+0x7e/0x2c0 [ 1006.466148][T21318] genl_rcv_msg+0x61c/0x7a0 [ 1006.466186][T21318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1006.466216][T21318] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1006.466246][T21318] ? __pfx_ref_tracker_free+0x10/0x10 [ 1006.466275][T21318] ? __asan_memcpy+0x40/0x70 [ 1006.466294][T21318] ? __skb_clone+0x63/0x7a0 [ 1006.466328][T21318] netlink_rcv_skb+0x232/0x4b0 [ 1006.466354][T21318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1006.466382][T21318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1006.466423][T21318] ? down_read+0x270/0x2e0 [ 1006.466445][T21318] ? genl_rcv+0xd/0x40 [ 1006.466474][T21318] genl_rcv+0x28/0x40 [ 1006.466510][T21318] netlink_unicast+0x75c/0x8e0 [ 1006.466544][T21318] netlink_sendmsg+0x813/0xb40 [ 1006.466579][T21318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.466608][T21318] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1006.466639][T21318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1006.466667][T21318] ____sys_sendmsg+0x972/0x9f0 [ 1006.466694][T21318] ? __might_fault+0xaf/0x130 [ 1006.466722][T21318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1006.466758][T21318] ? import_iovec+0x73/0xa0 [ 1006.466782][T21318] ___sys_sendmsg+0x2a5/0x360 [ 1006.466807][T21318] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.466839][T21318] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.466901][T21318] ? __fget_files+0x2a/0x420 [ 1006.466922][T21318] ? __fget_files+0x3a0/0x420 [ 1006.466952][T21318] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1006.466982][T21318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1006.467019][T21318] ? __pfx_ksys_write+0x10/0x10 [ 1006.467062][T21318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.467087][T21318] do_syscall_64+0x15f/0xf80 [ 1006.467118][T21318] ? trace_irq_disable+0x3b/0x140 [ 1006.467147][T21318] ? clear_bhb_loop+0x40/0x90 [ 1006.467174][T21318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.467195][T21318] RIP: 0033:0x7fddb2b9c819 [ 1006.467216][T21318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.467235][T21318] RSP: 002b:00007fddb3a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.467257][T21318] RAX: ffffffffffffffda RBX: 00007fddb2e15fa0 RCX: 00007fddb2b9c819 [ 1006.467273][T21318] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1006.467287][T21318] RBP: 00007fddb3a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.467300][T21318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.467313][T21318] R13: 00007fddb2e16038 R14: 00007fddb2e15fa0 R15: 00007fddb2f3fa48 [ 1006.467347][T21318] [ 1006.468152][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1006.845851][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1006.866658][ T5839] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1006.877610][T21320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.894862][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1006.911245][ T5839] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1006.926056][T21320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.939087][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1006.969697][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1007.000890][ T5839] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1007.019995][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1007.047657][ T5839] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1007.069097][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1007.122950][ T5839] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1007.157972][ T5839] usb 3-1: string descriptor 0 read error: -22 [ 1007.178594][ T5839] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1007.215056][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.238826][ T5839] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1008.684718][T21357] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1008.788691][T21357] bond1: (slave lo): Enslaving as an active interface with an up link [ 1008.823740][T21360] xt_hashlimit: size too large, truncated to 1048576 [ 1008.834463][T21357] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1009.487182][T21367] IPVS: set_ctl: invalid protocol: 145 224.0.0.2:20002 [ 1009.812586][ T5915] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1009.929209][T21367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4795'. [ 1009.997496][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.040551][ T5915] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1010.067898][ T5915] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1010.092593][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.138598][ T5915] usb 6-1: config 0 descriptor?? [ 1010.726810][T21384] bridge0: port 3(hsr0) entered blocking state [ 1010.737381][T21384] bridge0: port 3(hsr0) entered disabled state [ 1010.776726][T21384] hsr0: entered allmulticast mode [ 1010.787842][T21384] hsr_slave_0: entered allmulticast mode [ 1010.795085][T21384] hsr_slave_1: entered allmulticast mode [ 1010.806134][T21384] hsr0: entered promiscuous mode [ 1010.820024][T21384] bridge0: port 3(hsr0) entered blocking state [ 1010.826443][T21384] bridge0: port 3(hsr0) entered forwarding state [ 1011.031635][T21393] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1011.581200][T21404] kAFS: unable to lookup cell '' [ 1011.684512][ C0] [ 1011.686885][ C0] ============================================ [ 1011.693068][ C0] WARNING: possible recursive locking detected [ 1011.699248][ C0] syzkaller #0 Tainted: G L [ 1011.705262][ C0] -------------------------------------------- [ 1011.711608][ C0] syz.3.4810/21403 is trying to acquire lock: [ 1011.717673][ C0] ffff88807be24fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1011.726731][ C0] [ 1011.726731][ C0] but task is already holding lock: [ 1011.734108][ C0] ffff888082dc8fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1011.744474][ C0] [ 1011.744474][ C0] other info that might help us debug this: [ 1011.752552][ C0] Possible unsafe locking scenario: [ 1011.752552][ C0] [ 1011.760007][ C0] CPU0 [ 1011.763376][ C0] ---- [ 1011.766666][ C0] lock(&hsr->seqnr_lock); [ 1011.771268][ C0] lock(&hsr->seqnr_lock); [ 1011.775773][ C0] [ 1011.775773][ C0] *** DEADLOCK *** [ 1011.775773][ C0] [ 1011.783927][ C0] May be due to missing lock nesting notation [ 1011.783927][ C0] [ 1011.792330][ C0] 9 locks held by syz.3.4810/21403: [ 1011.797620][ C0] #0: ffff88808f807470 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e2/0xd60 [ 1011.807381][ C0] #1: ffffc90000007cc0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 1011.817396][ C0] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1011.826546][ C0] #3: ffff888082dc8fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1011.837454][ C0] #4: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 1011.846965][ C0] #5: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1011.856918][ C0] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 1011.866161][ C0] #7: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1011.876097][ C0] #8: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1011.885341][ C0] [ 1011.885341][ C0] stack backtrace: [ 1011.891240][ C0] CPU: 0 UID: 0 PID: 21403 Comm: syz.3.4810 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.891262][ C0] Tainted: [L]=SOFTLOCKUP [ 1011.891268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1011.891277][ C0] Call Trace: [ 1011.891285][ C0] [ 1011.891292][ C0] dump_stack_lvl+0xe8/0x150 [ 1011.891317][ C0] print_deadlock_bug+0x279/0x290 [ 1011.891335][ C0] __lock_acquire+0x253f/0x2cf0 [ 1011.891359][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1011.891381][ C0] ? skb_network_protocol+0x234/0x400 [ 1011.891401][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1011.891416][ C0] lock_acquire+0x106/0x350 [ 1011.891437][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1011.891455][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1011.891473][ C0] ? lock_acquire+0x106/0x350 [ 1011.891493][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1011.891508][ C0] _raw_spin_lock_bh+0x36/0x50 [ 1011.891528][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1011.891544][ C0] hsr_dev_xmit+0x237/0x360 [ 1011.891560][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 1011.891576][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1011.891600][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1011.891623][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1011.891643][ C0] ? ebt_do_table+0x2665/0x2830 [ 1011.891663][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1011.891684][ C0] ? ebt_do_table+0x2665/0x2830 [ 1011.891704][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1011.891730][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 1011.891747][ C0] ? lock_acquire+0x106/0x350 [ 1011.891770][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 1011.891787][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1011.891804][ C0] NF_HOOK+0x360/0x3f0 [ 1011.891821][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1011.891835][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1011.891851][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1011.891867][ C0] ? lock_acquire+0x106/0x350 [ 1011.891890][ C0] br_forward_finish+0xd3/0x130 [ 1011.891905][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1011.891921][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1011.891937][ C0] NF_HOOK+0x360/0x3f0 [ 1011.891953][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1011.891968][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1011.891984][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1011.892001][ C0] ? br_handle_vlan+0x3e7/0x530 [ 1011.892024][ C0] __br_forward+0x397/0x540 [ 1011.892039][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1011.892056][ C0] br_flood+0x6ee/0xb80 [ 1011.892076][ C0] ? br_dev_xmit+0x193/0x1990 [ 1011.892095][ C0] br_dev_xmit+0x12bd/0x1990 [ 1011.892115][ C0] ? br_dev_xmit+0x193/0x1990 [ 1011.892136][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 1011.892158][ C0] ? netif_device_attach+0x41/0x1b0 [ 1011.892180][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1011.892203][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1011.892228][ C0] ? handle_softirqs+0x22a/0x840 [ 1011.892249][ C0] ? __wake_up_common_lock+0x190/0x1f0 [ 1011.892268][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1011.892286][ C0] ? do_syscall_64+0x15f/0xf80 [ 1011.892311][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1011.892333][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 1011.892352][ C0] ? __asan_memcpy+0x40/0x70 [ 1011.892369][ C0] ? __skb_clone+0x63/0x7a0 [ 1011.892394][ C0] ? __skb_clone+0x483/0x7a0 [ 1011.892416][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1011.892435][ C0] ? skb_clone+0x246/0x3a0 [ 1011.892455][ C0] hsr_forward_skb+0x167e/0x2a80 [ 1011.892478][ C0] ? hsr_forward_skb+0xbb/0x2a80 [ 1011.892497][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1011.892515][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1011.892533][ C0] ? __asan_memset+0x22/0x50 [ 1011.892548][ C0] ? __skb_pad+0x405/0x610 [ 1011.892568][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 1011.892590][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1011.892608][ C0] hsr_announce+0x1db/0x370 [ 1011.892624][ C0] ? hsr_announce+0x89/0x370 [ 1011.892640][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1011.892655][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1011.892675][ C0] call_timer_fn+0x192/0x5e0 [ 1011.892690][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1011.892705][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1011.892719][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1011.892735][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1011.892754][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1011.892770][ C0] __run_timer_base+0x652/0x8b0 [ 1011.892790][ C0] ? ktime_get+0x45/0x220 [ 1011.892820][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1011.892844][ C0] run_timer_softirq+0xb7/0x170 [ 1011.892865][ C0] handle_softirqs+0x22a/0x840 [ 1011.892886][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1011.892908][ C0] __irq_exit_rcu+0xca/0x220 [ 1011.892929][ C0] irq_exit_rcu+0x9/0x30 [ 1011.892947][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1011.892968][ C0] [ 1011.892974][ C0] [ 1011.892980][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1011.892997][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1011.893018][ C0] Code: f7 e8 8d 74 e8 f5 f7 c3 00 02 00 00 74 05 e8 60 fd 13 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 f6 d9 f5 65 8b 05 1d 33 86 07 85 c0 74 18 5b 41 5e e9 41 48 [ 1011.893031][ C0] RSP: 0018:ffffc9000d1df688 EFLAGS: 00000206 [ 1011.893046][ C0] RAX: 0000000000000006 RBX: 0000000000000286 RCX: 0000000080000001 [ 1011.893057][ C0] RDX: 0000000000000006 RSI: ffffffff8dfd403e RDI: 0000000000000001 [ 1011.893067][ C0] RBP: 0000000000000000 R08: ffffffff903353f7 R09: 1ffffffff2066a7e [ 1011.893077][ C0] R10: dffffc0000000000 R11: fffffbfff2066a7f R12: 0000000000000001 [ 1011.893087][ C0] R13: ffff88808f8075c0 R14: ffff88808f807580 R15: ffff88808f8075c0 [ 1011.893104][ C0] __wake_up_common_lock+0x190/0x1f0 [ 1011.893125][ C0] __unix_dgram_recvmsg+0x485/0xd60 [ 1011.893149][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1011.893170][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1011.893191][ C0] ? unix_dgram_recvmsg+0xae/0xd0 [ 1011.893211][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1011.893225][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 1011.893240][ C0] ____sys_recvmsg+0x3e3/0x4a0 [ 1011.893258][ C0] ? __import_iovec+0x40e/0x7e0 [ 1011.893275][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1011.893305][ C0] ? import_iovec+0x73/0xa0 [ 1011.893319][ C0] ___sys_recvmsg+0x215/0x590 [ 1011.893339][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1011.893368][ C0] do_recvmmsg+0x334/0x800 [ 1011.893388][ C0] ? cgroup1_freezing+0x20/0x350 [ 1011.893404][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1011.893431][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1011.893451][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1011.893473][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.893488][ C0] do_syscall_64+0x15f/0xf80 [ 1011.893509][ C0] ? trace_irq_disable+0x3b/0x140 [ 1011.893527][ C0] ? clear_bhb_loop+0x40/0x90 [ 1011.893543][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.893558][ C0] RIP: 0033:0x7f501e39c819 [ 1011.893572][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.893584][ C0] RSP: 002b:00007f501c5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1011.893599][ C0] RAX: ffffffffffffffda RBX: 00007f501e616090 RCX: 00007f501e39c819 [ 1011.893610][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1011.893619][ C0] RBP: 00007f501e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1011.893629][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1011.893638][ C0] R13: 00007f501e616128 R14: 00007f501e616090 R15: 00007f501e73fa48 [ 1011.893654][ C0] [ 1012.745484][ T7673] usb 6-1: USB disconnect, device number 36 [ 1012.914226][ T5915] usb 3-1: USB disconnect, device number 63