last executing test programs: 17.015410377s ago: executing program 3 (id=926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x64, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14}}], 0x18, 0x48c4}, 0x20040091) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c"], 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x66, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2800, 0xa0102}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xeb}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001800)=@mangle={'mangle\x00', 0x10, 0x6, 0x1540, 0xd0, 0x13c8, 0x11d0, 0x11d0, 0x12a0, 0x1498, 0x1498, 0x1498, 0x1498, 0x1498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x40, {0x9faf}}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0xe, 0x0, 0xb5, 0x8, 0x280d}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15a0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="070800ffb6ccd06d761ab1cc86dd", 0xe, 0x44000041, &(0x7f00000001c0)={0x11, 0xf5, r9, 0x1, 0x4, 0x6, @local}, 0x14) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r11, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r11, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close_range(r1, 0xffffffffffffffff, 0x0) 14.196603282s ago: executing program 3 (id=935): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="3000000012000100000000000000ffa100000000", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x4080) 12.699507529s ago: executing program 3 (id=939): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x1, 0xf8, 0x9d, 0x1e, 0xfe, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x4, 0x4}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x6, 0xcd, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x7, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xf8}, [@extension_unit={0xa, 0x24, 0x8, 0x6, 0x49, 0x6, "dbe4e2"}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x1, 0x9, "bde126f2"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x5, 0x2, [0x7, 0x2], 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x3, 0x0, 0x9, 0x2}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0xfffb, 0x9, 'i'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0xb, 0xff}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x0, 0x1, "8d703ae9e429"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x9, 0x6, 'Y', "95"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x81, 0x4, 0x1a, {0x7, 0x25, 0x1, 0x0, 0xfb, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xfa, 0x0, 0x87, {0x7, 0x25, 0x1, 0x9a3ad2f348d76b8d, 0x10, 0x9}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xe1, 0x5e, 0xe2, 0x40, 0x1}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0xa, 0x6, 0x3, 0x6}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2409}}, {0xdc, &(0x7f0000000200)=@string={0xdc, 0x3, "bce18bba15d5b7c65d07e2a17fed74db3ede03383d332412076329a42f4ca823c5b7ed14aaee1a1655f9ac0c00bb6209a3d65e62d802d873cb679242db86af37e7f4bd9614e134467d21fe6f54b23e27af722d827156b63aaba715ab2ade93e9cb581807269a05c118fc6f19a932a8309fc7a669cb44997fc04f6ce9cd1d11ef4672b98202eab422cb378122df9e7ba83e3c4406d2527f0bc60bf6108a1dc8fbdbfdc74a8205484a275a8b6fe0619dab36e36a89c25e9a969632d7de97b84addc1c42d5ca1035fce1d05ded5dd5a7e536bfe90ae148fc4090307"}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x32a}}, './file0\x00'}) syz_usb_connect$uac1(0x4, 0xcd, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x5, 0xe0, 0xf9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}, [@processing_unit={0xd, 0x24, 0x7, 0x5, 0x5, 0x4, "4b6b5e4836e6"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x8, "870352a0"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x5, 0x1, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2, 0x1002}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x10, 0x4, 0x10, 0xb0, "b9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x0, 0x2, "dbc4"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x4, 0x4, "81122a0c3218ba81"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x3, 0x40, "8c91"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x1, 0x40, {0x7, 0x25, 0x1, 0x0, 0x1, 0xe3b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2c, 0x7, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x57, 0xf, 0x4, {0x7, 0x25, 0x1, 0x0, 0xe2, 0x7400}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x7b1, 0xfa, 0x2, 0x0, 0x8, 0xc}, 0x1a, &(0x7f00000004c0)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0xa, 0x4, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0xe, 0x7}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3009}}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) dup2(r0, r1) 11.333603737s ago: executing program 3 (id=947): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000dc0)="388ba770da93fd1a3ee15ea38a0697d02259057b8d2dac7e26b78fa9a3916297f8313f09bcd7061d32fd51e6261e2512ea759f45755ec05df8a5dfb62ec2f15bd719c17da4628b1b2f2dee7cb2e089f9ebb19bfa282765eb4f06a5be3d4cbcee3dd7e50ef31f4bd7cb7c8c9797c3810e7d6f2af380622795817d0938d68025979d0267fdb5ce13c5b52f4a2ccdbd815d6c3f32d383e2326835d7bbba1fceebbc33c4527f007732ec2bbf0947452ec138dac5c4862da1487114118613d41b8fc103eed5bc4dd9055ba74cba38b4057b", &(0x7f0000000ec0)="7a1b44af124c37685c7a780930efb403eb940d9074b2d1aff4356dcf89d0885654"}}, &(0x7f00000002c0)) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={r4, r7, r8}, 0xc) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) 8.425320694s ago: executing program 1 (id=955): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0x0, 0x7, 0x6, 0xc, 0xffffffffffffffff}, @cb_func={0x18, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x2, 0x6, 0xa, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x2, 0x4, 0x3, 0x9, 0x30, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x6, 0x5, 0xb, 0xfffffffffffffff4, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8d}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000240)=0xc) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0xd00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 8.41534445s ago: executing program 0 (id=956): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) read$nci(r5, &(0x7f0000002780)=""/3, 0x3) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r6, 0x540b, 0xfffffffffffffffe) request_key(0x0, &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000180)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6j\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) socket$key(0xf, 0x3, 0x2) 8.109462572s ago: executing program 1 (id=958): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) rt_sigaction(0x14, &(0x7f0000000500)={&(0x7f0000000400)="c402a2f7d7460f1c2bdfd5f2f20f88feefffff460f38e78f69d8909ca3000810ffa5c43b3be5c4f30f1ed613bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x4000000, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000001540)) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000140)="0104e1812091c2245420a5686397d50f0f00205be5d9d15bc3633ab3e5b6f596c523431ea06a194f219e1bd7f9da2e81cd3e6eabf6abb491b3681604", 0x3c) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000031c0)=""/4089, 0xff9) preadv(r5, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) 7.777891891s ago: executing program 3 (id=961): r0 = socket$inet(0x2, 0x1, 0x0) r1 = gettid() socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x7, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x334, 0x0, 0x0, 0xc084}, 0x8044) 7.633011581s ago: executing program 2 (id=963): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x5, &(0x7f0000000000)=[{0x1000, 0x0, 0x1, 0x5}, {0x9, 0x1, 0x1, 0x5}, {0x4, 0x0, 0x0, 0x7fffffff}, {0x7, 0x8, 0x6, 0x1}, {0xffbc, 0x1, 0x9}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x8, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) chdir(&(0x7f0000000240)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c0022000600000000000000080004008100000005002400010000000500160003"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"], 0x310) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x501000, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000010}) socket$pppoe(0x18, 0x1, 0x0) 7.370724385s ago: executing program 4 (id=964): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x64, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14}}], 0x18, 0x48c4}, 0x20040091) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c"], 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x66, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2800, 0xa0102}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xeb}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001800)=@mangle={'mangle\x00', 0x10, 0x6, 0x1540, 0xd0, 0x13c8, 0x11d0, 0x11d0, 0x12a0, 0x1498, 0x1498, 0x1498, 0x1498, 0x1498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x40, {0x9faf}}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0xe, 0x0, 0xb5, 0x8, 0x280d}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15a0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="070800ffb6ccd06d761ab1cc86dd", 0xe, 0x44000041, &(0x7f00000001c0)={0x11, 0xf5, r9, 0x1, 0x4, 0x6, @local}, 0x14) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r11, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r11, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close_range(r1, 0xffffffffffffffff, 0x0) 7.217083674s ago: executing program 2 (id=965): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c", @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.068024702s ago: executing program 2 (id=966): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="4dcdc7c6223e00000000ffff80f3", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 5.75755322s ago: executing program 2 (id=967): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0xfffffffffffffd29) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000b71000/0x2000)=nil, 0x2000}, 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0ea6"], 0x0) 5.481736505s ago: executing program 0 (id=968): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b"], 0x38}, 0x0) 5.300255941s ago: executing program 4 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f21890ece04e068329ee3663b"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x80) 5.253354875s ago: executing program 0 (id=970): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') timer_gettime(r6, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000480)={r4, 0xfffe, 0x30, 0x20000000000005, 0x3b0000}, &(0x7f00000009c0)=0x18) rmdir(&(0x7f0000000100)='./file0\x00') 5.142729263s ago: executing program 4 (id=971): r0 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0xf, 0x1, 0x67, 0x40, 0xa257, 0x2013, 0xd0db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4a, 0x0, 0x0, 0x55, 0xd3, 0x7e}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000b40)={&(0x7f0000002400)="40b9b0a1bcecfc53a0f47961bf4c55b2d573534ff295913be962d846726aa6ef8a5eddfbece37230628d77f65febad9f23dd2f47f06cdaac7cf31ecf4642cb5640cf4e6e5e55f6c865385b688d15a3855058fc17699b54cdaacfb3f41b4abc599d5112824509eba820b4", 0x6a, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000ac0)={&(0x7f0000000980)=[0x0, 0x0, r1, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000023c0)={0x0, 0x0, 0x43e, 0xc5c}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x8c, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000640)=0xfffff801) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0xf000, 0xd000, 0x0, 0x0, 0xff, 0x0, 0xff, 0xfd, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x3, 0x0, 0xff, 0x4, 0x80, 0xe, 0x0, 0x7}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0xfd, 0x80}, {0xdddd1000, 0x0, 0xb, 0xa, 0x0, 0x0, 0x3, 0x0, 0x80}, {0x4cbe9c0859d42495, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x6}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8000000, 0x70, 0x7, 0xf801, 0x0, [0xd2, 0xffffffffffffffff, 0x1]}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000024c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x2dde, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x40}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000100)="e06b927aa2dd0b4b313c338a5ba07c04a0c524acb134b34dc2c776d0a6731aae9cff6c897f4a5ad39aa1cad241b5673678234ef0e6b7918776969a173cd8a42e37964b6184099609c8cfd5e846b4cfb2440ffc5f1c40ed9e8f6b802150bde8b1ed5c6c7d2a7b6425d097a1e86764ab35634ae174f3b35d1f21ef605076e9e526362b0da084", 0x85}, {&(0x7f00000001c0)="d64f1882c872be938d7749bf7e46567aed5d0287e9e77c8134cef6e655d18df198043157a806ba5ef53be0a013a6e5b014d1133df973bcbee77f19b079432cbb7793cac95040f5e20859774df2d3c84ad02c5882e21530112ef521c5dc1c645162b43e327fa65bb88a6a8c94bb11490ed1fbf1dea318ac6514cacea00a8418f709e6fa3a9d333a7525f282595b00178d8aed0fdf2d0f18ed0b8dfb843cce8aa7223d9b3ea77d72343912f7157f9126479bda804932cef5236a732ea92972d341cce037cf23e1cabe8cf8ab", 0xcb}, {&(0x7f00000002c0)="57a8f5c0fcf40161e1f0e7355fac6472fc1caf8e5cd847d339dfa58efd75fe6c8a1f93877beb654f9237c54a15f5297dcbd64ab3b1a05b9005a74c7beb34d4c5ee453123a870c368e321784dc21350b88a5a1662e188ece58992f9b77aa676043eaa23fa3a227268fde920065c4ff5418e42bd21b9788c3a5a59718aa9c7836e2203b7488654372d45663497443499229ba1128ee1dcca29b65bcbc3ad4cae303f3f11d24603ef014797b5b94de16b1f89894ff43b79", 0xb6}, {&(0x7f0000000480)="2799fed8a2e4909f0dab97085c9091899619627bcb508e1a950ec7f0f7461545ca9613a79a4663bf7943374bd48a81ebff6fdf08515611017ff86addf656801268baba1ba7ade44e14ca089ddccc0d67aa2a1f724d851a0189e5284b57957e6681b60be111e118c0bee3265f024c6281d5de11177dc0593f24c05d59bca1cc850a5a143afbadba05426de4cbee7900bf3d3d98dd703e6bceb615060cee25921b283075adde543d5619c597833246d59776ee6535a421db290f42c4e2a2861d9d6133017b4f035260af321e722f61726191847f2b2ec85139f953cfca4ec7f5c0d2dd7d56c37bef9d89ff1415ca", 0xed}, {&(0x7f0000000380)="ea2ac2aa031d3c21d743422aee0aa95f3dd3965a608751cf9e5a623235ede7dad4a6b3ae52e6114b16a17661589d867392ef90b06e9f19d8eac16649d30c762673c0b8d884b7abb5222d816acb7be5397569fc74c3639f1fd27be948800f03e62633885b252cc6dc57fbc5433b1007838c9dad78ce4d9ca78c77f4087967ad6b710eb2901de06bbfe2fb7e640680be96bbe7d626970ee7a1dafe41a68c8b96f0f07d89bd646e80fcd122", 0xaa}, {&(0x7f0000000580)="cf43bf4b36e840ed269614c47711fb0d500783025d90211150505906a82170cb057fb43c05ebdb3310abfabd97bdb048f1185563ab49f7a4cdce29ab62e4becdbf6719ad0c70b4fff4b6976b1cfb408db7aa173920a091a77b054ab4ebe09c02b04ddaa4a1a46820075ce644d27e649c56079280442fe54fa115948cc013dbbe7048404c5f507a31c00914025e27ca9886e2eca72934c449913abbea78a34214fcc2d2f1376e0487b4f6eac6f4738559ccc27dee2fb6dde0e3ed296fc7b663739cfd2a7f240b2b3fb5cbd388ee0321d3cc9a9d9cee1978c95c6832b55367ec4e8eac780185b64cd681a0e5021947", 0xee}, {&(0x7f0000000680)="6bbd069aef287da810669944dc38fd0d9dffaaab99316a49bc95c6dabf8280fc37ede96ba836c6072820f9edc269908bb688390e3ea2032a100e3d2c0724bc2d8754934d1d699b8d4fd0bb1af07a51157723b077e645a55fd310978f2ed237ce7fa55746eae1f26bc36dac7129e96620d2d248aece7ee5e4d11f104b6e12e2d747c3c809d64889fc", 0x88}, {&(0x7f0000000740)="09b520eabaf469c682bf7fe8a202c5c6aa32433c30d1d9c4cb8a7e4282fa0267d12975928d47b4ca", 0x28}, {&(0x7f0000000780)="40392ec3bafe8e6e065ca7adfcb3e17121c3d6cd2e081e628f022cff508589176531b38b84d2f9ec505a76d2d133d35d125001e174fe505bbe593f2c8d2c9e8717e23553f41b9d3af9c5b42038ba5e3a038236c212848312cfd5c1e127020fb38b1cc8e2e1828c5c4801f3c3323306be5e312613908c1dfb93877fc38b96e3778462afb497eef53bd03ef72897eb9e5c836ee9f30abc910ea47bc4423c6a74b578822e2acffcc17d05e80567a13a354bb3265ba5323c431ca27b8dcbdb4086d707897f87e4be6d36396da3d430d8cfe0cf363ed8c732bb3918628c84c9b4e50a5935f6ee03e6bafd12031058140f79634cb7ccad28aa69", 0xf7}, {&(0x7f0000000b80)="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", 0x1000}], 0xa}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x6, @local, 0x8089}, 0x1c, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000a00)="ec7a4b3af21e0e90484ed02d92c6d951c144028adef404daf38d8922a0f449b77e21f73b0a2dbaffbafc0609fbaca8b1a66a62fe88d72f81d8f8ce572334cebd014fbdadc3f604b0a875ad43ea4ad6d2ad38c0a386dde95e429fc8fe25f7ae01dd7b6ef31879063a7d392f090b716adf37613b024bf55ed09f65e396c1774dbef4", 0x81}, {&(0x7f0000001b80)="0725c37f005b2a81863ecb1fedec901b16e5c1f062cb978f04f44aa5c650394b53ee3127ee524d8325eeb65773dcd2932a32450e68b10713c129ce6bc3264421c4f9d3d8e5023db082b3a0564c3548591864bb20f6c99d2db043680d11078b10158c6f8fdd1b913444ab12dff08b01ced5464b7409378cde6b96f8dcd8ddf995d9b5da79da", 0x85}, {&(0x7f0000001c40)="0e41d131074335cdb2a686dd6b628f8e602d673a49734cb27deb30b8731402594605884935810e93ecd3a23549e4fdf9671ba733735b95d1869c40e96c7e6a7a61d7c3f4c897df55ab589b06d68850912988b81c289077950e8b8b50f55e2df7c5c7c677a0a2834acec517d80fb727617680a97e1b551eb432bab84dfa44e665645809848f8ff85300e23841ef92e8da76b6e6270edd91b7c3323dc3b94467982155e847bafdc7a1", 0xa8}, {&(0x7f0000000ac0)}, {&(0x7f0000001d00)="5546f04b2b7aa1884e7bef7fbe67aad07dc02dda5ca8e0f83f2cf782338b1092f363904ec681ef72f21f7dd46faa348d0ac8d758dc526eca0db76516b986bbfd0d525775b6d4fc03ec715f3c8b59a9f2406c6699911a1f097154dde4b9a475ac99823d52d1f1a7dd98a87ed689444d12c5ee8d8d882130a1dc60d20e2642b89a645fb91e701f900955967b12372da8ecd859ae93cf804f6c4ea750ca7d584aea688a152859af6f14d2d173bae9e355a7b6", 0xb1}, {&(0x7f0000000b00)="da7a60", 0x3}], 0x6}}, {{&(0x7f0000001e40)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001e80)="623c9146c89c0a9a32160bd34d3cbb4a0492e1b69dd5d3254c88935fce811894ad917f6281438d90d056c6c328f0e01a8dac584977ba61b85b2a63dcdd8b99704e4f5dcd8d663f387a995183fb7d4651bb0134e63a137aa25b6eb36e7f8d08043fc5d176cc1c0fbc22fea2a3a81560a6963ea8d8098132410dcd29b1ce9717a3a54bf40bb006029534045440", 0x8c}, {&(0x7f0000001f40)="4eb1bd9fa6b35d1b35dea81d27f037b10c3af67f0eea407532f69b9928bbb1f2ed419d045e49cea80bcbfd60aa92d82adcc686416535", 0x36}, {&(0x7f0000001f80)="a770a75e4802275c2b4358d15f9277cce65960f2a4e18477fa985445e5351610c03d23eeaddd9941bacad893e0d9c7d37458b4c7a72cca6119be0fb6d20f283eb652a5ab7f4fd942cc4ba80fb043fde25e26dfa3b2a2e814e50b6969072ffe5cde69b024d7648fa320fd86de8f7908545747f7694672bea63266bc0f71d931e261d946b9fa91bd53299c49a2b3f3cb9741fe29e07c4f7d298afcf1c6cf158a3189827d910037513b41027e16dd643e64a569b89f6b499dd281a7865a2e50717d6d886eb2ff498796610df5c4887133ddf2dde54d808f22b8823ccd319a16ed6afc609890190fb4857ce42a0d19b317ce", 0xf0}], 0x3, &(0x7f00000020c0)=[@tclass={{0x14, 0x29, 0x43, 0x900}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}], 0x30}}, {{&(0x7f0000002100)={0xa, 0x4e22, 0xb25, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000002140)="9dd8003d8a4c605a013fe5670bd3c3a498e16dc5cb0db0a768fd8272f84092e64393e9be1c3ea7dc994767fc8f2cbdbb0e36a112f926a0a3c0249692783b58253b0d95f3758416a2fec961101fea87023758cadb3f2deea1099fdb05605e6517d39cdf8f47d4e9476c043ad2d094e84f14b1c3c50ca01d1f8fbae3123fbd8efdae4dd2761c389982bb6bb38e9ca33bd7ba1ce24c1218cbfeccc16400596af50ebb6b2ce1904b632b7fdaf1fe159008cca8d1644b3d98bad5e6bfda832bc7a9ae764360e0cac7e1ddba", 0xc9}], 0x1, &(0x7f0000002280)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit_2292={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x2b, 0x7, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x0, [0xe1, 0x3, 0x38e7, 0x80, 0x2]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x0, 0x3, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @local, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}], 0x118}}], 0x6, 0x0) 4.924934964s ago: executing program 1 (id=972): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000dc0)="388ba770da93fd1a3ee15ea38a0697d02259057b8d2dac7e26b78fa9a3916297f8313f09bcd7061d32fd51e6261e2512ea759f45755ec05df8a5dfb62ec2f15bd719c17da4628b1b2f2dee7cb2e089f9ebb19bfa282765eb4f06a5be3d4cbcee3dd7e50ef31f4bd7cb7c8c9797c3810e7d6f2af380622795817d0938d68025979d0267fdb5ce13c5b52f4a2ccdbd815d6c3f32d383e2326835d7bbba1fceebbc33c4527f007732ec2bbf0947452ec138dac5c4862da1487114118613d41b8fc103eed5bc4dd9055ba74cba38b4057b", &(0x7f0000000ec0)="7a1b44af124c37685c7a780930efb403eb940d9074b2d1aff4356dcf89d0885654"}}, &(0x7f00000002c0)) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={r4, r8, r9}, 0xc) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) 4.109461829s ago: executing program 2 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5000000}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 3.704602029s ago: executing program 2 (id=974): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000008480)=[{{&(0x7f0000000300)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/250}, {&(0x7f0000000680)=""/207}, {&(0x7f0000000580)=""/166}, {&(0x7f0000000780)=""/131}]}, 0x81}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/4096}, {&(0x7f0000001840)=""/243}, {&(0x7f0000000380)=""/88}]}, 0x2}, {{&(0x7f0000001940)=@un=@abs, 0x0, &(0x7f0000002e40)=[{&(0x7f00000019c0)=""/239}, {&(0x7f0000001ac0)=""/234}, {&(0x7f0000001bc0)=""/201}, {&(0x7f0000001cc0)=""/73}, {&(0x7f0000001d40)=""/205}, {&(0x7f0000001e40)=""/4096}], 0x0, &(0x7f0000002ec0)=""/55}, 0xffffffff}, {{&(0x7f0000002f00)=@can, 0x0, &(0x7f0000003300)=[{&(0x7f0000002f80)=""/244}, {&(0x7f0000003080)=""/220}, {&(0x7f0000003180)=""/140}, {&(0x7f0000003240)=""/141}], 0x0, &(0x7f0000003340)=""/55}, 0x4}, {{&(0x7f0000003380)=@isdn, 0x0, &(0x7f0000005880)=[{&(0x7f0000003400)=""/93}, {&(0x7f0000003480)=""/4}, {&(0x7f00000034c0)=""/35}, {&(0x7f0000003500)=""/206}, {&(0x7f0000003600)=""/4096}, {&(0x7f0000004600)=""/4096}, {&(0x7f0000005600)=""/220}, {&(0x7f0000005700)=""/63}, {&(0x7f0000005740)=""/233}, {&(0x7f0000005840)=""/29}], 0x0, &(0x7f0000005940)=""/155}, 0x9}, {{&(0x7f0000005a00)=@phonet, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000005a80)=""/204}, {&(0x7f0000005b80)=""/239}, {&(0x7f0000005c80)=""/50}, {&(0x7f0000005cc0)=""/4096}, {&(0x7f0000006cc0)=""/34}, {&(0x7f0000006d00)=""/69}, {&(0x7f0000006d80)=""/117}, {&(0x7f0000006e00)=""/153}, {&(0x7f0000006ec0)=""/4096}], 0x0, &(0x7f0000007f80)=""/48}, 0x5}, {{&(0x7f0000007fc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0, &(0x7f0000008100)=[{&(0x7f0000008040)=""/132}], 0x0, &(0x7f0000008140)=""/90}, 0x100}, {{&(0x7f00000081c0)=@nfc_llcp, 0x0, &(0x7f0000008400)=[{&(0x7f0000008240)=""/61}, {&(0x7f0000008280)=""/84}, {&(0x7f0000008300)=""/170}, {&(0x7f00000083c0)}], 0x0, &(0x7f0000008440)=""/51}, 0x7}], 0x3fffffffffffdb0, 0x40002112, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000ff3000/0x1000)=nil, 0x1000) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x200000, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000640)=0x2, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000280)=[{r8}], 0x1, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000008680)={{0x8, 0x6, 0x1, 0x8001, 'syz0\x00', 0x7}, 0x6, 0x0, 0x3, r7, 0x4, 0x0, 'syz1\x00', &(0x7f00000083c0)=['\x00', '\\\x00', '\xff\xff', '+!)\'\x00'], 0xa}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 2.670694871s ago: executing program 4 (id=975): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0xe, 0x16, {0x16, 0x7, "bf4410c3cdc0c1bbf2a24c4a8b72a159358eeff4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x0, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "1d012147c8c4"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x39, 0xe, 0x3, 0xc2}, {0x6, 0x24, 0x1a, 0x80, 0x20}, [@country_functional={0xc, 0x24, 0x7, 0x6, 0x8001, [0x401, 0x8, 0x6]}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0xf, 0x2}, @obex={0x5, 0x24, 0x15, 0x3e0}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3cf, 0x4, 0xf, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xd8, 0x8, 0x4, 0x40, 0xd}, 0xad, &(0x7f0000000180)={0x5, 0xf, 0xad, 0x2, [@generic={0x84, 0x10, 0x2, "95c0fba426def3057edc7fce286c51d732ddb17632d66ed80eb5d3d07d22a25f66a22320bffe0b1faa84d938e3bebfdc0089ff544443032746cd6aada990948e05368d02f753efdbf3ecdfde339e1d2ed4da3513a87a0f37d0e0a6a265dbabf4c11a2a5ff4651df2ec6ee31d46c895cd48e6ca550eaa75235f6f050aa0fb0184db"}, @ssp_cap={0x24, 0x10, 0xa, 0xfc, 0x6, 0x6, 0x0, 0x2, [0xf, 0xff000f, 0xdf80, 0xc000, 0xc0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000004c0)={0x14, &(0x7f0000000400)={0x20, 0x6, 0x4e, {0x4e, 0x24, "cbb62bfe3d59450abe7ddee06b16cc8aa2c30124d11b118fc9743b12f5f5882402f5ef0729338613db85feb8177df843f0637207e7845c3212d89084eec903d929bfb9da66ce31ad0569a610"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0xf, 0xa8, "7d1014d3a4b7d2cbbc4d477dbd4ef79ba6c45a27c067fdf3bc860626a974c84e38166e64ea11d634a434ccc2de75fec682384d6fb32f2acc0882c2e4a3ed0bc8e43350bbb5e2893d3a23ce23222cf96700cd88f58051081a1241d37499f7124987db25fe7292920bed60410c206616d440c69d17f244d4ec59365987015b1e76126380f90b8c2dcf7a86d287e661058157c11c67936673824e83b8d6fbd9bc4844d5f142e7cfd9ff"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x5, 0x1c20, 0x9b37, 0x1, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x80, 0x8}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000740)={0x20, 0x89, 0x2, 0x1}}) 2.017368894s ago: executing program 0 (id=976): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup=r0, r0, 0x6, 0x1007, r0, @void, @value=r0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000300"}}) 1.580275503s ago: executing program 0 (id=977): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) pipe(&(0x7f0000001800)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_names\x00') socket(0x10, 0x803, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03120000000000002c0012800c0001006d6163766c616e001c000280080007000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.017857244s ago: executing program 1 (id=978): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2, 0x0, 0x0, 0x24}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935589db15a23319e3f64fdf5f8", 0x20}], 0x1}}], 0x2, 0x4004040) 829.867283ms ago: executing program 0 (id=979): socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) (async) r1 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r1, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) (async) r2 = eventfd2(0x0, 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x0, 0x30, 0x5, "3e961d3e53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x400}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 717.440927ms ago: executing program 1 (id=980): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c", @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 424.368619ms ago: executing program 4 (id=981): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x4001, 0x3, 0x320, 0x1f8, 0x0, 0x148, 0x0, 0x148, 0x288, 0x240, 0x240, 0x288, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x198, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x11e, 0x10, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x5243, 0xd, [0x10, 0x4, 0x41c, 0xc, 0x3e, 0x31, 0x8, 0x31, 0x33, 0x10, 0x3e, 0x2b, 0x40, 0x32, 0xf, 0x15], 0x2, 0x8, 0x100}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000480)=""/39, 0x27}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x3, 0xa2e1, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000000c0)="ad060000", 0x4) sendmsg$alg(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c00)="fe0000000000000400", 0x9}], 0x1, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x2000) recvmmsg(r7, &(0x7f00000003c0), 0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) preadv(r8, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000600)={{0xa, 0x4e21, 0x5, @mcast2, 0xe0}, {0xa, 0x4e21, 0xae, @empty, 0x6}, 0x1, {[0x9, 0xffffffdf, 0xfffff0ec, 0x6, 0xdc, 0x7, 0x5, 0x40]}}, 0x5c) preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/129, 0x81}], 0x1, 0xfffffffb, 0x4) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r11, 0x3b72, 0x0) 127.479668ms ago: executing program 1 (id=982): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x0, 0x2}, 0xffffffffffffffe6) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40c0080) sched_setattr(0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000000c0)={0x3ff, 0x7c3, 0x8001, 0x5, 0x12, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) 0s ago: executing program 3 (id=983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babcf0005c0016805800018054000c8014"], 0x98}}, 0x40000) kernel console output (not intermixed with test programs): 23 using dummy_hcd [ 276.116539][ T5893] r8152-cfgselector 5-1: Unknown version 0x0000 [ 276.256265][ T5893] r8152-cfgselector 5-1: config 0 descriptor?? [ 276.290746][ T7101] usb 3-1: config 0 has no interfaces? [ 276.304072][ T7101] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 276.313609][ T7101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.323288][ T7101] usb 3-1: Product: syz [ 276.346291][ T7101] usb 3-1: Manufacturer: syz [ 276.383845][ T7101] usb 3-1: SerialNumber: syz [ 276.796652][ T7101] usb 3-1: config 0 descriptor?? [ 278.365184][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 278.390295][ T7954] vlan2: entered promiscuous mode [ 278.435216][ T7954] batadv0: entered promiscuous mode [ 278.812841][ T7125] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 278.958854][ T5838] usb 4-1: USB disconnect, device number 35 [ 278.972831][ T7125] usb 2-1: Using ep0 maxpacket: 16 [ 278.989035][ T7125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.032841][ T7125] usb 2-1: config 0 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 279.093053][ T7125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.112818][ T7125] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 279.142356][ T7125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.218798][ T7125] usb 2-1: config 0 descriptor?? [ 279.417093][ T5893] r8152-cfgselector 5-1: Unknown version 0x0000 [ 279.423632][ T5893] r8152-cfgselector 5-1: bad CDC descriptors [ 279.466955][ T5893] r8152-cfgselector 5-1: USB disconnect, device number 35 [ 279.629237][ T7097] usb 3-1: USB disconnect, device number 23 [ 279.725489][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 279.879657][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.977493][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.112843][ T5838] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 280.285420][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.336644][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.347055][ T5838] usb 1-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 280.366651][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.382469][ T5838] usb 1-1: config 0 descriptor?? [ 280.402989][ T47] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 280.515957][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 280.527764][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 280.593222][ T5838] usbhid 1-1:0.0: can't add hid device: -71 [ 280.610589][ T5838] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 280.659853][ T5838] usb 1-1: USB disconnect, device number 26 [ 280.711443][ T47] usb 4-1: config 0 has no interfaces? [ 280.845656][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 280.890929][ T7125] usb 2-1: string descriptor 0 read error: -71 [ 280.897794][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.152915][ T47] usb 4-1: Product: syz [ 281.157202][ T7125] usb 2-1: USB disconnect, device number 35 [ 281.163737][ T47] usb 4-1: Manufacturer: syz [ 281.168376][ T47] usb 4-1: SerialNumber: syz [ 281.324125][ T8007] loop8: detected capacity change from 0 to 2 [ 281.566441][ T47] usb 4-1: config 0 descriptor?? [ 281.578423][ T8007] Dev loop8: unable to read RDB block 2 [ 281.602947][ T8007] loop8: unable to read partition table [ 281.615851][ T8007] loop8: partition table beyond EOD, truncated [ 281.627306][ T7101] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 281.637494][ T8007] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 282.081525][ T7101] usb 5-1: config 0 has no interfaces? [ 282.104217][ T7101] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 282.130517][ T7101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.170868][ T7101] usb 5-1: Product: syz [ 282.188608][ T7101] usb 5-1: Manufacturer: syz [ 282.247810][ T7101] usb 5-1: SerialNumber: syz [ 282.269516][ T7101] usb 5-1: config 0 descriptor?? [ 282.494148][ T8002] veth1_to_team: entered promiscuous mode [ 282.602825][ T7101] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 282.774723][ T7101] usb 2-1: config 0 has no interfaces? [ 282.902898][ T8002] team_slave_1 (unregistering): left promiscuous mode [ 282.920490][ T7101] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 282.931656][ T8002] team0: Port device team_slave_1 removed [ 282.939660][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.999430][ T7101] usb 2-1: Product: syz [ 283.003768][ T7101] usb 2-1: Manufacturer: syz [ 283.008694][ T7101] usb 2-1: SerialNumber: syz [ 283.028479][ T7101] usb 2-1: config 0 descriptor?? [ 283.285386][ T5893] usb 2-1: USB disconnect, device number 36 [ 283.761071][ T47] usb 4-1: USB disconnect, device number 36 [ 284.034782][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 284.068026][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.604'. [ 284.489482][ T47] usb 5-1: USB disconnect, device number 36 [ 284.829144][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.610'. [ 284.960981][ T8049] debugfs: Directory '!' with parent 'ieee80211' already present! [ 285.010386][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 285.019503][ T47] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 285.064507][ T8051] vlan2: entered promiscuous mode [ 285.091433][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 285.168633][ T8053] vlan2: entered promiscuous mode [ 285.202925][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 285.214888][ T47] usb 4-1: config 0 has no interfaces? [ 285.220612][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.237960][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.268179][ T47] usb 4-1: config 0 descriptor?? [ 285.688967][ T8067] loop2: detected capacity change from 0 to 7 [ 285.752770][ T5838] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 285.763622][ T8067] Dev loop2: unable to read RDB block 7 [ 285.769257][ T8067] loop2: AHDI p2 [ 285.773080][ T8067] loop2: partition table partially beyond EOD, truncated [ 285.974388][ T5838] usb 5-1: config 0 has no interfaces? [ 285.980110][ T5838] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 285.997364][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.043914][ T5838] usb 5-1: config 0 descriptor?? [ 286.412774][ T47] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 286.798729][ T47] usb 1-1: config 0 has no interfaces? [ 286.903948][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 286.913883][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.937886][ T47] usb 1-1: Product: syz [ 286.950696][ T47] usb 1-1: Manufacturer: syz [ 286.958116][ T47] usb 1-1: SerialNumber: syz [ 287.013210][ T47] usb 1-1: config 0 descriptor?? [ 287.681295][ T7101] usb 4-1: USB disconnect, device number 37 [ 288.542901][ T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 288.624019][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 288.682828][ T47] usb 3-1: device descriptor read/64, error -71 [ 288.993423][ T47] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 289.544159][ T5838] usb 5-1: USB disconnect, device number 37 [ 289.579833][ T8058] ALSA: mixer_oss: invalid OSS volume '' [ 289.622869][ T47] usb 3-1: device descriptor read/64, error -71 [ 289.733574][ T47] usb usb3-port1: attempt power cycle [ 289.800107][ T5838] usb 1-1: USB disconnect, device number 27 [ 290.092875][ T47] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 290.139548][ T47] usb 3-1: device descriptor read/8, error -71 [ 290.202933][ T5838] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 290.314521][ T8114] xt_ipcomp: unknown flags C [ 290.368071][ T5838] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 290.390288][ T5838] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 290.404087][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.404613][ T47] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 290.420355][ T5838] usb 1-1: Product: syz [ 290.431361][ T5838] usb 1-1: Manufacturer: syz [ 290.442455][ T5838] usb 1-1: SerialNumber: syz [ 290.479524][ T5838] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 290.504535][ T47] usb 3-1: device descriptor read/8, error -71 [ 290.624228][ T47] usb usb3-port1: unable to enumerate USB device [ 290.752980][ T7114] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 290.913049][ T7114] usb 2-1: Using ep0 maxpacket: 16 [ 290.920645][ T7114] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 290.929697][ T7114] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 290.938558][ T7114] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 290.948772][ T7114] usb 2-1: config 8 has no interface number 0 [ 290.954984][ T7114] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 290.964968][ T7114] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 290.976081][ T7114] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.989237][ T5893] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 290.997034][ T7114] usb 2-1: config 8 interface 223 has no altsetting 0 [ 291.008046][ T7114] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 291.017174][ T7114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.025467][ T7114] usb 2-1: Product: syz [ 291.029717][ T7114] usb 2-1: Manufacturer: syz [ 291.034429][ T7114] usb 2-1: SerialNumber: syz [ 291.042264][ T8121] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 291.172950][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 291.184850][ T5893] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 291.194227][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.202244][ T5893] usb 4-1: Product: syz [ 291.206988][ T5893] usb 4-1: Manufacturer: syz [ 291.211634][ T5893] usb 4-1: SerialNumber: syz [ 291.221541][ T5893] r8152-cfgselector 4-1: Unknown version 0x0000 [ 291.228268][ T5893] r8152-cfgselector 4-1: config 0 descriptor?? [ 291.298037][ T5838] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 291.547469][ T47] usb 1-1: USB disconnect, device number 28 [ 291.697027][ T7114] usb 2-1: USB disconnect, device number 37 [ 291.736858][ T8137] input: syz1 as /devices/virtual/input/input8 [ 292.674078][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 292.686692][ T7114] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 292.938011][ T8159] openvswitch: netlink: Missing key (keys=40, expected=80) [ 292.948921][ T7114] usb 1-1: config 0 has no interfaces? [ 293.046584][ T7114] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 293.080539][ T7114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.275923][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 293.318879][ T7114] usb 1-1: Product: syz [ 293.345439][ T7114] usb 1-1: Manufacturer: syz [ 293.451544][ T7114] usb 1-1: SerialNumber: syz [ 293.500102][ T7114] usb 1-1: config 0 descriptor?? [ 293.577702][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 294.182909][ T7106] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 294.352794][ T7106] usb 5-1: Using ep0 maxpacket: 16 [ 294.388651][ T7106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.442820][ T5838] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 294.460764][ T7106] usb 5-1: config 0 has no interfaces? [ 294.480285][ T7106] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 294.507825][ T5893] r8152-cfgselector 4-1: Unknown version 0x0000 [ 294.517446][ T5893] r8152-cfgselector 4-1: bad CDC descriptors [ 294.523569][ T7106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.551035][ T7106] usb 5-1: config 0 descriptor?? [ 294.562794][ T5893] r8152-cfgselector 4-1: USB disconnect, device number 38 [ 294.625479][ T5838] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 294.647596][ T5838] usb 2-1: can't read configurations, error -61 [ 294.792798][ T5838] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 294.965550][ T5838] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 294.981191][ T5838] usb 2-1: can't read configurations, error -61 [ 295.021489][ T5838] usb usb2-port1: attempt power cycle [ 295.197416][ T8192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.650'. [ 295.332820][ T7101] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 295.412786][ T5838] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 295.415190][ T8198] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 295.446458][ T5838] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 295.461566][ T5838] usb 2-1: can't read configurations, error -61 [ 295.493045][ T7101] usb 4-1: Using ep0 maxpacket: 16 [ 295.503771][ T7101] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 295.512053][ T7101] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 295.599830][ T7101] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 295.602973][ T5838] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 295.638302][ T7101] usb 4-1: config 8 has no interface number 0 [ 295.652545][ T7101] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 295.665071][ T7101] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 295.679070][ T7101] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.692461][ T7101] usb 4-1: config 8 interface 223 has no altsetting 0 [ 295.706717][ T7101] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 295.721119][ T7101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.729480][ T7101] usb 4-1: Product: syz [ 295.745029][ T5893] usb 1-1: USB disconnect, device number 29 [ 295.749594][ T7101] usb 4-1: Manufacturer: syz [ 295.757993][ T7101] usb 4-1: SerialNumber: syz [ 295.761557][ T5838] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 295.777559][ T5838] usb 2-1: can't read configurations, error -61 [ 295.788266][ T5838] usb usb2-port1: unable to enumerate USB device [ 295.798342][ T8190] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 295.968161][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 296.083172][ T7125] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 296.242766][ T7125] usb 3-1: Using ep0 maxpacket: 32 [ 296.250752][ T7125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 296.260386][ T7125] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 296.271160][ T7125] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 296.305551][ T7101] usb 4-1: USB disconnect, device number 39 [ 296.330539][ T7125] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 296.341702][ T7125] usb 3-1: config 128 has no interface number 0 [ 296.351324][ T7125] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 296.374811][ T7125] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.385241][ T7125] usb 3-1: config 128 interface 127 has no altsetting 0 [ 296.395001][ T7125] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 296.404530][ T7125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.412535][ T7125] usb 3-1: Product: syz [ 296.418104][ T7125] usb 3-1: Manufacturer: syz [ 296.422801][ T7125] usb 3-1: SerialNumber: syz [ 296.633948][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.644280][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.689430][ T7125] usb 3-1: USB disconnect, device number 28 [ 296.770275][ T5838] usb 5-1: USB disconnect, device number 38 [ 296.850019][ T8213] fuse: Unknown parameter '' [ 296.858860][ T8215] loop6: detected capacity change from 0 to 524287999 [ 296.868562][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.874364][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.894148][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.909361][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.918627][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.932087][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.941343][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.952172][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.961409][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.972259][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.981492][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.990582][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.999848][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.010228][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.019475][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.027552][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.036765][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.045944][ T8215] ldm_validate_partition_table(): Disk read failed. [ 297.053613][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.062837][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.063447][ T8216] tipc: Started in network mode [ 297.071808][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.085356][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.102963][ T8216] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 297.104847][ T8215] Dev loop6: unable to read RDB block 0 [ 297.133726][ T8216] tipc: Enabled bearer , priority 10 [ 297.143822][ T8215] loop6: unable to read partition table [ 297.164535][ T8215] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 297.542959][ T5893] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 297.710988][ T5893] usb 3-1: config 0 has no interfaces? [ 297.722172][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 297.743539][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.765747][ T5893] usb 3-1: Product: syz [ 297.769992][ T5893] usb 3-1: Manufacturer: syz [ 297.786512][ T5893] usb 3-1: SerialNumber: syz [ 297.809559][ T5893] usb 3-1: config 0 descriptor?? [ 298.008051][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 298.030232][ T5893] usb 3-1: USB disconnect, device number 29 [ 298.182805][ T7125] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 298.243893][ T5893] tipc: Node number set to 4269801488 [ 298.363744][ T7125] usb 4-1: config 0 has no interfaces? [ 298.400664][ T7125] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 298.512982][ T7125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.559822][ T7125] usb 4-1: Product: syz [ 298.568862][ T7125] usb 4-1: Manufacturer: syz [ 298.580937][ T7125] usb 4-1: SerialNumber: syz [ 298.600807][ T7125] usb 4-1: config 0 descriptor?? [ 298.827871][ T47] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 298.843361][ T30] audit: type=1326 audit(1744276913.472:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 298.969082][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 298.999284][ T30] audit: type=1326 audit(1744276913.472:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 299.009141][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 299.060873][ T30] audit: type=1326 audit(1744276913.472:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 299.098634][ T8262] vlan2: entered promiscuous mode [ 299.114615][ T47] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 299.164444][ T47] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 299.189765][ T30] audit: type=1326 audit(1744276913.472:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 299.215599][ T47] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 299.245461][ T8264] netlink: 'syz.2.670': attribute type 5 has an invalid length. [ 299.259083][ T47] usb 2-1: config 8 has no interface number 0 [ 299.280226][ T47] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 299.310211][ T47] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 299.347888][ T47] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.381597][ T47] usb 2-1: config 8 interface 223 has no altsetting 0 [ 299.388861][ T30] audit: type=1326 audit(1744276913.472:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 299.441786][ T47] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 299.452171][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.466413][ T47] usb 2-1: Product: syz [ 299.471023][ T47] usb 2-1: Manufacturer: syz [ 299.506292][ T47] usb 2-1: SerialNumber: syz [ 299.548797][ T8258] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.562811][ T30] audit: type=1326 audit(1744276913.472:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 299.648560][ T8269] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 299.681892][ T8269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.717019][ T8270] fuse: Bad value for 'fd' [ 299.809499][ T30] audit: type=1326 audit(1744276913.472:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 300.386825][ T30] audit: type=1326 audit(1744276913.472:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 300.417178][ T30] audit: type=1326 audit(1744276913.472:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f573d38d169 code=0x7ffc0000 [ 300.455322][ T47] usb 2-1: USB disconnect, device number 42 [ 300.506929][ T30] audit: type=1326 audit(1744276913.472:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 300.624273][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 301.010507][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 301.306018][ T5893] usb 4-1: USB disconnect, device number 40 [ 301.445200][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'. [ 301.479435][ T8297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.681'. [ 301.717000][ T8310] debugfs: Directory '!' with parent 'ieee80211' already present! [ 301.852958][ T8309] FAULT_INJECTION: forcing a failure. [ 301.852958][ T8309] name failslab, interval 1, probability 0, space 0, times 0 [ 301.941382][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.3.686 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 301.941413][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.941425][ T8309] Call Trace: [ 301.941434][ T8309] [ 301.941442][ T8309] dump_stack_lvl+0x241/0x360 [ 301.941480][ T8309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.941508][ T8309] ? __pfx__printk+0x10/0x10 [ 301.941540][ T8309] ? __pfx___might_resched+0x10/0x10 [ 301.941569][ T8309] should_fail_ex+0x424/0x570 [ 301.941595][ T8309] should_failslab+0xac/0x100 [ 301.941625][ T8309] __kmalloc_noprof+0xdf/0x4d0 [ 301.941652][ T8309] ? sock_kmalloc+0xd7/0x160 [ 301.941684][ T8309] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.941729][ T8309] sock_kmalloc+0xd7/0x160 [ 301.941753][ T8309] hash_recvmsg+0x1bd/0x7f0 [ 301.941782][ T8309] ? __pfx_hash_recvmsg+0x10/0x10 [ 301.941808][ T8309] sock_recvmsg_nosec+0x18e/0x1d0 [ 301.941838][ T8309] ____sys_recvmsg+0x3d4/0x480 [ 301.941868][ T8309] ? __pfx_____sys_recvmsg+0x10/0x10 [ 301.941912][ T8309] do_recvmmsg+0x428/0xab0 [ 301.941946][ T8309] ? __pfx_do_recvmmsg+0x10/0x10 [ 301.942002][ T8309] ? rcu_read_lock_any_held+0xbb/0x160 [ 301.942029][ T8309] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 301.942061][ T8309] ? vfs_write+0xb29/0xd10 [ 301.942095][ T8309] ? ksys_write+0x24e/0x2d0 [ 301.942121][ T8309] ? __mutex_unlock_slowpath+0x229/0x800 [ 301.942156][ T8309] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.942180][ T8309] ? __fget_files+0x2a/0x420 [ 301.942216][ T8309] __x64_sys_recvmmsg+0x1ab/0x260 [ 301.942242][ T8309] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 301.942272][ T8309] ? do_syscall_64+0xb6/0x230 [ 301.942300][ T8309] do_syscall_64+0xf3/0x230 [ 301.942324][ T8309] ? clear_bhb_loop+0x45/0xa0 [ 301.942349][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.942368][ T8309] RIP: 0033:0x7faee618d169 [ 301.942386][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.942403][ T8309] RSP: 002b:00007faee6f22038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 301.942425][ T8309] RAX: ffffffffffffffda RBX: 00007faee63a5fa0 RCX: 00007faee618d169 [ 301.942443][ T8309] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 301.942455][ T8309] RBP: 00007faee6f22090 R08: 0000000000000000 R09: 0000000000000000 [ 301.942468][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.942480][ T8309] R13: 0000000000000000 R14: 00007faee63a5fa0 R15: 00007faee64cfa28 [ 301.942516][ T8309] [ 301.984050][ T8316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.688'. [ 303.112787][ T47] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 303.223518][ T7114] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 303.275819][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 303.295765][ T47] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 303.318768][ T47] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 303.353031][ T47] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 303.371343][ T47] usb 3-1: config 8 has no interface number 0 [ 303.378425][ T47] usb 3-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 303.382863][ T7114] usb 4-1: Using ep0 maxpacket: 16 [ 303.388893][ T47] usb 3-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 303.405005][ T47] usb 3-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.425235][ T7114] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 303.437279][ T7114] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.441073][ T47] usb 3-1: config 8 interface 223 has no altsetting 0 [ 303.457987][ T7114] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.481771][ T7114] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.504409][ T7114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.512460][ T47] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 303.512490][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.527129][ T7114] usb 4-1: Product: syz [ 303.547648][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 303.600271][ T47] usb 3-1: Product: syz [ 303.602767][ T7114] usb 4-1: Manufacturer: syz [ 303.606891][ T47] usb 3-1: Manufacturer: syz [ 303.627266][ T47] usb 3-1: SerialNumber: syz [ 303.627268][ T7114] usb 4-1: SerialNumber: syz [ 303.636266][ T8333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.932824][ T7114] usb 4-1: 0:2 : does not exist [ 303.954587][ T7114] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 303.987694][ T7114] usb 4-1: USB disconnect, device number 41 [ 304.134051][ T47] usb 3-1: USB disconnect, device number 30 [ 304.185699][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.463259][ T8359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 304.593126][ T47] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 305.132821][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 305.161709][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.184979][ T47] usb 5-1: config 0 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 305.217994][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.254506][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 305.287735][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.393061][ T5893] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 305.399534][ T47] usb 5-1: config 0 descriptor?? [ 305.605899][ T5893] usb 2-1: config 0 has no interfaces? [ 305.621486][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 305.639983][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.649204][ T5893] usb 2-1: Product: syz [ 305.658456][ T5893] usb 2-1: Manufacturer: syz [ 305.665715][ T5893] usb 2-1: SerialNumber: syz [ 305.697111][ T5893] usb 2-1: config 0 descriptor?? [ 305.711415][ T47] usb 5-1: string descriptor 0 read error: -71 [ 305.774600][ T47] usb 5-1: USB disconnect, device number 39 [ 305.961881][ T7097] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 306.126054][ T7097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.144845][ T7097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.159706][ T7097] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 306.170312][ T7097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.185909][ T7097] usb 3-1: config 0 descriptor?? [ 306.498271][ T8387] program syz.4.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.697692][ T7097] steelseries 0003:1038:12B6.0006: unbalanced delimiter at end of report description [ 306.731644][ T7097] steelseries 0003:1038:12B6.0006: probe with driver steelseries failed with error -22 [ 306.823302][ T7097] usb 3-1: USB disconnect, device number 31 [ 307.071479][ T8397] xt_TCPMSS: Only works on TCP SYN packets [ 307.253161][ T7114] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 307.452766][ T7114] usb 1-1: Using ep0 maxpacket: 16 [ 307.490931][ T7114] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 307.515764][ T7114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.540501][ T7114] usb 1-1: Product: syz [ 307.552231][ T7114] usb 1-1: Manufacturer: syz [ 307.565121][ T7114] usb 1-1: SerialNumber: syz [ 307.635052][ T7114] r8152-cfgselector 1-1: Unknown version 0x0000 [ 307.647244][ T7114] r8152-cfgselector 1-1: config 0 descriptor?? [ 307.837737][ T7097] usb 2-1: USB disconnect, device number 43 [ 307.877167][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.952925][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.978862][ T5893] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 308.036362][ T7114] r8152-cfgselector 1-1: Needed 1 retries to read version [ 308.044699][ T7114] r8152-cfgselector 1-1: Unknown version 0x5c80 [ 308.161739][ T7114] r8152-cfgselector 1-1: bad CDC descriptors [ 308.197902][ T5893] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 308.207116][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.217776][ T5893] usb 3-1: Product: syz [ 308.221974][ T5893] usb 3-1: Manufacturer: syz [ 308.227297][ T5893] usb 3-1: SerialNumber: syz [ 308.360284][ T7097] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 308.369233][ T5893] usb 3-1: config 0 descriptor?? [ 308.574462][ T7097] usb 2-1: Using ep0 maxpacket: 16 [ 308.585105][ T5893] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 308.601916][ T7097] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 308.610273][ T7097] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 308.621688][ T7097] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 308.660535][ T7097] usb 2-1: config 8 has no interface number 0 [ 308.669340][ T5893] usb 3-1: USB disconnect, device number 32 [ 308.698276][ T7097] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 308.740128][ T7097] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 308.792220][ T7097] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.845657][ T7097] usb 2-1: config 8 interface 223 has no altsetting 0 [ 308.857164][ T7097] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 308.892587][ T7097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.910370][ T7097] usb 2-1: Product: syz [ 308.926232][ T7097] usb 2-1: Manufacturer: syz [ 308.938460][ T7097] usb 2-1: SerialNumber: syz [ 308.963251][ T8417] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 309.442078][ T8436] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 309.651662][ T8439] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 309.955839][ T8439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.008140][ T7114] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 310.041761][ T7097] usb 2-1: USB disconnect, device number 44 [ 310.130476][ T8441] bond3: (slave veth5): Enslaving as an active interface with a down link [ 310.242164][ T8443] bond2: (slave veth0_to_bond): Releasing active interface [ 310.258539][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 310.355919][ T8443] bond3: (slave veth0_to_bond): making interface the new active one [ 310.409217][ T8443] veth0_to_bond: entered promiscuous mode [ 310.523616][ T8443] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 310.702555][ T8449] vlan2: entered promiscuous mode [ 310.708090][ T8449] batadv0: entered promiscuous mode [ 311.713005][ T7114] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 311.868540][ T7114] usb 2-1: Using ep0 maxpacket: 16 [ 311.900698][ T7114] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.911433][ T7114] usb 2-1: config 0 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 311.980431][ T7114] usb 2-1: config 0 interface 0 has no altsetting 0 [ 312.004721][ T7114] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 312.072710][ T7114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.114891][ T7114] usb 2-1: config 0 descriptor?? [ 312.202790][ T7097] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 312.284970][ T47] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 312.372805][ T7097] usb 4-1: Using ep0 maxpacket: 16 [ 312.379860][ T7097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.390164][ T7097] usb 4-1: config 0 has no interfaces? [ 312.400231][ T7097] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 312.418630][ T7097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.439191][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 312.461889][ T47] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 312.491309][ T7097] usb 4-1: config 0 descriptor?? [ 312.514465][ T47] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 312.543074][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.555601][ T8500] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 312.561027][ T47] usb 3-1: Product: syz [ 312.576898][ T47] usb 3-1: Manufacturer: syz [ 312.598197][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.607720][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.622359][ T47] usb 3-1: SerialNumber: syz [ 312.635672][ T7114] usb 2-1: string descriptor 0 read error: -71 [ 312.656580][ T7114] usb 2-1: USB disconnect, device number 45 [ 312.688881][ T47] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 312.859055][ T55] Bluetooth: hci3: SCO packet for unknown connection handle 3645 [ 313.412810][ T5893] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 313.501677][ T47] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 313.533795][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.553671][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.648009][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 313.660910][ T5893] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 313.669908][ T5893] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 313.699851][ T5893] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 313.713881][ T7097] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 313.735936][ T7114] usb 3-1: USB disconnect, device number 33 [ 313.771813][ T5893] usb 5-1: config 8 has no interface number 0 [ 313.780792][ T5893] usb 5-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 313.802021][ T5893] usb 5-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 313.814005][ T5893] usb 5-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.827820][ T5893] usb 5-1: config 8 interface 223 has no altsetting 0 [ 313.838485][ T5893] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 313.853851][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.876689][ T7097] usb 2-1: config 0 has no interfaces? [ 313.886718][ T7097] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 313.898726][ T7097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.909555][ T5893] usb 5-1: Product: syz [ 313.911953][ T7097] usb 2-1: Product: syz [ 313.926412][ T5893] usb 5-1: Manufacturer: syz [ 313.932225][ T7097] usb 2-1: Manufacturer: syz [ 313.938987][ T5893] usb 5-1: SerialNumber: syz [ 313.943864][ T7097] usb 2-1: SerialNumber: syz [ 313.967116][ T8521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 314.021042][ T7097] usb 2-1: config 0 descriptor?? [ 314.302497][ T7106] usb 2-1: USB disconnect, device number 46 [ 314.838206][ T5893] usb 5-1: USB disconnect, device number 40 [ 314.982750][ T7125] usb 4-1: USB disconnect, device number 42 [ 315.119210][ T8565] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 315.201708][ T8570] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 315.253250][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.0.744 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 315.253282][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.253296][ T8570] Call Trace: [ 315.253304][ T8570] [ 315.253313][ T8570] dump_stack_lvl+0x241/0x360 [ 315.253354][ T8570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.253386][ T8570] ? __pfx__printk+0x10/0x10 [ 315.253415][ T8570] ? kernfs_path_from_node+0x2b/0x250 [ 315.253443][ T8570] ? kernfs_path_from_node+0x217/0x250 [ 315.253468][ T8570] sysfs_warn_dup+0x8e/0xa0 [ 315.253488][ T8570] sysfs_do_create_link_sd+0xbe/0x110 [ 315.253513][ T8570] device_add_class_symlinks+0x1c5/0x250 [ 315.253543][ T8570] device_add+0x553/0xbf0 [ 315.253583][ T8570] wiphy_register+0x193c/0x2660 [ 315.253630][ T8570] ? __pfx_wiphy_register+0x10/0x10 [ 315.253657][ T8570] ? minstrel_ht_alloc+0x85a/0x950 [ 315.253697][ T8570] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 315.253736][ T8570] ieee80211_register_hw+0x35e9/0x42d0 [ 315.253772][ T8570] ? ieee80211_register_hw+0x15d1/0x42d0 [ 315.253804][ T8570] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 315.253842][ T8570] ? __hrtimer_setup+0x17f/0x200 [ 315.253867][ T8570] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 315.253897][ T8570] mac80211_hwsim_new_radio+0x2adc/0x4a60 [ 315.253953][ T8570] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 315.253974][ T8570] ? trace_kmalloc+0x1f/0xd0 [ 315.254000][ T8570] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 315.254031][ T8570] ? kstrndup+0xbb/0x150 [ 315.254068][ T8570] hwsim_new_radio_nl+0xed0/0x2290 [ 315.254106][ T8570] ? __pfx___nla_validate_parse+0x10/0x10 [ 315.254138][ T8570] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 315.254199][ T8570] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 315.254233][ T8570] genl_rcv_msg+0xb38/0xf00 [ 315.254266][ T8570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.254286][ T8570] ? stack_trace_save+0x11a/0x1d0 [ 315.254318][ T8570] ? __pfx_stack_trace_save+0x10/0x10 [ 315.254351][ T8570] ? stack_depot_save_flags+0x44/0x940 [ 315.254390][ T8570] ? stack_trace_snprint+0x71/0xf0 [ 315.254437][ T8570] ? __lock_acquire+0xad5/0xd80 [ 315.254462][ T8570] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 315.254503][ T8570] netlink_rcv_skb+0x208/0x480 [ 315.254534][ T8570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.254560][ T8570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.254623][ T8570] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.254662][ T8570] genl_rcv+0x28/0x40 [ 315.254683][ T8570] netlink_unicast+0x7f8/0x9a0 [ 315.254722][ T8570] ? __pfx_netlink_unicast+0x10/0x10 [ 315.254752][ T8570] ? skb_put+0x114/0x1f0 [ 315.254779][ T8570] netlink_sendmsg+0x8c3/0xcd0 [ 315.254825][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.254860][ T8570] ? aa_sock_msg_perm+0x91/0x160 [ 315.254895][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.254923][ T8570] __sock_sendmsg+0x221/0x270 [ 315.254954][ T8570] ____sys_sendmsg+0x523/0x860 [ 315.254986][ T8570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.255006][ T8570] ? __fget_files+0x2a/0x420 [ 315.255031][ T8570] ? __fget_files+0x2a/0x420 [ 315.255061][ T8570] __sys_sendmsg+0x271/0x360 [ 315.255091][ T8570] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.255179][ T8570] ? do_syscall_64+0xb6/0x230 [ 315.255209][ T8570] do_syscall_64+0xf3/0x230 [ 315.255235][ T8570] ? clear_bhb_loop+0x45/0xa0 [ 315.255261][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.255282][ T8570] RIP: 0033:0x7f7f1d58d169 [ 315.255301][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.255319][ T8570] RSP: 002b:00007f7f1e3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.255343][ T8570] RAX: ffffffffffffffda RBX: 00007f7f1d7a5fa0 RCX: 00007f7f1d58d169 [ 315.255359][ T8570] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000003 [ 315.255373][ T8570] RBP: 00007f7f1d60e730 R08: 0000000000000000 R09: 0000000000000000 [ 315.255387][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.255399][ T8570] R13: 0000000000000000 R14: 00007f7f1d7a5fa0 R15: 00007f7f1d8cfa28 [ 315.255434][ T8570] [ 315.876897][ T7125] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 315.916587][ T8580] bridge2: entered promiscuous mode [ 315.950019][ T8580] bridge2: entered allmulticast mode [ 315.963573][ T8580] team0: Port device bridge2 added [ 316.051949][ T7125] usb 4-1: Using ep0 maxpacket: 16 [ 316.075617][ T7125] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 316.084920][ T7125] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 316.092144][ T8592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.748'. [ 316.093174][ T7125] usb 4-1: Product: syz [ 316.093195][ T7125] usb 4-1: Manufacturer: syz [ 316.093212][ T7125] usb 4-1: SerialNumber: syz [ 316.097035][ T7125] usb 4-1: config 0 descriptor?? [ 316.224285][ T7125] usb 4-1: selecting invalid altsetting 1 [ 316.290804][ T7125] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 316.322827][ T5838] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 316.346144][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.429816][ T8601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.742'. [ 316.478527][ T7125] usb 4-1: USB disconnect, device number 43 [ 316.671968][ T5838] usb 3-1: config 0 has no interfaces? [ 316.982525][ T5838] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 317.012620][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.022044][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.041005][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.115861][ T5838] usb 3-1: Product: syz [ 317.197045][ T5838] usb 3-1: Manufacturer: syz [ 317.201845][ T5838] usb 3-1: SerialNumber: syz [ 317.226128][ T5838] usb 3-1: config 0 descriptor?? [ 317.320770][ T8611] netlink: 84 bytes leftover after parsing attributes in process `syz.3.752'. [ 317.329956][ T7106] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 317.548098][ T8590] veth1_to_team: entered promiscuous mode [ 317.625484][ T8616] netlink: 72 bytes leftover after parsing attributes in process `syz.3.754'. [ 317.661445][ T7106] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 317.680954][ T7106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.805835][ T7106] usb 2-1: config 0 descriptor?? [ 317.902037][ T7106] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 317.932868][ T7106] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 317.997738][ T8590] team0: Port device team_slave_1 removed [ 318.067329][ T8616] vti0: entered promiscuous mode [ 318.179470][ T8607] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 318.542947][ T7125] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 318.734951][ T7125] usb 4-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 318.744367][ T7125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.788211][ T7125] usb 4-1: config 0 descriptor?? [ 318.812204][ T7125] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 318.882111][ T8627] fuse: Unknown parameter '000000000000000000050x0000000000000004' [ 319.019705][ T7125] gspca_sn9c20x: Write register 1000 failed -71 [ 319.027706][ T7125] gspca_sn9c20x: Device initialization failed [ 319.039056][ T7125] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 319.083020][ T7125] usb 4-1: USB disconnect, device number 44 [ 319.383084][ T7106] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 319.427392][ T8632] syzkaller0: entered promiscuous mode [ 319.472568][ T8632] syzkaller0: entered allmulticast mode [ 319.532858][ T7106] usb 5-1: Using ep0 maxpacket: 16 [ 319.540378][ T7106] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 319.572130][ T7106] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 319.699249][ T7106] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 319.735342][ T7106] usb 5-1: config 8 has no interface number 0 [ 319.756163][ T7106] usb 5-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 319.848147][ T7114] usb 3-1: USB disconnect, device number 34 [ 319.860580][ T7106] usb 5-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 319.878315][ T7106] usb 5-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.895166][ T7106] usb 5-1: config 8 interface 223 has no altsetting 0 [ 319.904945][ T7106] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 319.914955][ T7106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.950788][ T7106] usb 5-1: Product: syz [ 319.966847][ T7106] usb 5-1: Manufacturer: syz [ 319.996271][ T7106] usb 5-1: SerialNumber: syz [ 320.027758][ T8630] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 320.053039][ T5838] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 320.308279][ T5838] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 320.336753][ T5838] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 320.404163][ T5838] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.448535][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.170686][ T8637] fuse: Bad value for 'fd' [ 321.392610][ T7106] usb 5-1: USB disconnect, device number 41 [ 321.428700][ T5855] udevd[5855]: setting mode of /dev/bus/usb/005/041 to 020664 failed: No such file or directory [ 321.455545][ T5893] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 321.486563][ T5855] udevd[5855]: setting owner of /dev/bus/usb/005/041 to uid=0, gid=0 failed: No such file or directory [ 321.649559][ T5893] usb 3-1: config 0 has no interfaces? [ 321.668856][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.678091][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.686146][ T5893] usb 3-1: Product: syz [ 321.702867][ T5893] usb 3-1: Manufacturer: syz [ 321.722975][ T5893] usb 3-1: SerialNumber: syz [ 321.765156][ T5893] usb 3-1: config 0 descriptor?? [ 323.374909][ T7106] usb 3-1: USB disconnect, device number 35 [ 323.652510][ T7125] usb 4-1: USB disconnect, device number 45 [ 323.760845][ T8662] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 325.525477][ T7106] usb 2-1: USB disconnect, device number 47 [ 325.643088][ T3449] veth0_to_bond: left promiscuous mode [ 325.940207][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 326.552996][ T47] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 326.561362][ T7125] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 326.744313][ T47] usb 1-1: config 0 has no interfaces? [ 326.752337][ T7125] usb 2-1: Using ep0 maxpacket: 16 [ 326.775436][ T7125] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 326.789926][ T7125] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 326.809730][ T7125] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 326.832741][ T7125] usb 2-1: config 8 has no interface number 0 [ 326.838924][ T7125] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 326.869792][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 326.885012][ T7125] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 326.898450][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.916380][ T47] usb 1-1: Product: syz [ 326.923542][ T7125] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.936784][ T47] usb 1-1: Manufacturer: syz [ 326.947673][ T47] usb 1-1: SerialNumber: syz [ 326.963413][ T7125] usb 2-1: config 8 interface 223 has no altsetting 0 [ 326.971043][ T47] usb 1-1: config 0 descriptor?? [ 326.986909][ T7125] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 327.002779][ T7125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.026000][ T7125] usb 2-1: Product: syz [ 327.035736][ T7125] usb 2-1: Manufacturer: syz [ 327.051312][ T7125] usb 2-1: SerialNumber: syz [ 327.073842][ T8688] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 327.479938][ T8701] @ÿ: renamed from bond_slave_0 (while UP) [ 327.739587][ T8708] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 327.761128][ T8708] CPU: 0 UID: 0 PID: 8708 Comm: syz.3.780 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 327.761159][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.761172][ T8708] Call Trace: [ 327.761180][ T8708] [ 327.761189][ T8708] dump_stack_lvl+0x241/0x360 [ 327.761228][ T8708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.761260][ T8708] ? __pfx__printk+0x10/0x10 [ 327.761287][ T8708] ? __rcu_read_unlock+0xa1/0x110 [ 327.761310][ T8708] ? kernfs_path_from_node+0x217/0x250 [ 327.761336][ T8708] sysfs_warn_dup+0x8e/0xa0 [ 327.761356][ T8708] sysfs_do_create_link_sd+0xbe/0x110 [ 327.761380][ T8708] device_add_class_symlinks+0x1c5/0x250 [ 327.761412][ T8708] device_add+0x553/0xbf0 [ 327.761444][ T8708] wiphy_register+0x193c/0x2660 [ 327.761490][ T8708] ? __pfx_wiphy_register+0x10/0x10 [ 327.761518][ T8708] ? minstrel_ht_alloc+0x85a/0x950 [ 327.761558][ T8708] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 327.761596][ T8708] ieee80211_register_hw+0x35e9/0x42d0 [ 327.761636][ T8708] ? ieee80211_register_hw+0x15d1/0x42d0 [ 327.761669][ T8708] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 327.761708][ T8708] ? __hrtimer_setup+0x17f/0x200 [ 327.761733][ T8708] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 327.761764][ T8708] mac80211_hwsim_new_radio+0x2adc/0x4a60 [ 327.761827][ T8708] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 327.761850][ T8708] ? trace_kmalloc+0x1f/0xd0 [ 327.761877][ T8708] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 327.761908][ T8708] ? kstrndup+0xbb/0x150 [ 327.761945][ T8708] hwsim_new_radio_nl+0xed0/0x2290 [ 327.761983][ T8708] ? __pfx___nla_validate_parse+0x10/0x10 [ 327.762019][ T8708] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 327.762078][ T8708] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 327.762113][ T8708] genl_rcv_msg+0xb38/0xf00 [ 327.762146][ T8708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.762166][ T8708] ? __dev_queue_xmit+0x1780/0x3f60 [ 327.762187][ T8708] ? kasan_save_track+0x3f/0x80 [ 327.762209][ T8708] ? __kasan_slab_alloc+0x66/0x80 [ 327.762233][ T8708] ? do_syscall_64+0xf3/0x230 [ 327.762264][ T8708] ? __lock_acquire+0xad5/0xd80 [ 327.762291][ T8708] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 327.762330][ T8708] netlink_rcv_skb+0x208/0x480 [ 327.762359][ T8708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.762391][ T8708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.762430][ T8708] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.762467][ T8708] genl_rcv+0x28/0x40 [ 327.762484][ T8708] netlink_unicast+0x7f8/0x9a0 [ 327.762518][ T8708] ? __pfx_netlink_unicast+0x10/0x10 [ 327.762538][ T8708] ? skb_put+0x114/0x1f0 [ 327.762555][ T8708] netlink_sendmsg+0x8c3/0xcd0 [ 327.762590][ T8708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.762623][ T8708] ? aa_sock_msg_perm+0x91/0x160 [ 327.762655][ T8708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.762681][ T8708] __sock_sendmsg+0x221/0x270 [ 327.762709][ T8708] ____sys_sendmsg+0x523/0x860 [ 327.762739][ T8708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.762757][ T8708] ? __fget_files+0x2a/0x420 [ 327.762779][ T8708] ? __fget_files+0x2a/0x420 [ 327.762814][ T8708] __sys_sendmsg+0x271/0x360 [ 327.762840][ T8708] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.762918][ T8708] ? do_syscall_64+0xb6/0x230 [ 327.762944][ T8708] do_syscall_64+0xf3/0x230 [ 327.762969][ T8708] ? clear_bhb_loop+0x45/0xa0 [ 327.763000][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.763023][ T8708] RIP: 0033:0x7faee618d169 [ 327.763040][ T8708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.763056][ T8708] RSP: 002b:00007faee6f22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.763077][ T8708] RAX: ffffffffffffffda RBX: 00007faee63a5fa0 RCX: 00007faee618d169 [ 327.763092][ T8708] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000003 [ 327.763104][ T8708] RBP: 00007faee620e730 R08: 0000000000000000 R09: 0000000000000000 [ 327.763116][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.763127][ T8708] R13: 0000000000000000 R14: 00007faee63a5fa0 R15: 00007faee64cfa28 [ 327.763156][ T8708] [ 328.163650][ T47] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 328.682289][ T7125] usb 2-1: USB disconnect, device number 48 [ 328.776448][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.818451][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 328.832255][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.872842][ T47] usb 5-1: Product: syz [ 328.881777][ T47] usb 5-1: Manufacturer: syz [ 328.890252][ T47] usb 5-1: SerialNumber: syz [ 329.946192][ T5838] usb 1-1: USB disconnect, device number 31 [ 329.957566][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 330.749627][ T47] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 331.111392][ T47] usb 5-1: USB disconnect, device number 42 [ 331.132101][ T8744] loop9: detected capacity change from 0 to 7 [ 331.158860][ T47] usblp0: removed [ 331.189134][ T8744] Dev loop9: unable to read RDB block 7 [ 331.219991][ T8744] loop9: unable to read partition table [ 331.243180][ T8744] loop9: partition table beyond EOD, truncated [ 331.292835][ T8744] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 332.773749][ T8753] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 332.823128][ T8753] CPU: 0 UID: 0 PID: 8753 Comm: syz.0.793 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 332.823179][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.823192][ T8753] Call Trace: [ 332.823211][ T8753] [ 332.823220][ T8753] dump_stack_lvl+0x241/0x360 [ 332.823260][ T8753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.823292][ T8753] ? __pfx__printk+0x10/0x10 [ 332.823323][ T8753] ? kernfs_path_from_node+0x2b/0x250 [ 332.823352][ T8753] ? kernfs_path_from_node+0x217/0x250 [ 332.823378][ T8753] sysfs_warn_dup+0x8e/0xa0 [ 332.823399][ T8753] sysfs_do_create_link_sd+0xbe/0x110 [ 332.823423][ T8753] device_add_class_symlinks+0x1c5/0x250 [ 332.823456][ T8753] device_add+0x553/0xbf0 [ 332.823489][ T8753] wiphy_register+0x193c/0x2660 [ 332.823536][ T8753] ? __pfx_wiphy_register+0x10/0x10 [ 332.823564][ T8753] ? minstrel_ht_alloc+0x85a/0x950 [ 332.823605][ T8753] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 332.823645][ T8753] ieee80211_register_hw+0x35e9/0x42d0 [ 332.823683][ T8753] ? ieee80211_register_hw+0x15d1/0x42d0 [ 332.823715][ T8753] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 332.823754][ T8753] ? __hrtimer_setup+0x17f/0x200 [ 332.823779][ T8753] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 332.823810][ T8753] mac80211_hwsim_new_radio+0x2adc/0x4a60 [ 332.823868][ T8753] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 332.823891][ T8753] ? trace_kmalloc+0x1f/0xd0 [ 332.823918][ T8753] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 332.823949][ T8753] ? kstrndup+0xbb/0x150 [ 332.823987][ T8753] hwsim_new_radio_nl+0xed0/0x2290 [ 332.824026][ T8753] ? __pfx___nla_validate_parse+0x10/0x10 [ 332.824058][ T8753] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 332.824121][ T8753] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 332.824156][ T8753] genl_rcv_msg+0xb38/0xf00 [ 332.824190][ T8753] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.824215][ T8753] ? stack_trace_save+0x11a/0x1d0 [ 332.824249][ T8753] ? __pfx_stack_trace_save+0x10/0x10 [ 332.824283][ T8753] ? stack_depot_save_flags+0x44/0x940 [ 332.824305][ T8753] ? stack_trace_snprint+0x71/0xf0 [ 332.824352][ T8753] ? __lock_acquire+0xad5/0xd80 [ 332.824378][ T8753] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 332.824418][ T8753] netlink_rcv_skb+0x208/0x480 [ 332.824449][ T8753] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.824475][ T8753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.824530][ T8753] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.824568][ T8753] genl_rcv+0x28/0x40 [ 332.824587][ T8753] netlink_unicast+0x7f8/0x9a0 [ 332.824625][ T8753] ? __pfx_netlink_unicast+0x10/0x10 [ 332.824655][ T8753] ? skb_put+0x114/0x1f0 [ 332.824682][ T8753] netlink_sendmsg+0x8c3/0xcd0 [ 332.824727][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.824764][ T8753] ? aa_sock_msg_perm+0x91/0x160 [ 332.824800][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.824834][ T8753] __sock_sendmsg+0x221/0x270 [ 332.824865][ T8753] ____sys_sendmsg+0x523/0x860 [ 332.824898][ T8753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.824918][ T8753] ? __fget_files+0x2a/0x420 [ 332.824941][ T8753] ? __fget_files+0x2a/0x420 [ 332.824972][ T8753] __sys_sendmsg+0x271/0x360 [ 332.825003][ T8753] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.825081][ T8753] ? do_syscall_64+0xb6/0x230 [ 332.825111][ T8753] do_syscall_64+0xf3/0x230 [ 332.825136][ T8753] ? clear_bhb_loop+0x45/0xa0 [ 332.825161][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.825181][ T8753] RIP: 0033:0x7f7f1d58d169 [ 332.825209][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.825227][ T8753] RSP: 002b:00007f7f1e3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.825252][ T8753] RAX: ffffffffffffffda RBX: 00007f7f1d7a5fa0 RCX: 00007f7f1d58d169 [ 332.825268][ T8753] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000003 [ 332.825282][ T8753] RBP: 00007f7f1d60e730 R08: 0000000000000000 R09: 0000000000000000 [ 332.825295][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.825308][ T8753] R13: 0000000000000000 R14: 00007f7f1d7a5fa0 R15: 00007f7f1d8cfa28 [ 332.825342][ T8753] [ 334.066074][ T7106] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 334.246142][ T7106] usb 4-1: Using ep0 maxpacket: 16 [ 334.313070][ T7106] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 334.369507][ T7106] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 334.392850][ T7106] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 334.423692][ T7106] usb 4-1: config 8 has no interface number 0 [ 334.444391][ T7106] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 334.452784][ T5895] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 334.551886][ T7106] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 334.568912][ T7106] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.742782][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 334.749704][ T5895] usb 2-1: config 0 has no interfaces? [ 334.755298][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.774085][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.802765][ T5893] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 334.824469][ T5895] usb 2-1: config 0 descriptor?? [ 334.852077][ T7106] usb 4-1: config 8 interface 223 has no altsetting 0 [ 334.870987][ T7106] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 334.886783][ T7106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.904715][ T7106] usb 4-1: Product: syz [ 334.916831][ T7106] usb 4-1: Manufacturer: syz [ 335.065585][ T7106] usb 4-1: SerialNumber: syz [ 335.093449][ T5893] usb 3-1: config 0 has no interfaces? [ 335.158050][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 335.169554][ T8757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 335.192726][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.203096][ T5893] usb 3-1: Product: syz [ 335.221533][ T5893] usb 3-1: Manufacturer: syz [ 335.265030][ T5893] usb 3-1: SerialNumber: syz [ 335.288854][ T5893] usb 3-1: config 0 descriptor?? [ 335.707622][ T7106] usb 4-1: USB disconnect, device number 46 [ 336.289555][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 336.556331][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.801'. [ 336.923249][ T7106] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 337.054435][ T7101] usb 2-1: USB disconnect, device number 49 [ 337.076514][ T7106] usb 4-1: Using ep0 maxpacket: 16 [ 337.094423][ T7106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.122978][ T7106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.141789][ T7106] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 337.180246][ T7106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.197801][ T7106] usb 4-1: config 0 descriptor?? [ 337.283290][ T8795] fuse: Bad value for 'rootmode' [ 337.409664][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.426885][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.667966][ T7106] usbhid 4-1:0.0: can't add hid device: -71 [ 337.690032][ T7106] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 337.731648][ T7106] usb 4-1: USB disconnect, device number 47 [ 337.900849][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 337.963183][ T7101] usb 3-1: USB disconnect, device number 36 [ 338.093056][ T5893] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 338.283035][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 338.293641][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.304058][ T5893] usb 2-1: config 0 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 338.317186][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 338.324774][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 338.333974][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.348685][ T5893] usb 2-1: config 0 descriptor?? [ 338.425404][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 338.478101][ T7114] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 338.676311][ T7114] usb 5-1: Using ep0 maxpacket: 16 [ 338.686855][ T7114] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 338.695466][ T7114] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 338.704252][ T7114] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 338.714396][ T7114] usb 5-1: config 8 has no interface number 0 [ 338.720594][ T7114] usb 5-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 338.730756][ T7114] usb 5-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 338.742076][ T7114] usb 5-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.756273][ T7114] usb 5-1: config 8 interface 223 has no altsetting 0 [ 338.766915][ T7114] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 338.776358][ T7114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.787667][ T7114] usb 5-1: Product: syz [ 338.791867][ T7114] usb 5-1: Manufacturer: syz [ 338.798297][ T7114] usb 5-1: SerialNumber: syz [ 338.808428][ T8815] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 339.140989][ T5893] usb 2-1: string descriptor 0 read error: -71 [ 339.170050][ T5893] usb 2-1: USB disconnect, device number 50 [ 339.303408][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.343418][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.419640][ T8837] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 339.471598][ T7114] usb 5-1: USB disconnect, device number 43 [ 339.544097][ T5838] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 339.616584][ T5893] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 339.726027][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 339.742182][ T5838] usb 1-1: config 0 has no interfaces? [ 339.758443][ T5838] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.788058][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.807176][ T5838] usb 1-1: config 0 descriptor?? [ 339.932888][ T7125] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 340.072869][ T7125] usb 4-1: device descriptor read/64, error -71 [ 340.352825][ T7125] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 340.400775][ T8860] netlink: 788 bytes leftover after parsing attributes in process `syz.4.824'. [ 340.522958][ T7125] usb 4-1: device descriptor read/64, error -71 [ 340.644799][ T7125] usb usb4-port1: attempt power cycle [ 340.858487][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 340.883188][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 341.013092][ T7125] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 341.046819][ T7125] usb 4-1: device descriptor read/8, error -71 [ 341.424416][ T7125] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 341.444881][ T7125] usb 4-1: device descriptor read/8, error -71 [ 341.483993][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 341.521522][ T8876] fuse: Invalid rootmode [ 341.527429][ T8876] netlink: 9 bytes leftover after parsing attributes in process `syz.2.828'. [ 341.553121][ T7125] usb usb4-port1: unable to enumerate USB device [ 341.559827][ T8876] 1·: renamed from 70· (while UP) [ 341.619768][ T8876] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 341.698009][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 341.711330][ T8879] fuse: Unknown parameter '' [ 342.154804][ T5838] usb 1-1: USB disconnect, device number 32 [ 342.842922][ T7125] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 342.932934][ T47] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 342.997181][ T8895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.027482][ T7125] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 343.050889][ T7125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.091412][ T7125] usb 1-1: config 0 descriptor?? [ 343.097290][ T47] usb 2-1: no configurations [ 343.115977][ T47] usb 2-1: can't read configurations, error -22 [ 343.130413][ T7125] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 343.157783][ T7125] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 343.262794][ T47] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 343.274352][ T8902] input: syz1 as /devices/virtual/input/input10 [ 343.368218][ T8888] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 343.453191][ T7114] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 343.564163][ T47] usb 2-1: no configurations [ 343.568911][ T47] usb 2-1: can't read configurations, error -22 [ 343.617542][ T47] usb usb2-port1: attempt power cycle [ 343.633295][ T7114] usb 4-1: Using ep0 maxpacket: 16 [ 343.655354][ T7114] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 343.663896][ T7114] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 343.677276][ T7114] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 343.694887][ T7114] usb 4-1: config 8 has no interface number 0 [ 343.701350][ T7114] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 343.721643][ T7114] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 343.738061][ T7114] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.755545][ T7114] usb 4-1: config 8 interface 223 has no altsetting 0 [ 343.768684][ T7114] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 343.780640][ T7114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.789034][ T7114] usb 4-1: Product: syz [ 343.798872][ T7114] usb 4-1: Manufacturer: syz [ 343.805610][ T7114] usb 4-1: SerialNumber: syz [ 343.821514][ T8900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.082825][ T47] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 344.104373][ T47] usb 2-1: no configurations [ 344.110319][ T47] usb 2-1: can't read configurations, error -22 [ 344.214413][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 344.282833][ T47] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 344.324262][ T47] usb 2-1: no configurations [ 344.329002][ T47] usb 2-1: can't read configurations, error -22 [ 344.359373][ T47] usb usb2-port1: unable to enumerate USB device [ 344.953814][ T7114] usb 4-1: USB disconnect, device number 52 [ 345.720544][ T8921] netlink: 80 bytes leftover after parsing attributes in process `syz.1.841'. [ 346.001280][ T7125] usb 1-1: USB disconnect, device number 33 [ 346.256509][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 346.813007][ T7114] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 346.985275][ T7114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.049054][ T7114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.109872][ T7114] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 347.139792][ T7114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.181079][ T7114] usb 1-1: config 0 descriptor?? [ 347.422950][ T5838] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 347.520743][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.537290][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.602790][ T5838] usb 2-1: device descriptor read/64, error -71 [ 347.655842][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.844'. [ 347.728135][ T8933] veth0: entered promiscuous mode [ 347.785817][ T8933] batman_adv: batadv0: Adding interface: macvlan2 [ 347.792301][ T8933] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.851798][ T8933] batman_adv: batadv0: Interface activated: macvlan2 [ 347.889491][ T5838] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 347.933323][ T8945] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 347.955255][ T7114] usbhid 1-1:0.0: can't add hid device: -71 [ 347.969370][ T7114] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 347.981795][ T7114] usb 1-1: USB disconnect, device number 34 [ 347.990940][ T8945] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.025561][ T8949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.033093][ T8949] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 348.044913][ T8949] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 348.054456][ T5838] usb 2-1: device descriptor read/64, error -71 [ 348.177034][ T5838] usb usb2-port1: attempt power cycle [ 348.192869][ T5893] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 348.366363][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 348.373607][ T5893] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 348.381698][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.392490][ T5893] usb 3-1: config 0 has no interface number 0 [ 348.398783][ T5893] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 348.409743][ T5893] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.422706][ T5893] usb 3-1: config 0 interface 52 has no altsetting 0 [ 348.430568][ T5893] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 348.440356][ T5893] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 348.448519][ T5893] usb 3-1: Manufacturer: syz [ 348.456868][ T5893] usb 3-1: config 0 descriptor?? [ 348.543021][ T5838] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 348.562905][ T7114] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 348.576253][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 348.591306][ T8957] vlan2: entered promiscuous mode [ 348.596877][ T5838] usb 2-1: device descriptor read/8, error -71 [ 348.670359][ T8947] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 348.692171][ T5893] usb 3-1: Can not set alternate setting to 1, error: -71 [ 348.699840][ T5893] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 348.720129][ T5893] usb 3-1: USB disconnect, device number 37 [ 348.737395][ T5855] udevd[5855]: setting mode of /dev/bus/usb/003/037 to 020664 failed: No such file or directory [ 348.750597][ T5855] udevd[5855]: setting owner of /dev/bus/usb/003/037 to uid=0, gid=0 failed: No such file or directory [ 348.763666][ T7114] usb 5-1: Using ep0 maxpacket: 16 [ 348.776870][ T7114] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 348.800048][ T7114] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 348.809894][ T7114] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 348.829809][ T7114] usb 5-1: config 8 has no interface number 0 [ 348.840524][ T7114] usb 5-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 348.842118][ T8959] loop9: detected capacity change from 0 to 7 [ 348.850819][ T5838] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 348.866625][ T8959] Dev loop9: unable to read RDB block 7 [ 348.869155][ T7114] usb 5-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 348.872506][ T8959] loop9: unable to read partition table [ 348.887615][ T7114] usb 5-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.889819][ T8959] loop9: partition table beyond EOD, [ 348.902505][ T7114] usb 5-1: config 8 interface 223 has no altsetting 0 [ 348.905561][ T7114] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 348.909354][ T8959] truncated [ 348.928074][ T8959] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 348.928223][ T5838] usb 2-1: device descriptor read/8, error -71 [ 348.968763][ T7114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.981323][ T7114] usb 5-1: Product: syz [ 348.985880][ T7114] usb 5-1: Manufacturer: syz [ 348.990530][ T7114] usb 5-1: SerialNumber: syz [ 349.019860][ T8955] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 349.073714][ T5838] usb usb2-port1: unable to enumerate USB device [ 349.373690][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 349.404540][ T5838] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 349.502558][ T8971] AppArmor: change_hat: Invalid input '0x000000000k000002^' [ 349.539299][ T8966] fuse: Invalid rootmode [ 349.558482][ T8966] netlink: 9 bytes leftover after parsing attributes in process `syz.0.855'. [ 349.567796][ T8966] 1·: renamed from 70· (while UP) [ 349.578189][ T7114] usb 5-1: USB disconnect, device number 44 [ 349.710243][ T8966] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 349.736926][ T5838] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 349.775467][ T5838] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 349.795322][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.817932][ T5838] usb 4-1: Product: syz [ 349.822148][ T5838] usb 4-1: Manufacturer: syz [ 349.832043][ T5838] usb 4-1: SerialNumber: syz [ 349.850473][ T5838] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 350.295831][ T5838] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 350.464495][ T5838] usb 4-1: USB disconnect, device number 53 [ 351.159823][ T8986] vivid-007: ================= START STATUS ================= [ 351.168409][ T8986] vivid-007: Enable Output Cropping: true [ 351.174758][ T8986] vivid-007: Enable Output Composing: true [ 351.180669][ T8986] vivid-007: Enable Output Scaler: true [ 351.186453][ T8986] vivid-007: Tx RGB Quantization Range: Automatic [ 351.193045][ T8986] vivid-007: Transmit Mode: HDMI [ 351.198069][ T8986] vivid-007: Hotplug Present: 0x00000000 [ 351.203868][ T8986] vivid-007: RxSense Present: 0x00000000 [ 351.219323][ T8986] vivid-007: EDID Present: 0x00000000 [ 351.224868][ T8986] vivid-007: ================== END STATUS ================== [ 351.805684][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.863'. [ 352.283204][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 352.283226][ T30] audit: type=1800 audit(1744276966.912:130): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.862" name="/" dev="fuse" ino=1 res=0 errno=0 [ 353.702772][ T7106] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 353.901508][ T7106] usb 3-1: config 0 has no interfaces? [ 353.921256][ T7106] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 353.930811][ T5838] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 353.940931][ T7106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.991617][ T7106] usb 3-1: Product: syz [ 354.042897][ T7106] usb 3-1: Manufacturer: syz [ 354.047556][ T7106] usb 3-1: SerialNumber: syz [ 354.108866][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 354.174829][ T7106] usb 3-1: config 0 descriptor?? [ 354.201692][ T5838] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 354.258498][ T5838] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 354.287159][ T5838] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 354.401791][ T5838] usb 2-1: config 8 has no interface number 0 [ 354.429685][ T5838] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 354.471594][ T5838] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 354.537500][ T5838] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.632911][ T7106] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 354.646464][ T5838] usb 2-1: config 8 interface 223 has no altsetting 0 [ 354.663785][ T5838] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 354.675849][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.684374][ T5838] usb 2-1: Product: syz [ 354.688539][ T5838] usb 2-1: Manufacturer: syz [ 354.719407][ T5838] usb 2-1: SerialNumber: syz [ 354.750224][ T9012] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 354.880921][ T7106] usb 5-1: config 0 has no interfaces? [ 354.911339][ T7106] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 355.055382][ T7106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.076316][ T7106] usb 5-1: Product: syz [ 355.080640][ T7106] usb 5-1: Manufacturer: syz [ 355.088858][ T7106] usb 5-1: SerialNumber: syz [ 355.096020][ T7106] usb 5-1: config 0 descriptor?? [ 355.113642][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz.3.872'. [ 355.563280][ T5838] usb 2-1: USB disconnect, device number 60 [ 355.853210][ T7101] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 356.054216][ T7101] usb 4-1: Using ep0 maxpacket: 8 [ 356.114500][ T7101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.138324][ T7101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.154697][ T7101] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 356.164396][ T7101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.183555][ T7101] usb 4-1: config 0 descriptor?? [ 356.363097][ T7125] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 356.524647][ T7125] usb 1-1: Using ep0 maxpacket: 16 [ 356.537707][ T7125] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 356.555737][ T7125] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 356.598717][ T7125] usb 1-1: Product: syz [ 356.609462][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.624857][ T7125] usb 1-1: Manufacturer: syz [ 356.634595][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.651924][ T7125] usb 1-1: SerialNumber: syz [ 356.658693][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.744795][ T7125] usb 1-1: config 0 descriptor?? [ 356.759969][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.775388][ T7125] usb 1-1: selecting invalid altsetting 1 [ 356.792969][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.839749][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.878754][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.880088][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.906716][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.934960][ T7125] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 356.944498][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.972811][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 356.997938][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 357.020286][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.043901][ T7101] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 357.057651][ T9027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.874'. [ 357.063194][ T7106] usb 3-1: USB disconnect, device number 38 [ 357.084454][ T7101] aureal 0003:0755:2626.0007: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.3-1/input0 [ 357.118713][ T7125] usb 1-1: USB disconnect, device number 35 [ 357.142326][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 357.273070][ T9033] fuse: Invalid rootmode [ 357.278542][ T9033] netlink: 9 bytes leftover after parsing attributes in process `syz.1.875'. [ 357.287636][ T9033] 1·: renamed from 70· (while UP) [ 357.299796][ T9033] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 357.430309][ T7114] usb 5-1: USB disconnect, device number 45 [ 357.602851][ T7106] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 357.632437][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 357.696686][ T9038] vlan2: entered promiscuous mode [ 357.735462][ T9038] batadv0: entered promiscuous mode [ 357.763420][ T7106] usb 3-1: Using ep0 maxpacket: 16 [ 357.769345][ T7125] usb 4-1: USB disconnect, device number 54 [ 357.795281][ T7106] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.815497][ T7106] usb 3-1: config 0 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 357.861526][ T7106] usb 3-1: config 0 interface 0 has no altsetting 0 [ 357.948231][ T7106] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 358.036882][ T7106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.100049][ T7106] usb 3-1: config 0 descriptor?? [ 358.344589][ T7106] usb 3-1: string descriptor 0 read error: -71 [ 358.384451][ T7106] usb 3-1: USB disconnect, device number 39 [ 359.527589][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 359.743729][ T9070] vlan2: entered promiscuous mode [ 359.791369][ T9070] dummy0: entered promiscuous mode [ 361.048643][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'. [ 361.161365][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 361.862959][ T7101] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 362.042780][ T7101] usb 1-1: Using ep0 maxpacket: 32 [ 362.067265][ T7101] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 362.162736][ T7101] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 362.181613][ T7101] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 362.196644][ T7101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 362.206634][ T7101] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 362.217022][ T7101] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 362.234062][ T7101] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 362.244090][ T7101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.259845][ T7101] usb 1-1: config 0 descriptor?? [ 362.501741][ T7101] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 362.723129][ T7101] usb 1-1: USB disconnect, device number 36 [ 362.788677][ T7101] usblp0: removed [ 362.892917][ T7106] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 363.182731][ T7101] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 363.242286][ T7106] usb 4-1: config 0 has no interfaces? [ 363.370883][ T9106] vlan3: entered promiscuous mode [ 363.376270][ T9106] team0: entered promiscuous mode [ 363.381365][ T9106] team_slave_0: entered promiscuous mode [ 363.399140][ T7106] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 363.426342][ T7106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.448497][ T7106] usb 4-1: Product: syz [ 363.482757][ T7101] usb 1-1: Using ep0 maxpacket: 32 [ 363.490419][ T7101] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 363.567299][ T7101] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 363.582932][ T7106] usb 4-1: Manufacturer: syz [ 363.601263][ T7101] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 363.619697][ T7106] usb 4-1: SerialNumber: syz [ 363.656121][ T7106] usb 4-1: config 0 descriptor?? [ 363.876889][ T7101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.899682][ T9102] program syz.3.898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.982584][ T7101] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.000338][ T7101] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 364.035227][ T7101] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 364.054037][ T7101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.086708][ T7101] usb 1-1: config 0 descriptor?? [ 364.274635][ T7125] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 364.321318][ T7101] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 364.442754][ T7125] usb 2-1: Using ep0 maxpacket: 16 [ 364.514570][ T7125] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 364.572805][ T7125] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 364.586539][ T7125] usb 2-1: Product: syz [ 364.591217][ T7125] usb 2-1: Manufacturer: syz [ 364.602462][ T7125] usb 2-1: SerialNumber: syz [ 364.618442][ T7125] usb 2-1: config 0 descriptor?? [ 364.698459][ T7125] usb 2-1: selecting invalid altsetting 1 [ 364.730157][ T7101] usb 1-1: USB disconnect, device number 37 [ 364.760682][ T7101] usblp0: removed [ 364.807416][ T7125] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 364.908089][ T9114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.902'. [ 364.919366][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.949129][ T5895] usb 2-1: USB disconnect, device number 61 [ 365.156280][ T7125] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 365.196455][ T9120] fuse: Bad value for 'fd' [ 365.587982][ T7125] usb 5-1: config 0 has no interfaces? [ 365.620905][ T7125] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 365.671916][ T7125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.683543][ T9131] bridge3: entered allmulticast mode [ 365.819700][ T7125] usb 5-1: Product: syz [ 365.837993][ T7125] usb 5-1: Manufacturer: syz [ 365.858194][ T7125] usb 5-1: SerialNumber: syz [ 365.934526][ T7125] usb 5-1: config 0 descriptor?? [ 365.948119][ T30] audit: type=1400 audit(1744276980.592:131): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 16 bytes leftover after parsing attributes in process `syz.4.903'. [ 366.302074][ T7114] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 366.381159][ T7106] usb 4-1: USB disconnect, device number 55 [ 366.607868][ T7114] usb 2-1: Using ep0 maxpacket: 32 [ 366.640063][ T7114] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.650641][ T7114] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 366.668344][ T7114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.686178][ T7114] usb 2-1: Product: syz [ 366.695429][ T7114] usb 2-1: Manufacturer: syz [ 366.706220][ T7114] usb 2-1: SerialNumber: syz [ 366.730484][ T7114] usb 2-1: config 0 descriptor?? [ 367.155682][ T7114] gs_usb 2-1:0.0: Configuring for 35 interfaces [ 367.164520][ T7114] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 367.229623][ T7114] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 367.891481][ T9158] xt_TCPMSS: Only works on TCP SYN packets [ 368.096495][ T9160] netlink: 84 bytes leftover after parsing attributes in process `syz.0.917'. [ 368.154168][ T7114] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 368.455994][ T7114] usb 3-1: config 0 has no interfaces? [ 368.481745][ T7114] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 368.507733][ T7114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.542206][ T7114] usb 3-1: config 0 descriptor?? [ 368.753674][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 368.904304][ T7106] usb 2-1: USB disconnect, device number 62 [ 368.953173][ T7125] usb 5-1: USB disconnect, device number 46 [ 369.129014][ T9171] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 369.175703][ T9171] CPU: 0 UID: 0 PID: 9171 Comm: syz.4.919 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 369.175727][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.175736][ T9171] Call Trace: [ 369.175743][ T9171] [ 369.175750][ T9171] dump_stack_lvl+0x241/0x360 [ 369.175781][ T9171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.175827][ T9171] ? __wake_up_klogd+0xcc/0x110 [ 369.175857][ T9171] sysfs_warn_dup+0x8e/0xa0 [ 369.175873][ T9171] sysfs_do_create_link_sd+0xbe/0x110 [ 369.175890][ T9171] device_add_class_symlinks+0x1c5/0x250 [ 369.175913][ T9171] device_add+0x553/0xbf0 [ 369.175936][ T9171] wiphy_register+0x193c/0x2660 [ 369.175969][ T9171] ? __pfx_wiphy_register+0x10/0x10 [ 369.175989][ T9171] ? minstrel_ht_alloc+0x85a/0x950 [ 369.176018][ T9171] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 369.176046][ T9171] ieee80211_register_hw+0x35e9/0x42d0 [ 369.176072][ T9171] ? ieee80211_register_hw+0x15d1/0x42d0 [ 369.176094][ T9171] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 369.176121][ T9171] ? __hrtimer_setup+0x17f/0x200 [ 369.176139][ T9171] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 369.176160][ T9171] mac80211_hwsim_new_radio+0x2adc/0x4a60 [ 369.176200][ T9171] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 369.176215][ T9171] ? trace_kmalloc+0x1f/0xd0 [ 369.176234][ T9171] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 369.176257][ T9171] ? kstrndup+0xbb/0x150 [ 369.176285][ T9171] hwsim_new_radio_nl+0xed0/0x2290 [ 369.176312][ T9171] ? __pfx___nla_validate_parse+0x10/0x10 [ 369.176335][ T9171] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 369.176377][ T9171] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 369.176401][ T9171] genl_rcv_msg+0xb38/0xf00 [ 369.176433][ T9171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.176447][ T9171] ? __dev_queue_xmit+0x1780/0x3f60 [ 369.176471][ T9171] ? kasan_save_track+0x3f/0x80 [ 369.176487][ T9171] ? __kasan_slab_alloc+0x66/0x80 [ 369.176511][ T9171] ? do_syscall_64+0xf3/0x230 [ 369.176543][ T9171] ? __lock_acquire+0xad5/0xd80 [ 369.176560][ T9171] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 369.176588][ T9171] netlink_rcv_skb+0x208/0x480 [ 369.176610][ T9171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.176628][ T9171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.176666][ T9171] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.176692][ T9171] genl_rcv+0x28/0x40 [ 369.176709][ T9171] netlink_unicast+0x7f8/0x9a0 [ 369.176736][ T9171] ? __pfx_netlink_unicast+0x10/0x10 [ 369.176756][ T9171] ? skb_put+0x114/0x1f0 [ 369.176775][ T9171] netlink_sendmsg+0x8c3/0xcd0 [ 369.176806][ T9171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.176832][ T9171] ? aa_sock_msg_perm+0x91/0x160 [ 369.176858][ T9171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.176878][ T9171] __sock_sendmsg+0x221/0x270 [ 369.176901][ T9171] ____sys_sendmsg+0x523/0x860 [ 369.176924][ T9171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.176939][ T9171] ? __fget_files+0x2a/0x420 [ 369.176955][ T9171] ? __fget_files+0x2a/0x420 [ 369.176975][ T9171] __sys_sendmsg+0x271/0x360 [ 369.176991][ T9171] ? __pfx_futex_wake+0x10/0x10 [ 369.177021][ T9171] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.177078][ T9171] ? do_syscall_64+0xb6/0x230 [ 369.177097][ T9171] do_syscall_64+0xf3/0x230 [ 369.177123][ T9171] ? clear_bhb_loop+0x45/0xa0 [ 369.177149][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.177164][ T9171] RIP: 0033:0x7f4e52b8d169 [ 369.177183][ T9171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.177200][ T9171] RSP: 002b:00007f4e5395e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.177219][ T9171] RAX: ffffffffffffffda RBX: 00007f4e52da5fa0 RCX: 00007f4e52b8d169 [ 369.177230][ T9171] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000003 [ 369.177239][ T9171] RBP: 00007f4e52c0e730 R08: 0000000000000000 R09: 0000000000000000 [ 369.177249][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.177257][ T9171] R13: 0000000000000000 R14: 00007f4e52da5fa0 R15: 00007f4e52ecfa28 [ 369.177279][ T9171] [ 369.575274][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.829034][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 369.852091][ T9173] vlan3: entered promiscuous mode [ 369.971923][ T9178] xt_HMARK: proto mask must be zero with L3 mode [ 370.551986][ T9197] loop2: detected capacity change from 0 to 7 [ 370.572076][ T9197] Dev loop2: unable to read RDB block 7 [ 370.578294][ T9197] loop2: AHDI p2 [ 370.582244][ T9197] loop2: partition table partially beyond EOD, truncated [ 370.702899][ T7125] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 370.870528][ T5895] usb 3-1: USB disconnect, device number 40 [ 370.906174][ T7125] usb 1-1: config 0 has no interfaces? [ 370.928165][ T7125] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 371.396658][ T7125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.407254][ T5210] Dev loop2: unable to read RDB block 7 [ 371.414628][ T5210] loop2: AHDI p2 [ 371.418301][ T5210] loop2: partition table partially beyond EOD, truncated [ 371.439758][ T7125] usb 1-1: Product: syz [ 371.454990][ T7125] usb 1-1: Manufacturer: syz [ 371.469863][ T7125] usb 1-1: SerialNumber: syz [ 371.500536][ T7125] usb 1-1: config 0 descriptor?? [ 371.713973][ T9203] fuse: Bad value for 'rootmode' [ 372.608358][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 372.920132][ T9218] netlink: 'syz.2.933': attribute type 17 has an invalid length. [ 372.950396][ T9218] lo: entered promiscuous mode [ 372.961577][ T9218] tunl0: entered promiscuous mode [ 372.977810][ T9218] gre0: entered promiscuous mode [ 373.056477][ T9218] gretap0: entered promiscuous mode [ 373.098552][ T9218] erspan0: entered promiscuous mode [ 373.109149][ T9218] ip_vti0: entered promiscuous mode [ 373.117848][ T9218] ip6_vti0: entered promiscuous mode [ 373.137190][ T9218] sit0: entered promiscuous mode [ 373.169378][ T9218] ip6tnl0: entered promiscuous mode [ 373.200740][ T9218] ip6gre0: entered promiscuous mode [ 373.263275][ T9218] syz_tun: entered promiscuous mode [ 373.285070][ T9218] ip6gretap0: entered promiscuous mode [ 373.307355][ T9218] vcan0: entered promiscuous mode [ 373.362013][ T9218] bond0: entered promiscuous mode [ 373.447419][ T9218] @ÿ: entered promiscuous mode [ 373.496888][ T9218] bond_slave_1: entered promiscuous mode [ 373.559462][ T9218] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 373.628874][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.936'. [ 373.673620][ T9218] team0: entered promiscuous mode [ 373.678710][ T9218] team_slave_0: entered promiscuous mode [ 373.777980][ T9218] nlmon0: entered promiscuous mode [ 373.791079][ T9218] caif0: entered promiscuous mode [ 373.811365][ T9218] vxcan0: entered promiscuous mode [ 373.819520][ T9218] vxcan1: entered promiscuous mode [ 373.830899][ T9218] veth0: entered promiscuous mode [ 373.846127][ T9218] veth1: entered promiscuous mode [ 373.864237][ T9218] wg0: entered promiscuous mode [ 373.878723][ T9218] wg1: entered promiscuous mode [ 373.885521][ T5895] usb 1-1: USB disconnect, device number 38 [ 373.893761][ T7114] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 373.919241][ T9218] wg2: entered promiscuous mode [ 373.938709][ T9218] veth0_to_bridge: entered promiscuous mode [ 373.948954][ T9218] bridge_slave_0: entered promiscuous mode [ 373.984044][ T9218] veth1_to_bridge: entered promiscuous mode [ 373.998291][ T9218] bridge_slave_1: entered promiscuous mode [ 374.006072][ T9218] veth0_to_bond: entered promiscuous mode [ 374.015796][ T9218] veth1_to_bond: entered promiscuous mode [ 374.030001][ T9218] veth0_to_team: entered promiscuous mode [ 374.040874][ T9218] veth0_to_batadv: entered promiscuous mode [ 374.042760][ T7114] usb 2-1: Using ep0 maxpacket: 16 [ 374.050335][ T9218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.060286][ T9218] batadv_slave_0: entered promiscuous mode [ 374.060610][ T7114] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.070253][ T9218] veth1_to_batadv: entered promiscuous mode [ 374.077820][ T7114] usb 2-1: config 0 has no interfaces? [ 374.088621][ T7114] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 374.090934][ T9218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.098609][ T7114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.114618][ T9218] batadv_slave_1: entered promiscuous mode [ 374.120835][ T7114] usb 2-1: config 0 descriptor?? [ 374.125756][ T9218] xfrm0: entered promiscuous mode [ 374.138406][ T9218] veth0_to_hsr: entered promiscuous mode [ 374.149530][ T9218] veth1_to_hsr: entered promiscuous mode [ 374.162830][ T9218] 1·: entered promiscuous mode [ 374.167623][ T9218] 1·: left allmulticast mode [ 374.172213][ T9218] hsr_slave_0: left allmulticast mode [ 374.178152][ T9218] hsr_slave_1: left allmulticast mode [ 374.187729][ T9218] veth1_virt_wifi: entered promiscuous mode [ 374.198564][ T9218] veth0_virt_wifi: entered promiscuous mode [ 374.207817][ T9218] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 374.217816][ T9218] veth1_vlan: left allmulticast mode [ 374.231954][ T9218] vlan0: entered promiscuous mode [ 374.238382][ T9218] vlan1: entered promiscuous mode [ 374.249061][ T9218] macvlan0: entered promiscuous mode [ 374.257979][ T9218] macvlan1: entered promiscuous mode [ 374.267103][ T9218] ipvlan0: entered promiscuous mode [ 374.272521][ T9218] ipvlan1: entered promiscuous mode [ 374.286088][ T9218] macvtap0: entered promiscuous mode [ 374.293035][ T5895] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 374.298252][ T9218] macsec0: entered promiscuous mode [ 374.309903][ T9218] geneve0: entered promiscuous mode [ 374.318070][ T9218] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.327467][ T9218] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.343112][ T9218] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.352005][ T9218] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.362057][ T9218] geneve1: entered promiscuous mode [ 374.371879][ T9218] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 374.383448][ T9218] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 374.396505][ T9218] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 374.406940][ T9218] syztnl2: entered promiscuous mode [ 374.412256][ T9218] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 374.420226][ T9218] veth2: entered promiscuous mode [ 374.426125][ T9218] veth3: entered promiscuous mode [ 374.431987][ T9218] bond1: entered promiscuous mode [ 374.441978][ T9218] veth4: entered promiscuous mode [ 374.448004][ T9218] veth5: entered promiscuous mode [ 374.454971][ T5895] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 374.459172][ T9218] pimreg: entered promiscuous mode [ 374.463931][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.476313][ T9218] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 374.479594][ T5895] usb 1-1: config 0 has no interface number 0 [ 374.492840][ T5895] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 374.504054][ T9218] mac80211_hwsim hwsim21 wlan3: entered promiscuous mode [ 374.504232][ T5895] usb 1-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 374.527288][ T9218] mac80211_hwsim hwsim24 wlan4: entered promiscuous mode [ 374.535308][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'. [ 374.555863][ T5895] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice= 0.01 [ 374.569911][ T9231] macvlan3: entered allmulticast mode [ 374.575873][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.593289][ T5895] usb 1-1: Product: syz [ 374.597679][ T9231] batadv0: entered allmulticast mode [ 374.603690][ T5895] usb 1-1: Manufacturer: syz [ 374.613367][ T9231] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 374.620359][ T5895] usb 1-1: SerialNumber: syz [ 374.635557][ T9231] batadv0: left allmulticast mode [ 374.651362][ T5895] usb 1-1: config 0 descriptor?? [ 374.722147][ T9238] vlan0: left promiscuous mode [ 374.885001][ T47] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 374.895347][ T5895] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 374.907822][ T5895] usb 1-1: USB disconnect, device number 39 [ 375.072763][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 375.079872][ T47] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 375.079953][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.088389][ T47] usb 4-1: config 0 has no interface number 0 [ 375.099444][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.133720][ T47] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 375.154018][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.162054][ T47] usb 4-1: Product: syz [ 375.169809][ T47] usb 4-1: Manufacturer: syz [ 375.174617][ T47] usb 4-1: SerialNumber: syz [ 375.182028][ T47] usb 4-1: config 0 descriptor?? [ 375.388298][ T9246] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 375.411522][ T47] cp210x 4-1:0.79: cp210x converter detected [ 375.421449][ T47] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 375.438465][ T47] cp210x 4-1:0.79: querying part number failed [ 375.452202][ T47] usb 4-1: cp210x converter now attached to ttyUSB0 [ 375.489892][ T47] usb 4-1: USB disconnect, device number 56 [ 375.511832][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 375.549546][ T47] cp210x 4-1:0.79: device disconnected [ 375.814377][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 375.884581][ T7125] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 376.046073][ T7125] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 376.099622][ T7125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.117124][ T7125] usb 5-1: Product: syz [ 376.128450][ T7125] usb 5-1: Manufacturer: syz [ 376.133717][ T7125] usb 5-1: SerialNumber: syz [ 376.171514][ T7125] usb 5-1: config 0 descriptor?? [ 376.182588][ T7125] gspca_main: sq930x-2.14.0 probing 2770:930c [ 376.322803][ T5838] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 376.543283][ T5838] usb 4-1: config 0 has no interfaces? [ 376.583282][ T5838] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 376.599457][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.627972][ T5838] usb 4-1: Product: syz [ 376.743068][ T7106] usb 2-1: USB disconnect, device number 63 [ 376.771937][ T5838] usb 4-1: Manufacturer: syz [ 376.816989][ T5838] usb 4-1: SerialNumber: syz [ 376.856527][ T5838] usb 4-1: config 0 descriptor?? [ 377.027485][ T9253] xt_socket: unknown flags 0x4 [ 377.375472][ T7125] gspca_sq930x: ucbus_write failed -110 [ 377.386731][ T7125] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 377.565956][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'. [ 377.751721][ T9283] macvlan2: entered allmulticast mode [ 377.769608][ T9283] batadv0: entered allmulticast mode [ 377.785286][ T9283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 377.807037][ T9283] batadv0: left allmulticast mode [ 378.436682][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.443180][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.686447][ T7125] usb 5-1: USB disconnect, device number 47 [ 378.970925][ T9292] loop2: detected capacity change from 0 to 7 [ 378.981178][ T9292] loop2: [POWERTEC] p1 p2 p3 [ 378.991000][ T9292] loop2: p1 start 1949266277 is beyond EOD, truncated [ 379.009614][ T9292] loop2: p2 start 1635021614 is beyond EOD, truncated [ 379.016822][ T9292] loop2: p3 start 524288 is beyond EOD, truncated [ 379.409959][ T9303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 379.446791][ T7106] usb 4-1: USB disconnect, device number 57 [ 379.664464][ T7125] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 379.728489][ T9309] bridge0: entered promiscuous mode [ 379.735820][ T9309] bridge0: entered allmulticast mode [ 379.750303][ T9309] team0: Port device bridge0 added [ 379.832794][ T7125] usb 2-1: Using ep0 maxpacket: 8 [ 379.859656][ T7125] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 379.912178][ T7125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.952813][ T7125] usb 2-1: Product: syz [ 379.957135][ T7125] usb 2-1: Manufacturer: syz [ 379.961751][ T7125] usb 2-1: SerialNumber: syz [ 379.993808][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 380.013799][ T7125] usb 2-1: config 0 descriptor?? [ 380.036091][ T5838] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 380.039653][ T7125] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 380.249838][ T5838] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.295047][ T9321] loop2: detected capacity change from 0 to 7 [ 380.305670][ T9321] Dev loop2: unable to read RDB block 7 [ 380.311288][ T9321] loop2: AHDI p2 [ 380.315529][ T9321] loop2: partition table partially beyond EOD, truncated [ 380.374997][ T5838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 380.394770][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.437830][ T5838] usb 4-1: Product: syz [ 380.506256][ T5838] usb 4-1: Manufacturer: syz [ 380.518421][ T5838] usb 4-1: SerialNumber: syz [ 381.542968][ T7125] gspca_sonixj: reg_w1 err -110 [ 381.582838][ T7125] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 381.862728][ T7125] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 382.019383][ T7125] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 382.035586][ T7125] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.048541][ T7125] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.058832][ T7125] usb 3-1: config 1 has no interface number 0 [ 382.068628][ T7125] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 382.085422][ T7125] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 382.120482][ T7125] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.131391][ T7125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.159151][ T7125] usb 3-1: Product: syz [ 382.168309][ T7125] usb 3-1: Manufacturer: syz [ 382.175147][ T7125] usb 3-1: SerialNumber: syz [ 382.208903][ T7125] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 382.216594][ T7125] cdc_ncm 3-1:1.1: bind() failure [ 382.341671][ T7109] usb 2-1: USB disconnect, device number 64 [ 382.403916][ T7114] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 382.502849][ T7106] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 382.540463][ T5895] usb 3-1: USB disconnect, device number 41 [ 382.577055][ T5838] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 382.611383][ T7114] usb 1-1: config 0 has no interfaces? [ 382.709323][ T7114] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 382.753062][ T7114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.766381][ T7106] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 382.808142][ T7106] usb 5-1: config 0 has no interface number 0 [ 382.823311][ T7114] usb 1-1: Product: syz [ 382.827526][ T7114] usb 1-1: Manufacturer: syz [ 382.832142][ T7114] usb 1-1: SerialNumber: syz [ 382.845119][ T5838] usb 4-1: USB disconnect, device number 58 [ 382.868299][ T5838] usblp0: removed [ 382.884541][ T7106] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 382.942787][ T7106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.943187][ T7125] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 382.986970][ T7114] usb 1-1: config 0 descriptor?? [ 382.994670][ T7106] usb 5-1: Product: syz [ 382.998885][ T7106] usb 5-1: Manufacturer: syz [ 383.004053][ T7106] usb 5-1: SerialNumber: syz [ 383.086761][ T7106] usb 5-1: config 0 descriptor?? [ 383.375801][ T7125] usb 2-1: config 0 has no interfaces? [ 383.626211][ T7125] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 383.654694][ T7125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.666727][ T7125] usb 2-1: Product: syz [ 383.679805][ T7125] usb 2-1: Manufacturer: syz [ 383.690089][ T7125] usb 2-1: SerialNumber: syz [ 383.899322][ T47] usb 5-1: USB disconnect, device number 48 [ 383.939389][ T7125] usb 2-1: config 0 descriptor?? [ 384.173056][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 384.245951][ T9351] fuse: Invalid rootmode [ 384.251271][ T9351] netlink: 9 bytes leftover after parsing attributes in process `syz.2.974'. [ 384.263011][ T9351] 0·: renamed from 71· [ 384.414280][ T9351] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.425021][ T9351] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.435524][ T9351] 0·: left promiscuous mode [ 384.440230][ T9351] 0·: entered allmulticast mode [ 384.451471][ T9351] hsr_slave_0: entered allmulticast mode [ 384.457374][ T9351] hsr_slave_1: entered allmulticast mode [ 384.495333][ T9351] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 385.046314][ T7106] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 385.194770][ T5838] usb 1-1: USB disconnect, device number 40 [ 385.227156][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.238388][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.277731][ T7106] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 385.322503][ T7106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.366901][ T9356] loop9: detected capacity change from 0 to 7 [ 385.440915][ T9356] Dev loop9: unable to read RDB block 7 [ 385.483066][ T9356] loop9: unable to read partition table [ 385.498139][ T9356] loop9: partition table beyond EOD, truncated [ 385.498963][ T7106] usb 5-1: config 0 descriptor?? [ 385.541590][ T9356] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 385.962435][ T7106] lenovo 0003:17EF:6047.0008: unknown main item tag 0x1 [ 385.974691][ T9359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.977'. [ 385.988415][ T9359] macvlan3: entered allmulticast mode [ 386.003405][ T9359] batadv0: entered allmulticast mode [ 386.060967][ T7106] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 386.074147][ T9359] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 386.103398][ T9359] batadv0: left allmulticast mode [ 386.153852][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.165573][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.233133][ T7106] usb 2-1: USB disconnect, device number 65 [ 386.293741][ T7125] usb 5-1: USB disconnect, device number 49 [ 386.812756][ T7106] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 386.992691][ T7106] usb 1-1: Using ep0 maxpacket: 16 [ 387.005216][ T7106] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.016252][ T7106] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.059463][ T7106] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.082675][ T7106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.101394][ T7106] usb 1-1: Product: syz [ 387.111235][ T7106] usb 1-1: Manufacturer: syz [ 387.142738][ T7106] usb 1-1: SerialNumber: syz [ 387.362802][ T7125] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 387.421365][ T7106] usb 1-1: 0:2 : does not exist [ 387.488653][ T9377] [ 387.491027][ T9377] ===================================== [ 387.496586][ T9377] WARNING: bad unlock balance detected! [ 387.502147][ T9377] 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 Not tainted [ 387.509267][ T9377] ------------------------------------- [ 387.514822][ T9377] syz.3.983/9377 is trying to release lock (&dev_instance_lock_key) at: [ 387.523183][ T9377] [] do_setlink+0xc26/0x43a0 [ 387.529383][ T9377] but there are no more locks to release! [ 387.535129][ T9377] [ 387.535129][ T9377] other info that might help us debug this: [ 387.543205][ T9377] 1 lock held by syz.3.983/9377: [ 387.548159][ T9377] #0: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 387.557278][ T9377] [ 387.557278][ T9377] stack backtrace: [ 387.563185][ T9377] CPU: 1 UID: 0 PID: 9377 Comm: syz.3.983 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 387.563213][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 387.563227][ T9377] Call Trace: [ 387.563236][ T9377] [ 387.563244][ T9377] dump_stack_lvl+0x241/0x360 [ 387.563280][ T9377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.563310][ T9377] ? __pfx__printk+0x10/0x10 [ 387.563340][ T9377] ? print_lock+0x171/0x1a0 [ 387.563367][ T9377] ? do_setlink+0xc26/0x43a0 [ 387.563397][ T9377] print_unlock_imbalance_bug+0x185/0x1a0 [ 387.563450][ T9377] lock_release+0x1ed/0x3e0 [ 387.563471][ T9377] ? do_setlink+0xc26/0x43a0 [ 387.563503][ T9377] ? do_setlink+0xc26/0x43a0 [ 387.563534][ T9377] __mutex_unlock_slowpath+0xee/0x800 [ 387.563561][ T9377] ? rcu_is_watching+0x15/0xb0 [ 387.563587][ T9377] ? do_trace_netlink_extack+0x8b/0x1f0 [ 387.563613][ T9377] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.563639][ T9377] ? finish_task_switch+0x1e5/0x870 [ 387.563666][ T9377] ? lockdep_hardirqs_on+0x9d/0x150 [ 387.563689][ T9377] ? __pfx_validate_linkmsg+0x10/0x10 [ 387.563715][ T9377] ? rcu_is_watching+0x15/0xb0 [ 387.563744][ T9377] do_setlink+0xc26/0x43a0 [ 387.563778][ T9377] ? __schedule+0x1ba6/0x5240 [ 387.563804][ T9377] ? preempt_schedule_irq+0xfe/0x1c0 [ 387.563827][ T9377] ? __pfx_do_setlink+0x10/0x10 [ 387.563858][ T9377] ? __pfx___schedule+0x10/0x10 [ 387.563879][ T9377] ? __lock_acquire+0xad5/0xd80 [ 387.563907][ T9377] ? rcu_is_watching+0x15/0xb0 [ 387.563934][ T9377] ? trace_irq_disable+0x3b/0x120 [ 387.563953][ T9377] ? preempt_schedule_irq+0x145/0x1c0 [ 387.563976][ T9377] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 387.563998][ T9377] ? trace_contention_end+0x3c/0x120 [ 387.564029][ T9377] ? irqentry_exit+0x63/0x90 [ 387.564051][ T9377] ? lockdep_hardirqs_on+0x9d/0x150 [ 387.564079][ T9377] ? full_name_hash+0x4e/0xe0 [ 387.564100][ T9377] ? strcmp+0x4b/0xa0 [ 387.564130][ T9377] rtnl_newlink+0x17e2/0x1fe0 [ 387.564158][ T9377] ? stack_depot_save_flags+0x44/0x940 [ 387.564187][ T9377] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.564215][ T9377] ? __netlink_deliver_tap+0x561/0x7f0 [ 387.564264][ T9377] ? kasan_quarantine_put+0xdc/0x230 [ 387.564288][ T9377] ? lockdep_hardirqs_on+0x9d/0x150 [ 387.564314][ T9377] ? nlmon_xmit+0xaf/0x100 [ 387.564349][ T9377] ? __local_bh_enable_ip+0x168/0x200 [ 387.564369][ T9377] ? lockdep_hardirqs_on+0x9d/0x150 [ 387.564396][ T9377] ? aa_get_newest_label+0x101/0x6f0 [ 387.564428][ T9377] ? __lock_acquire+0xad5/0xd80 [ 387.564459][ T9377] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.564489][ T9377] rtnetlink_rcv_msg+0x80f/0xd70 [ 387.564517][ T9377] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 387.564548][ T9377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.564580][ T9377] ? ref_tracker_free+0x63e/0x7e0 [ 387.564605][ T9377] netlink_rcv_skb+0x208/0x480 [ 387.564635][ T9377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.564672][ T9377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.564708][ T9377] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.564738][ T9377] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.564767][ T9377] netlink_unicast+0x7f8/0x9a0 [ 387.564796][ T9377] ? __pfx_netlink_unicast+0x10/0x10 [ 387.564822][ T9377] ? skb_put+0x114/0x1f0 [ 387.564843][ T9377] netlink_sendmsg+0x8c3/0xcd0 [ 387.564876][ T9377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.564907][ T9377] ? aa_sock_msg_perm+0x91/0x160 [ 387.564942][ T9377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.564970][ T9377] __sock_sendmsg+0x221/0x270 [ 387.564999][ T9377] ____sys_sendmsg+0x523/0x860 [ 387.565024][ T9377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.565046][ T9377] ? __fget_files+0x2a/0x420 [ 387.565065][ T9377] ? __fget_files+0x2a/0x420 [ 387.565087][ T9377] __sys_sendmsg+0x271/0x360 [ 387.565107][ T9377] ? __pfx_futex_wake+0x10/0x10 [ 387.565130][ T9377] ? __pfx___sys_sendmsg+0x10/0x10 [ 387.565176][ T9377] ? do_syscall_64+0xb6/0x230 [ 387.565203][ T9377] do_syscall_64+0xf3/0x230 [ 387.565228][ T9377] ? clear_bhb_loop+0x45/0xa0 [ 387.565251][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.565272][ T9377] RIP: 0033:0x7faee618d169 [ 387.565289][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.565307][ T9377] RSP: 002b:00007faee6f22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.565329][ T9377] RAX: ffffffffffffffda RBX: 00007faee63a5fa0 RCX: 00007faee618d169 [ 387.565345][ T9377] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000003 [ 387.565359][ T9377] RBP: 00007faee620e730 R08: 0000000000000000 R09: 0000000000000000 [ 387.565372][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.565385][ T9377] R13: 0000000000000000 R14: 00007faee63a5fa0 R15: 00007faee64cfa28 [ 387.565406][ T9377] [ 388.463465][ T7106] usb 1-1: USB disconnect, device number 41 [ 388.467833][ T7125] usb 5-1: Using ep0 maxpacket: 8 [ 388.476222][ T7125] usb 5-1: config 0 has no interfaces? [ 388.481731][ T7125] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.491111][ T7125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.503238][ T7125] usb 5-1: config 0 descriptor?? [ 388.683466][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.138100][ T5895] usb 5-1: USB disconnect, device number 50