last executing test programs: 11m42.321560247s ago: executing program 1 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x18da, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a}, &(0x7f0000000100), &(0x7f0000ffe000)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth0_virt_wifi\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x5, 0x6}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x88a8, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 11m38.180644755s ago: executing program 1 (id=1827): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000800)='\xe3C\x93O\ak\x01\xfe\x90~;\x81O\xad\xa3\x02\xe5xkkheU&\x1b\x15\x95~\x10\xb1`_l\xde\xb3\x1b/\xd5H\xc8\xb7?F\xe0\x01\xc6\f=\xbd\x1f\xf9\xaf\xcd\xddz\xb7\xf7\xce\f/w\xd4\x1cF\x8bD\x87\xfd\xb5\xe9_\xe2\xa6\x1b\xa51\x96C|\x14\x8e\n\x9eq\xd2\xf6\xa06\xb25\x84\x04i\xc5\x84,d\xe0=\xa0\x10\xd4\x80=\xe6', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback={0xe0}}, 0x1c) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(!\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000680)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0) read(r0, 0x0, 0x0) close(r0) 11m37.988120368s ago: executing program 1 (id=1829): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x40480e0}, 0x20008014) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) syz_clone(0x8200e411, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) keyctl$clear(0x5, 0xfffffffffffffffd) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000003f80)=""/4112, 0x100a}], 0x0, 0x7ffa, 0x1876) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x2000000000000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 11m37.074301181s ago: executing program 1 (id=1832): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000050000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) 11m36.998389235s ago: executing program 1 (id=1834): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000105082, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfb, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0xfff0, &(0x7f0000000240)=[{&(0x7f00000006c0)}, {0x0}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e", 0x25}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c40)}, {&(0x7f0000000f40)="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", 0xfe}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000000000)="72c3601c0d4c68b19b09b44bf7b472188c1c563845687292e22d182943e6c6", 0x1f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)}], 0x1}}], 0x3, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x8, 0x5c}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 11m36.082400445s ago: executing program 1 (id=1839): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000380)="cb9e6be62a5d7cd32f62fc7178f942b0caa65e9aeb0fce4b9410971b13f0881975a4e94d790ee1ceb433b65bb6d29598d768341117526a8202b6aac2d28fc5eb5dce51c9bed093889cd6282d192b99fc720570e8fac1329d7fcbaf2b472d03499850788617f4ed3e46a726c7ab3b7cec3459113d0a9f435f560537adca8d92cee7c61b643a8119230c8821e207d01d3b6c64ed8410abc11b07c1c25934b557", 0x9f) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000001000"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000001000"}) r4 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x3}, [@RTA_UID={0x8}, @RTA_IIF={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) dup3(r1, r2, 0x80000) write$char_usb(r2, 0x0, 0x0) (async) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) socket$netlink(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(0x0, 0x8, 0x2) (async) r8 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock2(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x1) 11m20.91109371s ago: executing program 32 (id=1839): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000380)="cb9e6be62a5d7cd32f62fc7178f942b0caa65e9aeb0fce4b9410971b13f0881975a4e94d790ee1ceb433b65bb6d29598d768341117526a8202b6aac2d28fc5eb5dce51c9bed093889cd6282d192b99fc720570e8fac1329d7fcbaf2b472d03499850788617f4ed3e46a726c7ab3b7cec3459113d0a9f435f560537adca8d92cee7c61b643a8119230c8821e207d01d3b6c64ed8410abc11b07c1c25934b557", 0x9f) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000001000"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000001000"}) r4 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x3}, [@RTA_UID={0x8}, @RTA_IIF={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) dup3(r1, r2, 0x80000) write$char_usb(r2, 0x0, 0x0) (async) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) socket$netlink(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(0x0, 0x8, 0x2) (async) r8 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock2(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x1) 9m47.284787742s ago: executing program 0 (id=2218): r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086201, &(0x7f0000000140)=0x1) r7 = getpgrp(0xffffffffffffffff) sched_setattr(r7, &(0x7f0000000080)={0x38, 0x0, 0x21, 0xffffffff, 0x1d, 0xfffffffffffffffc, 0x4c, 0x1, 0x900000, 0x7}, 0x0) dup3(r1, r0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x2c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x40, 0xe7}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x4004804) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048804) r13 = socket$kcm(0x10, 0x400000002, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r16, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtaction={0x22bc, 0x30, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [{0x10f8, 0x1, [@m_csum={0x10f4, 0x15, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x40, 0x6, 0xe, 0xbdc00000}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x9, 0x6, 0x19, 0x400}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x2, 0x6, 0x3, 0x53f}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x1, 0x2, 0x3}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x4, 0x53, 0xc889}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x9, 0x0, 0x6, 0x6}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xc0000000, 0x3, 0xc00, 0x2}, 0x5}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x11b0, 0x1, [@m_skbmod={0x1090, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x400, 0x10000000, 0xaf9, 0xfffffffa}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x582, 0x8f, 0x10000000, 0x8, 0x80}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x11c, 0xe, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "54b56742d9627d9feb4a2a89a74998f7"}, @TCA_CT_ZONE={0x6}]}, {0xb4, 0x6, "b99ead35d4ed7a52010de6a8cc0ea19ee41395e68cf69ff3a96bea5108fad50ab975513b8d57f5210008202282c8a2d82abb77b647d36372fd12577cb3e4b463138804fd6f8cb3f300d4e8f70b06cc94f3a4371ad00f9e5ab51c85908972aa13ada2fe216718f99709b9f74ab02ec18579c24f02e815d40791d5b36d8dc4e675a6205d97101afd288b22e3a1a0633fe5f07d12d1240b417a7c3f733cf82d7bbdc39abcfc25b83d197d964d1dff0f5c80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}]}, 0x22bc}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) recvfrom(r13, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendmsg$inet(r13, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 9m45.727681859s ago: executing program 0 (id=2222): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x42, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) sched_getattr(r2, &(0x7f00000000c0)={0x38}, 0x38, 0x0) close(r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a00010126bd70000000000002002000", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x299000, 0x28c000, 0x8}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x7101}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/4096) 9m40.514373506s ago: executing program 0 (id=2237): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 9m38.866439531s ago: executing program 0 (id=2248): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f00000000c0)=0x50000000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0xb000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x80000003}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r8, r8, r8}, &(0x7f0000000080)=""/44, 0x2c, &(0x7f0000002380)={&(0x7f0000000280)={'sha3-256\x00'}}) move_mount(r6, 0x0, r0, 0x0, 0x46) 9m38.579155982s ago: executing program 0 (id=2252): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x0, 0x0, {}, {0x4, 0x2}, {0x4000000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x3, 0xc, {0xc, 0x5, "d997c9fe3f74532f8676"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0xe, 0xaa, "8dc43a17c8a72530cc6582f507e3870be4bda633673ce05b1ad931ec4678b9200bf9b96e1162fb8a2beaf580c36949785fbe4df4ea21f93640ce6fbb8f1c0aeb6a0d73c9dad776244846ce96b6e4327ef5e4674e5478125f0cafb13cfb8de1f255c20a159be1aa9e887ab2ccdcccb6c64c578c83f3634e02dc856651c40777eea828b123e2c95daf6ca63a0ec8a0b8cddfc2722d019f9318f8bad3348c1f05cc84fc9e03d52d6fe9d398"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0xd13, 0x0, 0x2, 0x800, 0x9, 0x6, 0x4ad, 0x300000, 0x7ff, 0x7fff, 0x0, 0x2}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x19}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x8}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, &(0x7f0000000580)) 9m37.857929447s ago: executing program 0 (id=2256): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x3, 0x30}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r2, 0x7c7b912c}, &(0x7f0000000340)=0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5a5, 0xfffffffffffffffb) keyctl$update(0x2, r6, &(0x7f0000000000)="11868a0fceae284c00000001000000", 0xf) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) syz_emit_ethernet(0xfdef, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x3, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}, @ra={0x5, 0x2, 0x4}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 9m36.883835488s ago: executing program 33 (id=2256): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x3, 0x30}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r2, 0x7c7b912c}, &(0x7f0000000340)=0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5a5, 0xfffffffffffffffb) keyctl$update(0x2, r6, &(0x7f0000000000)="11868a0fceae284c00000001000000", 0xf) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) syz_emit_ethernet(0xfdef, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x3, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}, @ra={0x5, 0x2, 0x4}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 8.558388981s ago: executing program 2 (id=4122): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x2e9aa845) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LABEL={0x14}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 8.2812795s ago: executing program 2 (id=4123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x18da, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a}, &(0x7f0000000100), &(0x7f0000ffe000)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth0_virt_wifi\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x5, 0x6}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x8847, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 7.61630773s ago: executing program 5 (id=4125): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) syz_usb_connect(0x4, 0x64, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32], 0x0) 7.001213289s ago: executing program 6 (id=4128): socket$netlink(0x10, 0x3, 0x14) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r1 = epoll_create(0x2) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x8, 0x40000000, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) rmdir(0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000040)={0x36, 0x7, 0x4, 0x9, 0x1, 0x80}) tkill(r4, 0x7) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000005c0)={0x10}) openat$nci(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x4, &(0x7f0000000080)={[0x9]}, 0x8) 6.807507522s ago: executing program 5 (id=4129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000a14000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}}, 0x840) 6.666035031s ago: executing program 6 (id=4131): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="1bb1", 0x2}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 6.565388368s ago: executing program 2 (id=4132): sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r1, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2089) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x1000000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001002abd70100000000000000000", @ANYRES32=0x0, @ANYBLOB="8821040000000000140003006e657464657673696d30000000000100"], 0x34}}, 0x0) 6.511210817s ago: executing program 5 (id=4134): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x16, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4040054}, 0x24000050) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r7, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 6.27708097s ago: executing program 6 (id=4135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) 6.245015207s ago: executing program 2 (id=4136): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x41, 0xa7, 0x38, 0x10, 0xd49, 0x7000, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x8, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0xc6, 0x9, 0x0, 0x91, 0xb0, 0x9b, 0xf6, [@uac_control={{0xa, 0x24, 0x1, 0x53, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3c}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x9], 0x4}]}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 5.188633016s ago: executing program 6 (id=4137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semget$private(0x0, 0x6, 0x3b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b640), 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10a000, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, &(0x7f0000000080), 0x10) 4.080730897s ago: executing program 4 (id=4138): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe2(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0xb6a0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0xcc, 0x1, 0x4, 0x0, 0x1, 0x41, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0xfe, 0xd, 0x85}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.774337082s ago: executing program 4 (id=4140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6400000002060108000000f0ffffffffffffff09140007800800114000000000050015000c7facd5050005000a000000050001000700000005000400000000000900020073797a320000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) 2.665311419s ago: executing program 2 (id=4141): socket$netlink(0x10, 0x3, 0x14) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r1 = epoll_create(0x2) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x8, 0x40000000, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) rmdir(0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000040)={0x36, 0x7, 0x4, 0x9, 0x1, 0x80}) tkill(r4, 0x7) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000005c0)={0x10}) openat$nci(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x4, &(0x7f0000000080)={[0x9]}, 0x8) 2.557908078s ago: executing program 3 (id=4142): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x20, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.481886794s ago: executing program 4 (id=4143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5dd) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x5, 0x51}]}, 0xc, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x70d) 2.4808343s ago: executing program 5 (id=4144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000500"/20, @ANYRES32=0x0, @ANYBLOB="adffa88821000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) 2.367857649s ago: executing program 2 (id=4145): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'team_slave_0\x00'}}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0xffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4c7b, &(0x7f0000000140)={0x0, 0xf8cb, 0x40, 0x2, 0x2b0, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) syz_open_dev$dri(&(0x7f0000000240), 0x9, 0x22000) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x891}, 0x4008000) r3 = fsopen(&(0x7f00000003c0)='sysv\x00', 0x0) r4 = fsmount(r3, 0x0, 0xf) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000400)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000000480)={0x28, 0x10000, r5, r6, 0x17d8fb, 0x6, 0x7, 0x89e3d}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000000780)=""/25, 0x27, 0x19, 0x0, 0x1, 0x10000, @value=r4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x22, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0xe86a, 0xeb, &(0x7f0000000640)=""/235, 0x40f00, 0xa, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xe, 0xffffff7c, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r4], &(0x7f00000008c0)=[{0x2, 0x2, 0x2, 0xc}], 0x10, 0xde}, 0x94) socket$inet6(0xa, 0x80000, 0x1) r8 = accept4$tipc(0xffffffffffffffff, &(0x7f00000009c0)=@id, &(0x7f0000000a00)=0x10, 0x0) connect$tipc(r8, &(0x7f0000000a40)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000b00)={0x0, @qipcrtr={0x2a, 0x3}, @phonet={0x23, 0x2, 0xe, 0x4}, @ethernet={0x60c, @random="07076cb5715b"}, 0x5, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)='veth1_to_hsr\x00', 0x1, 0x0, 0xffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x210, 0x70bd29, 0x25dfdbfc, 0x80, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008801}, 0x20000002) r9 = add_key$user(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)="331a2ce9dd4ab56f0736eddaf7e33817d1a74cd28a47ef57915eb591a989290c9d2ab49540f7a01e75875120c7099addc0cf2dcdd822b3aaa2414f1c007cf4cd705eb38a7f18d9e08b4106a8ffad281be57dbf526fb8af65146ebb833147c1066cee476d3be2c5d204bdd6b4c8b82e12969b769526af31f93d", 0x79, 0xfffffffffffffffa) r10 = add_key$user(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x2}, &(0x7f0000000e00)="5aa994b97304b14a7d15df77aa27f567b8ecccae587f7dc0fb5687e508802433da6266c5a733b162e6d5b48eb924d164b8023fa51d2e9de753789e1d21dae4229283fddd3613a6ec78b68f797358e81b6761bb2c477dda60bcc668329ba36c4a9cbfd35df69fa3f7d867607a9a3e9c8ee42d4ebca43402f03e8e787e71a63d05fa39aac1041a15cd29f4cbcee9b78eadeeaadca9e31c7a4f20f4eb444959630992ea4d9412b2b332", 0xa8, 0xfffffffffffffff9) r11 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, &(0x7f0000000f40)="5909ab9c2c3466e893b09a3eb5202739038a63ec2ab8b07c7e8020e9ddb0a738381267f6da8d764803fc6089341763f5", 0x30, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000f80)={r9, r10, r11}, &(0x7f0000000fc0)=""/23, 0x17, &(0x7f0000001140)={&(0x7f0000001000)={'sha256\x00'}, &(0x7f0000001040)="72274ac13b5596195e5fe0b0cdb268a28b956b2e94361e156631af8fecbceb4eb45ec0b90e454b7c5765d45f84b39b84a4cdf3c137bef7533dbd6043a07e746ef565cfa1bf64138b5e1d6c3896dcf0db6f337bd26ce033320a5d98765d0612441a7ebca2db1266b7ffcc1ebfae3dce7da2ad88ee09c4031df41f759cc86d401070eff8c8111ca8659227634603b3a3ec2be74cb51a04388da0b483adbb852394010f752e0d7fbd5d26e611c044ad11cb76fccdc2c717bc00e80aeaef0019d0f337f1293778744ee7118bd400b7", 0xcd}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x1b, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0xc, {0x9, 0x21, 0x40, 0x46, 0x1, {0x22, 0xfe2}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x6, 0x6, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x45, 0x5, 0x13}}]}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x200, 0xd6, 0x3, 0x1, 0xff, 0x10}, 0x5, &(0x7f0000001200)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x140c}}, {0x46, &(0x7f0000001280)=@string={0x46, 0x3, "b661faadc014b02ee736a3f95247e4044ead30b443d51c85e2d16a5fba26843f9deead7f26fb632020bc8148c727999ff09991b1ce4baed6b5c698e4354b4258e6147bc2"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0xc01}}, {0x93, &(0x7f0000001340)=@string={0x93, 0x3, "7ed98a2cc69cf0e050e94ec624d1c9a6a558ab472834e9f0e70f75408623da7c7794b00ad41f9b5b2c25e22c5b750f3328ede0d682a97e43c1b437eb26b3a00cb1a5d0ce0eea976262d5cdc5bd6b802fc7016114ffe0d1d0d2794529b3f03ba3bfb721958e96408bb401608ec30463f502dafeb9b9f9c3547fd27189c9c5701978b2f7ac1ee143979fe94d8466e09b38a8"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x44e}}, {0x39, &(0x7f0000001440)=@string={0x39, 0x3, "06cae90eec2705a10b7a44b0adf1d4cf3868f5425ddc9bd65fd15aaa999f21af3c7fe0803fce76c50e381e321c677e1394d5c17a60d7ba"}}, {0xe5, &(0x7f0000001480)=@string={0xe5, 0x3, "b4fb40d87da4d4a441e27900143626c881dfcefa50c569d4218efa5d95cec36a24727d34d8f4a53b3a21f831242760d954ea79d538b61ccd9534f48f64543da463fea5d4eab8d2d81cd4652b05855ad001a85322525299d74a395cc7c7d507a5451b26fcfc4ead015c5f66552569bb0a17c16b761d3ca8496eef933c11a17b9f23e89eb650962e9ee598bbc7a73cbc2e418b5dffa48c5a9d7e032b779b8825861c19047b6d9c23a439ac27414f6909dd4eb4d8fef0d1ecb2fd1c0831c702c4f97c86f612cc5d9535a2e1f606ee4c1284f23aeddad9be8c9a165d82e1a1c39ff7bf160a"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x422}}]}) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00000016c0)=0x7, 0x4) 1.929617294s ago: executing program 6 (id=4146): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="1bb1", 0x2}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 1.862162304s ago: executing program 4 (id=4147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020301021000000000000000050000030800010001000025080003400d0007ff0800044000fc002008000540"], 0x34}, 0x1, 0x0, 0x0, 0x4014004}, 0x0) 1.83878011s ago: executing program 5 (id=4148): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5}, 0x8) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0xc, 0xb21, 0x1ff, 0x80080}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) r5 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x84008, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=\x00,\x00'], 0x1, 0x0, 0x0) mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x4) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @private0={0xfc, 0x0, '\x00', 0x2}, 0x8, 0x7, 0x1}}) 1.798167815s ago: executing program 4 (id=4149): add_key$fscrypt_provisioning(&(0x7f0000002300), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x11, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d0338ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x8000000000000001]}}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x11, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d0338ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x8000000000000001]}}) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 1.653505557s ago: executing program 6 (id=4150): syz_emit_ethernet(0x3a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0x10, 0x80000, 0x3) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './cgroup\x00'}) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x160, 0x15, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x88, 0x8, "9c5e4abc5b24f3bac4ddba180e952b0c9499706f30ea60e887b7cefeceae9e70aa864f2d2572daba666f2befcc49ed84d63a4da720246697da5c8eb33e9c8138216bc525deec094b2b098efe7c8a240b374380bd10f309bc5c608bc798511239824c0ef07ebe6ab52878050af0eb64548e13949ed15119820c5d3930d612f44ac9104be8"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x67, 0x8, "cae0a8eda9255a86a7b92c13ab098a9250dfb7a7e3f3b9b567ccbf3e5cb8725c69c995b97e31737f9a60698bc5dae6b23df1b87e1ac8485a6d594d29da056652ec64e8df40467f81c1d4fd114a15c61fbbf3b57ac8910fe275f3bbcc3865458ceefba0"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x4, 0x3bd, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xf6, 0x5c, 0xdf, 0x8, 0x3155, 0x8ec0, 0x3c80, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ab, 0x1, 0x0, 0x5, 0xa0, 0xa, [{{0x9, 0x4, 0x9d, 0x2, 0xd, 0x2, 0xa, 0x0, 0x8, [], [{{0x9, 0x5, 0x5, 0x3, 0x400, 0x8, 0x10, 0xb0, [@generic={0x58, 0x30, "098ca24f2fd366d11c0dd49673be05a83bb17ccc2e4c60fd703969b3e7071be516a07e6ab4bfcad86b20e85f29a909091afda077b9f9a0966c7569d8e4b088c8908c670ac223304514ec993d6e9766870227bb767712"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xff68}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x40, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x536}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x95}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x9, 0x0, [@generic={0x9b, 0x3, "5ee785a235bca277fe06e25042680d7b257eb46015880bc744698d23947a43f07ede4856f4295dbd17cfb3697f7327294e6d70639e669892934e3b589a7f50bcc7361e7a0b34a189b2e89edb4c4e0f19635a675a65c66c7c06d6ddbcfe473870972b7f48965ae860a05ffe841f1973494a5cad74fdc5a7901956bcb513a48ff05671a0838a262bd1a4a4eee58102e8d0d357ddaf76876c349d"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x5, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1, 0x8, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xa53}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0xdf, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x4}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7f, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x4, 0x6, 0x7, [@generic={0xc1, 0x22, "358c829ea853181af1dd315732277c59ab4e91f772235218a33a28f9bc4b1de0f3a37f5edcdeb50846c82e0115915d89d7fd4dd786899cc490442147ef74eb0c5ab2a2e914c5cd272cc5caa22e2e6700ae6987252ae73102d2a77a128685f7f4ec889bed04e1302cf53f639cf6c6635b3d6dfda71927c0a59cdb266edcbc8422d3674943b031de57e70f69e881d308bf9cdc01065215f03ae333ec7a0bb87ed82061cf6da2cd95ae31d5d3205de127fb5920a1ef2c2754319b346f4144e4bb"}, @generic={0xdb, 0x10, "1094832d202bfb8091bc19e5436fdfebbf95a2006953403d22ba4497100f6b7cffba6fea032c6203d1802d97d7593ed5530a9bf185be6f71b734adf152889a42de3a34c8d0695a39a42070e51d1ef90fe0510f573d8cd4b12f424a2add45813db5730b948ec028c824b7d0607da5154e4d33c510c45cfdf1fde8d6826df0f9d2e7213eb91f0d960405621767b58da3b62498cd4854c859ff0ca49c4e092813b70559b057f199f2b995cb0fb4fdd5dedb985d861b8b45989745c3fe5307da29f83aee78aab2fabf6e2dbaa37e6e991e64038b1dc72e789dd2e8"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x80, 0x4, 0x6, [@generic={0x33, 0x8, "e59a70c7a112fdae3bf2cbfa56269103bb1f40bf9547fccb773ce7cff677e1b83ab7144c835efc9e750b06acfa15312bbf"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xfd, 0x9, 0xb}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x5, 0x3}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x2, 0x5, 0x6}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x1, 0x7, 0x3, [@generic={0x23, 0x21, "94c02d7a2b5b3f82aa133cb7d3ac394a6d91db8be722608b88311ca2216f4311d6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x67, 0x5e}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x5, 0x61, 0x1, 0x40, 0xbc}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x9, [{0xdf, &(0x7f0000000640)=@string={0xdf, 0x3, "637c386b8af877edcebd6fd4b3edfd97a7a4b0e54d4b44a66bd279e70a4fa74f2fb64b77a92e8adfcc5be49fcd8c93e2e6ab18541345b257342b0968804da87a2324f7f109cc45a5da8d7a59f53c693b3edc2d917891cd07cca320962f1acd3f3dcf3eeffb3540d143590d21fff45a1f77682964dc4dcf1ec19630d2089937ce4b3ed84b1991eab29799760d7490c95f02cc1425aad6ffc389aa7803d50917870fb75907b04f2e74f6f48513d9416a2f9f67d4116a3c04dc8b7d99c813a62ad81be7714fe42f0ea00a45c57ec6d3635e0fc7392ecd302beb2fe147121a"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x41b}}, {0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="2303421da00f7fb82163ef473175c6cc1e0a6138dd86cd21b2f0e12d6fa0501394a3bd"]}, {0x9, &(0x7f00000007c0)=@string={0x9, 0x3, "069504dc27ea65"}}, {0xaf, &(0x7f0000000c80)=@string={0xaf, 0x3, "3bde6ed2510022c56cde5dea1d2d249d4dfb149d140fbf118223ac3b3c2bccd79ad9c6243da794542f4e4fb2cc3b4a6ba7ef03f1144a8c20d333e3d5c79bcb6c90357936fbff823ba8a5ce5f60c47ead5b5a4e4467509e396eb4fb01e13ae67484cd1f32a83064ac1d8df03928da863ae9562651212857fa03c1d4d28cd82a7f271e009f3b22607318a9721fe589fedc6bb3e555b144c5955e4f095fd843ea07e50ef1f9ff636eff17bfddb77c"}}, {0x5d, &(0x7f0000000d40)=@string={0x5d, 0x3, "2a8ee7ccbfe04293c8e092fa25c531bb05489bfaaa6408b4f4ec98657d1597571ac1f5928ea8828c26ce03054678b1613df9e47da372f179184619c5fb9a776e625908d4516cb5a0bdf23403e6cf9822882fac8e15149cc0114b17"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xc04}}]}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r4, 0x40045109, &(0x7f0000000540)=0x401) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480140035"], 0x38}, 0x1, 0x300}, 0x20008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8674cf6c944f45b044227", @ANYRES16=r5, @ANYBLOB="0100000000000000000054000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_NONBLOCK(r8, 0x500e, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) 1.61016349s ago: executing program 4 (id=4151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0x6, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 1.220701123s ago: executing program 3 (id=4152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) 1.037569641s ago: executing program 3 (id=4153): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000003840)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x2, 0x8, {@mac=@random="a0423ecebbbc", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x800, 0x5, 0x4, 0x7, 0x10, 'erspan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0x70d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @multicast1, 0xff000000, 0x0, 0x1, 0x0, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x7, 0xfffb, 0x1, 0x3, 0x5, 0x6, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="59a2f242dbf9", @mac=@random="6480059adaaa", @multicast1, @multicast2, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xde4, 0xd, 0x2}}}], {{'\x00', 0xc0, 0xe8, 0x0, {0x11e}}, {0x28}}}}, 0x440) 597.842223ms ago: executing program 3 (id=4154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2}, &(0x7f00000005c0)=""/90, 0x5a, 0x0) r3 = io_uring_setup(0xc90, &(0x7f00000002c0)) r4 = io_uring_setup(0x5a8, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x0, 0x169}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000001580)=[{0x4, 0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000500), 0x0, 0x0, 0x19, 0xfffffffffffffffb) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x1) readv(r9, &(0x7f0000000300)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1) sendfile(r9, r10, 0x0, 0xd) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x12, &(0x7f0000000040)=0x2a7c, 0x4) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 218.247803ms ago: executing program 3 (id=4155): socket$netlink(0x10, 0x3, 0x14) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r1 = epoll_create(0x2) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x8, 0x40000000, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) rmdir(0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000040)={0x36, 0x7, 0x4, 0x9, 0x1, 0x80}) tkill(r4, 0x7) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000005c0)={0x10}) openat$nci(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x4, &(0x7f0000000080)={[0x9]}, 0x8) 95.249839ms ago: executing program 5 (id=4156): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) syz_clone(0x4000, &(0x7f0000000140)="b1aa5d45ba07087a5f5b967a117ea297626fd6bc490127d601f3b6e01a1fbb6afe6274ba491dddd9c1d04174a66a435a4c294547668509c9d0007e519b7e18d5cbfa59a909f1cd0890968feff123f543d404bc7571d9", 0x56, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000400)="02eea778e08cd5a2385a111dcdc5aea6fd0d3869b1f9b7e99481f48f34fd3ca1f9de4d0b9e6cc28b3c3067686f1c18ea0b5bcf8f46dde738640a867911ab1eba21b811e3c78dbdf1eaca7efe8d0bc88998c39aeb7b115076550adcd46cb515843898e6f3715497e40781b2a0c46c130cc2037f91ebf5e5e434970757e163a5d32ed0fe4eda865f350a1455aee82b5193213bdc1c7d328eddb768a67759edbe1f9dcb0ec4a38a1ff84960ed44a268ac622ee412aa1a3ba6e8ae8bb2f525a9054de49c64011a49985486c3e183a9b731996609b34a") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xf72}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) fsopen(&(0x7f00000002c0)='v7\x00', 0x1) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 0s ago: executing program 3 (id=4157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semget$private(0x0, 0x6, 0x3b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b640), 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10a000, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, &(0x7f0000000080), 0x10) kernel console output (not intermixed with test programs): [ 1224.547941][T10515] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input65 [ 1224.624397][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1224.667299][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1224.696365][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1224.814920][T20307] fuse: Bad value for 'fd' [ 1224.897951][T20263] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 1224.950119][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1224.977303][ T5937] usb 4-1: USB disconnect, device number 27 [ 1225.019032][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1225.107323][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1225.203896][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1225.261661][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1225.307981][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1225.347223][T10515] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1225.436413][T10515] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1225.577982][T10515] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1225.617812][T10515] usb 6-1: USB disconnect, device number 71 [ 1227.258097][T13984] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1227.282195][T20369] bridge_slave_0: left allmulticast mode [ 1227.288545][T20369] bridge_slave_0: left promiscuous mode [ 1227.294317][T20369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.301841][ T5915] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1227.313161][T20369] bridge_slave_1: left allmulticast mode [ 1227.319677][T20369] bridge_slave_1: left promiscuous mode [ 1227.325447][T20369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.336363][T20369] bond0: (slave bond_slave_0): Releasing backup interface [ 1227.346268][T20369] bond0: (slave bond_slave_1): Releasing backup interface [ 1227.360491][T20369] team0: Failed to send options change via netlink (err -105) [ 1227.369213][T20369] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1227.379770][T20369] team0: Port device team_slave_0 removed [ 1227.391413][T20369] team0: Failed to send options change via netlink (err -105) [ 1227.399466][T20369] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1227.409877][T20369] team0: Port device team_slave_1 removed [ 1227.415916][T20369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.425052][T20369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.432448][T13984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1227.442292][T13984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1227.454193][T13984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1227.464057][T13984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1227.473858][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1227.481599][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 1227.505961][ T5915] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1227.514622][T13984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1227.526400][ T5915] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.537056][T13984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1227.549011][ T5915] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.567918][ T5915] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.583503][ T5915] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.583679][T13984] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1227.606085][ T5915] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1227.615641][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.631155][T20372] tipc: Started in network mode [ 1227.636293][T20372] tipc: Node identity 024c5a5c8a47, cluster identity 4711 [ 1227.637594][T13984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.645845][T20372] tipc: Enabled bearer , priority 0 [ 1227.657258][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1227.671888][T20372] syzkaller0: entered allmulticast mode [ 1227.681521][T13984] usb 6-1: Product: syz [ 1227.686956][ T24] usb 4-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 1227.692854][T20372] tipc: Resetting bearer [ 1227.704661][T13984] usb 6-1: Manufacturer: syz [ 1227.710866][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1227.726768][T20371] tipc: Disabling bearer [ 1227.727205][T13984] usb 6-1: SerialNumber: syz [ 1227.746422][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1227.759244][T13984] usb 6-1: config 0 descriptor?? [ 1227.764269][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.775864][T13984] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 1227.784969][T13984] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 1227.794335][ T24] usb 4-1: config 0 descriptor?? [ 1227.869445][ T5915] usb 7-1: usb_control_msg returned -32 [ 1227.875115][ T5915] usbtmc 7-1:16.0: can't read capabilities [ 1227.931114][T20378] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1227.937659][T20378] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1227.947400][T20378] vhci_hcd vhci_hcd.0: Device attached [ 1228.271912][ T5915] vhci_hcd: vhci_device speed not set [ 1228.303706][T20387] trusted_key: encrypted_key: insufficient parameters specified [ 1228.441225][ T5915] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 1228.477064][T20384] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3746'. [ 1228.960091][T20379] vhci_hcd: connection reset by peer [ 1228.970778][ T8913] vhci_hcd: stop threads [ 1228.975168][ T8913] vhci_hcd: release socket [ 1228.980022][ T8913] vhci_hcd: disconnect device [ 1230.024923][T10515] usb 4-1: USB disconnect, device number 28 [ 1230.092218][ T24] usb 6-1: USB disconnect, device number 72 [ 1230.187773][T13984] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1230.204829][T20400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.527394][T13984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1230.538266][T13984] usb 5-1: not running at top speed; connect to a high speed hub [ 1230.551571][T13984] usb 5-1: config 6 has an invalid interface number: 30 but max is 0 [ 1230.583047][T13984] usb 5-1: config 6 has no interface number 0 [ 1230.603026][T13984] usb 5-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 1230.655555][T13984] usb 5-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 1230.675934][T13984] usb 5-1: config 6 interface 30 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1230.722116][T13984] usb 5-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 1230.731636][T13984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.747524][T13984] usb 5-1: Product: syz [ 1230.757464][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1230.766809][T13984] usb 5-1: Manufacturer: syz [ 1230.772938][T13984] usb 5-1: SerialNumber: syz [ 1230.834872][T20396] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1230.940872][ T24] usb 4-1: config index 0 descriptor too short (expected 5292, got 77) [ 1231.002401][ T24] usb 4-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.068886][ T24] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1231.075237][T13984] usbtest 5-1:6.30: usb test device [ 1231.075261][T13984] usbtest 5-1:6.30: full-speed {control in/out iso-out} tests (+alt) [ 1231.091684][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1231.091714][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.091757][ T24] usb 4-1: Product: syz [ 1231.091773][ T24] usb 4-1: Manufacturer: syz [ 1231.091787][ T24] usb 4-1: SerialNumber: syz [ 1231.093888][T13984] usb 5-1: USB disconnect, device number 9 [ 1231.478760][T20403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.489924][T20403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.917372][T10515] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1232.151873][T10515] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1232.161216][T10515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.169443][T10515] usb 3-1: Product: syz [ 1232.173715][T10515] usb 3-1: Manufacturer: syz [ 1232.178508][T10515] usb 3-1: SerialNumber: syz [ 1232.188181][T10515] usb 3-1: config 0 descriptor?? [ 1232.196537][T10515] ch341 3-1:0.0: ch341-uart converter detected [ 1232.453310][T20413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.471550][T20413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.733803][T10515] usb 3-1: failed to send control message: -71 [ 1232.740983][T10515] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1232.767998][T10515] usb 3-1: USB disconnect, device number 27 [ 1232.799772][T10515] ch341 3-1:0.0: device disconnected [ 1233.241388][T13984] usb 4-1: USB disconnect, device number 29 [ 1233.315300][T10515] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1233.382854][T20386] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 1233.487827][T10515] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1233.521311][ T24] usb 7-1: USB disconnect, device number 54 [ 1233.624564][ T5915] vhci_hcd: vhci_device speed not set [ 1233.972565][T20443] input: syz1 as /devices/virtual/input/input66 [ 1233.987051][T20444] xt_NFQUEUE: number of total queues is 0 [ 1234.165241][T20447] netlink: 'syz.5.3761': attribute type 12 has an invalid length. [ 1234.191830][T20443] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1234.202580][T20443] bond9: entered allmulticast mode [ 1234.208671][T20443] bond0: (slave bond9): Enslaving as an active interface with an up link [ 1234.224691][T20446] macvlan1: entered allmulticast mode [ 1234.230588][T20446] bond0: entered allmulticast mode [ 1234.236600][T20446] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1234.248381][T20446] team0: Port device macvlan1 added [ 1234.254242][T20447] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.3761'. [ 1235.067217][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1235.377721][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1236.477323][ T5915] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1236.788266][ T5915] usb 5-1: config index 0 descriptor too short (expected 5292, got 77) [ 1236.861302][ T5915] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.904007][ T5915] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1237.125660][ T5915] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1237.204856][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.278142][ T5915] usb 5-1: Product: syz [ 1237.289215][ T5915] usb 5-1: Manufacturer: syz [ 1237.298752][ T5915] usb 5-1: SerialNumber: syz [ 1237.307298][T13984] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1237.467533][T13984] usb 4-1: Using ep0 maxpacket: 8 [ 1237.491655][T13984] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1237.536078][T13984] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1237.605590][T20481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.617664][T20481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.711126][T13984] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1237.937277][T13984] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1237.982465][T13984] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.014515][T13984] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1238.038735][T13984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.327477][T13984] usb 4-1: usb_control_msg returned -32 [ 1238.338930][T13984] usbtmc 4-1:16.0: can't read capabilities [ 1238.388190][ T5915] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1238.573361][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.579967][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.684257][T20499] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1238.795985][ T5915] usb 7-1: config 0 has no interfaces? [ 1238.828106][ T5915] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1238.851363][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.951114][ T5915] usb 7-1: Product: syz [ 1238.974616][ T5915] usb 7-1: Manufacturer: syz [ 1238.995966][ T5915] usb 7-1: SerialNumber: syz [ 1239.060199][ T5915] usb 7-1: config 0 descriptor?? [ 1239.185203][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1239.231019][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1239.270448][ T24] usb 3-1: can't read configurations, error -71 [ 1239.376234][ T5915] usb 5-1: USB disconnect, device number 10 [ 1239.775921][ T5915] usb 4-1: USB disconnect, device number 30 [ 1241.126287][T20525] syzkaller1: entered promiscuous mode [ 1241.136806][T20525] syzkaller1: entered allmulticast mode [ 1241.734624][T10515] usb 7-1: USB disconnect, device number 55 [ 1243.589016][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1243.747297][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1243.764587][ T24] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1243.775434][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1243.915801][ T24] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1243.964450][ T24] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1243.998264][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1244.166745][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1244.213178][ T24] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1244.292620][ T24] usb 5-1: Product: syz [ 1244.302597][ T24] usb 5-1: Manufacturer: syz [ 1244.320773][ T24] usb 5-1: SerialNumber: syz [ 1244.341161][ T24] usb 5-1: config 0 descriptor?? [ 1244.364872][ T24] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1244.530305][ T24] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1244.605394][ T24] usb 5-1: USB disconnect, device number 11 [ 1244.654757][ T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1245.001842][T20560] lo: entered allmulticast mode [ 1245.007048][T20560] tunl0: entered allmulticast mode [ 1245.016130][T20560] gre0: entered allmulticast mode [ 1245.030401][T20560] gretap0: entered allmulticast mode [ 1245.044539][T20560] erspan0: entered allmulticast mode [ 1245.052685][T20560] ip_vti0: entered allmulticast mode [ 1245.060793][T20560] ip6_vti0: entered allmulticast mode [ 1245.066400][T20560] sit0: entered allmulticast mode [ 1245.076071][T20560] ip6tnl0: entered allmulticast mode [ 1245.086210][T20560] ip6gre0: entered allmulticast mode [ 1245.094237][T20560] syz_tun: entered allmulticast mode [ 1245.106421][T20560] ip6gretap0: entered allmulticast mode [ 1245.119700][T20560] vcan0: entered allmulticast mode [ 1245.126895][T20560] team0: entered allmulticast mode [ 1245.145376][T20560] dummy0: entered allmulticast mode [ 1245.155208][T20560] nlmon0: entered allmulticast mode [ 1245.165217][T20560] caif0: entered allmulticast mode [ 1245.173009][T20560] batadv0: entered allmulticast mode [ 1245.181306][T20560] vxcan0: entered allmulticast mode [ 1245.188964][T20560] vxcan1: entered allmulticast mode [ 1245.194420][T20560] veth0: entered allmulticast mode [ 1245.202141][T20560] veth1: entered allmulticast mode [ 1245.210064][T20560] wg0: entered allmulticast mode [ 1245.215273][T20560] wg1: entered allmulticast mode [ 1245.225382][T20560] wg2: entered allmulticast mode [ 1245.233085][T20560] veth0_to_bridge: entered allmulticast mode [ 1245.243043][T20560] bridge_slave_0: entered allmulticast mode [ 1245.257004][T20560] veth1_to_bridge: entered allmulticast mode [ 1245.266221][T20560] bridge_slave_1: entered allmulticast mode [ 1245.275725][T20560] bond_slave_0: entered allmulticast mode [ 1245.283642][T20560] veth1_to_bond: entered allmulticast mode [ 1245.291071][T20560] bond_slave_1: entered allmulticast mode [ 1245.299323][T20560] veth0_to_team: entered allmulticast mode [ 1245.305362][T20560] team_slave_0: entered allmulticast mode [ 1245.313964][T20560] veth1_to_team: entered allmulticast mode [ 1245.323370][T20560] team_slave_1: entered allmulticast mode [ 1245.331186][T20560] veth0_to_batadv: entered allmulticast mode [ 1245.340606][T20560] batadv_slave_0: entered allmulticast mode [ 1245.349887][T20560] veth1_to_batadv: entered allmulticast mode [ 1245.360855][T20560] batadv_slave_1: entered allmulticast mode [ 1245.369133][T20560] xfrm0: entered allmulticast mode [ 1245.380354][T20560] veth0_to_hsr: entered allmulticast mode [ 1245.389913][T20560] hsr_slave_0: entered allmulticast mode [ 1245.396321][T20560] veth1_to_hsr: entered allmulticast mode [ 1245.405066][T20560] hsr_slave_1: entered allmulticast mode [ 1245.413219][T20560] hsr0: entered allmulticast mode [ 1245.421305][T20560] veth1_virt_wifi: entered allmulticast mode [ 1245.429962][T20560] veth0_virt_wifi: entered allmulticast mode [ 1245.436240][T20560] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1245.447034][T20560] veth1_macvtap: entered allmulticast mode [ 1245.455181][T20560] veth0_macvtap: entered allmulticast mode [ 1245.464322][T20560] macvtap0: entered allmulticast mode [ 1245.473506][T20560] macsec0: entered allmulticast mode [ 1245.481160][T20560] geneve0: entered allmulticast mode [ 1245.489216][T20560] geneve1: entered allmulticast mode [ 1245.495831][T20560] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1245.505636][T20560] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1245.514552][T20560] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1245.524844][T20560] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 1245.533771][T20560] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 1245.543343][T20560] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 1245.552137][T20560] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 1245.561128][T20560] veth2: entered allmulticast mode [ 1245.566485][T20560] veth3: entered allmulticast mode [ 1245.573117][T20560] vxlan0: entered allmulticast mode [ 1245.581575][T20560] bond1: entered allmulticast mode [ 1245.586984][T20560] veth4: entered allmulticast mode [ 1245.592519][T20560] veth5: entered allmulticast mode [ 1245.598166][T20560] macvlan0: entered allmulticast mode [ 1245.604055][T20560] bond2: entered allmulticast mode [ 1245.611058][T20560] macsec1: entered allmulticast mode [ 1245.618510][T20560] bridge1: entered allmulticast mode [ 1245.624169][T20560] bond3: entered allmulticast mode [ 1245.629727][T20560] bridge2: entered allmulticast mode [ 1245.635360][T20560] sit1: entered allmulticast mode [ 1245.857258][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1246.027182][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1246.038569][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1246.046993][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1246.058837][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1246.072004][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1246.082188][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.095554][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1246.105062][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.107264][T10515] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1246.317280][T10515] usb 3-1: Using ep0 maxpacket: 32 [ 1246.374251][ T24] usb 4-1: usb_control_msg returned -32 [ 1246.391800][ T24] usbtmc 4-1:16.0: can't read capabilities [ 1246.407604][T10515] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1246.431803][T10515] usb 3-1: too many configurations: 23, using maximum allowed: 8 [ 1246.454949][T10515] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1246.468170][T10515] usb 3-1: can't read configurations, error -61 [ 1246.499810][T20567] binder: 20566:20567 ioctl c0306201 2000000003c0 returned -14 [ 1246.519395][T20582] input: syz1 as /devices/virtual/input/input67 [ 1246.608814][T10515] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1246.726576][T20588] FAULT_INJECTION: forcing a failure. [ 1246.726576][T20588] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.744416][T20588] CPU: 0 UID: 0 PID: 20588 Comm: syz.5.3804 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1246.744443][T20588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1246.744455][T20588] Call Trace: [ 1246.744463][T20588] [ 1246.744472][T20588] dump_stack_lvl+0x189/0x250 [ 1246.744500][T20588] ? __pfx____ratelimit+0x10/0x10 [ 1246.744529][T20588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1246.744551][T20588] ? __pfx__printk+0x10/0x10 [ 1246.744582][T20588] ? __pfx___might_resched+0x10/0x10 [ 1246.744612][T20588] ? fs_reclaim_acquire+0x7d/0x100 [ 1246.744644][T20588] should_fail_ex+0x414/0x560 [ 1246.744675][T20588] should_failslab+0xa8/0x100 [ 1246.744702][T20588] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1246.744723][T20588] ? __kernfs_new_node+0xd7/0x7e0 [ 1246.744757][T20588] __kernfs_new_node+0xd7/0x7e0 [ 1246.744787][T20588] ? __lock_acquire+0xab9/0xd20 [ 1246.744814][T20588] ? __pfx___kernfs_new_node+0x10/0x10 [ 1246.744841][T20588] ? kernfs_root+0x1c/0x230 [ 1246.744873][T20588] ? kernfs_root+0x1c/0x230 [ 1246.744898][T20588] ? kernfs_root+0x1c/0x230 [ 1246.744921][T20588] ? kernfs_root+0x1c/0x230 [ 1246.744952][T20588] kernfs_new_node+0x102/0x210 [ 1246.744984][T20588] __kernfs_create_file+0x4b/0x2e0 [ 1246.745008][T20588] sysfs_add_file_mode_ns+0x238/0x300 [ 1246.745040][T20588] sysfs_merge_group+0x177/0x310 [ 1246.745070][T20588] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1246.745098][T20588] ? kobject_put+0x43f/0x480 [ 1246.745123][T20588] dpm_sysfs_add+0xd2/0x270 [ 1246.745152][T20588] device_add+0x4d8/0xb50 [ 1246.745180][T20588] device_create+0x25b/0x2f0 [ 1246.745208][T20588] ? format_decode+0x5ee/0xe30 [ 1246.745231][T20588] ? string+0x279/0x2b0 [ 1246.745251][T20588] ? widen_string+0x3b/0x2a0 [ 1246.745276][T20588] ? __pfx_device_create+0x10/0x10 [ 1246.745314][T20588] bdi_register_va+0x9c/0x740 [ 1246.745348][T20588] super_setup_bdi_name+0xe6/0x200 [ 1246.745371][T20588] ? fuse_dev_install+0x8d/0x1a0 [ 1246.745402][T20588] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 1246.745431][T20588] ? do_raw_spin_unlock+0x122/0x240 [ 1246.745462][T20588] fuse_fill_super_common+0x64a/0x1150 [ 1246.745499][T20588] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 1246.745526][T20588] ? __init_swait_queue_head+0xa9/0x150 [ 1246.745557][T20588] ? shrinker_register+0x16b/0x230 [ 1246.745588][T20588] ? sget_fc+0x962/0xa40 [ 1246.745613][T20588] fuse_fill_super+0x176/0x1f0 [ 1246.745641][T20588] ? __pfx_fuse_fill_super+0x10/0x10 [ 1246.745671][T20588] get_tree_nodev+0xb8/0x150 [ 1246.745694][T20588] fuse_get_tree+0x2eb/0x4e0 [ 1246.745728][T20588] vfs_get_tree+0x92/0x2b0 [ 1246.745753][T20588] do_new_mount+0x24a/0xa40 [ 1246.745786][T20588] __se_sys_mount+0x317/0x410 [ 1246.745817][T20588] ? __pfx___se_sys_mount+0x10/0x10 [ 1246.745861][T20588] ? __secure_computing+0xe2/0x2a0 [ 1246.745887][T20588] ? __x64_sys_mount+0x20/0xc0 [ 1246.745915][T20588] do_syscall_64+0xfa/0x3b0 [ 1246.745933][T20588] ? lockdep_hardirqs_on+0x9c/0x150 [ 1246.745963][T20588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.745983][T20588] ? clear_bhb_loop+0x60/0xb0 [ 1246.746008][T20588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.746026][T20588] RIP: 0033:0x7f135af8e929 [ 1246.746044][T20588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.746062][T20588] RSP: 002b:00007f135bdcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1246.746084][T20588] RAX: ffffffffffffffda RBX: 00007f135b1b5fa0 RCX: 00007f135af8e929 [ 1246.746099][T20588] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1246.746113][T20588] RBP: 00007f135bdcf090 R08: 0000200000002140 R09: 0000000000000000 [ 1246.746126][T20588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1246.746138][T20588] R13: 0000000000000000 R14: 00007f135b1b5fa0 R15: 00007f135b2dfa28 [ 1246.746169][T20588] [ 1246.746502][T20589] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1246.777648][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1247.051195][T20591] FAULT_INJECTION: forcing a failure. [ 1247.051195][T20591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.053485][T10515] usb 3-1: Using ep0 maxpacket: 32 [ 1247.075450][T20591] CPU: 1 UID: 0 PID: 20591 Comm: syz.5.3805 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1247.075481][T20591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1247.075495][T20591] Call Trace: [ 1247.075504][T20591] [ 1247.075516][T20591] dump_stack_lvl+0x189/0x250 [ 1247.075548][T20591] ? __pfx____ratelimit+0x10/0x10 [ 1247.075583][T20591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1247.075609][T20591] ? __pfx__printk+0x10/0x10 [ 1247.075638][T20591] ? __might_fault+0xb0/0x130 [ 1247.075675][T20591] should_fail_ex+0x414/0x560 [ 1247.075710][T20591] _copy_from_user+0x2d/0xb0 [ 1247.075738][T20591] generic_map_update_batch+0x51b/0x7f0 [ 1247.075779][T20591] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1247.075807][T20591] ? __fget_files+0x2a/0x420 [ 1247.075850][T20591] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1247.075877][T20591] bpf_map_do_batch+0x369/0x5f0 [ 1247.075905][T20591] __sys_bpf+0x384/0x860 [ 1247.075927][T20591] ? __pfx___sys_bpf+0x10/0x10 [ 1247.075989][T20591] ? ksys_write+0x22a/0x250 [ 1247.076017][T20591] ? __pfx_ksys_write+0x10/0x10 [ 1247.076039][T20591] ? rcu_is_watching+0x15/0xb0 [ 1247.076073][T20591] __x64_sys_bpf+0x7c/0x90 [ 1247.076105][T20591] do_syscall_64+0xfa/0x3b0 [ 1247.076126][T20591] ? lockdep_hardirqs_on+0x9c/0x150 [ 1247.076158][T20591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.076179][T20591] ? clear_bhb_loop+0x60/0xb0 [ 1247.076204][T20591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.076243][T20591] RIP: 0033:0x7f135af8e929 [ 1247.076265][T20591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.076287][T20591] RSP: 002b:00007f135bdcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1247.076314][T20591] RAX: ffffffffffffffda RBX: 00007f135b1b5fa0 RCX: 00007f135af8e929 [ 1247.076335][T20591] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1247.076351][T20591] RBP: 00007f135bdcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.076365][T20591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1247.076378][T20591] R13: 0000000000000000 R14: 00007f135b1b5fa0 R15: 00007f135b2dfa28 [ 1247.076412][T20591] [ 1247.388380][T10515] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1247.396183][T10515] usb 3-1: too many configurations: 23, using maximum allowed: 8 [ 1247.405571][T10515] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1247.413419][T10515] usb 3-1: can't read configurations, error -61 [ 1247.420325][T10515] usb usb3-port1: attempt power cycle [ 1247.540281][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1247.548807][ T9] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 1247.557239][ T9] usb 5-1: config 0 has no interface number 0 [ 1247.563414][ T9] usb 5-1: config 0 interface 108 has no altsetting 0 [ 1247.584044][ T9] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 1247.593439][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.615688][ T9] usb 5-1: Product: syz [ 1247.624517][ T9] usb 5-1: Manufacturer: syz [ 1247.640880][ T9] usb 5-1: SerialNumber: syz [ 1247.664463][ T9] usb 5-1: config 0 descriptor?? [ 1247.683786][ T9] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 1247.807302][T10515] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1247.828208][T10515] usb 3-1: Using ep0 maxpacket: 32 [ 1247.840579][T10515] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1247.850222][T10515] usb 3-1: too many configurations: 23, using maximum allowed: 8 [ 1247.890010][T10515] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1247.903305][T10515] usb 3-1: can't read configurations, error -61 [ 1248.096954][T20599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1248.103236][ T24] IPVS: starting estimator thread 0... [ 1248.107778][T20582] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1248.129058][ T24] usb 4-1: USB disconnect, device number 31 [ 1248.157661][T10515] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1248.197209][T20602] IPVS: using max 33 ests per chain, 79200 per kthread [ 1248.204619][T10515] usb 3-1: Using ep0 maxpacket: 32 [ 1248.282903][T10515] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1248.290952][T10515] usb 3-1: too many configurations: 23, using maximum allowed: 8 [ 1248.316818][T10515] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1248.374979][T10515] usb 3-1: can't read configurations, error -61 [ 1248.429580][T10515] usb usb3-port1: unable to enumerate USB device [ 1248.515187][ T9] usb 5-1: USB disconnect, device number 12 [ 1249.351630][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1249.555138][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1249.575963][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1249.701831][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1249.725048][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1249.736731][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1249.789885][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1249.802398][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1249.812165][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1249.855155][ T24] usb 3-1: Product: syz [ 1249.880777][ T24] usb 3-1: Manufacturer: syz [ 1249.885432][ T24] usb 3-1: SerialNumber: syz [ 1249.989128][ T24] usb 3-1: config 0 descriptor?? [ 1250.161849][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1250.306974][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1250.377216][ T24] usb 3-1: USB disconnect, device number 34 [ 1250.463847][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1250.747203][T10515] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1250.897191][T10515] usb 7-1: Using ep0 maxpacket: 16 [ 1250.949724][T10515] usb 7-1: config 0 has no interfaces? [ 1250.958665][T10515] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1250.982169][T10515] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1251.017257][T10515] usb 7-1: Manufacturer: syz [ 1251.042121][T10515] usb 7-1: config 0 descriptor?? [ 1251.470478][T20649] netlink: 'syz.6.3819': attribute type 27 has an invalid length. [ 1251.478825][T20649] lo: left allmulticast mode [ 1251.483653][T20649] tunl0: left allmulticast mode [ 1251.489545][T20649] gre0: left allmulticast mode [ 1251.498025][T20649] gretap0: left allmulticast mode [ 1251.512734][T20649] erspan0: left allmulticast mode [ 1251.523358][T20649] ip_vti0: left allmulticast mode [ 1251.833446][T20649] ip6_vti0: left allmulticast mode [ 1251.845526][T20649] sit0: left allmulticast mode [ 1251.855154][T20649] ip6tnl0: left allmulticast mode [ 1251.860799][T20649] ip6gre0: left allmulticast mode [ 1251.870601][T20649] syz_tun: left allmulticast mode [ 1251.913888][T20649] ip6gretap0: left allmulticast mode [ 1251.926896][T20649] vcan0: left allmulticast mode [ 1251.935201][T20649] bond0: left allmulticast mode [ 1251.945384][T20649] team0: left allmulticast mode [ 1251.957146][T20649] dummy0: left allmulticast mode [ 1251.967255][T20649] nlmon0: left allmulticast mode [ 1251.977141][T20649] caif0: left allmulticast mode [ 1251.987985][T20649] batadv0: left allmulticast mode [ 1251.996324][T20649] vxcan0: left allmulticast mode [ 1252.003244][T20649] vxcan1: left allmulticast mode [ 1252.010761][T20649] veth0: left allmulticast mode [ 1252.018143][T20649] veth1: left allmulticast mode [ 1252.024704][T20649] wg0: left allmulticast mode [ 1252.032824][T20649] wg1: left allmulticast mode [ 1252.040599][T20649] wg2: left allmulticast mode [ 1252.046849][T20649] veth0_to_bridge: left allmulticast mode [ 1252.053942][T20649] bridge_slave_0: left allmulticast mode [ 1252.062013][T20649] veth1_to_bridge: left allmulticast mode [ 1252.070254][T20649] bridge_slave_1: left allmulticast mode [ 1252.078346][T20649] bond_slave_0: left allmulticast mode [ 1252.085146][T20649] veth1_to_bond: left allmulticast mode [ 1252.094414][T20649] bond_slave_1: left allmulticast mode [ 1252.103031][T20649] veth0_to_team: left allmulticast mode [ 1252.114479][T20649] team_slave_0: left allmulticast mode [ 1252.122916][T20649] veth1_to_team: left allmulticast mode [ 1252.130555][T20649] team_slave_1: left allmulticast mode [ 1252.138004][T20649] veth0_to_batadv: left allmulticast mode [ 1252.146264][T20649] batadv_slave_0: left allmulticast mode [ 1252.153383][T20649] veth1_to_batadv: left allmulticast mode [ 1252.160780][T20649] batadv_slave_1: left allmulticast mode [ 1252.168296][T20649] xfrm0: left allmulticast mode [ 1252.173436][T20649] veth0_to_hsr: left allmulticast mode [ 1252.179445][T20649] veth1_to_hsr: left allmulticast mode [ 1252.185555][T20649] hsr0: left allmulticast mode [ 1252.190466][T20649] hsr_slave_0: left allmulticast mode [ 1252.198954][T20649] hsr_slave_1: left allmulticast mode [ 1252.204587][T20649] veth1_virt_wifi: left allmulticast mode [ 1252.210734][T20649] veth0_virt_wifi: left allmulticast mode [ 1252.216848][T20649] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1252.226900][T20649] veth1_macvtap: left allmulticast mode [ 1252.233844][T20649] veth0_macvtap: left allmulticast mode [ 1252.245243][T20649] macvtap0: left allmulticast mode [ 1252.251408][T20649] macsec0: left allmulticast mode [ 1252.257701][T20649] geneve0: left allmulticast mode [ 1252.264301][T20649] geneve1: left allmulticast mode [ 1252.274467][T20649] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1252.284324][T20649] netdevsim netdevsim6 netdevsim1: left allmulticast mode [ 1252.301846][T20649] netdevsim netdevsim6 netdevsim2: left allmulticast mode [ 1252.310630][T20649] netdevsim netdevsim6 netdevsim3: left allmulticast mode [ 1252.320715][T20649] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 1252.384141][T20649] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 1252.391868][T20649] veth2: left allmulticast mode [ 1252.404662][T20649] veth3: left allmulticast mode [ 1252.409896][T20649] vxlan0: left allmulticast mode [ 1252.415111][T20649] bond1: left allmulticast mode [ 1252.438063][T20649] veth4: left allmulticast mode [ 1252.443408][T20649] veth5: left allmulticast mode [ 1252.456384][T20649] macvlan0: left allmulticast mode [ 1252.461891][T20649] bond2: left allmulticast mode [ 1252.469453][T20649] macsec1: left allmulticast mode [ 1252.474801][T20649] bridge1: left allmulticast mode [ 1252.480127][T20649] bond3: left allmulticast mode [ 1252.485209][T20649] bridge2: left allmulticast mode [ 1252.497464][T20649] sit1: left allmulticast mode [ 1252.502466][T20649] macvlan1: left allmulticast mode [ 1252.960355][T10515] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1253.117196][T10515] usb 5-1: Using ep0 maxpacket: 16 [ 1253.134024][T10515] usb 5-1: config 0 has no interfaces? [ 1253.147234][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1253.158368][T10515] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1253.176966][T10515] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1253.194664][T10515] usb 5-1: Manufacturer: syz [ 1253.255594][T10515] usb 5-1: config 0 descriptor?? [ 1253.307668][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1253.314416][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1253.326118][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1253.340248][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1253.374887][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1253.473970][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1253.490343][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1253.499465][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.700565][T20664] netlink: 'syz.4.3824': attribute type 27 has an invalid length. [ 1253.713322][T10515] usb 7-1: USB disconnect, device number 56 [ 1253.815099][ T24] usb 4-1: usb_control_msg returned -32 [ 1253.821026][ T24] usbtmc 4-1:16.0: can't read capabilities [ 1253.953339][T20675] syz_tun: entered allmulticast mode [ 1254.188469][T20680] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1254.196122][T20672] syz_tun: left allmulticast mode [ 1254.454188][T20685] loop6: detected capacity change from 0 to 524287999 [ 1255.074978][ T24] usb 4-1: USB disconnect, device number 32 [ 1255.085649][T10515] usb 5-1: USB disconnect, device number 13 [ 1255.209374][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1255.564311][ T9] usb 7-1: config index 0 descriptor too short (expected 5292, got 77) [ 1255.564343][ T9] usb 7-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.608533][ T9] usb 7-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1255.702782][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1255.791807][T20706] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1255.802045][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.831496][ T9] usb 7-1: Product: syz [ 1255.835724][ T9] usb 7-1: Manufacturer: syz [ 1255.921038][ T9] usb 7-1: SerialNumber: syz [ 1256.232580][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.249513][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.307288][T10515] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1256.475029][T10515] usb 3-1: Using ep0 maxpacket: 32 [ 1256.494472][T10515] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1256.502782][T10515] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1256.513888][T10515] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1256.558063][T10515] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1256.571809][T10515] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1256.651561][T10515] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1256.719817][T10515] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1257.298778][T10515] usb 3-1: Product: syz [ 1257.305275][T10515] usb 3-1: Manufacturer: syz [ 1257.315680][T10515] usb 3-1: SerialNumber: syz [ 1257.335478][T10515] usb 3-1: config 0 descriptor?? [ 1257.380303][T10515] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1257.404194][T10515] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1257.601353][ T24] usb 3-1: USB disconnect, device number 35 [ 1257.601410][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1257.666074][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1257.686410][T20724] fuse: Bad value for 'group_id' [ 1257.703900][T20724] fuse: Bad value for 'group_id' [ 1258.180139][ T9] usb 7-1: USB disconnect, device number 57 [ 1258.229437][T10515] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1258.387368][T10515] usb 6-1: Using ep0 maxpacket: 16 [ 1258.394517][T10515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.405914][T10515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.416267][T10515] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1258.432852][T10515] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1258.442803][T10515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.454154][T10515] usb 6-1: config 0 descriptor?? [ 1258.577483][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1258.737320][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1258.743294][ T9] usb 7-1: too many configurations: 126, using maximum allowed: 8 [ 1258.753493][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.764026][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.774732][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.785231][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.795740][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.806161][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.816586][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.826989][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.843371][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=4dae, bcdDevice= f.42 [ 1258.852673][ T9] usb 7-1: New USB device strings: Mfr=91, Product=137, SerialNumber=136 [ 1258.861316][ T9] usb 7-1: Product: syz [ 1258.865560][ T9] usb 7-1: Manufacturer: syz [ 1258.870406][ T9] usb 7-1: SerialNumber: syz [ 1258.879557][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x2 [ 1258.888741][ T9] usb 7-1: config 0 descriptor?? [ 1258.903074][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1258.910609][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1258.918083][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1258.925350][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1258.933067][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1258.941104][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1258.948681][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1258.956048][T10515] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1258.970889][T10515] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0022/input/input68 [ 1258.997164][T10515] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1259.095644][ T24] usb 6-1: USB disconnect, device number 73 [ 1259.387356][ T5915] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1259.539093][ T5915] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1259.549043][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1259.558118][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1259.567335][T10515] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1259.579970][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1259.588099][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1259.597072][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1259.608967][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1259.616908][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1259.626690][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1259.640410][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1259.653488][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1259.667017][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1259.722167][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1259.729576][T10515] usb 5-1: no configurations [ 1259.743074][T10515] usb 5-1: can't read configurations, error -22 [ 1259.748549][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1259.759807][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1259.771796][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1259.813434][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1259.822745][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1259.867710][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1259.911578][T10515] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1259.919840][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1259.951086][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1259.963631][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1259.975704][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1259.985274][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1260.001524][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1260.010715][ T5915] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1260.091861][ T5915] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1260.112281][T10515] usb 5-1: no configurations [ 1260.113525][ T5915] usb 3-1: Product: syz [ 1260.117057][T10515] usb 5-1: can't read configurations, error -22 [ 1260.131969][ T5915] usb 3-1: Manufacturer: syz [ 1260.143890][ T5915] usb 3-1: SerialNumber: syz [ 1260.162002][T10515] usb usb5-port1: attempt power cycle [ 1260.162361][ T5915] usb 3-1: config 0 descriptor?? [ 1260.230469][ T5915] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1260.473543][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1260.474023][ T9] usb 3-1: USB disconnect, device number 36 [ 1260.588466][T10515] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1260.601616][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1260.618728][T10515] usb 5-1: no configurations [ 1260.623471][T10515] usb 5-1: can't read configurations, error -22 [ 1260.787334][T10515] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1260.818744][T10515] usb 5-1: no configurations [ 1260.829046][T10515] usb 5-1: can't read configurations, error -22 [ 1260.847920][T10515] usb usb5-port1: unable to enumerate USB device [ 1261.412758][T20773] FAULT_INJECTION: forcing a failure. [ 1261.412758][T20773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.426161][T20773] CPU: 0 UID: 0 PID: 20773 Comm: syz.2.3855 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1261.426186][T20773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1261.426199][T20773] Call Trace: [ 1261.426206][T20773] [ 1261.426215][T20773] dump_stack_lvl+0x189/0x250 [ 1261.426243][T20773] ? __pfx____ratelimit+0x10/0x10 [ 1261.426279][T20773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1261.426302][T20773] ? __pfx__printk+0x10/0x10 [ 1261.426327][T20773] ? __might_fault+0xb0/0x130 [ 1261.426359][T20773] should_fail_ex+0x414/0x560 [ 1261.426390][T20773] _copy_from_user+0x2d/0xb0 [ 1261.426413][T20773] generic_map_update_batch+0x572/0x7f0 [ 1261.426449][T20773] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1261.426473][T20773] ? __fget_files+0x2a/0x420 [ 1261.426504][T20773] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1261.426528][T20773] bpf_map_do_batch+0x369/0x5f0 [ 1261.426553][T20773] __sys_bpf+0x384/0x860 [ 1261.426576][T20773] ? __pfx___sys_bpf+0x10/0x10 [ 1261.426605][T20773] ? ksys_write+0x22a/0x250 [ 1261.426628][T20773] ? __pfx_ksys_write+0x10/0x10 [ 1261.426647][T20773] ? rcu_is_watching+0x15/0xb0 [ 1261.426675][T20773] __x64_sys_bpf+0x7c/0x90 [ 1261.426702][T20773] do_syscall_64+0xfa/0x3b0 [ 1261.426719][T20773] ? lockdep_hardirqs_on+0x9c/0x150 [ 1261.426747][T20773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.426765][T20773] ? clear_bhb_loop+0x60/0xb0 [ 1261.426787][T20773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.426805][T20773] RIP: 0033:0x7fd0f518e929 [ 1261.426822][T20773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1261.426839][T20773] RSP: 002b:00007fd0f5f54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1261.426859][T20773] RAX: ffffffffffffffda RBX: 00007fd0f53b5fa0 RCX: 00007fd0f518e929 [ 1261.426873][T20773] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1261.426885][T20773] RBP: 00007fd0f5f54090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.426897][T20773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1261.426908][T20773] R13: 0000000000000000 R14: 00007fd0f53b5fa0 R15: 00007fd0f54dfa28 [ 1261.426935][T20773] [ 1261.729951][ T5915] usb 7-1: USB disconnect, device number 58 [ 1262.197585][ T5915] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1262.290232][T10515] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1262.357210][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 1262.366974][ T5915] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1262.382415][ T5915] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1262.397529][ T5915] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1262.429202][ T5915] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1262.471932][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1262.472899][T10515] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1262.491828][ T5915] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1262.507671][T10515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.543300][T10515] usb 3-1: config 0 descriptor?? [ 1262.548737][ T5915] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1262.565576][ T5915] usb 7-1: Product: syz [ 1262.575890][ T5915] usb 7-1: Manufacturer: syz [ 1262.579112][T10515] cp210x 3-1:0.0: cp210x converter detected [ 1262.588964][ T5915] usb 7-1: SerialNumber: syz [ 1262.628651][ T5915] usb 7-1: config 0 descriptor?? [ 1262.658523][ T5915] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1262.698930][ T5915] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1262.897302][ T5915] usb 7-1: USB disconnect, device number 59 [ 1262.914464][ T5915] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1263.094767][T10515] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1263.497238][T10515] cp210x 3-1:0.0: querying part number failed [ 1264.143836][T10515] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1264.160696][T10515] usb 3-1: USB disconnect, device number 37 [ 1264.221258][T10515] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1264.261614][T10515] cp210x 3-1:0.0: device disconnected [ 1265.656818][ T5915] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1266.027201][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1266.037634][ T5915] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1266.049594][ T5915] usb 6-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 1266.083334][ T5915] usb 6-1: config 0 has no interface number 0 [ 1266.094615][ T5915] usb 6-1: too many endpoints for config 0 interface 184 altsetting 7: 144, using maximum allowed: 30 [ 1266.166400][ T5915] usb 6-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1266.217247][ T24] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1266.240623][ T5915] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1266.259286][ T5915] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1266.280431][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.299472][ T5915] usb 6-1: Product: syz [ 1266.313903][ T5915] usb 6-1: Manufacturer: syz [ 1266.327182][ T5915] usb 6-1: SerialNumber: syz [ 1266.351301][ T5915] usb 6-1: config 0 descriptor?? [ 1266.406534][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1266.415020][ T24] usb 7-1: config 0 has no interfaces? [ 1266.423033][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1266.432791][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1266.542408][ T24] usb 7-1: Manufacturer: syz [ 1266.547765][T13984] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1266.638128][ T5915] smsc75xx v1.0.0 [ 1266.641838][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1266.660670][ T24] usb 7-1: config 0 descriptor?? [ 1266.759414][ T5915] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1266.912597][T13984] usb 3-1: Using ep0 maxpacket: 16 [ 1266.990070][T20829] netlink: 'syz.6.3869': attribute type 27 has an invalid length. [ 1268.714554][ T5915] usb 6-1: USB disconnect, device number 74 [ 1268.972900][ T9] usb 7-1: USB disconnect, device number 60 [ 1269.057721][T20856] netlink: 'syz.5.3874': attribute type 1 has an invalid length. [ 1269.135780][T20856] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1269.393222][T20859] gretap0: left allmulticast mode [ 1269.514526][T20859] bond10: (slave gretap0): making interface the new active one [ 1269.564457][T20859] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 1269.618926][T20858] bond10: (slave veth7): Enslaving as an active interface with a down link [ 1269.704509][T13984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1269.740268][T13984] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1269.857242][T13984] usb 3-1: can't read configurations, error -71 [ 1270.041653][T20864] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3875'. [ 1271.067590][ T5915] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1271.259085][ T5915] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1271.313695][ T5915] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1271.445498][ T5915] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1271.464319][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.561078][T20873] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1271.576724][ T5915] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1271.588679][T13984] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1271.703394][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3879'. [ 1271.716452][T20881] input: syz0 as /devices/virtual/input/input69 [ 1271.817303][T13984] usb 5-1: Using ep0 maxpacket: 32 [ 1271.978021][T13984] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1272.032777][T13984] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1272.059966][T13984] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1272.154011][T10515] usb 7-1: USB disconnect, device number 61 [ 1272.205256][T13984] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1272.254575][T13984] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1272.283283][T13984] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1272.292753][T13984] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1272.314452][T13984] usb 5-1: Product: syz [ 1272.365080][T13984] usb 5-1: Manufacturer: syz [ 1272.398161][T13984] usb 5-1: SerialNumber: syz [ 1272.422897][T13984] usb 5-1: config 0 descriptor?? [ 1272.480944][T13984] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1272.486153][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1272.511625][T13984] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1272.621052][T20889] vlan2: entered allmulticast mode [ 1272.714279][T13984] usb 5-1: USB disconnect, device number 18 [ 1272.720329][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1272.789982][T13984] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1272.965270][ T5852] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 1273.025413][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3885'. [ 1273.207571][T20914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3887'. [ 1273.704783][ T9] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1273.997037][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1274.006032][ T9] usb 7-1: config 0 has no interfaces? [ 1274.043813][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1274.073576][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1274.081929][ T5936] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1274.095920][ T30] audit: type=1326 audit(1752161895.407:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20921 comm="syz.5.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1274.102194][ T9] usb 7-1: Manufacturer: syz [ 1274.198173][ T30] audit: type=1326 audit(1752161895.407:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20921 comm="syz.5.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1274.369697][ T9] usb 7-1: config 0 descriptor?? [ 1274.758355][ T5936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1274.814942][ T5936] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1274.840525][ T30] audit: type=1326 audit(1752161895.407:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20921 comm="syz.5.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1274.858684][T20916] netlink: 'syz.6.3886': attribute type 27 has an invalid length. [ 1274.878111][ T5936] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1274.924562][ T30] audit: type=1326 audit(1752161895.407:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20921 comm="syz.5.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1274.924562][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.924615][ T30] audit: type=1326 audit(1752161895.407:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20921 comm="syz.5.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1275.363773][T20922] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1275.433153][ T5936] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1276.276198][T20935] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3891'. [ 1276.287698][T13984] usb 7-1: USB disconnect, device number 62 [ 1276.708468][ T5936] usb 3-1: USB disconnect, device number 40 [ 1277.158764][ T30] audit: type=1326 audit(1752161898.437:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20945 comm="syz.3.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdff8e929 code=0x7ffc0000 [ 1277.338326][ T30] audit: type=1326 audit(1752161898.437:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20945 comm="syz.3.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdff8e929 code=0x7ffc0000 [ 1277.565439][ T30] audit: type=1326 audit(1752161898.437:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20945 comm="syz.3.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f3fdff8e929 code=0x7ffc0000 [ 1277.667965][ T30] audit: type=1326 audit(1752161898.437:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20945 comm="syz.3.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdff8e929 code=0x7ffc0000 [ 1277.691753][ T30] audit: type=1326 audit(1752161898.437:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20945 comm="syz.3.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdff8e929 code=0x7ffc0000 [ 1278.059653][T20971] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3899'. [ 1278.190727][ T9] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1278.349760][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1278.356466][ T9] usb 6-1: config 0 has an invalid interface number: 114 but max is 0 [ 1278.366270][ T9] usb 6-1: config 0 has no interface number 0 [ 1278.376250][ T9] usb 6-1: config 0 interface 114 has no altsetting 0 [ 1278.386546][ T9] usb 6-1: New USB device found, idVendor=12d1, idProduct=1e65, bcdDevice=9e.14 [ 1278.398337][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.419709][ T9] usb 6-1: Product: syz [ 1278.423946][ T9] usb 6-1: Manufacturer: syz [ 1278.429364][ T9] usb 6-1: SerialNumber: syz [ 1278.491117][ T9] usb 6-1: config 0 descriptor?? [ 1278.522608][T20969] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1278.799033][T20987] netlink: 'syz.4.3903': attribute type 1 has an invalid length. [ 1278.824302][ T9] option 6-1:0.114: GSM modem (1-port) converter detected [ 1278.836706][ T9] usb 6-1: USB disconnect, device number 75 [ 1278.974492][T20987] batman_adv: batadv0: Adding interface: dummy0 [ 1278.988552][ T9] option 6-1:0.114: device disconnected [ 1278.988664][T20987] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.137352][T20987] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1279.415270][T20993] netlink: 'syz.5.3905': attribute type 21 has an invalid length. [ 1279.426812][T20993] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3905'. [ 1279.463416][ T5936] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1279.720740][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.748737][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.837265][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1279.875834][ T5936] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1280.061871][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.175739][ T5936] usb 4-1: config 0 descriptor?? [ 1280.672380][ T5936] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1281.079234][ T5915] usb 4-1: USB disconnect, device number 33 [ 1281.287696][T13984] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1281.458883][T13984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.482518][T13984] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1281.509986][T13984] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1281.541797][T13984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.587811][T13984] usb 3-1: config 0 descriptor?? [ 1281.752985][T21023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3912'. [ 1281.887427][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3915'. [ 1282.164993][ T5936] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1282.347388][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 1282.359942][T21037] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3916'. [ 1282.397508][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.409269][ T5936] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1282.419716][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.439888][ T5936] usb 7-1: config 0 descriptor?? [ 1282.451260][ T5936] usbhid 7-1:0.0: can't add hid device: -22 [ 1282.457800][ T5936] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 1283.187180][ T9] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1283.375260][ T9] usb 6-1: config index 0 descriptor too short (expected 5292, got 77) [ 1283.383926][ T9] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.456106][ T9] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1283.491218][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1283.500843][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.509109][ T9] usb 6-1: Product: syz [ 1283.545922][ T9] usb 6-1: Manufacturer: syz [ 1283.567245][ T9] usb 6-1: SerialNumber: syz [ 1283.857380][T21043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.867768][T21043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.039029][T13984] usb 3-1: USB disconnect, device number 41 [ 1284.197494][ T5915] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1284.357841][ T5915] usb 5-1: device descriptor read/64, error -71 [ 1284.778081][ T5915] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1285.068125][ T5915] usb 5-1: device descriptor read/64, error -71 [ 1285.203388][ T5915] usb usb5-port1: attempt power cycle [ 1285.687306][ T5915] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1285.712681][ T5915] usb 5-1: device descriptor read/8, error -71 [ 1286.037202][ T5915] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1286.057824][ T5915] usb 5-1: device descriptor read/8, error -71 [ 1286.170262][T13984] usb 7-1: USB disconnect, device number 63 [ 1286.182256][ T5915] usb usb5-port1: unable to enumerate USB device [ 1286.463522][ T9] usb 6-1: USB disconnect, device number 76 [ 1287.070701][T21080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3925'. [ 1287.117179][T13984] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1287.304308][T13984] usb 3-1: config index 0 descriptor too short (expected 5292, got 77) [ 1287.312702][T13984] usb 3-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.365480][T13984] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1287.429736][T13984] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1287.439120][T13984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.468016][T13984] usb 3-1: Product: syz [ 1287.476100][T13984] usb 3-1: Manufacturer: syz [ 1287.484501][T13984] usb 3-1: SerialNumber: syz [ 1287.863278][T21078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.873333][T21078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.957275][ T5936] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1288.037165][T13984] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1288.169084][ T5936] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1288.177219][ T5936] usb 7-1: config 0 has no interface number 0 [ 1288.196577][ T5936] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1288.205765][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.233703][ T5936] usb 7-1: Product: syz [ 1288.251023][T13984] usb 5-1: config index 0 descriptor too short (expected 5292, got 77) [ 1288.274705][T13984] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.307572][T13984] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1288.337502][T13984] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1288.351109][T13984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.359209][T13984] usb 5-1: Product: syz [ 1288.363521][T13984] usb 5-1: Manufacturer: syz [ 1288.367310][ T5936] usb 7-1: Manufacturer: syz [ 1288.368284][T13984] usb 5-1: SerialNumber: syz [ 1288.399931][ T5936] usb 7-1: SerialNumber: syz [ 1288.416635][ T5936] usb 7-1: config 0 descriptor?? [ 1288.626799][ T5936] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1288.640609][ T5936] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1288.664786][T21098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.673644][T21098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.822583][ T5936] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1288.851618][ T5936] usb 7-1: media controller created [ 1288.898991][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1289.128652][ T5936] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1289.230232][ T5936] usb 7-1: USB disconnect, device number 64 [ 1290.171918][ T5936] usb 3-1: USB disconnect, device number 42 [ 1290.397933][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3935'. [ 1290.687282][ T5936] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1290.841427][T13984] usb 5-1: USB disconnect, device number 23 [ 1290.917307][ T9] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1290.953026][ T5936] usb 3-1: config index 0 descriptor too short (expected 5292, got 77) [ 1290.961555][T10515] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1291.027249][ T5936] usb 3-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.088826][ T5936] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1291.098299][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1291.119098][T10515] usb 6-1: config 0 has no interfaces? [ 1291.132605][T10515] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1291.177580][ T9] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1291.191994][T10515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.204990][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1291.222043][ T5936] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1291.237431][T10515] usb 6-1: Product: syz [ 1291.260159][T10515] usb 6-1: Manufacturer: syz [ 1291.264931][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.301715][ T9] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1291.315814][T10515] usb 6-1: SerialNumber: syz [ 1291.325663][ T5936] usb 3-1: Product: syz [ 1291.331465][T10515] usb 6-1: config 0 descriptor?? [ 1291.336463][ T9] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1291.349869][ T5936] usb 3-1: Manufacturer: syz [ 1291.354464][ T5936] usb 3-1: SerialNumber: syz [ 1291.366930][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1291.376065][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1291.396442][ T9] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1291.418300][ T9] usb 7-1: Product: syz [ 1291.422505][ T9] usb 7-1: Manufacturer: syz [ 1291.453382][ T9] usb 7-1: SerialNumber: syz [ 1291.475113][ T9] usb 7-1: config 0 descriptor?? [ 1291.493350][ T9] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1291.526010][ T9] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1291.684529][T21164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.694737][T21164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.807892][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 1291.816514][ T9] usb 7-1: USB disconnect, device number 65 [ 1291.831406][ T9] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1291.964078][T21179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.980155][T21179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.034047][T21184] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1292.188800][ T9] usb 6-1: USB disconnect, device number 77 [ 1292.256893][T21184] bond4: entered promiscuous mode [ 1292.262445][T21184] bond4: entered allmulticast mode [ 1292.268350][T21184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1292.651667][T13984] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1292.873033][T21190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3943'. [ 1292.891997][T21190] vlan2: entered promiscuous mode [ 1292.929168][T13984] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1292.940357][T13984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 37925, setting to 64 [ 1292.952806][T13984] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1292.964811][T13984] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1292.973411][T13984] usb 5-1: Manufacturer: syz [ 1293.007668][T13984] usb 5-1: config 0 descriptor?? [ 1293.257971][T13984] rc_core: IR keymap rc-hauppauge not found [ 1293.267239][T13984] Registered IR keymap rc-empty [ 1293.273654][T13984] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1293.288503][T13984] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input70 [ 1293.308553][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1293.316243][T21187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.352828][T21187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.372659][ T5936] usb 3-1: USB disconnect, device number 43 [ 1293.489558][ T9] usb 5-1: USB disconnect, device number 24 [ 1293.596350][T21197] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3945'. [ 1293.977185][ T5936] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1294.143253][ T5936] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1294.169801][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.196397][ T5936] usb 7-1: config 0 descriptor?? [ 1294.222781][ T5936] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1294.906587][T21514] IPVS: length: 24 != 792 [ 1295.109261][T21518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1295.337464][ T5936] gspca_sunplus: reg_w_riv err -110 [ 1295.342983][ T5936] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1295.967421][T21526] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1296.101413][T21526] bond5: entered promiscuous mode [ 1296.106597][T21526] bond5: entered allmulticast mode [ 1296.112311][T21526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1296.773706][ T9] usb 7-1: USB disconnect, device number 66 [ 1296.847364][ T5936] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1296.890458][T21541] netlink: 'syz.6.3962': attribute type 1 has an invalid length. [ 1296.935384][T21541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1296.980669][T21541] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1297.007869][T21541] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1297.017213][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 1297.019331][ T5936] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1297.038388][ T5936] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1297.055081][ T5936] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1297.059212][T21541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3962'. [ 1297.066385][ T5936] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1297.088630][ T5936] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1297.116520][ T5936] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1297.127017][ T5936] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1297.146228][ T5936] usb 4-1: Product: syz [ 1297.152452][T21544] create_pit_timer: 40 callbacks suppressed [ 1297.152465][T21544] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1297.166615][ T5936] usb 4-1: Manufacturer: syz [ 1297.171388][ T5936] usb 4-1: SerialNumber: syz [ 1297.187785][ T5936] usb 4-1: config 0 descriptor?? [ 1297.200546][ T5936] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1297.230586][ T5936] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1297.412937][ T5936] usb 4-1: USB disconnect, device number 34 [ 1297.412986][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1297.483428][ T5936] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1297.497783][T21552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1297.861916][T21562] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1297.990285][T21562] bond5: entered promiscuous mode [ 1297.995894][T21562] bond5: entered allmulticast mode [ 1298.004362][T21562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1298.027251][T13984] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1298.189624][T13984] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1298.260954][T13984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.310273][T13984] usb 7-1: config 0 descriptor?? [ 1298.704861][T21569] bond10: (slave gretap0): Releasing active interface [ 1298.712212][T21569] bond10: (slave gretap0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1298.769167][T13984] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 1298.826393][T21569] bond0: (slave bond9): Releasing backup interface [ 1298.868162][T21569] bond9: left allmulticast mode [ 1298.881944][T21569] bond10: (slave veth7): Releasing active interface [ 1298.889019][T13984] usb 7-1: USB disconnect, device number 67 [ 1298.915971][T21576] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1299.137305][ T5915] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1299.337891][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 1299.367388][ T5915] usb 6-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 1299.437463][ T5915] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1299.457164][ T5915] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1299.466561][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.474904][ T5915] usb 6-1: Product: syz [ 1299.479318][ T5915] usb 6-1: Manufacturer: syz [ 1299.484139][ T5915] usb 6-1: SerialNumber: syz [ 1299.553224][ T5915] usb 6-1: config 0 descriptor?? [ 1299.807197][ T5936] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1299.957225][ T5936] usb 5-1: device descriptor read/64, error -71 [ 1299.988487][ T5915] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1299.989334][ T9] usb 6-1: USB disconnect, device number 78 [ 1300.013015][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.020699][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.190107][ T5915] usb 7-1: config 0 has no interfaces? [ 1300.227240][ T5936] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1300.239989][ T5915] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1300.256200][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.264901][ T5915] usb 7-1: Product: syz [ 1300.272275][ T5915] usb 7-1: Manufacturer: syz [ 1300.277044][ T5915] usb 7-1: SerialNumber: syz [ 1300.286145][ T5915] usb 7-1: config 0 descriptor?? [ 1300.437444][ T5936] usb 5-1: device descriptor read/64, error -71 [ 1300.558030][ T5936] usb usb5-port1: attempt power cycle [ 1300.691345][ T9] usb 7-1: USB disconnect, device number 68 [ 1300.864705][T21603] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 1300.898185][ T5936] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1300.918655][ T5936] usb 5-1: device descriptor read/8, error -71 [ 1301.167335][ T5936] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1301.197927][ T5936] usb 5-1: device descriptor read/8, error -71 [ 1301.308471][ T5936] usb usb5-port1: unable to enumerate USB device [ 1301.877209][ T5936] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1302.008316][ T5915] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1302.178972][ T5915] usb 6-1: config index 0 descriptor too short (expected 786, got 18) [ 1302.187806][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.198274][ T5915] usb 6-1: config 0 has no interfaces? [ 1302.209772][ T5915] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1302.236924][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.245933][ T5915] usb 6-1: Product: syz [ 1302.253087][ T5936] usb 4-1: config index 0 descriptor too short (expected 5292, got 77) [ 1302.337825][ T5936] usb 4-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.396438][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3987'. [ 1302.461179][ T5915] usb 6-1: Manufacturer: syz [ 1302.465811][ T5915] usb 6-1: SerialNumber: syz [ 1302.498454][ T5915] usb 6-1: config 0 descriptor?? [ 1302.509900][ T5936] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1302.620549][ T5936] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1302.683523][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.760931][ T5936] usb 4-1: Product: syz [ 1302.765159][ T5936] usb 4-1: Manufacturer: syz [ 1302.864087][ T5936] usb 4-1: SerialNumber: syz [ 1303.304229][T21622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.305798][T21622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.787253][ T5936] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1303.864041][ T9] usb 6-1: USB disconnect, device number 79 [ 1303.937308][ T5936] usb 7-1: Using ep0 maxpacket: 8 [ 1303.941213][ T5936] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1303.941234][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.941249][ T5936] usb 7-1: Product: syz [ 1303.941260][ T5936] usb 7-1: Manufacturer: syz [ 1303.941270][ T5936] usb 7-1: SerialNumber: syz [ 1303.948334][ T5936] usb 7-1: config 0 descriptor?? [ 1304.159220][ T5936] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1304.223245][ T5936] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1304.245826][ T5936] usb 7-1: USB disconnect, device number 69 [ 1304.637297][ T5915] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1304.805050][ T5915] usb 5-1: config index 0 descriptor too short (expected 5292, got 77) [ 1304.815933][ T5915] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.866808][ T5915] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1304.915432][ T5915] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1304.929928][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.929957][ T5915] usb 5-1: Product: syz [ 1304.929974][ T5915] usb 5-1: Manufacturer: syz [ 1304.929990][ T5915] usb 5-1: SerialNumber: syz [ 1305.222136][T21645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.232636][T21645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.364150][ T5915] usb 4-1: USB disconnect, device number 35 [ 1305.691294][T21665] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1305.734903][T21665] bond6: entered promiscuous mode [ 1305.830170][T21665] bond6: entered allmulticast mode [ 1305.917153][ T5936] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1305.948528][T21665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1306.081868][ T5936] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1306.092245][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.102099][ T5936] usb 6-1: Product: syz [ 1306.106379][ T5936] usb 6-1: Manufacturer: syz [ 1306.115617][T21670] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1306.133253][ T5936] usb 6-1: SerialNumber: syz [ 1306.144201][ T5936] usb 6-1: config 0 descriptor?? [ 1306.155983][ T5936] usb 6-1: selecting invalid altsetting 1 [ 1306.163162][ T5936] technisat-usb2: could not set alternate setting to 0 [ 1306.310913][T21670] bond6: entered promiscuous mode [ 1306.319287][T21670] bond6: entered allmulticast mode [ 1306.449808][ T5936] technisat-usb2: firmware version: 0.0 [ 1306.459343][T21670] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1306.511983][T21676] sctp: [Deprecated]: syz.3.4000 (pid 21676) Use of int in maxseg socket option. [ 1306.511983][T21676] Use struct sctp_assoc_value instead [ 1306.529851][T21676] netlink: 'syz.3.4000': attribute type 10 has an invalid length. [ 1306.539040][T21676] veth0_vlan: left promiscuous mode [ 1306.548118][T21676] veth0_vlan: entered promiscuous mode [ 1306.555992][T21676] team0: Device veth0_vlan failed to register rx_handler [ 1306.587531][ T5936] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1307.273287][T21666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1307.378118][ T5936] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1307.435950][ T9] usb 5-1: USB disconnect, device number 29 [ 1307.454750][ T5936] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 1307.967226][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1308.128368][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1308.135256][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1308.143822][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1308.167568][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1308.191123][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1308.225192][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1308.296748][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1308.312319][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1308.334130][ T9] usb 5-1: Product: syz [ 1308.365713][ T9] usb 5-1: Manufacturer: syz [ 1308.371426][ T9] usb 5-1: SerialNumber: syz [ 1308.385544][ T9] usb 5-1: config 0 descriptor?? [ 1308.403550][T21691] macvlan3: entered promiscuous mode [ 1308.410116][T21691] bridge0: entered promiscuous mode [ 1308.412951][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1308.444341][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1308.644105][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1308.660367][ T9] usb 5-1: USB disconnect, device number 30 [ 1308.676948][T21696] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1308.699146][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1308.992258][ T9] usb 6-1: USB disconnect, device number 80 [ 1309.133701][T21708] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4008'. [ 1310.177400][T13984] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1310.451021][T13984] usb 4-1: Using ep0 maxpacket: 16 [ 1310.470255][T13984] usb 4-1: config 0 has no interfaces? [ 1310.490497][T13984] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1310.502280][T13984] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1310.539993][T21737] xt_NFQUEUE: number of total queues is 0 [ 1310.565865][T13984] usb 4-1: Manufacturer: syz [ 1310.633541][T21739] macvlan2: entered allmulticast mode [ 1310.653063][T21739] bond0: entered allmulticast mode [ 1310.674462][T13984] usb 4-1: config 0 descriptor?? [ 1310.707475][T21739] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1310.746329][T21739] team0: Port device macvlan2 added [ 1311.177052][T21723] netlink: 'syz.3.4010': attribute type 27 has an invalid length. [ 1311.185265][T21723] lo: left allmulticast mode [ 1311.190689][T21723] tunl0: left allmulticast mode [ 1311.196303][T21723] gre0: left allmulticast mode [ 1311.202161][T21723] gretap0: left allmulticast mode [ 1311.207950][T21723] erspan0: left allmulticast mode [ 1311.213529][T21723] ip_vti0: left allmulticast mode [ 1311.219368][T21723] ip6_vti0: left allmulticast mode [ 1311.225067][T21723] sit0: left allmulticast mode [ 1311.236835][T21723] ip6tnl0: left allmulticast mode [ 1311.242648][T21723] ip6gre0: left allmulticast mode [ 1311.248309][T21723] syz_tun: left allmulticast mode [ 1311.254120][T21723] ip6gretap0: left allmulticast mode [ 1311.259963][T21723] bridge0: left allmulticast mode [ 1311.265701][T21723] vcan0: left allmulticast mode [ 1311.271300][T21723] bond0: left allmulticast mode [ 1311.276808][T21723] team0: left allmulticast mode [ 1311.282562][T21723] dummy0: left allmulticast mode [ 1311.288413][T21723] nlmon0: left allmulticast mode [ 1311.294043][T21723] caif0: left allmulticast mode [ 1311.299675][T21723] batadv0: left allmulticast mode [ 1311.305425][T21723] vxcan0: left allmulticast mode [ 1311.311041][T21723] vxcan1: left allmulticast mode [ 1311.316343][T21723] veth0: left allmulticast mode [ 1311.321982][T21723] veth1: left allmulticast mode [ 1311.327580][T21723] wg0: left allmulticast mode [ 1311.333066][T21723] wg1: left allmulticast mode [ 1311.338470][T21723] wg2: left allmulticast mode [ 1311.343914][T21723] veth0_to_bridge: left allmulticast mode [ 1311.350746][T21723] veth1_to_bridge: left allmulticast mode [ 1311.357522][T21723] veth0_to_bond: left allmulticast mode [ 1311.363807][T21723] bond_slave_0: left allmulticast mode [ 1311.370058][T21723] veth1_to_bond: left allmulticast mode [ 1311.376259][T21723] bond_slave_1: left allmulticast mode [ 1311.382585][T21723] veth0_to_team: left allmulticast mode [ 1311.395933][T21723] team_slave_0: left allmulticast mode [ 1311.401892][T21723] veth1_to_team: left allmulticast mode [ 1311.410429][T21723] team_slave_1: left allmulticast mode [ 1311.416101][T21723] veth0_to_batadv: left allmulticast mode [ 1311.502323][T21723] batadv_slave_0: left allmulticast mode [ 1311.516611][T21723] veth1_to_batadv: left allmulticast mode [ 1311.530720][T21723] batadv_slave_1: left allmulticast mode [ 1311.547827][T21723] xfrm0: left allmulticast mode [ 1311.558115][T21723] veth0_to_hsr: left allmulticast mode [ 1311.565093][T21723] veth1_to_hsr: left allmulticast mode [ 1311.615584][T21723] hsr0: left allmulticast mode [ 1311.634255][T21723] hsr_slave_0: left allmulticast mode [ 1311.646222][T21723] hsr_slave_1: left allmulticast mode [ 1311.683855][T21723] veth1_virt_wifi: left allmulticast mode [ 1311.698529][T21723] veth0_virt_wifi: left allmulticast mode [ 1311.785663][T21723] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1311.849027][T21723] veth1_vlan: left allmulticast mode [ 1311.854837][T21723] vlan0: left allmulticast mode [ 1311.871333][T21723] macvlan0: left allmulticast mode [ 1311.876836][T21723] macvlan1: left allmulticast mode [ 1311.882803][T21723] ipvlan0: left allmulticast mode [ 1311.912308][T21723] ipvlan1: left allmulticast mode [ 1311.919967][T21723] veth1_macvtap: left allmulticast mode [ 1311.925898][T21723] veth0_macvtap: left allmulticast mode [ 1311.931766][T21723] macvtap0: left allmulticast mode [ 1311.937246][T21723] macsec0: left allmulticast mode [ 1311.942521][T21723] geneve0: left allmulticast mode [ 1311.947895][T21723] geneve1: left allmulticast mode [ 1311.953186][T21723] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1311.960566][T21723] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 1311.968000][T21723] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 1311.975398][T21723] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 1311.982771][T21723] mac80211_hwsim hwsim22 wlan0: left allmulticast mode [ 1311.990024][T21723] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 1311.997189][T21723] gre1: left allmulticast mode [ 1312.002237][T21723] bond1: left allmulticast mode [ 1312.007438][T21723] erspan1: left allmulticast mode [ 1312.012744][T21723] bond2: left allmulticast mode [ 1312.017911][T21723] macvlan2: left allmulticast mode [ 1312.097597][T21723] bond3: left promiscuous mode [ 1312.104496][T21723] bond3: left allmulticast mode [ 1312.117018][T21723] bond4: left promiscuous mode [ 1312.123098][T21723] bond4: left allmulticast mode [ 1312.358061][T21755] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4019'. [ 1312.683352][T13984] usb 4-1: USB disconnect, device number 36 [ 1313.252152][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1313.297160][ T5915] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1313.501621][ T5915] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1313.516762][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.581458][ T5915] usb 6-1: Product: syz [ 1313.623692][ T5915] usb 6-1: Manufacturer: syz [ 1313.662797][ T5915] usb 6-1: SerialNumber: syz [ 1313.690280][ T5915] usb 6-1: config 0 descriptor?? [ 1313.720610][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1313.877247][ T5936] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1314.027477][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 1314.038137][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.038265][T21784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4029'. [ 1314.055995][ T5936] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1314.147723][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.155743][ T5936] usb 4-1: Product: syz [ 1314.214151][ T5936] usb 4-1: Manufacturer: syz [ 1314.231736][ T5936] usb 4-1: SerialNumber: syz [ 1314.252704][ T5936] usb 4-1: config 0 descriptor?? [ 1314.265069][ T5936] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1314.279390][ T5936] usb 4-1: selecting invalid altsetting 1 [ 1314.681029][ T5936] usb 4-1: USB disconnect, device number 37 [ 1315.097506][ T5915] gspca_sunplus: reg_r err -110 [ 1315.102494][ T5915] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1316.193023][ T5915] usb 6-1: USB disconnect, device number 81 [ 1316.323333][T21803] ======================================================= [ 1316.323333][T21803] WARNING: The mand mount option has been deprecated and [ 1316.323333][T21803] and is ignored by this kernel. Remove the mand [ 1316.323333][T21803] option from the mount to silence this warning. [ 1316.323333][T21803] ======================================================= [ 1316.372404][T21803] fuse: Bad value for 'fd' [ 1316.468078][T21803] netlink: 'syz.6.4033': attribute type 12 has an invalid length. [ 1316.687566][ T5915] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1316.837189][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1316.849109][ T5915] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1316.869761][ T5915] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1316.892443][ T5915] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.928912][ T5915] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1316.942107][T21815] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1316.963204][ T5915] usb 6-1: config 128 has no interface number 0 [ 1316.971112][ T5915] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1316.983366][ T5915] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1317.006385][ T5915] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1317.028439][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.045288][ T5915] usb 6-1: Product: syz [ 1317.054441][ T5915] usb 6-1: Manufacturer: syz [ 1317.083527][ T5915] usb 6-1: SerialNumber: syz [ 1317.132601][T21809] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1317.392630][T21805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.403842][T21805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.814528][ T5915] usb 6-1: USB disconnect, device number 82 [ 1317.871408][ T7649] udevd[7649]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.987227][ T5936] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1318.140125][ T5936] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1318.151877][ T5936] usb 7-1: config 1 has no interface number 0 [ 1318.158591][ T5936] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.173390][ T5936] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1318.184434][ T5936] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1318.199042][ T5936] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1318.208594][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.216660][ T5936] usb 7-1: Product: syz [ 1318.227276][ T5936] usb 7-1: Manufacturer: syz [ 1318.233485][ T5936] usb 7-1: SerialNumber: syz [ 1319.105072][ T5936] cdc_ncm 7-1:1.1: bind() failure [ 1319.309285][ T5936] usb 7-1: USB disconnect, device number 70 [ 1319.588008][T21896] syzkaller1: entered promiscuous mode [ 1319.622274][T21896] syzkaller1: entered allmulticast mode [ 1319.957413][ T30] audit: type=1326 audit(1752161941.267:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.5.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1319.979995][ T30] audit: type=1326 audit(1752161941.267:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.5.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1320.004445][ T30] audit: type=1326 audit(1752161941.267:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.5.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1320.077232][ T30] audit: type=1326 audit(1752161941.267:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.5.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1320.100201][ T30] audit: type=1326 audit(1752161941.267:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.5.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1320.131283][ T30] audit: type=1326 audit(1752161941.267:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.5.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1320.656944][T21918] FAULT_INJECTION: forcing a failure. [ 1320.656944][T21918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.706347][ T30] audit: type=1326 audit(1752161941.997:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.5.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8e929 code=0x7ffc0000 [ 1320.729146][T21918] CPU: 1 UID: 0 PID: 21918 Comm: syz.4.4054 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1320.729174][T21918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1320.729187][T21918] Call Trace: [ 1320.729196][T21918] [ 1320.729206][T21918] dump_stack_lvl+0x189/0x250 [ 1320.729237][T21918] ? __pfx____ratelimit+0x10/0x10 [ 1320.729270][T21918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1320.729296][T21918] ? __pfx__printk+0x10/0x10 [ 1320.729325][T21918] ? __might_fault+0xb0/0x130 [ 1320.729360][T21918] should_fail_ex+0x414/0x560 [ 1320.729395][T21918] _copy_from_user+0x2d/0xb0 [ 1320.729421][T21918] generic_map_update_batch+0x51b/0x7f0 [ 1320.729461][T21918] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1320.729489][T21918] ? __fget_files+0x2a/0x420 [ 1320.729523][T21918] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1320.729550][T21918] bpf_map_do_batch+0x369/0x5f0 [ 1320.729579][T21918] __sys_bpf+0x384/0x860 [ 1320.729601][T21918] ? __pfx___sys_bpf+0x10/0x10 [ 1320.729632][T21918] ? ksys_write+0x22a/0x250 [ 1320.729658][T21918] ? __pfx_ksys_write+0x10/0x10 [ 1320.729680][T21918] ? rcu_is_watching+0x15/0xb0 [ 1320.729722][T21918] __x64_sys_bpf+0x7c/0x90 [ 1320.729753][T21918] do_syscall_64+0xfa/0x3b0 [ 1320.729773][T21918] ? lockdep_hardirqs_on+0x9c/0x150 [ 1320.729806][T21918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.729827][T21918] ? clear_bhb_loop+0x60/0xb0 [ 1320.729854][T21918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.729892][T21918] RIP: 0033:0x7f89c838e929 [ 1320.729912][T21918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.729932][T21918] RSP: 002b:00007f89c9205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1320.729956][T21918] RAX: ffffffffffffffda RBX: 00007f89c85b5fa0 RCX: 00007f89c838e929 [ 1320.729973][T21918] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1320.729988][T21918] RBP: 00007f89c9205090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.730001][T21918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1320.730016][T21918] R13: 0000000000000000 R14: 00007f89c85b5fa0 R15: 00007f89c86dfa28 [ 1320.730049][T21918] [ 1320.966344][T21922] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1321.191307][T21922] bond5: entered promiscuous mode [ 1321.199012][T21922] bond5: entered allmulticast mode [ 1321.205146][T21922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1321.212916][T21926] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1321.384424][T21934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4059'. [ 1321.443580][T21926] bond7: entered promiscuous mode [ 1321.461008][T21926] bond7: entered allmulticast mode [ 1321.466608][T21926] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1322.267202][ T5915] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1322.367257][ T5936] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1322.507179][T13984] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1322.527388][ T5915] usb 4-1: config 0 has no interfaces? [ 1322.527609][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 1322.532922][ T5915] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1322.548852][ T5936] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1322.557048][ T5936] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1322.718825][ T5936] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1322.730581][T21966] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1322.749308][ T5936] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1322.757269][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.760479][ T5936] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1322.783772][ T5936] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1322.793260][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.826358][T13984] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.842384][T13984] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1322.852621][T13984] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1322.862419][ T5915] usb 4-1: config 0 descriptor?? [ 1323.183274][ T5936] usb 5-1: usb_control_msg returned -32 [ 1323.189947][T13984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1323.194041][ T5936] usbtmc 5-1:16.0: can't read capabilities [ 1323.199629][T13984] usb 7-1: SerialNumber: syz [ 1323.314541][ T978] usb 4-1: USB disconnect, device number 38 [ 1323.462461][T13984] usb 7-1: 0:2 : does not exist [ 1323.532199][T13984] usb 7-1: USB disconnect, device number 71 [ 1323.591037][ T7649] udevd[7649]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1323.635891][ T5936] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1323.885063][ T5936] usb 3-1: config index 0 descriptor too short (expected 5292, got 77) [ 1324.022230][ T5936] usb 3-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.065482][T21978] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1324.092056][ T5936] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1324.117179][T13984] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1324.126638][ T5936] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1324.139080][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.154132][ T5936] usb 3-1: Product: syz [ 1324.166418][ T5936] usb 3-1: Manufacturer: syz [ 1324.175942][ T5936] usb 3-1: SerialNumber: syz [ 1324.593925][T21971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.605901][T21971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.613876][T13984] usb 6-1: config index 0 descriptor too short (expected 5292, got 77) [ 1324.623086][T13984] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.696893][T13984] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1324.842744][T13984] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1324.857118][T13984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.874316][T13984] usb 6-1: Product: syz [ 1324.881641][T13984] usb 6-1: Manufacturer: syz [ 1324.903152][T13984] usb 6-1: SerialNumber: syz [ 1325.215220][T21976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.224190][T21976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.363699][T13984] usb 5-1: USB disconnect, device number 31 [ 1326.157792][T13984] usb 3-1: USB disconnect, device number 44 [ 1326.334703][T21997] fuse: Unknown parameter 'Ôàoup_id' [ 1326.472838][T21999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.547394][T13984] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1326.572283][T22001] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1326.712528][T13984] usb 5-1: config 0 has an invalid interface number: 39 but max is 0 [ 1326.733495][T13984] usb 5-1: config 0 has no interface number 0 [ 1326.774185][T13984] usb 5-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1326.830391][T13984] usb 5-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1326.851108][T13984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.859702][T13984] usb 5-1: Product: syz [ 1326.864041][T13984] usb 5-1: Manufacturer: syz [ 1326.869970][T13984] usb 5-1: SerialNumber: syz [ 1326.883248][T13984] usb 5-1: config 0 descriptor?? [ 1327.764417][ T5936] usb 6-1: USB disconnect, device number 83 [ 1327.825115][T13984] usb 5-1: USB disconnect, device number 32 [ 1327.937033][T22023] Invalid logical block size (768) [ 1328.161314][ T7649] udevd[7649]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.177497][T10515] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1328.452273][T10515] usb 4-1: config index 0 descriptor too short (expected 5292, got 77) [ 1328.464486][T10515] usb 4-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.486922][T10515] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1328.554152][T10515] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1328.566652][T10515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.602750][T10515] usb 4-1: Product: syz [ 1328.744265][T10515] usb 4-1: Manufacturer: syz [ 1328.929906][T10515] usb 4-1: SerialNumber: syz [ 1329.252930][T22024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.276463][T22024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.460252][T22054] sctp: [Deprecated]: syz.5.4089 (pid 22054) Use of int in maxseg socket option. [ 1329.460252][T22054] Use struct sctp_assoc_value instead [ 1329.653547][T22054] netlink: 'syz.5.4089': attribute type 10 has an invalid length. [ 1329.694037][T22054] veth0_vlan: left promiscuous mode [ 1329.703459][T22054] veth0_vlan: entered promiscuous mode [ 1329.744557][T22054] team0: Device veth0_vlan failed to register rx_handler [ 1331.797145][T13984] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1331.967345][T13984] usb 3-1: Using ep0 maxpacket: 32 [ 1331.980996][T13984] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1331.996574][T10515] usb 4-1: USB disconnect, device number 39 [ 1332.017727][T13984] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1332.060671][T13984] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1332.315072][T13984] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1332.333666][T13984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1332.346009][T13984] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1332.440740][T13984] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1332.471525][T13984] usb 3-1: Product: syz [ 1332.477174][T13984] usb 3-1: Manufacturer: syz [ 1332.485670][T13984] usb 3-1: SerialNumber: syz [ 1332.500188][T13984] usb 3-1: config 0 descriptor?? [ 1332.526909][T13984] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1332.554631][T13984] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1332.735899][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1332.761351][ T5915] usb 3-1: USB disconnect, device number 45 [ 1332.792647][ T5915] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1333.303219][ T5915] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1333.312612][ T5915] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1334.654004][ T30] audit: type=1326 audit(1752161955.967:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d838e929 code=0x7ffc0000 [ 1334.695869][ T30] audit: type=1326 audit(1752161956.007:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d838e929 code=0x7ffc0000 [ 1334.718377][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.731031][ T30] audit: type=1326 audit(1752161956.007:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fc4d838e929 code=0x7ffc0000 [ 1334.753459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.757206][ T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1334.764355][ T30] audit: type=1326 audit(1752161956.007:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d838e929 code=0x7ffc0000 [ 1334.859512][ T30] audit: type=1326 audit(1752161956.007:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d838e929 code=0x7ffc0000 [ 1334.881932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.923451][ T30] audit: type=1326 audit(1752161956.007:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc4d838e929 code=0x7ffc0000 [ 1334.949420][ T30] audit: type=1326 audit(1752161956.007:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d838e929 code=0x7ffc0000 [ 1334.975184][ T30] audit: type=1326 audit(1752161956.007:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22104 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d838e929 code=0x7ffc0000 [ 1335.017200][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1335.044138][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1335.081746][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1335.100894][ T9] usb 6-1: string descriptor 0 read error: -22 [ 1335.106119][T22111] xt_CT: No such helper "pptp" [ 1335.121049][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1335.136609][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1335.166911][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1335.186030][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1335.206790][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1335.226810][ T9] usb 6-1: media controller created [ 1335.287255][ T5915] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1335.304569][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1335.360319][T22101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.380619][T22101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.452550][T22120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.453669][ T5915] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1335.469078][T22120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.486792][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.503396][ T5915] usb 5-1: config 0 descriptor?? [ 1335.512281][ T5915] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1336.116145][ T5915] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1336.414771][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1336.524279][ T9] usb 6-1: USB disconnect, device number 84 [ 1336.834049][ T5915] gspca_cpia1: usb_control_msg 03, error -71 [ 1336.845002][ T5915] cpia1 5-1:0.0: unexpected systemstate: 00 [ 1336.864866][ T5915] usb 5-1: USB disconnect, device number 33 [ 1337.071514][T13984] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1337.244861][T13984] usb 7-1: config index 0 descriptor too short (expected 5292, got 77) [ 1337.253439][T13984] usb 7-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.265706][T13984] usb 7-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1337.301638][T13984] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1337.317850][T13984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.854521][T13984] usb 7-1: Product: syz [ 1338.027368][T13984] usb 7-1: Manufacturer: syz [ 1338.067605][T13984] usb 7-1: SerialNumber: syz [ 1338.280249][ T5915] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1338.319784][T22378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.331304][T22378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.483578][ T5915] usb 5-1: device descriptor read/64, error -71 [ 1338.787505][ T5915] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1338.806180][T13984] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1339.038599][ T5915] usb 5-1: device descriptor read/64, error -71 [ 1339.076577][T13984] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1339.100736][T13984] usb 6-1: not running at top speed; connect to a high speed hub [ 1339.117588][T13984] usb 6-1: config 6 has an invalid interface number: 30 but max is 0 [ 1339.136854][T13984] usb 6-1: config 6 has no interface number 0 [ 1339.158814][T13984] usb 6-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 1339.172294][ T5915] usb usb5-port1: attempt power cycle [ 1339.203097][T13984] usb 6-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 1339.221694][T22412] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1339.294470][T13984] usb 6-1: config 6 interface 30 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1339.371190][T13984] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 1339.380829][T13984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.399835][T13984] usb 6-1: Product: syz [ 1339.407181][T13984] usb 6-1: Manufacturer: syz [ 1339.421569][T13984] usb 6-1: SerialNumber: syz [ 1339.470895][T22404] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1339.537248][ T5915] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1339.633788][ T5915] usb 5-1: device descriptor read/8, error -71 [ 1339.693874][T13984] usbtest 6-1:6.30: usb test device [ 1339.702510][T13984] usbtest 6-1:6.30: full-speed {control in/out iso-out} tests (+alt) [ 1339.774564][T13984] usb 6-1: USB disconnect, device number 85 [ 1339.933201][ T5915] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1339.969931][ T5915] usb 5-1: device descriptor read/8, error -71 [ 1340.034508][ T9] usb 7-1: USB disconnect, device number 72 [ 1340.097134][ T5915] usb usb5-port1: unable to enumerate USB device [ 1341.790164][T13984] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1341.927157][T13984] usb 4-1: device descriptor read/64, error -71 [ 1342.208901][T13984] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1342.217397][T10515] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1342.357436][T13984] usb 4-1: device descriptor read/64, error -71 [ 1342.418568][T10515] usb 3-1: config index 0 descriptor too short (expected 5292, got 77) [ 1342.430221][T10515] usb 3-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.446086][T10515] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 20 [ 1342.467397][T13984] usb usb4-port1: attempt power cycle [ 1342.759582][T10515] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1342.773650][T10515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.786780][T10515] usb 3-1: Product: syz [ 1342.795635][T10515] usb 3-1: Manufacturer: syz [ 1342.804057][T10515] usb 3-1: SerialNumber: syz [ 1342.817287][T13984] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1342.888210][T13984] usb 4-1: device descriptor read/8, error -71 [ 1343.218342][T22462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.230693][T22462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.473558][T13984] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1343.620401][T13984] usb 4-1: device descriptor read/8, error -71 [ 1343.747413][T13984] usb usb4-port1: unable to enumerate USB device [ 1345.019189][T22476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4139'. [ 1345.121497][T13984] usb 3-1: USB disconnect, device number 46 [ 1345.485127][T22486] netlink: 'syz.3.4142': attribute type 1 has an invalid length. [ 1345.570765][T22486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1345.596337][T22493] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1345.796210][T22492] bond6: (slave veth3): Enslaving as an active interface with a down link [ 1345.820607][T22490] xt_CT: No such helper "pptp" [ 1345.930847][T22486] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1345.988072][T10515] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 1346.076140][T22511] loop6: detected capacity change from 0 to 128 [ 1346.157179][T10515] usb 3-1: Invalid ep0 maxpacket: 16 [ 1346.297193][T10515] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 1346.596538][T10515] usb 3-1: Invalid ep0 maxpacket: 16 [ 1346.641544][T10515] usb usb3-port1: attempt power cycle [ 1346.673191][T22526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1346.682351][ T5915] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1346.927300][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 1346.939796][ T5915] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1346.949703][ T5915] usb 7-1: config 0 has no interface number 0 [ 1346.955887][ T5915] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1346.969856][ T5915] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1346.981829][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.995380][ T5915] usb 7-1: Product: syz [ 1347.000121][ T5915] usb 7-1: Manufacturer: syz [ 1347.010906][ T5915] usb 7-1: SerialNumber: syz [ 1347.019354][ T5915] usb 7-1: config 0 descriptor?? [ 1347.035342][ T5915] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 1347.072121][T10515] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 1347.189127][T10515] usb 3-1: Invalid ep0 maxpacket: 16 [ 1347.340062][T10515] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 1347.455867][T10515] usb 3-1: Invalid ep0 maxpacket: 16 [ 1347.469197][T10515] usb usb3-port1: unable to enumerate USB device [ 1348.118219][T22548] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 1348.130148][T22548] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 1348.138576][T22548] CPU: 0 UID: 0 PID: 22548 Comm: syz.5.4156 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1348.150678][T22548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1348.160826][T22548] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 1348.166237][T22548] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 5d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 7a 4f 3e f8 85 [ 1348.185846][T22548] RSP: 0018:ffffc900116ff070 EFLAGS: 00010206 [ 1348.191914][T22548] RAX: ffffffff8981db13 RBX: 00000000000001a8 RCX: 0000000000080000 [ 1348.199882][T22548] RDX: ffffc9001ebfc000 RSI: 00000000000002d4 RDI: 00000000000002d5 [ 1348.207865][T22548] RBP: dffffc0000000000 R08: ffff88807a4e1e00 R09: 0000000000000002 [ 1348.215854][T22548] R10: 00000000ffffffff R11: ffffffff8981daf0 R12: dffffc0000000000 [ 1348.223822][T22548] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888021b8c000 [ 1348.231788][T22548] FS: 00007f135bdae6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1348.240712][T22548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1348.247292][T22548] CR2: 00007f135b1a72c0 CR3: 000000004acf6000 CR4: 00000000003526f0 [ 1348.255258][T22548] DR0: 000000000000000d DR1: 0000000000000000 DR2: 0000000000000000 [ 1348.263220][T22548] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1348.271189][T22548] Call Trace: [ 1348.274465][T22548] [ 1348.277397][T22548] qdisc_tree_reduce_backlog+0x299/0x480 [ 1348.283036][T22548] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 1348.288778][T22548] fq_codel_change+0xa96/0xef0 [ 1348.293541][T22548] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1348.299087][T22548] ? __pfx_fq_codel_change+0x10/0x10 [ 1348.304458][T22548] ? __sock_sendmsg+0x219/0x270 [ 1348.309318][T22548] fq_codel_init+0x355/0x960 [ 1348.313916][T22548] ? lockdep_rtnl_is_held+0x26/0x40 [ 1348.319111][T22548] ? __pfx_fq_codel_init+0x10/0x10 [ 1348.324217][T22548] qdisc_create+0x7a9/0xea0 [ 1348.328718][T22548] tc_modify_qdisc+0x1426/0x2010 [ 1348.333658][T22548] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1348.338945][T22548] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1348.344222][T22548] rtnetlink_rcv_msg+0x77c/0xb70 [ 1348.349158][T22548] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1348.354263][T22548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1348.359726][T22548] netlink_rcv_skb+0x205/0x470 [ 1348.364488][T22548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1348.369939][T22548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1348.375231][T22548] ? netlink_deliver_tap+0x2e/0x1b0 [ 1348.380436][T22548] ? netlink_deliver_tap+0x2e/0x1b0 [ 1348.385632][T22548] netlink_unicast+0x758/0x8d0 [ 1348.390397][T22548] netlink_sendmsg+0x805/0xb30 [ 1348.395164][T22548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.400450][T22548] ? aa_sock_msg_perm+0x94/0x160 [ 1348.405391][T22548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1348.410679][T22548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.415969][T22548] __sock_sendmsg+0x219/0x270 [ 1348.420664][T22548] ____sys_sendmsg+0x505/0x830 [ 1348.425429][T22548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1348.430720][T22548] ? import_iovec+0x74/0xa0 [ 1348.435224][T22548] ___sys_sendmsg+0x21f/0x2a0 [ 1348.439904][T22548] ? __pfx____sys_sendmsg+0x10/0x10 [ 1348.445121][T22548] ? __fget_files+0x2a/0x420 [ 1348.449720][T22548] ? __fget_files+0x3a0/0x420 [ 1348.454422][T22548] __x64_sys_sendmsg+0x19b/0x260 [ 1348.459359][T22548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1348.464816][T22548] ? rcu_is_watching+0x15/0xb0 [ 1348.469574][T22548] ? do_syscall_64+0xbe/0x3b0 [ 1348.474264][T22548] do_syscall_64+0xfa/0x3b0 [ 1348.478763][T22548] ? lockdep_hardirqs_on+0x9c/0x150 [ 1348.483979][T22548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.490040][T22548] ? clear_bhb_loop+0x60/0xb0 [ 1348.494714][T22548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.500605][T22548] RIP: 0033:0x7f135af8e929 [ 1348.505018][T22548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.524630][T22548] RSP: 002b:00007f135bdae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1348.533128][T22548] RAX: ffffffffffffffda RBX: 00007f135b1b6080 RCX: 00007f135af8e929 [ 1348.541091][T22548] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1348.549057][T22548] RBP: 00007f135b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1348.557023][T22548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.564985][T22548] R13: 0000000000000000 R14: 00007f135b1b6080 R15: 00007f135b2dfa28 [ 1348.572950][T22548] [ 1348.575969][T22548] Modules linked in: [ 1348.579991][T22548] ---[ end trace 0000000000000000 ]--- [ 1348.585443][T22548] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 1348.590833][T22548] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 5d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 7a 4f 3e f8 85 [ 1348.610447][T22548] RSP: 0018:ffffc900116ff070 EFLAGS: 00010206 [ 1348.616511][T22548] RAX: ffffffff8981db13 RBX: 00000000000001a8 RCX: 0000000000080000 [ 1348.624491][T22548] RDX: ffffc9001ebfc000 RSI: 00000000000002d4 RDI: 00000000000002d5 [ 1348.632495][T22548] RBP: dffffc0000000000 R08: ffff88807a4e1e00 R09: 0000000000000002 [ 1348.640477][T22548] R10: 00000000ffffffff R11: ffffffff8981daf0 R12: dffffc0000000000 [ 1348.648526][T22548] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888021b8c000 [ 1348.656493][T22548] FS: 00007f135bdae6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1348.665429][T22548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1348.672016][T22548] CR2: 00007f135b1a72c0 CR3: 000000004acf6000 CR4: 00000000003526f0 [ 1348.679994][T22548] DR0: 000000000000000d DR1: 0000000000000000 DR2: 0000000000000000 [ 1348.687988][T22548] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1348.695966][T22548] Kernel panic - not syncing: Fatal exception in interrupt [ 1348.703586][T22548] Kernel Offset: disabled [ 1348.707916][T22548] Rebooting in 86400 seconds..