last executing test programs: 2m10.900510442s ago: executing program 3 (id=32): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r2 = syz_usb_connect$uac1(0x4, 0xce, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000ff6b1d01014000010203010902bc0003014640040904000000010100000a240102000002010208240804ff0f009609040100000102000009040101010102000010240201530407042837d33f10c9ff0a09050109ff0303fe80072501010507000904020000010200000904020101010200000a24020180040600330f0b2402010801017ff172940924020109010301980724010d0a0110102402020900060000b7f677be2b6fb510240201090309ce5f8848d1c93be11509058209400006060207250180070100"], &(0x7f0000000780)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xfb, 0x6, 0x8, 0x8, 0x1}, 0x2c, &(0x7f0000000200)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x1, 0xf, 0x2, [0xf, 0xffc00f, 0xff30, 0xc0, 0xc000, 0xff0f]}, @ptm_cap={0x3}]}, 0x9, [{0xf7, &(0x7f0000000240)=@string={0xf7, 0x3, "167ce50953f0a69cfab997bd536ebede8a525a49e14c6a57190b83182354e3b36201a5170651f2a34a43020d6bbced2458160e3128536cafe97d640ee4df8fc695ab67c61fd57a4971f81b3252d86fd9aed8b4ac1c09bbb445531ef831a5ff5d43fe356f7dab6b21987af6b4362e5d04020b94bfaa5404881aa51ff888f843011679063ebf10e38dbc5fce88ae99ea18f7787cfe386968b15c101b112d45fabfd038b299a7bdb84e66d6ddc7d5ddf989704e0117dd854822089b5ef58c77876f1c26ac979db96a13c7634a8a7367cde29fd27282c983f65610b17afb8acc2e525ab260c38a1e016748481781e5f871bc546dd8b254"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x68, &(0x7f00000003c0)=@string={0x68, 0x3, "ee5038ac49c4d37f163c5bd5c425a393d8c84ec6f2505b6cf5cf8164a08d3e59016fa6a2511409159c2b8686d69e52f40955258501c069fd358816598b285fd74ef36ada731d8138c87a40f29615079dfa3296480f53f28673de3a9a39b2a433c085a8bdeb7c"}}, {0xe8, &(0x7f0000000440)=@string={0xe8, 0x3, "03e4e971db63ca07000d87616e5f0b2498a304210126e07c93f7ae3726aad311feb4c7470b624b3abda2ac7b7b5c867e26571687ac02268db0ced8a154b2b62ddb2ccf2ad3dbc9877b96548be8185976e005be1acfd649e9a6c12938ae7b4ca58c225b1d7b1f6dc36dae1cd31dd146c2fcd19ebef4ad39a95bcf17f8b1cc92e5e9ddde2c3b1722d0fc75ebcbc590df788f3f7b87098d9d942f9d39d4058f1495fcf6fc2f405d9d5c4055ac300083c40a44bd9a3a7371ca5562d60465b1dc3ff34e2785e13d6533d15a9925405d1bcefd1fdbe9e79b8e25adcc7d79e9543156a80c1d77164bc2"}}, {0xc2, &(0x7f0000000540)=@string={0xc2, 0x3, "1bf4953be7164a8d0912fa10f1ead93243c8eab0dae29c19248b0cee140defffd6f600ead36942b646eb17f2691cfaa357ca637ccac711bcfb1a30334e34e843e02b9b348eb3a0c54972aed28221b40614a496aeaf5feeff05ee3c591f304965142bc04de45c2d386fcd5f435975f29c2fcf819d4f87d4e408caae8e819dee2fdcce57a60445e98d39d523b9de7da6fb6a7ba2a580dfad15c8163bf2e5a2120d2b2714c2f9d7e0a8ae16ded5bedf894adcc1a98c65bc7119b0ca89216a23dd52"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x4e7a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x814}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000880)={0x14, &(0x7f0000000700)={0x20, 0xa, 0xb, {0xb, 0xa, "db2f56c04de2276c31"}}, &(0x7f0000000840)={0x0, 0x3, 0x21, @string={0x21, 0x3, "1cfcb719cd0a3a13ae32f553ee74ac7743ec0fb3aca6d3d83fb1cb829e35df"}}}, &(0x7f0000000b00)={0x44, &(0x7f00000008c0)={0x0, 0x1, 0x50, "4113e00c9d155aef195599df20488ea1fc63c1c89904e1219de55af17e26b80e5c60626464afcfa537da5110a9051869c45a072b0a8ceaf927b2aa22fddec7ed35e2e5dbd4abe74017aa4a302a4b5982"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000009c0)={0x20, 0x81, 0x1, "9c"}, &(0x7f0000000a00)={0x20, 0x82, 0x1, "b8"}, &(0x7f0000000a40)={0x20, 0x83, 0x3, 'E7o'}, &(0x7f0000000a80)={0x20, 0x84, 0x3, "77e6d8"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "c39c75"}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096230d839fea28c8931e8503e82a06c88706000b0000937ea23821b30b77eae382c17b"], 0x0}, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) 2m9.288057056s ago: executing program 3 (id=44): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x2, 0x9f, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xcf, 0x7e, 0x8f, 0x40, 0x2040, 0x721f, 0xf262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x87, 0x6, 0x0, 0xa9, 0x7a, 0x37, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xb0a, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x96}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9c, "fe"}]}]}}, {{0x9, 0x4, 0xcd, 0x3, 0x4, 0x58, 0x5a, 0x87, 0x5, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4d, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x3c, 0x40, 0x0, [@generic={0x13, 0x22, "b220c3b729cb730124ffd3a7ac2ef43bf1"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x3, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfb}]}}, {{0x9, 0x5, 0xe17bebb0bfe4c045, 0x1, 0x200, 0x80, 0xfd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}, @generic={0xe, 0x22, "2e72c3a0da930c726ae4ebd6"}]}}]}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 2m6.019747594s ago: executing program 3 (id=60): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x280, r1, 0x1, 0x0, 0x3, {0xf}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc38}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4ce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33cd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "1187fbeeea2bc9e0717233ee8ddf8633a8b9e3cfadf74d3112bb833a5f9c0698b12d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9a}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x76, 0x3, "62e62c1f314fd330274f03016718916be2ba4c96168559a81570f501bd3ad15685ba043b5620b93014320af0ebf1acd7d655db0e562a9b80ef671faf63fda3e81477167487dae3bf86e57b58efb043e2d9921e517cde230446bd9b9444434ad40be2d12f7eed9c8f846845d6b4268d3aeb50"}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x45a3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x280}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xb, 0x2}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) getsockopt(r0, 0xfffffff7, 0x9, &(0x7f0000000140)=""/189, &(0x7f0000000200)=0xbd) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300a, 0x0, 0x5, 0x0, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000620affffff7f000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x40004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000100)={0xbdf, 0x0, 0x300b, 0x5, 0x3fd, 0x50, 0x7f, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd9, 0xd0, 0xc0, 0x10, 0x1a0a, 0x104, 0xddd4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x3e, 0x60}}]}}]}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @private, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000000c0)=r7) fanotify_mark(0xffffffffffffffff, 0x40, 0x3, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000240)=0x2, 0x4) 2m4.332221294s ago: executing program 3 (id=68): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x250, 0xa, 0x2000, 0x0, 0x3e, 0x180, 0x8, 0x4, {}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfcc2bb8dafb2b72d}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0) splice(r1, 0x0, r2, &(0x7f0000000280), 0x5, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xa) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x28a0864, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0) (async) r5 = syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x28a0864, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0) getdents(r5, &(0x7f0000000200)=""/66, 0x42) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000000)) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$media(&(0x7f0000000080), 0x9, 0x0) fcntl$notify(r8, 0x402, 0x36) fremovexattr(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='bs.^\x00\x00\x00\n\x00']) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000400)) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r10, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) 2m3.857138819s ago: executing program 3 (id=73): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) (async) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) 2m3.615651767s ago: executing program 3 (id=74): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x2000, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m3.32132608s ago: executing program 32 (id=74): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x2000, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m48.245260938s ago: executing program 2 (id=159): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x2, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0x6a8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 1m47.335694015s ago: executing program 2 (id=162): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11e, 0xf4240, 0x0, 0x20000000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5601) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000080)={0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000001280)="170000000200010018ffbe8c5ee17688a2003c000201000a000002a257fc5ad9fa7fbb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9215033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062ab6105d80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681", 0xb8) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x6, 0xad, {0xad, 0x8, "c379099375ee270e02442f65b196f0801504b0326632ca6c34337db50facf9665e2b487fef62216e9fc26c7f35f8730e4f559d82595627320b60299a9fc38a7700efacd1dfc2ddc420b1cce44c85d0adea6e9d95cc4038fb1ab6dfaaf45f453fa35779ee5591db0cf47bec138fdba9576e71e125d770bba100b933169531f03acadc030e6b88b9061e7bd8b97d67333904de78eb1c25fb18454d76e3de0a8116e701a26e494a6b2234b418"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="000302000000020308000000bd3ccfe389e8093aa12470bf2901de15ac6e3849"], 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x18, 0x7, 0x1, 0x0, 0x2, 0x32e7}}}, &(0x7f0000000780)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="200548000000973c4fc84122c0e59879ed03e4033cf45fcea961364f798055cad1178b74c9cfa9be65f576c3c14a91f955da02ccd17beb6f3c91505b07c5ba12dcc12224ed97deee58ff0000bf4e25895d22a8e247"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xfb466550cc4dbec8, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c9ed"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="4d11687e113c"}, &(0x7f0000000640)={0x40, 0x19, 0x2, '}('}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb}}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) (async) socket(0x2b, 0x1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11e, 0xf4240, 0x0, 0x20000000) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5601) (async) ptrace(0x10, r4) (async) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000080)={0x0}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000001280)="170000000200010018ffbe8c5ee17688a2003c000201000a000002a257fc5ad9fa7fbb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9215033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062ab6105d80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681", 0xb8) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x6, 0xad, {0xad, 0x8, "c379099375ee270e02442f65b196f0801504b0326632ca6c34337db50facf9665e2b487fef62216e9fc26c7f35f8730e4f559d82595627320b60299a9fc38a7700efacd1dfc2ddc420b1cce44c85d0adea6e9d95cc4038fb1ab6dfaaf45f453fa35779ee5591db0cf47bec138fdba9576e71e125d770bba100b933169531f03acadc030e6b88b9061e7bd8b97d67333904de78eb1c25fb18454d76e3de0a8116e701a26e494a6b2234b418"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="000302000000020308000000bd3ccfe389e8093aa12470bf2901de15ac6e3849"], 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x18, 0x7, 0x1, 0x0, 0x2, 0x32e7}}}, &(0x7f0000000780)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="200548000000973c4fc84122c0e59879ed03e4033cf45fcea961364f798055cad1178b74c9cfa9be65f576c3c14a91f955da02ccd17beb6f3c91505b07c5ba12dcc12224ed97deee58ff0000bf4e25895d22a8e247"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xfb466550cc4dbec8, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c9ed"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="4d11687e113c"}, &(0x7f0000000640)={0x40, 0x19, 0x2, '}('}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb}}) (async) 1m46.058045737s ago: executing program 2 (id=166): syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000) (async) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVe.:De', 0x0) ioctl$EVIOCGVERSION(r0, 0x5452, &(0x7f0000000000)=""/194) 1m45.928389516s ago: executing program 2 (id=168): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x800) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = syz_usbip_server_init(0x4) ioprio_set$pid(0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0xc01c2, 0x1fe) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000440), &(0x7f0000000600)="2800df186ca10a1fb187c2211227ff1da995bff514154f08d14dcea3097555245a103a130868eb0f363b15a48b98a22bb5bfedc4d0e695696239bb037e80a3392729d8b3c65035ecd76c6d18e7e65696240909b9f210de5bf6308f000000002928bac9e2ad2ce304c6e40776d3c552c6050b6d0150d9f4c11caa3cb30021ba600d2cb7d607923992542a636e39091d1b", 0x90, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}}) write$usbip_server(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000001080000cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001000)={0x14, &(0x7f0000000f40)={0x20, 0xf, 0x4a, {0x4a, 0x22, "a924639f8cb57c34674e2d150aa7095f3adb5d83d39d9db6cdcd38f88b8e6c3600312040f3ac196b746877b84188cbb423c3e3840da86b33ee85818d6c7bcfe8a00fa99801aa39fd"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000011c0)={0x1c, &(0x7f0000001040)={0x40, 0x18, 0xe5, "6e4f76f32461bd3266ed2a88d5ae47a9c08add5f6843bb074f7bcaa0794b5e61334ff67a15835e17a52d2b6104aac77747b8bc2b1cb19fad1bd4aae50b49a0905c1adb1d6a34a77c1e27894cc2e38405cbe00b5fc9292321ef5499493172db60d9907c6f20812a5c895349d7dd8c9a37260ea8bf27b43ee0729cb6458d692f1e1b9fe3dd0f9cc4a596fbeeed999c20ba62129d8e75c12c7f2a777f3c6b0326cd1b2d524c33704318baf1cf165fd3bfc7a6aa916ad4c699980c8ec7363bef475192582a8d233e5e71d070373b4e3fe565ce09836865b4827bb81ad5d36e44ae1a84b4e4029c"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x9}}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0xfffffffffffffddd, r6, {0x625}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[r1, r8, r7], 0x3) read$FUSE(r6, &(0x7f0000008180)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r9, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffe, r9, 0x0) 1m45.105186034s ago: executing program 2 (id=176): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000094}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1m44.836741116s ago: executing program 2 (id=177): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000ffd1183c500000ca0000010902244001000000000904008001030000000921000000012205000905810340001e0000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x6, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000340)={0x0}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES64=r3, @ANYRESHEX], 0x20) 1m44.537730178s ago: executing program 33 (id=177): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000ffd1183c500000ca0000010902244001000000000904008001030000000921000000012205000905810340001e0000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x6, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000340)={0x0}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES64=r3, @ANYRESHEX], 0x20) 1m39.173841578s ago: executing program 6 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x10400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800010000000000000000000a00"/28, @ANYRES32=r1, @ANYBLOB="0600150007"], 0x44}}, 0x0) 1m38.914052648s ago: executing program 6 (id=213): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x0, 0x7, 0x0, 0x0, 0x1, {}, {}, {0x0, 0x4}, {0xfffffffc, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x23, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8}) (async) r1 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0xa6b, 0x10100, 0x0, 0x2e4}, &(0x7f0000000040), &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000280)={r3}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) (async) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x2010, r4, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x527f1b11b3ba8a67, 0x0, 0x0, 0x1, {0x0, r7}}) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10) (async) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$FBIO_WAITFORVSYNC(r10, 0x40044620, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r11, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xb, 0x34, @random="3d0d372cc7b78a"}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000ae8b487f04ff3af03f1760d381bafe4de2fda7b7aa66", @ANYRES16=r11, @ANYBLOB="000127bd7000fcdbdf25320000000c009900850000001e000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x59) 1m38.624453834s ago: executing program 6 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYBLOB="20020000800000001800168014000180100002000e0000ed"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4050004) 1m38.512361228s ago: executing program 6 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)=0x28) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x24000, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) 1m38.357547062s ago: executing program 6 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000300010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x0) 1m36.809579444s ago: executing program 6 (id=230): socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x1b91, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000080)={"a0453822", 0x0, 0x6, 0x1, 0x0, 0x2, "33793ed2edede2df2a87ba3158b8da", '\x00', "0600", "ff44eec1", ["d8e75781f3efa56a26ffbd57", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]}) r3 = socket$alg(0x26, 0x5, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x440542, 0x0) accept4(r3, 0x0, 0x0, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0xdb9f, 0x7, 0x4, 0x45f}, {0x3aa, 0x58, 0xa6, 0xe2}, {0x6, 0x2, 0x2, 0x4}, {0x7e, 0x6, 0x7f, 0x10001}, {0x0, 0x0, 0xc8, 0x688}, {0x2, 0x4, 0x8, 0x4}, {0xff, 0xfe, 0x25, 0x4}, {0x4, 0x4, 0xc, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040), &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$TIOCSSOFTCAR(r0, 0x545c, 0x0) 1m36.27426462s ago: executing program 34 (id=230): socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x1b91, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000080)={"a0453822", 0x0, 0x6, 0x1, 0x0, 0x2, "33793ed2edede2df2a87ba3158b8da", '\x00', "0600", "ff44eec1", ["d8e75781f3efa56a26ffbd57", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]}) r3 = socket$alg(0x26, 0x5, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x440542, 0x0) accept4(r3, 0x0, 0x0, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0xdb9f, 0x7, 0x4, 0x45f}, {0x3aa, 0x58, 0xa6, 0xe2}, {0x6, 0x2, 0x2, 0x4}, {0x7e, 0x6, 0x7f, 0x10001}, {0x0, 0x0, 0xc8, 0x688}, {0x2, 0x4, 0x8, 0x4}, {0xff, 0xfe, 0x25, 0x4}, {0x4, 0x4, 0xc, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040), &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$TIOCSSOFTCAR(r0, 0x545c, 0x0) 1m18.715839169s ago: executing program 7 (id=313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r5, 0x0, 0x0, 0x0, 0x8000, 0xe, 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m18.416870081s ago: executing program 7 (id=316): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x10f, 0x1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000055d000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000899000/0x2000)=nil) mbind(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80ffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_disconnect(r0) 1m16.092909064s ago: executing program 7 (id=330): syz_usb_connect(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x4e22, @broadcast}}}, 0x88) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000ff0a000000000000008010000000000013080000000000050000000000000000"]) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000280)={'veth1_macvtap\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x13, r5, 0x200, 0x0, 0x0, {0x2f}, [@DEVLINK_ATTR_RATE_TX_SHARE={0x0, 0xa6, 0x1740000000000000}]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000180)={0x0, 0x3, r6}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000200)={[0x0, 0xe20915102a43445c, 0x4000, 0x5000], 0x9, 0x12, 0x6}) bind$unix(r2, 0x0, 0x0) 1m12.964505395s ago: executing program 7 (id=354): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r1 = io_uring_setup(0xf4b, &(0x7f0000000000)={0x0, 0x5d8f, 0x1, 0x2, 0x26a}) syz_io_uring_setup(0x62ea, &(0x7f0000000080)={0x0, 0x6d86, 0x40, 0x2, 0x253, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240)) 1m12.79288055s ago: executing program 7 (id=357): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) rt_sigtimedwait(&(0x7f0000000000)={[0x8]}, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x8) 1m12.540976796s ago: executing program 7 (id=360): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0105000000000000000306241a0000020905810300040000000904010000020d00000904010102020d0000090582ff0700070400090503"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000340)="567a31562e65ad073fe6b0a4c072e8021a258727f3b5767b3745", 0x1a}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x200, 0x4, 0x1000, 0x9, 0xfffc, 0x7fff, 0x9, 0x4, 0x4, 0x659, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m12.228160723s ago: executing program 35 (id=360): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0105000000000000000306241a0000020905810300040000000904010000020d00000904010102020d0000090582ff0700070400090503"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000340)="567a31562e65ad073fe6b0a4c072e8021a258727f3b5767b3745", 0x1a}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x200, 0x4, 0x1000, 0x9, 0xfffc, 0x7fff, 0x9, 0x4, 0x4, 0x659, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m2.660218618s ago: executing program 1 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x2c060000) unshare(0x24020400) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m0.898582139s ago: executing program 1 (id=408): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) (async) r0 = gettid() tkill(r0, 0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000080)={[0x2]}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="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", 0x3a5}, {&(0x7f0000000100)="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", 0x1e3}, {&(0x7f0000000040)="e522807b9409e9", 0x7}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x2}}) (async) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) (async) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) (async) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) (async) write$uinput_user_dev(r4, &(0x7f0000000240)={'syz1\x00', {}, 0x3, [0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}, 0x45c) (async) io_pgetevents(0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) 1m0.156857981s ago: executing program 1 (id=409): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002000400dd3a352c579d73495b35ececd303ff25eeccaf2c55264c1be24aa91884a3a0ae"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000100)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r0]) 58.332663189s ago: executing program 1 (id=412): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2002003}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x9, {0x1, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4009, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x44) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000200)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000140)=0x1}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="00220500000097ca040400"], 0x0}, 0x0) 55.22478021s ago: executing program 1 (id=426): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000400)={{@hyper, 0x40003}, 0x1, 0x2, 0xffffffff}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001a00)) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000500)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [0xfffffffd], [0x0, 0x0, 0xfffffffffffffffd]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000300)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 54.924888346s ago: executing program 1 (id=428): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4c, 0x1, 0x2, "9601f800000800f8ffbfff00000000000000000100", 0x2036315a}) 54.591839529s ago: executing program 36 (id=428): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4c, 0x1, 0x2, "9601f800000800f8ffbfff00000000000000000100", 0x2036315a}) 3.722864367s ago: executing program 8 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @remote, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x9, 0x24, 0x66, 0x0, 0xff, 0x11, 0x0, @multicast1, @private=0xa010102}, {0x4e22, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x74, 0x100, @val=0x80}}}}}}}, 0x0) 3.536320019s ago: executing program 8 (id=1181): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ppoll(&(0x7f0000000140)=[{r0, 0x8010}], 0x1, 0x0, 0x0, 0x0) 3.413446028s ago: executing program 0 (id=1183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x88031, 0xffffffffffffffff, 0x3000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) 2.9866551s ago: executing program 9 (id=1190): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) 2.832746474s ago: executing program 9 (id=1192): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}], 0x6}, 0x0) 2.634667757s ago: executing program 9 (id=1195): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000200)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000ed"], 0x10}}], 0x1, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) 2.574079478s ago: executing program 8 (id=1196): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) 2.468919043s ago: executing program 9 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x3, 0x4, 0x61, 0x65, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@end]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0xf1, 0x0, 0x8}, {"aa302188935d34ead29ed070bc7a611aa10afb0e88a33b7a717ff28f0c4d91dcc437c92191b6fb078054116ad91f9cef78e3563b8f"}}}}, 0x6f) 2.45813796s ago: executing program 8 (id=1198): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 2.35806752s ago: executing program 8 (id=1199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000500)="0c392605000000f40000011f5ae228000000000000000000000000000002083d421158e9d11504e7f181965689e5c463cab20783036390d942fadfbcf96df0893382ae0f0dd864cdf34fcdae2f5aa40dd25d7093bbafbcbbaecc657476be366c87863f6d3c339e37b2d7114fc5103b63b059f3487ab251a30783a3", 0x7b, 0x8d1, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 2.281978084s ago: executing program 9 (id=1200): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) unshare(0x68040200) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) shutdown(r5, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='V', 0x4000}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.208945509s ago: executing program 0 (id=1201): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x5}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.060464433s ago: executing program 0 (id=1203): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) accept$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x81, 0x1019}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 1.88897142s ago: executing program 4 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000070000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0000000fffff7ffff"], 0x4c}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 1.605034148s ago: executing program 4 (id=1207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.528706967s ago: executing program 4 (id=1209): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae0000ba000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.481182352s ago: executing program 4 (id=1210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x0) 1.340962086s ago: executing program 8 (id=1211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x88031, 0xffffffffffffffff, 0x3000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) 1.340557925s ago: executing program 5 (id=1212): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0xe, 0xfffffffffffffffb, 0x457, 0x40, 0x3, 0x3}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.147375515s ago: executing program 4 (id=1213): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10001) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0xba01}, 0x0) 1.049347202s ago: executing program 0 (id=1214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000600)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x4}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ce]}]}}}}}}}}, 0x0) 836.408443ms ago: executing program 0 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x50}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000a1403090000000000000000080001"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a381", @ANYRES16=r4, @ANYBLOB="010000000000000000001c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000005e000b0000000000"], 0x3c}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r5, 0x0, 0x16, 0x0, &(0x7f0000002300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000005060101000000000000000909000378f84bb131000092f62e50310600000096d67c89becc19000005001400000000000900020073797a300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x890) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket(0x840000000002, 0x3, 0xff) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) close(r8) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000b0605000000000000000000000000000900020073797a3000000000050001"], 0x2c}}, 0x0) 785.351078ms ago: executing program 4 (id=1216): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) r1 = epoll_create(0x712) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 465.469287ms ago: executing program 5 (id=1217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x504, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x4d4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x4c8, 0x6, [@m_simple={0x1f0, 0x1f, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0x2d, 0x3, '@-^[\xa5&,.\x00pe\xe9\xb9\xf1Q+=\xdf\xacqd\xb4\xd3\rj6\xb4\xa6fz\x91\xa6\xe9\xdfy\xef\xbcY\xbb[a'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x403, 0xfffffffffffffffe, 0x6, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x10000000, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x12d, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x16c, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb7e}]}, {0x12f, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xb8, 0xc, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x30a}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x6, 0x7, 0xf64, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4e9}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xee1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x715}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8a7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x3d, 0x6, "eda7d7a535361ed0c9b32a364b522addd6669254402ee3ff325c8cea5004909bdc00830603507c7cc3cb8a9b0bfd1aa374f3d137bd1e7f8b57"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xb0, 0x15, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff9, 0x5, 0x8, 0x7, 0x4}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6002}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x6, 0x5, 0x3, 0x800}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8703d}]}, {0x31, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x504}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@local}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in6=@dev, @in6=@private1, @in6=@rand_addr=' \x01\x00'}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 374.446443ms ago: executing program 0 (id=1218): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ppoll(&(0x7f0000000140)=[{r0, 0x8010}], 0x1, 0x0, 0x0, 0x0) 343.429861ms ago: executing program 5 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}}, 0x0) 225.011625ms ago: executing program 5 (id=1220): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae0000ba000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 150.016887ms ago: executing program 9 (id=1221): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8}}]}}]}, 0x48}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) 120.71991ms ago: executing program 5 (id=1222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a0302"], 0x34}}, 0x0) close(0x3) 0s ago: executing program 5 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): a:aa:3f) already exists on: batadv_slave_1 [ 115.224112][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.236106][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.247180][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.257662][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.268356][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.278607][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.289350][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.301016][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.312173][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.324642][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.345594][ T6604] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.359977][ T5890] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 115.372506][ T6604] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.413500][ T5890] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 115.452141][ T6604] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.498148][ T5890] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 115.515383][ T6604] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.611657][ T5890] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 115.634627][ T5889] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 115.702138][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.740056][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.804793][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 115.807165][ T54] Bluetooth: hci1: command tx timeout [ 115.815763][ T5889] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.815793][ T5889] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.871941][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.901828][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.944534][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.991135][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.015906][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.062721][ T5889] usb 6-1: Product: syz [ 116.074791][ T5889] usb 6-1: Manufacturer: syz [ 116.104486][ T5889] usb 6-1: SerialNumber: syz [ 116.414489][ T5908] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.542171][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.578083][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.594449][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 116.622183][ T5908] usb 1-1: config 0 has no interfaces? [ 116.630748][ T5889] usb 6-1: 0:2 : does not exist [ 116.646288][ T5908] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.667319][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.672426][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.6.211'. [ 116.682804][ T5908] usb 1-1: Product: syz [ 116.706904][ T5908] usb 1-1: Manufacturer: syz [ 116.739995][ T5908] usb 1-1: SerialNumber: syz [ 116.751827][ T5908] usb 1-1: config 0 descriptor?? [ 116.992539][ T5908] usb 1-1: USB disconnect, device number 10 [ 117.706315][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.715531][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.763636][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.816588][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.828565][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.854579][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.884969][ T54] Bluetooth: hci1: command tx timeout [ 118.046875][ T6784] netlink: 40 bytes leftover after parsing attributes in process `syz.5.223'. [ 118.063422][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.100768][ T5889] usb 6-1: USB disconnect, device number 9 [ 118.365132][ T5890] usb 5-1: USB disconnect, device number 16 [ 118.431119][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.226'. [ 118.514551][ T5915] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 118.686145][ T6796] loop2: detected capacity change from 0 to 7 [ 118.714567][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 118.721056][ T6796] Dev loop2: unable to read RDB block 7 [ 118.750588][ T6796] loop2: AHDI p1 p2 [ 118.764839][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 118.805764][ T6796] loop2: partition table partially beyond EOD, truncated [ 118.821390][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 118.845233][ T25] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 118.863051][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 118.885307][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.906800][ T5915] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 118.916104][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.954549][ T5915] usb 2-1: Product: syz [ 118.958785][ T5915] usb 2-1: Manufacturer: syz [ 118.963408][ T5915] usb 2-1: SerialNumber: syz [ 118.983686][ T5915] usb 2-1: config 0 descriptor?? [ 119.004244][ T5915] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 119.031162][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.043321][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 119.063207][ T25] usb 1-1: config 129 has an invalid interface number: 135 but max is 1 [ 119.098809][ T25] usb 1-1: config 129 has no interface number 1 [ 119.112832][ T25] usb 1-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 119.133242][ T25] usb 1-1: config 129 interface 135 has no altsetting 0 [ 119.153343][ T25] usb 1-1: config 129 interface 0 has no altsetting 0 [ 119.162518][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.170372][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 119.182577][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.205063][ T25] usb 1-1: Product: syz [ 119.214946][ T25] usb 1-1: Manufacturer: syz [ 119.227066][ T25] usb 1-1: SerialNumber: syz [ 119.398659][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.496093][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 119.575807][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 119.642645][ T6806] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 119.709073][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.720552][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.729292][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.741827][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.749940][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.757185][ T5908] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 119.769879][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.813315][ T6806] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 119.921171][ T25] au0828: au0828: Device initialization failed. [ 119.928839][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 119.930959][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.935288][ T25] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 119.960965][ T25] usb 1-1: USB disconnect, device number 11 [ 119.968243][ T5908] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 119.979107][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.995286][ T5908] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.007084][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.020768][ T5908] usb 5-1: Product: syz [ 120.033199][ T5908] usb 5-1: Manufacturer: syz [ 120.074377][ T5908] usb 5-1: SerialNumber: syz [ 120.118785][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.387062][ T6827] team0: Device gtp0 is of different type [ 120.410270][ T52] bridge_slave_1: left allmulticast mode [ 120.437771][ T52] bridge_slave_1: left promiscuous mode [ 120.445245][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.500455][ T52] bridge_slave_0: left allmulticast mode [ 120.508603][ T52] bridge_slave_0: left promiscuous mode [ 120.512819][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.525503][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.550892][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.734670][ T5915] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 120.914592][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 120.948530][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 120.994981][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 121.015609][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 121.024622][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 121.073865][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 121.099135][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 121.136084][ T5915] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 121.157101][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.190107][ T5889] usb 2-1: USB disconnect, device number 16 [ 121.191238][ T5915] usb 6-1: Product: syz [ 121.196367][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 121.204577][ T5915] usb 6-1: Manufacturer: syz [ 121.210261][ T5915] usb 6-1: SerialNumber: syz [ 121.240116][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.248560][ T5915] usb 6-1: config 0 descriptor?? [ 121.282414][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.321674][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.339875][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 121.354052][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.359341][ T6869] mmap: syz.1.239 (6869): VmData 37502976 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 121.379313][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 121.405252][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.415069][ T9] usb 1-1: Manufacturer: syz [ 121.437294][ T9] usb 1-1: config 0 descriptor?? [ 121.587985][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.607352][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.623689][ T52] bond0 (unregistering): Released all slaves [ 121.651928][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.673314][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.690712][ T5915] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 121.706972][ T5915] input input12: Device does not respond to id packet M [ 121.727659][ T5915] input input12: Device does not respond to id packet P [ 121.739115][ T5908] usb 5-1: 0:2 : does not exist [ 121.763305][ T5908] usb 5-1: USB disconnect, device number 17 [ 121.849362][ T6836] chnl_net:caif_netlink_parms(): no params data found [ 121.914470][ T5838] Bluetooth: hci1: command tx timeout [ 121.923505][ T5915] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 121.941754][ T5915] input input12: Device does not respond to id packet B [ 121.959062][ T5915] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 121.968857][ T5915] input input12: Device does not respond to id packet N [ 121.977162][ T5915] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 121.983720][ T5915] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 121.991675][ T5915] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 121.999972][ T5915] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 122.095615][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.129588][ T6885] syz.1.242 uses obsolete (PF_INET,SOCK_PACKET) [ 122.172374][ T5915] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 122.197544][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 122.226488][ T5915] usb 6-1: USB disconnect, device number 10 [ 122.325969][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.334081][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.351270][ T6836] bridge_slave_0: entered allmulticast mode [ 122.374130][ T6836] bridge_slave_0: entered promiscuous mode [ 122.395474][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.411030][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.443372][ T6836] bridge_slave_1: entered allmulticast mode [ 122.486251][ T6836] bridge_slave_1: entered promiscuous mode [ 122.810508][ T6836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.892995][ T52] hsr_slave_0: left promiscuous mode [ 122.915448][ T52] hsr_slave_1: left promiscuous mode [ 122.963113][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.975015][ T5908] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 122.995568][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.033323][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.053624][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.118321][ T52] veth1_macvtap: left promiscuous mode [ 123.123913][ T52] veth0_macvtap: left promiscuous mode [ 123.137296][ T52] veth1_vlan: left promiscuous mode [ 123.142687][ T52] veth0_vlan: left promiscuous mode [ 123.191951][ T5908] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 123.226470][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.240534][ T5908] usb 6-1: Product: syz [ 123.251344][ T5908] usb 6-1: Manufacturer: syz [ 123.261958][ T5908] usb 6-1: SerialNumber: syz [ 123.290718][ T5908] r8152-cfgselector 6-1: Unknown version 0x0000 [ 123.299107][ T5908] r8152-cfgselector 6-1: config 0 descriptor?? [ 123.604542][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 123.764473][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 123.795856][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.811754][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.839076][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.867103][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.895421][ T25] usb 5-1: config 0 descriptor?? [ 123.963231][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.5.245'. [ 123.972634][ T5838] Bluetooth: hci1: command tx timeout [ 124.077064][ T9] rc_core: IR keymap rc-hauppauge not found [ 124.083083][ T9] Registered IR keymap rc-empty [ 124.106989][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.161466][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.196476][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 124.220917][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.251'. [ 124.238837][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 124.291585][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.334605][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.368149][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.385958][ T52] team0 (unregistering): Port device team_slave_1 removed [ 124.424559][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.461591][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.504761][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.518272][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 124.530433][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.539559][ T52] team0 (unregistering): Port device team_slave_0 removed [ 124.549718][ T25] usb 5-1: USB disconnect, device number 18 [ 124.554517][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.604882][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.642997][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.684574][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.707874][ T9] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 124.716179][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.744159][ T9] usb 1-1: USB disconnect, device number 12 [ 125.094377][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.279737][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.300051][ T9] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 125.314330][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.329665][ T9] usb 1-1: config 0 descriptor?? [ 125.351276][ T9] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 125.358144][ T9] command write [95] error -22 [ 125.404637][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 125.412437][ T6836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.478220][ T6910] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 125.578040][ T9] usb 1-1: USB disconnect, device number 13 [ 125.605891][ T25] usb 5-1: config index 0 descriptor too short (expected 65323, got 119) [ 125.621953][ T6836] team0: Port device team_slave_0 added [ 125.628269][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.664607][ T6836] team0: Port device team_slave_1 added [ 125.670337][ T25] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.698402][ T25] usb 5-1: config 1 has no interface number 1 [ 125.708677][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.738630][ T25] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.792320][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.810558][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.829703][ T25] usb 5-1: Product: syz [ 125.839533][ T25] usb 5-1: Manufacturer: syz [ 125.846075][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.852414][ T25] usb 5-1: SerialNumber: syz [ 125.884688][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.927159][ T6836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.957025][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.973276][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.999355][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.020092][ T6836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.045045][ T5838] Bluetooth: hci1: command tx timeout [ 126.064571][ T5890] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 126.149749][ T6836] hsr_slave_0: entered promiscuous mode [ 126.180858][ T6836] hsr_slave_1: entered promiscuous mode [ 126.196225][ T5890] usb 2-1: device descriptor read/64, error -71 [ 126.211494][ T6836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.232278][ T6836] Cannot create hsr debugfs directory [ 126.285985][ T25] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 126.355987][ T25] usb 5-1: USB disconnect, device number 19 [ 126.464513][ T5890] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 126.549561][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.604730][ T5890] usb 2-1: device descriptor read/64, error -71 [ 126.612974][ T6836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 126.628313][ T6836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 126.647172][ T6836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 126.660201][ T6836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 126.716097][ T5890] usb usb2-port1: attempt power cycle [ 126.754691][ T5889] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 126.779268][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.810223][ T6836] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.827926][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.835125][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.859396][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.866605][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.926078][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.941690][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.957415][ T5889] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.999347][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.022667][ T6836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.029784][ T5889] usb 1-1: SerialNumber: syz [ 127.032315][ T25] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 127.064803][ T6836] veth0_vlan: entered promiscuous mode [ 127.076429][ T6836] veth1_vlan: entered promiscuous mode [ 127.135670][ T6836] veth0_macvtap: entered promiscuous mode [ 127.155394][ T6836] veth1_macvtap: entered promiscuous mode [ 127.165699][ T5890] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 127.204261][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.216439][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.227265][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.237825][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.247785][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.258317][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.268325][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.278911][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.290437][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.314853][ T5890] usb 2-1: device descriptor read/8, error -71 [ 127.387240][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.397987][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.408290][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.419754][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.430751][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.441361][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.451303][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.461864][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.471826][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.482367][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.494068][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.521835][ T6836] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.530709][ T6836] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.539606][ T6836] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.548476][ T6836] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.578394][ T5889] usb 1-1: 0:2 : does not exist [ 127.608629][ T5889] usb 1-1: USB disconnect, device number 14 [ 127.726533][ T5890] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 127.746368][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.754205][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.783123][ T5890] usb 2-1: device descriptor read/8, error -71 [ 127.807633][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.865235][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.894788][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.907469][ T5890] usb usb2-port1: unable to enumerate USB device [ 128.128123][ T5838] Bluetooth: hci1: command tx timeout [ 128.535559][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.262'. [ 128.664480][ T5911] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 128.836324][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.868658][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.908958][ T5911] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 128.920433][ T7049] vlan2: entered promiscuous mode [ 128.947423][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.958995][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 128.964426][ T7049] vlan2: entered allmulticast mode [ 128.991594][ T5911] usb 8-1: config 0 descriptor?? [ 129.020546][ T7049] dummy0: entered allmulticast mode [ 129.031119][ T7049] dummy0: entered promiscuous mode [ 129.068066][ T7049] team0: Port device vlan2 added [ 129.242793][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.296484][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.408417][ T7070] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 129.525218][ T5911] appletouch 8-1:0.0: Geyser mode initialized. [ 129.532785][ T5911] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input14 [ 129.543170][ T7073] fuse: Bad value for 'fd' [ 129.764527][ T5911] usb 8-1: USB disconnect, device number 2 [ 129.812909][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.891939][ T7085] Context (ID=0x10) not attached to queue pair (handle=0x2:0x0) [ 129.936686][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.943969][ T7083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.001696][ T7085] fuse: Bad value for 'fd' [ 130.016652][ T5911] appletouch 8-1:0.0: input: appletouch disconnected [ 130.240668][ T5857] udevd[5857]: Error opening device "/dev/input/event4": No such file or directory [ 130.286426][ T5857] udevd[5857]: Unable to EVIOCGABS device "/dev/input/event4" [ 130.337304][ T5857] udevd[5857]: Unable to EVIOCGABS device "/dev/input/event4" [ 130.453962][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 130.574942][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 130.823677][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 130.823693][ T29] audit: type=1326 audit(1731993187.723:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afc37e759 code=0x7ffc0000 [ 130.924857][ T5915] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 130.978828][ T29] audit: type=1326 audit(1731993187.723:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afc37e759 code=0x7ffc0000 [ 131.000945][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.014983][ T29] audit: type=1326 audit(1731993187.723:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f2afc37e759 code=0x7ffc0000 [ 131.037257][ T29] audit: type=1326 audit(1731993187.723:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afc37e759 code=0x7ffc0000 [ 131.059491][ T29] audit: type=1326 audit(1731993187.723:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afc37e759 code=0x7ffc0000 [ 131.081559][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.087906][ T29] audit: type=1326 audit(1731993187.723:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2afc37e759 code=0x7ffc0000 [ 131.108139][ T5915] usb 2-1: config 7 has an invalid interface number: 112 but max is 1 [ 131.110855][ T29] audit: type=1326 audit(1731993187.723:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afc37e759 code=0x7ffc0000 [ 131.154564][ T29] audit: type=1326 audit(1731993187.723:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afc37e759 code=0x7ffc0000 [ 131.157256][ T5915] usb 2-1: config 7 has an invalid interface number: 55 but max is 1 [ 131.273459][ T5915] usb 2-1: config 7 has no interface number 0 [ 131.301079][ T5915] usb 2-1: config 7 has no interface number 1 [ 131.341725][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 131.385702][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0x1 has invalid maxpacket 544, setting to 64 [ 131.412759][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 131.445610][ T5915] usb 2-1: config 7 interface 112 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 131.454531][ T972] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 131.497248][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0x7 has an invalid bInterval 64, changing to 4 [ 131.528617][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 131.554879][ T5915] usb 2-1: config 7 interface 112 altsetting 222 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 131.574081][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0x84 has an invalid bInterval 142, changing to 4 [ 131.614782][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0x84 has invalid maxpacket 64163, setting to 1023 [ 131.636256][ T972] usb 1-1: Using ep0 maxpacket: 8 [ 131.639034][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0x4 has an invalid bInterval 49, changing to 4 [ 131.659231][ T5915] usb 2-1: config 7 interface 112 altsetting 222 has a duplicate endpoint with address 0xB, skipping [ 131.671199][ T5915] usb 2-1: config 7 interface 112 altsetting 222 has a duplicate endpoint with address 0x5, skipping [ 131.687185][ T5915] usb 2-1: config 7 interface 112 altsetting 222 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 131.697239][ T972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.698630][ T5915] usb 2-1: config 7 interface 112 altsetting 222 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 131.725148][ T972] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 131.732948][ T5915] usb 2-1: config 7 interface 55 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 131.749090][ T5915] usb 2-1: config 7 interface 55 altsetting 15 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 131.762746][ T972] usb 1-1: can't read configurations, error -71 [ 131.784262][ T5915] usb 2-1: config 7 interface 55 altsetting 15 has a duplicate endpoint with address 0x81, skipping [ 131.797373][ T5915] usb 2-1: config 7 interface 112 has no altsetting 0 [ 131.824697][ T5915] usb 2-1: config 7 interface 55 has no altsetting 0 [ 131.939050][ T7142] netlink: 6204 bytes leftover after parsing attributes in process `syz.5.285'. [ 131.948330][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.285'. [ 131.957407][ T7142] netlink: 6204 bytes leftover after parsing attributes in process `syz.5.285'. [ 131.974233][ T5915] usb 2-1: Dual-Role OTG device on HNP port [ 131.994823][ T5915] usb 2-1: New USB device found, idVendor=1286, idProduct=8001, bcdDevice=a3.24 [ 132.003918][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.030996][ T29] audit: type=1326 audit(1731993188.873:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.5.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dcf7e759 code=0x7ffc0000 [ 132.034645][ T5915] usb 2-1: Product: syz [ 132.081307][ T29] audit: type=1326 audit(1731993188.873:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.5.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dcf7e759 code=0x7ffc0000 [ 132.114385][ T5915] usb 2-1: Manufacturer: syz [ 132.119324][ T5915] usb 2-1: SerialNumber: syz [ 132.198301][ T7102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.244648][ T5889] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 132.264823][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 132.275106][ T7149] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 132.438023][ T5915] cdc_subset 2-1:7.112: probe with driver cdc_subset failed with error -22 [ 132.484382][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 132.490286][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 132.497703][ T5889] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.533984][ T5915] cdc_subset 2-1:7.55: probe with driver cdc_subset failed with error -22 [ 132.559193][ T7149] fuse: Bad value for 'fd' [ 132.575241][ T5915] usb 2-1: USB disconnect, device number 21 [ 132.592311][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.613790][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.664784][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.692656][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.707993][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.752663][ T9] usb 5-1: config 0 descriptor?? [ 132.762319][ T9] hub 5-1:0.0: USB hub found [ 132.772354][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.783473][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.828605][ T5889] usb 6-1: Product: syz [ 132.832947][ T5889] usb 6-1: Manufacturer: syz [ 132.843092][ T5889] usb 6-1: SerialNumber: syz [ 132.933470][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940082][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.052031][ T9] hub 5-1:0.0: 12 ports detected [ 133.058921][ T9] hub 5-1:0.0: insufficient power available to use all downstream ports [ 133.081803][ T5889] usb 6-1: 0:2 : does not exist [ 133.137187][ T5889] usb 6-1: USB disconnect, device number 12 [ 133.220339][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.270519][ T9] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 133.295567][ T5915] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 133.318195][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 133.410445][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 133.417865][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.455288][ T9] usb 5-1: USB disconnect, device number 20 [ 133.638995][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.7.294'. [ 133.787783][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 133.896799][ T5915] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 133.906101][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.914699][ T5915] usb 1-1: Product: syz [ 133.919026][ T5915] usb 1-1: Manufacturer: syz [ 133.924063][ T5915] usb 1-1: SerialNumber: syz [ 133.940739][ T5915] usb 1-1: config 0 descriptor?? [ 133.984810][ T5889] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 134.092604][ T5915] viperboard 1-1:0.0: version 0.00 found at bus 001 address 017 [ 134.146628][ T5889] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 134.154112][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 134.165623][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.177328][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 134.188972][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.200988][ T5889] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 134.209627][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 134.220138][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.230453][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 134.242101][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.254699][ T5889] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 134.257672][ T5915] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 134.262107][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 134.283049][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.293837][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 134.305588][ T5889] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.322429][ T5889] usb 6-1: string descriptor 0 read error: -22 [ 134.329135][ T5889] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.338895][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.353636][ T5889] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 134.471202][ T5915] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 134.634645][ T5915] usb 1-1: USB disconnect, device number 17 [ 134.714827][ T5911] usb 6-1: USB disconnect, device number 13 [ 135.140975][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 135.474445][ T7216] FAULT_INJECTION: forcing a failure. [ 135.474445][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.574909][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.5.305 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 135.585234][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 135.595343][ T7216] Call Trace: [ 135.598662][ T7216] [ 135.601638][ T7216] dump_stack_lvl+0x241/0x360 [ 135.606367][ T7216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.611615][ T7216] ? __pfx__printk+0x10/0x10 [ 135.616265][ T7216] ? snprintf+0xda/0x120 [ 135.620561][ T7216] should_fail_ex+0x3b0/0x4e0 [ 135.625300][ T7216] _copy_to_user+0x31/0xb0 [ 135.629769][ T7216] simple_read_from_buffer+0xca/0x150 [ 135.635191][ T7216] proc_fail_nth_read+0x1e9/0x250 [ 135.640263][ T7216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.645862][ T7216] ? rw_verify_area+0x55e/0x6f0 [ 135.650759][ T7216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.656356][ T7216] vfs_read+0x1fc/0xb70 [ 135.660562][ T7216] ? fdget_pos+0x254/0x320 [ 135.665033][ T7216] ? __pfx_vfs_read+0x10/0x10 [ 135.669755][ T7216] ? __fget_files+0x2a/0x410 [ 135.674398][ T7216] ? __fget_files+0x395/0x410 [ 135.679123][ T7216] ? __fget_files+0x2a/0x410 [ 135.683769][ T7216] ksys_read+0x18f/0x2b0 [ 135.688064][ T7216] ? __pfx_ksys_read+0x10/0x10 [ 135.692867][ T7216] ? do_syscall_64+0x100/0x230 [ 135.697670][ T7216] ? do_syscall_64+0xb6/0x230 [ 135.702388][ T7216] do_syscall_64+0xf3/0x230 [ 135.706933][ T7216] ? clear_bhb_loop+0x35/0x90 [ 135.711655][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.717595][ T7216] RIP: 0033:0x7fb8dcf7d19c [ 135.722071][ T7216] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 135.741730][ T7216] RSP: 002b:00007fb8ddd7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.750189][ T7216] RAX: ffffffffffffffda RBX: 00007fb8dd135f80 RCX: 00007fb8dcf7d19c [ 135.758201][ T7216] RDX: 000000000000000f RSI: 00007fb8ddd7b0a0 RDI: 0000000000000004 [ 135.766212][ T7216] RBP: 00007fb8ddd7b090 R08: 0000000000000000 R09: 0000000000000000 [ 135.774221][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.782241][ T7216] R13: 0000000000000000 R14: 00007fb8dd135f80 R15: 00007fb8dd25fa28 [ 135.790269][ T7216] [ 136.283057][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.327698][ T7230] kvm: kvm [7228]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 136.357096][ T7231] kvm: kvm [7229]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 136.361142][ T7231] kvm: kvm [7229]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 136.403840][ T7230] kvm: kvm [7228]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 136.446248][ T7230] kvm: kvm [7228]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 136.446397][ T7230] kvm: kvm [7228]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 136.450885][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.450983][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.092237][ T5890] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 137.147298][ T7268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.230705][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'. [ 137.254133][ T7274] netlink: 256 bytes leftover after parsing attributes in process `syz.5.314'. [ 137.288705][ T5890] usb 5-1: config 0 interface 0 altsetting 128 bulk endpoint 0xB has invalid maxpacket 1023 [ 137.313323][ T5890] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x6 has an invalid bInterval 209, changing to 11 [ 137.376997][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 137.383703][ T5890] usb 5-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a [ 137.435874][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.455436][ T5890] usb 5-1: config 0 descriptor?? [ 137.465055][ T7258] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.486578][ T5890] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 137.504378][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 137.544626][ T5890] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 137.644993][ T5911] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 137.689140][ T5890] usb 5-1: USB disconnect, device number 21 [ 137.715835][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 137.723003][ T9] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 137.747353][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.765923][ T9] usb 8-1: config 0 descriptor?? [ 137.783313][ T9] as10x_usb: device has been detected [ 137.790677][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 137.794469][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 137.806388][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.818607][ T5911] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 137.828970][ T9] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 137.833605][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.855964][ T5911] usb 6-1: config 0 descriptor?? [ 137.888029][ T9] as10x_usb: error during firmware upload part1 [ 137.904075][ T9] Registered device nBox DVB-T Dongle [ 137.984715][ T5915] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 138.147217][ T5915] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.168795][ T5915] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.200160][ T5915] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.238951][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.288488][ T5911] pantherlord 0003:0810:0002.0006: unknown main item tag 0x0 [ 138.298873][ T7295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.332338][ T5915] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.346111][ T5911] pantherlord 0003:0810:0002.0006: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.5-1/input0 [ 138.396276][ T5911] pantherlord 0003:0810:0002.0006: no output reports found [ 138.423007][ T7307] netlink: 'syz.4.323': attribute type 10 has an invalid length. [ 138.474683][ T7307] syz_tun: entered promiscuous mode [ 138.545567][ T7307] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 138.559246][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.317'. [ 138.663243][ T9] usb 1-1: USB disconnect, device number 18 [ 138.674613][ T5890] usb 6-1: USB disconnect, device number 14 [ 138.703599][ T5889] usb 8-1: USB disconnect, device number 3 [ 138.735834][ T5889] Unregistered device nBox DVB-T Dongle [ 138.740562][ T5889] as10x_usb: device has been disconnected [ 138.919947][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 139.184725][ T5915] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 139.254721][ T9] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 139.350399][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.362843][ T5915] usb 5-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 139.378102][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.393597][ T5915] usb 5-1: config 0 descriptor?? [ 139.424499][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 139.564535][ T9] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 139.747339][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 139.780108][ T9] usb usb1-port1: attempt power cycle [ 139.836564][ T5915] wacom 0003:056A:032A.0007: hidraw0: USB HID v0.00 Device [HID 056a:032a] on usb-dummy_hcd.4-1/input0 [ 139.852634][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 139.852651][ T29] audit: type=1800 audit(1731993196.783:55): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.331" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 139.903078][ T29] audit: type=1800 audit(1731993196.833:56): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.331" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 140.041733][ T25] usb 5-1: USB disconnect, device number 22 [ 140.053822][ T7354] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 140.174352][ T9] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 140.226654][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 140.431572][ T7354] fuse: Bad value for 'fd' [ 140.496397][ T9] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 140.542409][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 140.548297][ T9] usb usb1-port1: unable to enumerate USB device [ 140.960911][ T7369] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.336'. [ 141.442575][ T7387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.343'. [ 141.557489][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 141.724693][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 141.733295][ T7395] TCP: TCP_TX_DELAY enabled [ 141.735235][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.749787][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.783458][ T25] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 141.799936][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.808789][ T25] usb 1-1: Product: syz [ 141.820862][ T25] usb 1-1: Manufacturer: syz [ 141.844733][ T25] usb 1-1: SerialNumber: syz [ 142.108481][ T25] usbhid 1-1:1.0: can't add hid device: -22 [ 142.114900][ T25] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 142.125550][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 142.141994][ T25] usb 1-1: USB disconnect, device number 23 [ 142.290758][ T9] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 142.305364][ T9] usb 5-1: config 0 has no interface number 0 [ 142.317117][ T9] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20 [ 142.336020][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.363167][ T9] usb 5-1: Product: syz [ 142.374450][ T9] usb 5-1: Manufacturer: syz [ 142.379100][ T9] usb 5-1: SerialNumber: syz [ 142.410145][ T9] usb 5-1: config 0 descriptor?? [ 142.439043][ T9] s2255 5-1:0.83: Could not find bulk-in endpoint [ 142.454777][ T9] Sensoray 2255 driver load failed: 0xfffffff4 [ 142.465873][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.482024][ T9] s2255 5-1:0.83: probe with driver s2255 failed with error -12 [ 142.650964][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.697362][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.743980][ T7403] binder: 7402:7403 ioctl c0306201 200003c0 returned -14 [ 142.778927][ T9] usb 5-1: USB disconnect, device number 23 [ 142.864121][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.355'. [ 143.151425][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.244215][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.335635][ T5892] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 143.343663][ T5890] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 143.488746][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.534398][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 143.554086][ T5892] usb 6-1: config 254 has an invalid interface number: 56 but max is 0 [ 143.565143][ T5890] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 143.573440][ T5890] usb 2-1: config 0 has an invalid descriptor of length 175, skipping remainder of the config [ 143.594830][ T5892] usb 6-1: config 254 has no interface number 0 [ 143.612095][ T29] audit: type=1326 audit(1731993200.543:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29cd7e759 code=0x7ffc0000 [ 143.624127][ T5892] usb 6-1: config 254 interface 56 has no altsetting 0 [ 143.641475][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.679489][ T5892] usb 6-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=24.d8 [ 143.687020][ T29] audit: type=1326 audit(1731993200.543:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29cd7e759 code=0x7ffc0000 [ 143.705231][ T5890] usb 2-1: config 0 has no interface number 0 [ 143.732824][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.754366][ T5892] usb 6-1: Product: syz [ 143.758588][ T5892] usb 6-1: Manufacturer: syz [ 143.769342][ T29] audit: type=1326 audit(1731993200.543:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc29cd7e759 code=0x7ffc0000 [ 143.784107][ T5890] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 143.804093][ T5892] usb 6-1: SerialNumber: syz [ 143.865896][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.866587][ T5890] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.890068][ T29] audit: type=1326 audit(1731993200.543:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29cd7e759 code=0x7ffc0000 [ 143.932154][ T29] audit: type=1326 audit(1731993200.543:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29cd7e759 code=0x7ffc0000 [ 143.954383][ T5890] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 154, changing to 11 [ 143.954421][ T5890] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 9795, setting to 1024 [ 143.954485][ T5890] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.954529][ T5890] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 143.954556][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.957307][ T5890] usb 2-1: config 0 descriptor?? [ 144.105567][ T7426] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.113460][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.123368][ T5890] gspca_main: spca561-2.14.0 probing abcd:cdee [ 144.134183][ T29] audit: type=1326 audit(1731993200.543:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc29cd7e759 code=0x7ffc0000 [ 144.164417][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 144.207351][ T29] audit: type=1326 audit(1731993200.543:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29cd7e759 code=0x7ffc0000 [ 144.271565][ T29] audit: type=1326 audit(1731993200.543:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29cd7e759 code=0x7ffc0000 [ 144.296488][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.320332][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.329136][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.336343][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 144.342398][ T5890] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 144.343698][ T25] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 144.361643][ T25] usb 1-1: config 0 has no interface number 0 [ 144.370455][ T25] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=a8.91 [ 144.380545][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.388208][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.390281][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.396601][ T25] usb 1-1: Product: syz [ 144.408155][ T25] usb 1-1: Manufacturer: syz [ 144.413144][ T25] usb 1-1: SerialNumber: syz [ 144.432873][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.441619][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.459627][ T25] usb 1-1: config 0 descriptor?? [ 144.536582][ T5890] usb 2-1: MIDIStreaming interface descriptor not found [ 144.659564][ T5890] usb 2-1: USB disconnect, device number 22 [ 144.663440][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 144.726937][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.753133][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.794597][ T5911] usb 1-1: USB disconnect, device number 24 [ 144.812864][ T35] bridge_slave_1: left allmulticast mode [ 144.840060][ T35] bridge_slave_1: left promiscuous mode [ 144.863006][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.897925][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.017170][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.586110][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.595157][ T7460] kvm: kvm [7459]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 145.602618][ T7460] kvm: kvm [7459]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 145.619590][ T7460] kvm: kvm [7459]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 145.632769][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.642005][ T7460] kvm: kvm [7459]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 145.655916][ T35] bond0 (unregistering): Released all slaves [ 145.681110][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 146.001778][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.082396][ T5892] usb 6-1: USB disconnect, device number 15 [ 146.252713][ T5889] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 146.326455][ T5890] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 146.367920][ T7447] chnl_net:caif_netlink_parms(): no params data found [ 146.424443][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 146.432045][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.442986][ T5889] usb 2-1: config 127 has an invalid interface number: 181 but max is 0 [ 146.454174][ T5889] usb 2-1: config 127 has no interface number 0 [ 146.472070][ T5889] usb 2-1: config 127 interface 181 altsetting 249 bulk endpoint 0xC has invalid maxpacket 64 [ 146.486057][ T35] hsr_slave_0: left promiscuous mode [ 146.486316][ T5889] usb 2-1: config 127 interface 181 altsetting 249 bulk endpoint 0x6 has invalid maxpacket 64 [ 146.501875][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 146.510229][ T5889] usb 2-1: config 127 interface 181 has no altsetting 0 [ 146.519209][ T5890] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 146.527708][ T5890] usb 5-1: config 0 has no interface number 0 [ 146.528182][ T5838] Bluetooth: hci1: command tx timeout [ 146.534037][ T5890] usb 5-1: config 0 interface 219 has no altsetting 0 [ 146.549023][ T5889] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b [ 146.564666][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.564836][ T5890] usb 5-1: New USB device found, idVendor=78e6, idProduct=2ca6, bcdDevice=85.f6 [ 146.584545][ T5889] usb 2-1: Product: syz [ 146.594450][ T35] hsr_slave_1: left promiscuous mode [ 146.599900][ T5889] usb 2-1: Manufacturer: syz [ 146.610035][ T5889] usb 2-1: SerialNumber: syz [ 146.617983][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.631958][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.642050][ T7471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.654924][ T7471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.662267][ T5890] usb 5-1: Product: syz [ 146.667573][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.682971][ T5890] usb 5-1: Manufacturer: syz [ 146.687813][ T5890] usb 5-1: SerialNumber: syz [ 146.694983][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.702920][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.713315][ T5890] usb 5-1: config 0 descriptor?? [ 146.746652][ T35] veth1_macvtap: left promiscuous mode [ 146.752419][ T35] veth0_macvtap: left promiscuous mode [ 146.758121][ T35] veth1_vlan: left promiscuous mode [ 146.763607][ T35] veth0_vlan: left promiscuous mode [ 146.923922][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.949714][ T5890] usb 5-1: bad CDC descriptors [ 146.963530][ T5890] usb 5-1: USB disconnect, device number 24 [ 147.045605][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.121953][ T5889] kvaser_usb 2-1:127.181: error -ENODEV: Cannot get usb endpoint(s) [ 147.138450][ T5889] usb 2-1: USB disconnect, device number 23 [ 147.222242][ T7482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.345958][ T5915] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 147.509038][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 147.560975][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.577346][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.684918][ T5915] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 147.713846][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.790536][ T5915] usb 1-1: config 0 descriptor?? [ 147.915744][ T7505] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 147.957260][ T7505] fuse: Bad value for 'fd' [ 148.043302][ T35] team0 (unregistering): Port device team_slave_1 removed [ 148.220813][ T5915] mcp2200 0003:04D8:00DF.0008: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 148.250147][ T35] team0 (unregistering): Port device team_slave_0 removed [ 148.421900][ T5915] usb 1-1: USB disconnect, device number 25 [ 148.613470][ T5838] Bluetooth: hci1: command tx timeout [ 149.027925][ T7513] binder: 7511:7513 ioctl c0306201 20000a80 returned -22 [ 149.092692][ T7515] binder: 7511:7515 ioctl ae80 0 returned -22 [ 149.099256][ T7515] binder: 7511:7515 ioctl c020aa00 20000040 returned -22 [ 149.344784][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.380'. [ 149.449006][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.502124][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.536529][ T7447] bridge_slave_0: entered allmulticast mode [ 149.548936][ T7447] bridge_slave_0: entered promiscuous mode [ 149.559202][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.567031][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.574242][ T7447] bridge_slave_1: entered allmulticast mode [ 149.585746][ T7447] bridge_slave_1: entered promiscuous mode [ 149.602681][ T7530] FAULT_INJECTION: forcing a failure. [ 149.602681][ T7530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.621592][ T7530] CPU: 0 UID: 0 PID: 7530 Comm: syz.0.384 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 149.631888][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 149.641989][ T7530] Call Trace: [ 149.645294][ T7530] [ 149.648240][ T7530] dump_stack_lvl+0x241/0x360 [ 149.652931][ T7530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.658156][ T7530] ? __pfx__printk+0x10/0x10 [ 149.662747][ T7530] ? __pfx_lock_release+0x10/0x10 [ 149.667780][ T7530] should_fail_ex+0x3b0/0x4e0 [ 149.672489][ T7530] _copy_from_user+0x2f/0xc0 [ 149.677122][ T7530] copy_msghdr_from_user+0xae/0x680 [ 149.682334][ T7530] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 149.688143][ T7530] ? __fget_files+0x2a/0x410 [ 149.692740][ T7530] ? __fget_files+0x2a/0x410 [ 149.697356][ T7530] __sys_sendmsg+0x209/0x350 [ 149.701950][ T7530] ? __pfx_lock_release+0x10/0x10 [ 149.706990][ T7530] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.712112][ T7530] ? __pfx_vfs_write+0x10/0x10 [ 149.716913][ T7530] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.723683][ T7530] ? do_syscall_64+0x100/0x230 [ 149.728452][ T7530] ? do_syscall_64+0xb6/0x230 [ 149.733135][ T7530] do_syscall_64+0xf3/0x230 [ 149.737644][ T7530] ? clear_bhb_loop+0x35/0x90 [ 149.742335][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.748235][ T7530] RIP: 0033:0x7f2afc37e759 [ 149.752650][ T7530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.772258][ T7530] RSP: 002b:00007f2afd15b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.780677][ T7530] RAX: ffffffffffffffda RBX: 00007f2afc535f80 RCX: 00007f2afc37e759 [ 149.788664][ T7530] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 149.796636][ T7530] RBP: 00007f2afd15b090 R08: 0000000000000000 R09: 0000000000000000 [ 149.804619][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.812583][ T7530] R13: 0000000000000000 R14: 00007f2afc535f80 R15: 00007f2afc65fa28 [ 149.820586][ T7530] [ 149.891176][ T7447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.909330][ T7447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.970524][ T5890] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 150.030960][ T7447] team0: Port device team_slave_0 added [ 150.068927][ T7447] team0: Port device team_slave_1 added [ 150.114432][ T5890] usb 6-1: device descriptor read/64, error -71 [ 150.241629][ T5915] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 150.293060][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.300227][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.326898][ T7447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.339591][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.346836][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.373746][ T7447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.394576][ T5890] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 150.524516][ T5915] usb 1-1: device descriptor read/64, error -71 [ 150.584403][ T5890] usb 6-1: device descriptor read/64, error -71 [ 150.608127][ T7447] hsr_slave_0: entered promiscuous mode [ 150.653048][ T7447] hsr_slave_1: entered promiscuous mode [ 150.673619][ T7447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.684862][ T5838] Bluetooth: hci1: command tx timeout [ 150.694875][ T5890] usb usb6-port1: attempt power cycle [ 150.713861][ T7447] Cannot create hsr debugfs directory [ 150.764890][ T5915] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 150.924855][ T5915] usb 1-1: device descriptor read/64, error -71 [ 150.925338][ T5892] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 150.996188][ T7569] vlan2: entered promiscuous mode [ 151.001302][ T7569] vlan2: entered allmulticast mode [ 151.006997][ T7569] dummy0: entered allmulticast mode [ 151.012278][ T7569] dummy0: entered promiscuous mode [ 151.032044][ T7569] team0: Port device vlan2 added [ 151.038729][ T5915] usb usb1-port1: attempt power cycle [ 151.082025][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 151.109844][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.145826][ T7447] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 151.157915][ T7447] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 151.171772][ T7447] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 151.185314][ T7447] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 151.192460][ T5890] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 151.267354][ T7447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.270344][ T7578] FAULT_INJECTION: forcing a failure. [ 151.270344][ T7578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.286922][ T7447] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.301293][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.308508][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.329691][ T5892] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 151.340166][ T7578] CPU: 1 UID: 0 PID: 7578 Comm: syz.1.393 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 151.340471][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.350464][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 151.350482][ T7578] Call Trace: [ 151.350490][ T7578] [ 151.350499][ T7578] dump_stack_lvl+0x241/0x360 [ 151.350551][ T7578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.358549][ T5892] usb 5-1: Product: syz [ 151.368606][ T7578] ? __pfx__printk+0x10/0x10 [ 151.368646][ T7578] ? __pfx_lock_release+0x10/0x10 [ 151.371938][ T5892] usb 5-1: Manufacturer: syz [ 151.374855][ T7578] should_fail_ex+0x3b0/0x4e0 [ 151.380332][ T5892] usb 5-1: SerialNumber: syz [ 151.384725][ T7578] _copy_from_user+0x2f/0xc0 [ 151.384759][ T7578] copy_msghdr_from_user+0xae/0x680 [ 151.384794][ T7578] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 151.384821][ T7578] ? __fget_files+0x2a/0x410 [ 151.384850][ T7578] ? __fget_files+0x2a/0x410 [ 151.384883][ T7578] __sys_sendmsg+0x209/0x350 [ 151.384906][ T7578] ? __pfx_lock_release+0x10/0x10 [ 151.384948][ T7578] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.384978][ T7578] ? __pfx_vfs_write+0x10/0x10 [ 151.385040][ T7578] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.385072][ T7578] ? do_syscall_64+0x100/0x230 [ 151.385098][ T7578] ? do_syscall_64+0xb6/0x230 [ 151.385123][ T7578] do_syscall_64+0xf3/0x230 [ 151.385145][ T7578] ? clear_bhb_loop+0x35/0x90 [ 151.385171][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.385193][ T7578] RIP: 0033:0x7f9c1f37e759 [ 151.385213][ T7578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.385231][ T7578] RSP: 002b:00007f9c2025c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.385255][ T7578] RAX: ffffffffffffffda RBX: 00007f9c1f535f80 RCX: 00007f9c1f37e759 [ 151.385271][ T7578] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 151.385285][ T7578] RBP: 00007f9c2025c090 R08: 0000000000000000 R09: 0000000000000000 [ 151.385299][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.385313][ T7578] R13: 0000000000000000 R14: 00007f9c1f535f80 R15: 00007f9c1f65fa28 [ 151.385342][ T7578] [ 151.465599][ T5915] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 151.470645][ T5890] usb 6-1: device descriptor read/8, error -71 [ 151.499104][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.545360][ T5892] usb 5-1: config 0 descriptor?? [ 151.547922][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.559818][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.635964][ T5915] usb 1-1: device descriptor read/8, error -71 [ 151.679830][ T7447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.692099][ T7582] vxcan1: tx address claim with dlc 1 [ 151.712071][ T7447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.756198][ T7447] veth0_vlan: entered promiscuous mode [ 151.765522][ T5890] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 151.806505][ T5890] usb 6-1: device descriptor read/8, error -71 [ 151.811742][ T7447] veth1_vlan: entered promiscuous mode [ 151.874466][ T5915] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 151.881367][ T5892] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 151.896538][ T5915] usb 1-1: device descriptor read/8, error -71 [ 151.909837][ T7447] veth0_macvtap: entered promiscuous mode [ 151.923463][ T5892] usb 5-1: USB disconnect, device number 25 [ 151.930077][ T5890] usb usb6-port1: unable to enumerate USB device [ 151.951930][ T7333] udevd[7333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.969802][ T7447] veth1_macvtap: entered promiscuous mode [ 151.999120][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.015487][ T5915] usb usb1-port1: unable to enumerate USB device [ 152.027632][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.048685][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.059590][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.070376][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.081274][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.100616][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.113977][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.131504][ T7447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.145912][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.161434][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.176668][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.193769][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.204832][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.216287][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.226944][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.238076][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.247998][ T7447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.258883][ T7447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.270200][ T7447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.289838][ T7447] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.309898][ T7447] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.322957][ T7447] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.332063][ T7447] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.460037][ T6195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.486621][ T6195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.558432][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.587770][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.764855][ T5838] Bluetooth: hci1: command tx timeout [ 152.864416][ T5892] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 153.028837][ T5892] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 153.047841][ T5892] usb 5-1: config 4 has no interface number 0 [ 153.070385][ T5892] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 153.113380][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.189331][ T5892] usb 5-1: Product: syz [ 153.211145][ T5892] usb 5-1: Manufacturer: syz [ 153.230953][ T5892] usb 5-1: SerialNumber: syz [ 153.297124][ T5892] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 153.424502][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 153.436753][ T7629] kvm: kvm [7628]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 153.470997][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.499108][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.549405][ T7629] kvm: kvm [7628]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 153.623827][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.654516][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 153.663788][ T7629] kvm: kvm [7628]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x14600000000 [ 153.699872][ T9] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 153.735697][ T7629] kvm: kvm [7628]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1cd00000800 [ 153.742289][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.748752][ T7629] kvm: kvm [7628]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2e500000800 [ 153.767102][ T7629] kvm: kvm [7628]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x45e00000000 [ 153.773090][ T9] usb 1-1: config 0 descriptor?? [ 153.845957][ T7629] kvm: kvm [7628]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6ce00000000 [ 154.085083][ T7643] kvm: kvm [7642]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 154.124968][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.258402][ T5892] vp7045: USB control message 'out' went wrong. [ 154.322496][ T5892] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 154.364533][ T5892] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 154.397286][ T5892] usb 5-1: USB disconnect, device number 26 [ 154.854639][ T5892] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 154.994646][ T5915] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 155.024716][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 155.032739][ T5892] usb 5-1: config index 0 descriptor too short (expected 42, got 18) [ 155.042412][ T5892] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 155.054977][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 155.073530][ T5892] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 155.083038][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 155.091358][ T5892] usb 5-1: Product: syz [ 155.094766][ T5908] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 155.095638][ T5892] usb 5-1: SerialNumber: syz [ 155.113321][ T5892] r8152-cfgselector 5-1: Unknown version 0x0000 [ 155.120255][ T5892] r8152-cfgselector 5-1: config 0 descriptor?? [ 155.130381][ T5892] hub 5-1:0.0: bad descriptor, ignoring hub [ 155.136625][ T5892] hub 5-1:0.0: probe with driver hub failed with error -5 [ 155.214889][ T5915] usb 6-1: Invalid ep0 maxpacket: 64 [ 155.284787][ T5908] usb 9-1: device descriptor read/64, error -71 [ 155.429742][ T9] usb 1-1: string descriptor 0 read error: -71 [ 155.443319][ T9] usb 1-1: Found UVC 0.00 device (2833:0201) [ 155.450361][ T9] usb 1-1: No valid video chain found. [ 155.472627][ T9] usb 1-1: USB disconnect, device number 30 [ 155.478398][ T5915] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 155.510282][ T5890] r8152-cfgselector 5-1: USB disconnect, device number 27 [ 155.664717][ T5908] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 155.694629][ T5915] usb 6-1: Invalid ep0 maxpacket: 64 [ 155.701719][ T5915] usb usb6-port1: attempt power cycle [ 155.795696][ T5908] usb 9-1: device descriptor read/64, error -71 [ 155.834890][ T5889] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 155.916986][ T5908] usb usb9-port1: attempt power cycle [ 156.014660][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 156.048547][ T5889] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 156.049810][ T5915] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 156.064459][ T5889] usb 2-1: config 0 has no interface number 0 [ 156.092614][ T5889] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 156.102273][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.105105][ T5915] usb 6-1: Invalid ep0 maxpacket: 64 [ 156.111920][ T5889] usb 2-1: Product: syz [ 156.120210][ T5889] usb 2-1: Manufacturer: syz [ 156.125451][ T5889] usb 2-1: SerialNumber: syz [ 156.144735][ T5889] usb 2-1: config 0 descriptor?? [ 156.165394][ T5889] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 156.264740][ T971] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 156.279575][ T5908] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 156.287862][ T5915] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 156.327232][ T5915] usb 6-1: Invalid ep0 maxpacket: 64 [ 156.332774][ T5908] usb 9-1: device descriptor read/8, error -71 [ 156.340256][ T5915] usb usb6-port1: unable to enumerate USB device [ 156.368659][ T5889] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 156.393219][ T5889] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 156.444878][ T5890] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 156.466883][ T971] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 156.484516][ T971] usb 5-1: config 1 has no interface number 1 [ 156.506723][ T971] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 156.530129][ T971] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 114, changing to 4 [ 156.550830][ T971] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 156.576444][ T971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.592309][ T5908] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 156.603507][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.613870][ T971] usb 5-1: Product: 冇식糳祉ᛨ䏌⎹㼱ᦕ熒Ꮹ綎쪂깽ᩈ椾⦤㙄鯱좊ͷ犁䌽겶菲ㆰ壼儀펛լ檩鱽ꀏ욼灼™恵鮗⮲闡賏텣㌺뀊檁获錄씼佡䪔蓍ꃺ䙰鑼⍴瀷讬日ꅑЗ䟎⏱한z繉趛ꀶ䡵陚簱Ԩᶒ眰㥾솵偢祢∈忙噤둯廐혾됟ﳖ⵬༻뷰掌㷼禲쯕円跍甉㴩랆ꋏ࣫鋋螮읃憎푏↵ [ 156.650273][ T5908] usb 9-1: device descriptor read/8, error -71 [ 156.654541][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 156.656803][ T971] usb 5-1: Manufacturer: 구쒅熲˗蠼쫾햐糂⡀ʕ̥繳嚣뜳醩賍憪殒릢⾩椡샚冘ᇺ䡺쑱፺Đഷ␛դ桇뱃䱄◔裂뎊烾曆䇲污㨥藓浣⊡뇭䢷 [ 156.680024][ T971] usb 5-1: SerialNumber: 덦쪸磣ő [ 156.681111][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.699315][ T7695] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 156.720409][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.734233][ T5890] usb 1-1: New USB device found, idVendor=056a, idProduct=a6d8, bcdDevice= 0.00 [ 156.743693][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.755794][ T5890] usb 1-1: config 0 descriptor?? [ 156.765080][ T5908] usb usb9-port1: unable to enumerate USB device [ 156.770944][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 156.782979][ T5892] usb 2-1: USB disconnect, device number 24 [ 156.801764][ T5892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 156.831108][ T5892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 156.857865][ T5892] quatech2 2-1:0.51: device disconnected [ 157.121456][ T971] usb 5-1: low speed audio streaming not supported [ 157.157000][ T971] usb 5-1: USB disconnect, device number 28 [ 157.172656][ T5890] wacom 0003:056A:A6D8.0009: unknown main item tag 0x0 [ 157.191848][ T5890] wacom 0003:056A:A6D8.0009: unknown main item tag 0x0 [ 157.200894][ T5890] wacom 0003:056A:A6D8.0009: item fetching failed at offset 4/5 [ 157.210692][ T5890] wacom 0003:056A:A6D8.0009: parse failed [ 157.225223][ T5890] wacom 0003:056A:A6D8.0009: probe with driver wacom failed with error -22 [ 157.380004][ T7333] udevd[7333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.448683][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.468254][ T5890] usb 1-1: USB disconnect, device number 31 [ 157.745435][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 157.881445][ T7750] xt_connbytes: Forcing CT accounting to be enabled [ 157.906064][ T7750] Cannot find set identified by id 0 to match [ 157.927892][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.957807][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.976711][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.989934][ T5915] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 157.999484][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.017646][ T5915] usb 2-1: config 0 descriptor?? [ 158.454946][ T5915] hid (null): invalid report_count 263370 [ 158.463534][ T5915] wacom 0003:056A:0317.000A: invalid report_count 263370 [ 158.471099][ T5915] wacom 0003:056A:0317.000A: item 0 4 1 9 parsing failed [ 158.479410][ T5915] wacom 0003:056A:0317.000A: parse failed [ 158.485588][ T5915] wacom 0003:056A:0317.000A: probe with driver wacom failed with error -22 [ 158.570443][ T7771] kvm: kvm [7769]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 158.626421][ T7771] kvm: kvm [7769]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 158.671256][ T7782] bridge0: port 3(hsr0) entered blocking state [ 158.688682][ T7771] kvm: kvm [7769]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x14600000000 [ 158.703235][ T7782] bridge0: port 3(hsr0) entered disabled state [ 158.736177][ T7771] kvm: kvm [7769]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1cd00000800 [ 158.745871][ T7782] hsr0: entered allmulticast mode [ 158.749258][ T7779] kvm: kvm [7775]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 158.759045][ T7782] hsr_slave_0: entered allmulticast mode [ 158.771417][ T7782] hsr_slave_1: entered allmulticast mode [ 158.787928][ T7782] hsr0: entered promiscuous mode [ 158.794929][ T7779] kvm: kvm [7775]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 158.801859][ T7782] bridge0: port 3(hsr0) entered blocking state [ 158.810305][ T7782] bridge0: port 3(hsr0) entered forwarding state [ 158.817287][ T7771] kvm: kvm [7769]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2e500000800 [ 158.859423][ T7779] kvm: kvm [7775]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 158.881851][ T7771] kvm: kvm [7769]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x45e00000000 [ 158.894121][ T7779] kvm: kvm [7775]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 158.944424][ T5915] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 159.097810][ T5915] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 159.119513][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.150004][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.188631][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 159.204171][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.229210][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.244590][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.279047][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 159.289671][ T5908] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 159.313701][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.330646][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.340582][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.362241][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 159.414712][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.451946][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.461241][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.472790][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 159.483449][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.511476][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.520923][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.532110][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 159.542372][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.560777][ T5908] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 159.572662][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.581825][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.590302][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.601861][ T5908] usb 9-1: Product: syz [ 159.607641][ T5908] usb 9-1: Manufacturer: syz [ 159.612374][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 159.622532][ T5908] usb 9-1: SerialNumber: syz [ 159.627793][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.636581][ T5908] usb 9-1: config 0 descriptor?? [ 159.656425][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.674414][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.694509][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 159.708765][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.714849][ T5890] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 159.719622][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.733575][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.745162][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 159.755352][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.766886][ T5915] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 159.778113][ T5915] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 159.798388][ T5915] usb 5-1: Product: syz [ 159.802746][ T5915] usb 5-1: Manufacturer: syz [ 159.819770][ T5915] usb 5-1: SerialNumber: syz [ 159.830994][ T5915] usb 5-1: config 0 descriptor?? [ 159.850413][ T5915] yurex 5-1:0.0: Could not submitting URB [ 159.861104][ T5915] yurex 5-1:0.0: probe with driver yurex failed with error -5 [ 159.865606][ T5890] usb 1-1: device descriptor read/64, error -71 [ 159.934721][ T8] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 160.057807][ T5908] usb 9-1: Firmware: major: 0, minor: 248, hardware type: UNKNOWN (7) [ 160.090743][ T5892] usb 5-1: USB disconnect, device number 29 [ 160.116665][ T8] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 160.126052][ T8] usb 6-1: config 0 has no interface number 0 [ 160.134772][ T5890] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 160.146624][ T8] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 160.168829][ T8] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 160.188450][ T8] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 160.198233][ T8] usb 6-1: Product: syz [ 160.202786][ T8] usb 6-1: Manufacturer: syz [ 160.208185][ T8] usb 6-1: SerialNumber: syz [ 160.217237][ T8] usb 6-1: config 0 descriptor?? [ 160.238998][ T8] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input19 [ 160.258529][ T7795] fuse: Bad value for 'rootmode' [ 160.273136][ T5908] usb 9-1: Firmware: build ЍRW&p [ 160.294580][ T5890] usb 1-1: device descriptor read/64, error -71 [ 160.412592][ T5915] usb 2-1: USB disconnect, device number 25 [ 160.425391][ T5890] usb usb1-port1: attempt power cycle [ 160.464519][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.476551][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.508465][ T5908] usb 9-1: failed to fetch extended address, random address set [ 160.517678][ T5908] usb 9-1: atusb_probe: initialization failed, error = -524 [ 160.532272][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.537018][ T5908] atusb 9-1:0.0: probe with driver atusb failed with error -524 [ 160.561679][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.563513][ T5908] usb 9-1: USB disconnect, device number 6 [ 160.664497][ T8] usb 6-1: USB disconnect, device number 24 [ 160.774631][ T5890] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 160.777760][ T7833] netlink: 212 bytes leftover after parsing attributes in process `syz.4.427'. [ 160.815707][ T5890] usb 1-1: device descriptor read/8, error -71 [ 160.859661][ T6195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.972341][ T6195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.044533][ T5908] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 161.074753][ T5890] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 161.149520][ T5890] usb 1-1: device descriptor read/8, error -71 [ 161.188339][ T6195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.206102][ T5908] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 161.234833][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.259533][ T5908] usb 5-1: config 0 descriptor?? [ 161.295342][ T5908] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 161.296076][ T5890] usb usb1-port1: unable to enumerate USB device [ 161.501626][ T5908] usb 5-1: USB disconnect, device number 30 [ 161.519797][ T6195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.650231][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.701566][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.710424][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.726320][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.734917][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.748215][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.892246][ T6195] bridge_slave_1: left allmulticast mode [ 161.912756][ T6195] bridge_slave_1: left promiscuous mode [ 161.924132][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.947398][ T6195] bridge_slave_0: left allmulticast mode [ 161.953081][ T6195] bridge_slave_0: left promiscuous mode [ 161.979528][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.285733][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 162.927913][ T6195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.953273][ T6195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.977519][ T6195] bond0 (unregistering): Released all slaves [ 163.000645][ T7885] gretap0: entered promiscuous mode [ 163.000917][ T7885] vlan3: entered promiscuous mode [ 163.123050][ T7885] gretap0: left promiscuous mode [ 163.472150][ T5911] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 163.561062][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.440'. [ 163.634680][ T5911] usb 9-1: Using ep0 maxpacket: 16 [ 163.649699][ T5911] usb 9-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=99.81 [ 163.658892][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.667463][ T5911] usb 9-1: Product: syz [ 163.672041][ T5911] usb 9-1: Manufacturer: syz [ 163.677280][ T5911] usb 9-1: SerialNumber: syz [ 163.692320][ T5911] usb 9-1: config 0 descriptor?? [ 163.702799][ T5911] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 163.715116][ T5911] ftdi_sio ttyUSB0: unknown device type: 0x9981 [ 163.786802][ T7915] netlink: 'syz.5.444': attribute type 33 has an invalid length. [ 163.805046][ T54] Bluetooth: hci2: command tx timeout [ 163.834841][ T6195] hsr_slave_0: left promiscuous mode [ 163.847639][ T6195] hsr_slave_1: left promiscuous mode [ 163.913082][ T5911] usb 9-1: USB disconnect, device number 7 [ 163.919857][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.937528][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.949948][ T5911] ftdi_sio 9-1:0.0: device disconnected [ 164.023330][ T6195] dummy0: left allmulticast mode [ 164.034364][ T6195] dummy0: left promiscuous mode [ 164.048612][ T6195] veth1_macvtap: left promiscuous mode [ 164.055324][ T6195] veth0_macvtap: left promiscuous mode [ 164.060955][ T6195] veth1_vlan: left promiscuous mode [ 164.067161][ T6195] veth0_vlan: left promiscuous mode [ 164.327243][ T6195] team0 (unregistering): Port device vlan2 removed [ 164.818490][ T6195] team0 (unregistering): Port device team_slave_1 removed [ 164.866164][ T6195] team0 (unregistering): Port device team_slave_0 removed [ 165.312109][ T7921] geneve1: entered allmulticast mode [ 165.543709][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 165.599252][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.455'. [ 165.909001][ T54] Bluetooth: hci2: command tx timeout [ 166.278348][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.305611][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.312905][ T7866] bridge_slave_0: entered allmulticast mode [ 166.356750][ T7866] bridge_slave_0: entered promiscuous mode [ 166.430783][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.464080][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.478370][ T7866] bridge_slave_1: entered allmulticast mode [ 166.500242][ T7866] bridge_slave_1: entered promiscuous mode [ 166.725593][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.8.472'. [ 166.798396][ T7866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.837361][ T7866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.939885][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.8.472'. [ 167.052215][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.8.472'. [ 167.083622][ T8014] xt_CT: No such helper "netbios-ns" [ 167.094013][ T7866] team0: Port device team_slave_0 added [ 167.538506][ T7866] team0: Port device team_slave_1 added [ 167.586865][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.593877][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.658010][ T7866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.706675][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.720314][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.776346][ T7866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.822162][ T8049] vlan2: entered promiscuous mode [ 167.829749][ T8049] team0: entered promiscuous mode [ 167.843116][ T8049] team_slave_0: entered promiscuous mode [ 167.856321][ T8049] team_slave_1: entered promiscuous mode [ 167.862411][ T8049] vlan2: entered allmulticast mode [ 167.870039][ T8049] team0: entered allmulticast mode [ 167.886745][ T8049] team_slave_0: entered allmulticast mode [ 167.892602][ T8049] team_slave_1: entered allmulticast mode [ 167.907703][ T8049] team0: left allmulticast mode [ 167.912723][ T8049] team_slave_0: left allmulticast mode [ 167.919088][ T8049] team_slave_1: left allmulticast mode [ 167.925108][ T8049] team0: left promiscuous mode [ 167.930011][ T8049] team_slave_0: left promiscuous mode [ 167.936112][ T8049] team_slave_1: left promiscuous mode [ 167.964775][ T54] Bluetooth: hci2: command tx timeout [ 168.127520][ T7866] hsr_slave_0: entered promiscuous mode [ 168.141000][ T7866] hsr_slave_1: entered promiscuous mode [ 168.169471][ T7866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.198279][ T7866] Cannot create hsr debugfs directory [ 168.205141][ T8057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.490'. [ 168.795075][ T7866] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 168.831430][ T7866] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 168.856997][ T7866] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 168.898946][ T7866] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 169.189686][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.247238][ T7866] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.279358][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.286557][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.385844][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.393040][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.653539][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.866637][ T7866] veth0_vlan: entered promiscuous mode [ 169.906522][ T7866] veth1_vlan: entered promiscuous mode [ 170.003742][ T7866] veth0_macvtap: entered promiscuous mode [ 170.046357][ T54] Bluetooth: hci2: command tx timeout [ 170.080535][ T7866] veth1_macvtap: entered promiscuous mode [ 170.116556][ T8133] netlink: 1136 bytes leftover after parsing attributes in process `syz.0.515'. [ 170.175032][ T8133] netlink: 5 bytes leftover after parsing attributes in process `syz.0.515'. [ 170.327839][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.379264][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.403109][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.419503][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.445661][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.484722][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.520966][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.553647][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.566830][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.594576][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.618961][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.709833][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.743900][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.774727][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.806017][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.851171][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.880846][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.914978][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.935006][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.954366][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.987866][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.013736][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.067355][ T7866] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.094863][ T7866] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.110570][ T7866] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.120238][ T7866] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.320553][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.352932][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.382731][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.391047][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.419820][ T8171] bridge_slave_0: default FDB implementation only supports local addresses [ 172.442915][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 173.476999][ T8253] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 173.502607][ T8253] netlink: 55 bytes leftover after parsing attributes in process `syz.0.555'. [ 173.615131][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 174.219311][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.569'. [ 174.500657][ T8313] set match dimension is over the limit! [ 174.703070][ T8313] pim6reg: entered allmulticast mode [ 174.732170][ T8313] pim6reg: left allmulticast mode [ 174.802675][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.579'. [ 175.160465][ T8345] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.374965][ T8443] netlink: 32 bytes leftover after parsing attributes in process `syz.5.616'. [ 177.608213][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.621'. [ 177.794914][ T8463] netlink: 1136 bytes leftover after parsing attributes in process `syz.4.625'. [ 178.591872][ T8495] netlink: 76 bytes leftover after parsing attributes in process `syz.8.635'. [ 179.034725][ T8515] netlink: 40 bytes leftover after parsing attributes in process `syz.9.642'. [ 179.347832][ T8534] netlink: 16 bytes leftover after parsing attributes in process `syz.9.647'. [ 179.366590][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 179.659767][ T8548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.658'. [ 180.632269][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.9.669'. [ 181.242470][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 181.388839][ T8637] netlink: 40 bytes leftover after parsing attributes in process `syz.8.685'. [ 182.569581][ T8691] syzkaller0: entered promiscuous mode [ 182.582314][ T8691] syzkaller0: entered allmulticast mode [ 185.378832][ T8738] vlan2: entered allmulticast mode [ 185.385191][ T8738] bond0: entered allmulticast mode [ 185.390358][ T8738] bond_slave_0: entered allmulticast mode [ 185.416856][ T8738] bond_slave_1: entered allmulticast mode [ 185.460147][ T8738] bond0: left allmulticast mode [ 185.473621][ T8738] bond_slave_0: left allmulticast mode [ 185.498028][ T8738] bond_slave_1: left allmulticast mode [ 185.519967][ T8750] __nla_validate_parse: 1 callbacks suppressed [ 185.519986][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.8.722'. [ 185.563113][ T8749] tipc: Started in network mode [ 185.572385][ T8749] tipc: Node identity ac14140f, cluster identity 4711 [ 185.583191][ T8749] tipc: New replicast peer: 255.255.255.255 [ 185.590549][ T8749] tipc: Enabled bearer , priority 10 [ 185.813894][ T8759] vlan2: entered promiscuous mode [ 185.846624][ T8759] bond0: entered promiscuous mode [ 185.851735][ T8759] bond_slave_0: entered promiscuous mode [ 185.884813][ T8759] bond_slave_1: entered promiscuous mode [ 185.918520][ T8759] vlan2: entered allmulticast mode [ 185.924014][ T8759] bond0: entered allmulticast mode [ 185.959575][ T8759] bond_slave_0: entered allmulticast mode [ 185.971705][ T8759] bond_slave_1: entered allmulticast mode [ 186.003881][ T8759] bond0: left allmulticast mode [ 186.016804][ T8759] bond_slave_0: left allmulticast mode [ 186.023740][ T8759] bond_slave_1: left allmulticast mode [ 186.038471][ T8759] bond0: left promiscuous mode [ 186.043411][ T8759] bond_slave_0: left promiscuous mode [ 186.065529][ T8759] bond_slave_1: left promiscuous mode [ 186.148229][ T8766] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.507755][ T8785] vlan3: entered allmulticast mode [ 186.513880][ T8785] bond0: entered allmulticast mode [ 186.549934][ T8785] bond_slave_0: entered allmulticast mode [ 186.571384][ T8785] bond_slave_1: entered allmulticast mode [ 186.578173][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 186.588959][ T5890] tipc: Node number set to 2886997007 [ 186.629601][ T8785] bond0: left allmulticast mode [ 186.638966][ T8785] bond_slave_0: left allmulticast mode [ 186.664420][ T8785] bond_slave_1: left allmulticast mode [ 186.744243][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.9.739'. [ 187.862228][ T8843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.754'. [ 188.710997][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.9.772'. [ 188.997812][ T8903] macsec0: entered promiscuous mode [ 189.003084][ T8903] macvlan1: entered promiscuous mode [ 189.071724][ T8903] macvlan1: left promiscuous mode [ 189.284014][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.781'. [ 189.344477][ T8913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.364203][ T8913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.393730][ T8913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.436926][ T8913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.602303][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.786'. [ 190.761933][ T8978] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 190.769445][ T8978] macsec1: entered promiscuous mode [ 190.961924][ T8988] netlink: 'syz.0.817': attribute type 10 has an invalid length. [ 190.998794][ T8988] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 191.011132][ T8988] team0: Failed to send options change via netlink (err -105) [ 191.018826][ T8988] team0: Port device netdevsim0 added [ 191.310481][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 191.901174][ T9033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.835'. [ 191.920883][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.836'. [ 192.457526][ T9059] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 192.813094][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.9.850'. [ 193.094948][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.858'. [ 193.253085][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.8.862'. [ 193.342994][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.8.862'. [ 193.562392][ T9101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.866'. [ 193.936090][ T9127] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 193.966666][ T9130] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 194.244229][ T9146] netlink: 68 bytes leftover after parsing attributes in process `syz.8.879'. [ 194.376675][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.384301][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.951174][ T9184] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 195.118183][ T9192] netlink: 68 bytes leftover after parsing attributes in process `syz.5.896'. [ 196.446675][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 196.453315][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 196.787052][ T9279] bridge0: port 4(vlan2) entered blocking state [ 196.809051][ T9279] bridge0: port 4(vlan2) entered disabled state [ 196.816937][ T9279] vlan2: entered allmulticast mode [ 196.822516][ T9279] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 196.832617][ T9279] vlan2: entered promiscuous mode [ 196.839953][ T9279] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 196.849996][ T9279] bridge0: port 4(vlan2) entered blocking state [ 196.856485][ T9279] bridge0: port 4(vlan2) entered forwarding state [ 198.208373][ T971] IPVS: starting estimator thread 0... [ 198.344587][ T9341] IPVS: using max 17 ests per chain, 40800 per kthread [ 198.394195][ T9351] __nla_validate_parse: 1 callbacks suppressed [ 198.394216][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.956'. [ 198.782897][ T1087] IPVS: stop unused estimator thread 0... [ 199.562500][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 199.859591][ T9414] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 200.409616][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.986'. [ 200.421814][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.987'. [ 201.429543][ T9486] bond0: (slave syz_tun): Releasing backup interface [ 202.465175][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 202.809078][ T9564] syzkaller1: entered promiscuous mode [ 202.833772][ T9564] syzkaller1: entered allmulticast mode [ 203.491465][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1038'. [ 203.996705][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 204.008184][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 204.246223][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1052'. [ 204.469352][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1055'. [ 204.509080][ T9646] macsec1: entered promiscuous mode [ 204.518397][ T9646] macvlan1: entered promiscuous mode [ 204.901428][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 205.050666][ T9670] syzkaller1: entered promiscuous mode [ 205.084179][ T9670] syzkaller1: entered allmulticast mode [ 205.575609][ T9683] netlink: 'syz.4.1069': attribute type 10 has an invalid length. [ 205.595203][ T9683] bridge0: port 3(team0) entered blocking state [ 205.601678][ T9683] bridge0: port 3(team0) entered listening state [ 205.608314][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.615544][ T9683] bridge0: port 2(bridge_slave_1) entered listening state [ 205.622887][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.630146][ T9683] bridge0: port 1(bridge_slave_0) entered listening state [ 205.677753][ T9683] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 205.729232][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1073'. [ 205.749344][ T9694] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1073'. [ 205.855046][ T9691] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1072'. [ 206.376993][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1081'. [ 208.494679][ T9824] __nla_validate_parse: 5 callbacks suppressed [ 208.494701][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'. [ 208.544341][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 208.683158][ T9826] netlink: 'syz.8.1114': attribute type 10 has an invalid length. [ 208.741457][ T9826] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 208.774824][ T9826] team0: Failed to send options change via netlink (err -105) [ 208.792535][ T9826] team0: Port device netdevsim0 added [ 208.855379][ T9834] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1116'. [ 209.379445][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 209.820722][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1133'. [ 209.850044][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 209.869012][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1133'. [ 209.900801][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1133'. [ 210.065221][ T9877] bridge0: port 3(team0) entered disabled state [ 210.071758][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.079021][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.116889][ T9880] netlink: 'syz.4.1135': attribute type 10 has an invalid length. [ 210.642024][ T9907] netlink: 'syz.0.1149': attribute type 10 has an invalid length. [ 210.824642][ T9914] vlan2: entered promiscuous mode [ 210.829858][ T9914] bond0: entered promiscuous mode [ 210.835473][ T9914] bond_slave_0: entered promiscuous mode [ 210.841379][ T9914] bond_slave_1: entered promiscuous mode [ 210.850308][ T9914] vlan2: entered allmulticast mode [ 210.855755][ T9914] bond0: entered allmulticast mode [ 210.860905][ T9914] bond_slave_0: entered allmulticast mode [ 210.867531][ T9914] bond_slave_1: entered allmulticast mode [ 210.895236][ T9914] bond0: left allmulticast mode [ 210.900245][ T9914] bond_slave_0: left allmulticast mode [ 210.914051][ T9914] bond_slave_1: left allmulticast mode [ 210.936675][ T9914] bond0: left promiscuous mode [ 210.954774][ T9914] bond_slave_0: left promiscuous mode [ 210.971925][ T9914] bond_slave_1: left promiscuous mode [ 211.281312][ T9933] netlink: 'syz.9.1160': attribute type 1 has an invalid length. [ 211.319522][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1163'. [ 211.439168][ T9944] bond1 (unregistering): Released all slaves [ 211.801834][ T9962] veth0_to_bridge: entered promiscuous mode [ 211.835048][ T9962] macsec0: entered promiscuous mode [ 211.880801][ T9962] veth0_to_bridge: left promiscuous mode [ 211.915711][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1175'. [ 213.757942][ T971] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 213.938147][ T971] usb 10-1: Using ep0 maxpacket: 32 [ 213.962960][ T971] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 214.002497][ T971] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.012808][ T971] usb 10-1: config 0 interface 0 has no altsetting 0 [ 214.020003][ T971] usb 10-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 214.029403][ T971] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.111240][ T971] usb 10-1: config 0 descriptor?? [ 214.280256][T10048] syzkaller1: entered promiscuous mode [ 214.290117][T10048] syzkaller1: entered allmulticast mode [ 214.504983][T10054] __nla_validate_parse: 4 callbacks suppressed [ 214.505004][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1212'. [ 214.623432][ T971] wacom 0003:056A:00C4.000B: unknown main item tag 0x0 [ 214.645256][ T971] wacom 0003:056A:00C4.000B: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.9-1/input0 [ 214.727746][T10056] bridge0: port 4(vlan3) entered blocking state [ 214.771080][T10056] bridge0: port 4(vlan3) entered disabled state [ 214.785502][T10056] vlan3: entered allmulticast mode [ 214.791039][T10056] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 214.809277][T10056] vlan3: entered promiscuous mode [ 214.817036][T10056] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 214.968180][ T971] usb 10-1: USB disconnect, device number 2 [ 215.009196][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 215.037099][T10062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1215'. [ 215.164624][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 215.638602][T10077] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1222'. [ 215.713733][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1221'. [ 215.806412][ C1] ------------[ cut here ]------------ [ 215.812454][ C1] WARNING: CPU: 1 PID: 10052 at net/ipv4/route.c:1241 ip_rt_bug+0x2c/0x110 [ 215.821177][ C1] Modules linked in: [ 215.825156][ C1] CPU: 1 UID: 0 PID: 10052 Comm: syz.8.1211 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 215.835645][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 215.845826][ C1] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 215.850833][ C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb d2 72 f7 66 90 e8 b4 d2 72 f7 31 ff 48 89 de ba 02 00 00 00 e8 65 b4 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 215.854097][T10084] syzkaller1: entered promiscuous mode [ 215.870532][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 215.870627][ C1] RAX: 78e31174ec3e3400 RBX: ffff88807dfad500 RCX: ffffffff8170d01a [ 215.870649][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acc00 RDI: ffffffff8c611a00 [ 215.870668][ C1] RBP: 0000000000000001 R08: ffffffff942d989f R09: ffffffff8a221e6b [ 215.870687][ C1] R10: dffffc0000000000 R11: fffffbfff285b314 R12: dffffc0000000000 [ 215.870704][ C1] R13: ffffc90000a188f8 R14: ffff888060753b00 R15: ffff888144e821c0 [ 215.870724][ C1] FS: 00007fdd348f06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 215.870747][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.870765][ C1] CR2: 00007fd87e3d4f98 CR3: 000000004c39c000 CR4: 00000000003526f0 [ 215.870787][ C1] Call Trace: [ 215.870805][ C1] [ 215.870817][ C1] ? __warn+0x168/0x4e0 [ 215.896505][T10084] syzkaller1: entered allmulticast mode [ 215.898493][ C1] ? ip_rt_bug+0x2c/0x110 [ 215.966663][ C1] ? report_bug+0x2b3/0x500 [ 215.971226][ C1] ? ip_rt_bug+0x2c/0x110 [ 215.975682][ C1] ? handle_bug+0x60/0x90 [ 215.980066][ C1] ? exc_invalid_op+0x1a/0x50 [ 215.984851][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 215.989915][ C1] ? ip_rt_bug+0x2b/0x110 [ 215.994336][ C1] ? mark_lock+0x9a/0x360 [ 215.998712][ C1] ? ip_rt_bug+0x2c/0x110 [ 216.003110][ C1] ip_push_pending_frames+0xbf/0x150 [ 216.008533][ C1] __icmp_send+0x1017/0x15c0 [ 216.013187][ C1] ? __icmp_send+0x5d2/0x15c0 [ 216.017980][ C1] ? __pfx___icmp_send+0x10/0x10 [ 216.022963][ C1] ? mark_lock+0x9a/0x360 [ 216.027559][ C1] ? look_up_lock_class+0x77/0x170 [ 216.032865][ C1] ipv4_link_failure+0x62f/0xa10 [ 216.037933][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 216.043437][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 216.048642][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 216.054142][ C1] arp_error_report+0x114/0x160 [ 216.059133][ C1] neigh_invalidate+0x244/0x470 [ 216.064071][ C1] neigh_timer_handler+0x8a5/0xfe0 [ 216.069297][ C1] call_timer_fn+0x18e/0x650 [ 216.073951][ C1] ? call_timer_fn+0xc0/0x650 [ 216.078763][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.084495][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 216.089666][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.095414][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.101106][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.106882][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.112138][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 216.117444][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.123135][ C1] __run_timer_base+0x66a/0x8e0 [ 216.125671][T10088] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1226'. [ 216.128085][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 216.142467][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.148915][ C1] run_timer_softirq+0xb7/0x170 [ 216.153823][ C1] handle_softirqs+0x2c5/0x980 [ 216.158713][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 216.163528][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 216.168926][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 216.174180][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 216.178897][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 216.184164][ C1] irq_exit_rcu+0x9/0x30 [ 216.188524][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 216.194219][ C1] [ 216.197252][ C1] [ 216.200223][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.206303][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 216.212167][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ba 78 9e f5 48 89 df e8 d2 be 9f f5 e8 9d b3 ca f5 fb bf 01 00 00 00 e2 39 91 f5 65 8b 05 a3 d1 31 74 85 c0 74 06 5b c3 cc cc cc cc [ 216.231885][ C1] RSP: 0018:ffffc900131ef618 EFLAGS: 00000286 [ 216.238038][ C1] RAX: 78e31174ec3e3400 RBX: ffff888054935f18 RCX: ffffffff8170d01a [ 216.246091][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acc00 RDI: 0000000000000001 [ 216.254087][ C1] RBP: 1ffff1100a926be2 R08: ffffffff942d9817 R09: 1ffffffff285b302 [ 216.262115][ C1] R10: dffffc0000000000 R11: fffffbfff285b303 R12: ffffc900131ef828 [ 216.270160][ C1] R13: ffffea00013c03c0 R14: ffffea00013c03c0 R15: ffff888054935f10 [ 216.278232][ C1] ? mark_lock+0x9a/0x360 [ 216.282604][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.287901][ C1] filemap_remove_folio+0x110/0x2e0 [ 216.293160][ C1] truncate_inode_folio+0x5d/0x70 [ 216.298271][ C1] shmem_undo_range+0x43c/0x1cf0 [ 216.303238][ C1] ? validate_chain+0x11e/0x5920 [ 216.308273][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 216.313725][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 216.318880][ C1] ? mark_lock+0x9a/0x360 [ 216.323270][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 216.329670][ C1] shmem_evict_inode+0x29b/0xa80 [ 216.334716][ C1] ? inode_wait_for_writeback+0x111/0x2a0 [ 216.340491][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 216.346079][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 216.351346][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 216.356927][ C1] evict+0x4e8/0x9a0 [ 216.360877][ C1] ? __pfx_evict+0x10/0x10 [ 216.365395][ C1] ? _raw_spin_unlock+0x28/0x50 [ 216.370300][ C1] ? iput+0x713/0xa50 [ 216.374399][ C1] __dentry_kill+0x20d/0x630 [ 216.379047][ C1] ? dput+0x37/0x2b0 [ 216.382992][ C1] dput+0x19f/0x2b0 [ 216.386914][ C1] __fput+0x5ba/0xa50 [ 216.390973][ C1] task_work_run+0x24f/0x310 [ 216.395674][ C1] ? __pfx_task_work_run+0x10/0x10 [ 216.400844][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 216.406683][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 216.412387][ C1] do_syscall_64+0x100/0x230 [ 216.417087][ C1] ? clear_bhb_loop+0x35/0x90 [ 216.421817][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.427805][ C1] RIP: 0033:0x7fdd33b7e759 [ 216.432268][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.451971][ C1] RSP: 002b:00007fdd348f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 216.460477][ C1] RAX: 0000000020000000 RBX: 00007fdd33d35f80 RCX: 00007fdd33b7e759 [ 216.468565][ C1] RDX: 000000000300000b RSI: 0000000000fbe000 RDI: 0000000020000000 [ 216.476594][ C1] RBP: 00007fdd33bf175e R08: ffffffffffffffff R09: 0000000000000000 [ 216.484652][ C1] R10: 0000000000004031 R11: 0000000000000246 R12: 0000000000000000 [ 216.492661][ C1] R13: 0000000000000000 R14: 00007fdd33d35f80 R15: 00007fdd33e5fa28 [ 216.500752][ C1] [ 216.503816][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.511125][ C1] CPU: 1 UID: 0 PID: 10052 Comm: syz.8.1211 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 216.521594][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 216.531699][ C1] Call Trace: [ 216.535027][ C1] [ 216.537919][ C1] dump_stack_lvl+0x241/0x360 [ 216.542662][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.547954][ C1] ? __pfx__printk+0x10/0x10 [ 216.552603][ C1] ? vscnprintf+0x5d/0x90 [ 216.556993][ C1] panic+0x349/0x880 [ 216.560942][ C1] ? __warn+0x177/0x4e0 [ 216.565165][ C1] ? __pfx_panic+0x10/0x10 [ 216.569654][ C1] __warn+0x34b/0x4e0 [ 216.573693][ C1] ? ip_rt_bug+0x2c/0x110 [ 216.578083][ C1] report_bug+0x2b3/0x500 [ 216.582470][ C1] ? ip_rt_bug+0x2c/0x110 [ 216.586855][ C1] handle_bug+0x60/0x90 [ 216.591075][ C1] exc_invalid_op+0x1a/0x50 [ 216.595639][ C1] asm_exc_invalid_op+0x1a/0x20 [ 216.600559][ C1] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 216.605548][ C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb d2 72 f7 66 90 e8 b4 d2 72 f7 31 ff 48 89 de ba 02 00 00 00 e8 65 b4 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 216.625190][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 216.631318][ C1] RAX: 78e31174ec3e3400 RBX: ffff88807dfad500 RCX: ffffffff8170d01a [ 216.639305][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acc00 RDI: ffffffff8c611a00 [ 216.647292][ C1] RBP: 0000000000000001 R08: ffffffff942d989f R09: ffffffff8a221e6b [ 216.655291][ C1] R10: dffffc0000000000 R11: fffffbfff285b314 R12: dffffc0000000000 [ 216.663274][ C1] R13: ffffc90000a188f8 R14: ffff888060753b00 R15: ffff888144e821c0 [ 216.671275][ C1] ? ip_rt_bug+0x2b/0x110 [ 216.675629][ C1] ? mark_lock+0x9a/0x360 [ 216.679978][ C1] ip_push_pending_frames+0xbf/0x150 [ 216.685296][ C1] __icmp_send+0x1017/0x15c0 [ 216.689907][ C1] ? __icmp_send+0x5d2/0x15c0 [ 216.694594][ C1] ? __pfx___icmp_send+0x10/0x10 [ 216.699578][ C1] ? mark_lock+0x9a/0x360 [ 216.703946][ C1] ? look_up_lock_class+0x77/0x170 [ 216.709125][ C1] ipv4_link_failure+0x62f/0xa10 [ 216.714096][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 216.719580][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 216.724716][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 216.730191][ C1] arp_error_report+0x114/0x160 [ 216.735071][ C1] neigh_invalidate+0x244/0x470 [ 216.739944][ C1] neigh_timer_handler+0x8a5/0xfe0 [ 216.745077][ C1] call_timer_fn+0x18e/0x650 [ 216.749684][ C1] ? call_timer_fn+0xc0/0x650 [ 216.754389][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.760049][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 216.765186][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.770834][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.776486][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.782133][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.787368][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 216.792576][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 216.798242][ C1] __run_timer_base+0x66a/0x8e0 [ 216.803127][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 216.808531][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.814917][ C1] run_timer_softirq+0xb7/0x170 [ 216.819798][ C1] handle_softirqs+0x2c5/0x980 [ 216.824590][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 216.829377][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 216.834686][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 216.839899][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 216.844592][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 216.849902][ C1] irq_exit_rcu+0x9/0x30 [ 216.854208][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 216.859881][ C1] [ 216.862835][ C1] [ 216.865786][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.871793][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 216.877652][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ba 78 9e f5 48 89 df e8 d2 be 9f f5 e8 9d b3 ca f5 fb bf 01 00 00 00 e2 39 91 f5 65 8b 05 a3 d1 31 74 85 c0 74 06 5b c3 cc cc cc cc [ 216.897273][ C1] RSP: 0018:ffffc900131ef618 EFLAGS: 00000286 [ 216.903388][ C1] RAX: 78e31174ec3e3400 RBX: ffff888054935f18 RCX: ffffffff8170d01a [ 216.911372][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acc00 RDI: 0000000000000001 [ 216.919358][ C1] RBP: 1ffff1100a926be2 R08: ffffffff942d9817 R09: 1ffffffff285b302 [ 216.927344][ C1] R10: dffffc0000000000 R11: fffffbfff285b303 R12: ffffc900131ef828 [ 216.935371][ C1] R13: ffffea00013c03c0 R14: ffffea00013c03c0 R15: ffff888054935f10 [ 216.943368][ C1] ? mark_lock+0x9a/0x360 [ 216.947798][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.953055][ C1] filemap_remove_folio+0x110/0x2e0 [ 216.958292][ C1] truncate_inode_folio+0x5d/0x70 [ 216.963337][ C1] shmem_undo_range+0x43c/0x1cf0 [ 216.968281][ C1] ? validate_chain+0x11e/0x5920 [ 216.973235][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 216.978633][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 216.983681][ C1] ? mark_lock+0x9a/0x360 [ 216.988014][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 216.993681][ C1] shmem_evict_inode+0x29b/0xa80 [ 216.998638][ C1] ? inode_wait_for_writeback+0x111/0x2a0 [ 217.004389][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 217.009891][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 217.015103][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 217.020610][ C1] evict+0x4e8/0x9a0 [ 217.024533][ C1] ? __pfx_evict+0x10/0x10 [ 217.028973][ C1] ? _raw_spin_unlock+0x28/0x50 [ 217.033853][ C1] ? iput+0x713/0xa50 [ 217.037876][ C1] __dentry_kill+0x20d/0x630 [ 217.042478][ C1] ? dput+0x37/0x2b0 [ 217.046379][ C1] dput+0x19f/0x2b0 [ 217.050208][ C1] __fput+0x5ba/0xa50 [ 217.054211][ C1] task_work_run+0x24f/0x310 [ 217.058847][ C1] ? __pfx_task_work_run+0x10/0x10 [ 217.063966][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 217.069701][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 217.075373][ C1] do_syscall_64+0x100/0x230 [ 217.079976][ C1] ? clear_bhb_loop+0x35/0x90 [ 217.084665][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.090596][ C1] RIP: 0033:0x7fdd33b7e759 [ 217.095021][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.114647][ C1] RSP: 002b:00007fdd348f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 217.123097][ C1] RAX: 0000000020000000 RBX: 00007fdd33d35f80 RCX: 00007fdd33b7e759 [ 217.131091][ C1] RDX: 000000000300000b RSI: 0000000000fbe000 RDI: 0000000020000000 [ 217.139166][ C1] RBP: 00007fdd33bf175e R08: ffffffffffffffff R09: 0000000000000000 [ 217.147157][ C1] R10: 0000000000004031 R11: 0000000000000246 R12: 0000000000000000 [ 217.155128][ C1] R13: 0000000000000000 R14: 00007fdd33d35f80 R15: 00007fdd33e5fa28 [ 217.163110][ C1] [ 217.166450][ C1] Kernel Offset: disabled [ 217.170917][ C1] Rebooting in 86400 seconds..