last executing test programs: 8.733100602s ago: executing program 3 (id=10999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f00000002c0)=""/102400, 0x19000, 0x80000000000000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000192c0)={&(0x7f0000019300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000019340)={&(0x7f0000019380)={0x24, 0x0, 0x27d24e37c6fca91e, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x8050) sendmsg$nl_route(r0, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fcdbdf250a808000a6"], 0x1c}}, 0x20000050) syz_usb_connect(0x0, 0x62, &(0x7f0000019480)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019500)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="280000001000010025bd619cf9dbdf2500050000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000019900)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000019940)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000019980)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f00000199c0)='./file0\x00', 0x81101) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000019740)=0x9, 0x8, 0x40000000000000) r5 = socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f0000019780)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000197c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ppoll(&(0x7f0000019840)=[{r1}, {r1, 0x80}, {r5, 0x9}, {r1, 0x2441}, {r3, 0x80}], 0x5, &(0x7f0000019880)={0x77359400}, &(0x7f00000198c0)={[0x8]}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 5.997244434s ago: executing program 1 (id=11015): r0 = socket(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x310}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000e40)=@newqdisc={0x488, 0x24, 0xb25e5a7cb1380fbc, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_choke={{0xa}, {0x44c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0xb7a, 0xeab, 0x5, 0x16, 0xe}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x5, 0x7, 0x0, 0x1a, 0xc, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1a1d}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "4d502ea1a4f6892261d2ea1719170308a0e84bd6d0c13f98b89dda1f1d26c9302283f026010f0b14e0e7123e2b902a167ea8303d3eeff8c7f76f06dee123066a754d011d33590715c25793e9715cf357806f79626d19939a7eb5edccce7c40c91782a2d10f8ed2596039e70b8aefc507197b1f3cd1a3e51e16930cd36d01332d70fd9746e9b2b2ea6c73f2649b68c8ffa7e417ef973084ea6396688915c5ac6cf430e5c52af99ab18a9f6e12dbfd2933012fc6942e341fd279c29755ab2341c39b9198a703ae6a366768242114bcb9b91dc0491164342550be7343ba4a959a4cb9d74eb37a30edeffbbb704863f4ba2f307a069de6416e5a171ccf98c2b72c77"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xc80}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000480)={@ptr={0x66642a85, 0x0, 0x0, 0x43, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000500)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) chdir(&(0x7f0000000680)='./cgroup\x00') r9 = open(&(0x7f00000006c0)='.\x00', 0x80000, 0x103) getdents(r9, &(0x7f0000000700)=""/184, 0xb8) getdents(r9, &(0x7f00000007c0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r4) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000a00)={'geneve1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21505, 0x200feff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x138, r11, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040085}, 0x20044040) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="05000000e4ef1f00680000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000d00)={r14, 0x0, &(0x7f0000000d40)=""/227}, 0x20) 5.521042571s ago: executing program 3 (id=11018): syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x801) pselect6(0x40, &(0x7f0000000600)={0xc, 0xe, 0x80000000, 0x1, 0x6, 0x0, 0xfffffffffffffffb, 0xc8d1}, &(0x7f0000000640)={0x2, 0x8, 0x0, 0xfffffffffffffff2, 0x7, 0x2, 0x8}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x4, 0x10ffff, 0xfffffffd}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000006c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xa000}) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x2, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x1006, 0x15b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@fallback, 0xffffffffffffffff, 0x37, 0x16}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.389302566s ago: executing program 0 (id=11019): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000440)="fdc2532b4ea3270a99000000", 0xc, 0x20008081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x5}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x305880, 0x0) open_tree(r3, 0x0, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') write$vga_arbiter(r5, 0x0, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4008840) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r2, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000000c0)=0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000004c0)=0xfffffffd, 0x4) sendto$inet(r10, 0x0, 0xfff5, 0x20000000, &(0x7f0000000500)={0x2, 0x4e20, @remote}, 0x10) recvfrom$inet(r10, 0x0, 0x0, 0x2042, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000100)={r9, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfffff9bd, 0xfe00, 0x2, 0x8, 0x15, 0x6, 0x1a}, &(0x7f00000001c0)=0x9c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) 5.2923735s ago: executing program 1 (id=11020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x6, @private2, 0xed3c}}, 0x4e22}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r2, 0x3, 0x0, 0x3e, 0x0, 0x9}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x2, 0x30, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r3, 0x2, 0x101, 0x376}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r4, 0x80000000, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) 4.782277246s ago: executing program 1 (id=11021): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000004c0)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000500)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000580)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.759156094s ago: executing program 3 (id=11022): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001fc0), 0x8480) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="58140000", @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="6c00018008000100", @ANYRES32=0x0, @ANYBLOB="56183bb7", @ANYRES32, @ANYBLOB="1400020062726964676530000000000000000000140002006d6163736563300000000000000000001400020073697430000000000000000000000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000300cb766aff580001801400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f767469300000000000000000001400020064756d6d793000000000000000000000080003000200000008000300020000006c0003806700050006593349102821301e34e2cb6a20152f33cd0a4ffb47085ebfb18c6f4d493c29cf2f015998fc1f05e1da770d79947d971d0d988060f95ac928bfeb89ad21041f42790f2ffc165e4b23c3e4f1fd6c5281d28acb8f0412d1820d89c7d68742ce0319807200"], 0x1458}, 0x1, 0x0, 0x0, 0x4c041}, 0x814) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 4.610056053s ago: executing program 3 (id=11023): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x3, 0x2, 0x0, 0xec46, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0xd, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x3, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x7ffc, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x8, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x200000000007, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x0, 0x3000000003, 0x5, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x40, 0x0, 0x7, 0xe, 0x1000003]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x3, 0x2, 0x0, 0xec46, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0xd, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x3, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x7ffc, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x8, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x200000000007, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x0, 0x3000000003, 0x5, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x40, 0x0, 0x7, 0xe, 0x1000003]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000300)=0x6) syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x870, &(0x7f0000000040)={0x0, 0x10003cb2, 0x1c080, 0xa, 0x5d, 0x0, r2}) (async) r3 = io_uring_setup(0x870, &(0x7f0000000040)={0x0, 0x10003cb2, 0x1c080, 0xa, 0x5d, 0x0, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.375682744s ago: executing program 1 (id=11024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "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"}) syz_emit_ethernet(0x56, &(0x7f0000002740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500200601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="63feadced1cf9be3ed967e8002000000000000000000ffffffffffffff7f00"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000002800)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000002840)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000002880)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000028c0)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000002900)=[@sack_perm, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @mss={0x2, 0x1}, @mss={0x2, 0x5}], 0x20000000000001cf) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000002940), 0x4) sendto$inet(r5, &(0x7f0000002980), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000008000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x48810) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4089, 0xff9}, {&(0x7f0000002580)=""/63, 0x3f}, {0x0}], 0x3}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000025c0)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000002680)={0x1c, r6, 0x5, 0x70bd2d, 0x21dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002700), 0x80042, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 4.313641456s ago: executing program 0 (id=11025): socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b80)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000007, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x7, 0x2, 0x91, 0x51, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x63, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x6, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x81, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000008, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x0, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0xffffffff, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x30000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001580)=[@text32={0x20, &(0x7f00000015c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001600)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.710155611s ago: executing program 0 (id=11026): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x200000000000000, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) 3.289450801s ago: executing program 0 (id=11029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() capset(&(0x7f0000000100)={0x19980330, r1}, &(0x7f0000000140)={0x0, 0x5, 0x2, 0x1, 0x10, 0x4}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) msgsnd(0x0, &(0x7f00000002c0)={0x1, "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"}, 0x104, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x4000000000000000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3.005366601s ago: executing program 0 (id=11032): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000380)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x24004084) r3 = io_uring_setup(0x899, &(0x7f00000004c0)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r1, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 2.008969573s ago: executing program 4 (id=11036): socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b80)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000007, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x7, 0x2, 0x91, 0x51, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x63, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x6, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x81, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000008, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x0, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0xffffffff, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x30000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001580)=[@text32={0x20, &(0x7f00000015c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001600)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.987707082s ago: executing program 3 (id=11037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x6118, 0x4) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000480)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000004c0)=0xf3f, 0x4) sendto$packet(r4, &(0x7f0000000500)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000580)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000005c0)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000600)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000680), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000006c0)=0x40000) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000012, 0x12, r7, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000700)=0x10004) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000740)={&(0x7f0000000780)=""/94, 0x5e}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000800)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000240)=0x4, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0x10000}, {0x6, 0x3a}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 1.861557567s ago: executing program 4 (id=11038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x45) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000001440)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="4c000000180001000000000000000000020000000000000900000000060015000500000028001680240001"], 0x4c}}, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "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"}) syz_emit_ethernet(0x56, &(0x7f0000002740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500200601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="63feadced1cf9be3ed967e8002000000000000000000ffffffffffffff7f00"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000002800)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000002840)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000002880)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000028c0)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000002900)=[@sack_perm, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @mss={0x2, 0x1}, @mss={0x2, 0x5}], 0x20000000000001cf) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000002940), 0x4) sendto$inet(r6, &(0x7f0000002980), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4089, 0xff9}, {&(0x7f0000002580)=""/63, 0x3f}, {0x0}], 0x3}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000025c0)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000002680)={0x1c, r7, 0x5, 0x70bd2d, 0x21dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 1.752389581s ago: executing program 0 (id=11039): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000640), 0x1ad100) (fail_nth: 4) 1.332349788s ago: executing program 1 (id=11040): r0 = getpgrp(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') io_setup(0x6, &(0x7f0000000800)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000008c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) r4 = syz_io_uring_setup(0x795e, &(0x7f0000000040)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, &(0x7f00000002c0)={0x6, 0xfb, 0x40000}, 0x20) 1.126892839s ago: executing program 2 (id=11041): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0x1) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x402, r1}, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 933.532882ms ago: executing program 4 (id=11042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x34, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}]}, 0x34}}, 0x0) 928.53003ms ago: executing program 2 (id=11043): r0 = socket(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x310}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000e40)=@newqdisc={0x488, 0x24, 0xb25e5a7cb1380fbc, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_choke={{0xa}, {0x44c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0xb7a, 0xeab, 0x5, 0x16, 0xe}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x5, 0x7, 0x0, 0x1a, 0xc, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "215efb851c8e243a0f7e1a875ce6dcf6e2e9cf1c85a31800e6adf089506d941d18af36bcb934238d351151964993d17d40ad38411dcb34b9b8798df3babaa8118c10c51614128d769d158e84187e8a6bb5931ce331f1fde23bdc276a06795efebd6c20b7181166a3e545211ff6a5225dd48bd4cdf930ae87a8be95d798e6e2ab3d35c63ba624d8d66c38be95646297b4c45c856c8150abc25e8457d742602ac6c00c8cfcbaaa7e51bf26cd969f8724bad6c5ad3dbbca5cdc1031fb4f82e0b24329d6fe5ff69f50d1ea46d4f5fb1326b8f178fc26d8aa995a171ffcb20b1aa5f6beec8c9bf7d787fbb2e8538d71c0ed7ec3e9783cd5bde57f790412fab346e3fe"}, @TCA_CHOKE_STAB={0x104, 0x2, "5e28223ed17756a352917e55b92e16b87be64b2257862da774c5557ae94260f93c08d6af1ec1f0e434e4951a4c76fed176503d29dff40170a3dedf9f16c43f3310674e92f5ef65b7ccbac42e277a7240dd42df42402b8391b4ca43eb723aca9c04299dca3726c45950f8ec83cb0908aada618289698bd70d23ae91e9ea6d92e260f1104429f3fcad68f7866744c5cb6c0bc6b9ed0587777375a1c7c89cf78fd8e33fdd47084f31891143057372f3196aaa37eb87f8dd355d25d25d1bf09ff17d64a9598d817116f57fb548a0d350882a98ae26de748844c094b4eaa351a1ebb32f5b4ad479b8b069b17b16c9d119e5ae69565bc2dd6d9f4303ec38766274e4c3"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1a1d}, @TCA_CHOKE_STAB={0x104, 0x2, "ee04f35f1290a3c1722c36662779bcebcf0577300a4396e7f84f7a14582b8c5aa07e3e12662c066c5b8058707ec3e5755397fd2449cb873047e96bfadef384861b92ce0962d82ab64a4bb59eac4f5b5d679f26077a749d9960711652ca82b11a261aa5bae172ff2fa93d002c95e0ecb318d2fd5d554ed1e7d306b6a24b9bda7e03fee39c0d3a78bc9d7c5753410a21553d068411e22808beaafa8ef57113bf67484e81ad30467e63bd8b8359bd4ff0580b7d9d009331b1a62b14204d7926223e30256754c233b57b8346f7295e97d16dbc43d720f984f03a5724a24cad11b4b22116d9e27629bd0713837b97366e8f24f26265915a19c99976322dd1c1d4180f"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xc80}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000480)={@ptr={0x66642a85, 0x0, 0x0, 0x43, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000500)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) chdir(&(0x7f0000000680)='./cgroup\x00') r8 = open(&(0x7f00000006c0)='.\x00', 0x80000, 0x103) getdents(r8, &(0x7f0000000700)=""/184, 0xb8) getdents(r8, &(0x7f00000007c0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000a00)={'geneve1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21505, 0x200feff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x138, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040085}, 0x20044040) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="05000000e4ef1f00680000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000d00)={r13, 0x0, &(0x7f0000000d40)=""/227}, 0x20) 822.588829ms ago: executing program 4 (id=11044): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001fc0), 0x8480) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="58140000", @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf250c0000001c100380080002007b931e20040001000800020000000080041005003ce5c702c8bd2e03b286be31e1212d4c0d53cdac001d69a0e1880c3788288d6b2981b2eab0448cfe60debe7d6937baebe4c3793182f13354aa5b82b34f2e1aeda3181bce690233435c79be89fb4061cd23b46d5d5e3dbe3d836d74d4f5857aef17ba3fe87aae435319ddd3775a94cb0e9558495114bc309568f8f4d85de838a676ba29edf1463825d690123b7b178a5771d1ac1b9d7e3e5f24a1209345aaa952ef6bc2438d95e598efa8590306cff79abc17748e49be7e47699322f2e62ae34abe3e43360c3850f538cdf4ac84ca9779b1d73820ba682ea22cb1080c592d6ce8797e5134c3c10512135a5d1451382f22da2d2ea9dc1fa2ff891dc6c3896abb11d7f2b78a6ab25ac5549802fd5d6bcaae1703a13dc704bb205da631f78f9bc317f37e20fc59f25e98b76119f7dece4aba43ad15b1530d7ed2ccc083e87060c267de70f6bd3924241c063e257bda96d7f08558cda5d3e986980c3953a217a0c8140c2561240e6704ffd908338b500c0064a858ee6be86ff41575af459fd4e069158c4328d708c2fbf3d9f2e4299e996ecedc8c614c652fd382ae0bd15aed0688ce284637329b532b994c93a2b57ed44904580ebfafa723294cd03b731fffe8af4828979ab27a2fa03b9c55c45c15747b1d05635c26bd33fbdb636f2319a9c07d668e9fbca47a1de88c26526e0423a901c6d896bc24da7dff714976f77f1bee9b8bda652307994aa2cb58da3c490bf552d430a20198a1041f8b990f06df9a034559676cd031e4a4c8da1c8b21da5af568f53d857ff52534affcc1eb158d9075dbf9813c539445f4ffe6c71f870865e00362ba08ad06510ed3263f0ebb8116626a14d54c5a966202ec381eca6a35c344edd667d9d161427807e588e640bbb4dd7729e55a439fb0746e54f4342caed78fcc4dd90674aac83b17a54f5ba63457b88611e7f85acb4f99722ffb6d94cc9a4fd3ab8396a3966f5990ae06c067983af8c360be97f7395eea77432aa3b3ceb4cbf745a071e8af6eabc40833912d22444e1bf2d82f514e6cf558d26c75ab9f303317ee373bbb5922b97c0c2e47e6b3afccfcf1329bda49babf16ef19a27afe4e128858a34ef36cc617910c5e7bcd2273ee40111274d80dd1f2fa57588dbc8baa327df6319f8d8a991246f58b25977b07c6dee1748fba42b62a46c2571eff67c6bf98b626afe530b4e8f389048de3117320f2db54719217b8abd427bf420b19ece1108217778a219a1e234adf50c2f9d1875ce05487d62b54a010bf47a1dd1e89fe98bbd7fa0b97ac2e473a14771c9d0e99f7aabed0c3adceed571de474d780ca2fa90c6ab49d2db4d6317e684f0fac6d6363dfd1e4bab2fd745969b7394cb7a43b5d6cb8ad03dfa95200edf26f4388af1de18488c848f1716a9e9efa18bacbbcb21cf87e3a7bb67d407806dd3ecf98a5b80240356f6d56ac4d52c89fd0fc6488f8d054fff24b816de40ce62a8cc27ae6fe5ab0ef3e006e9c67532e6123d7e297ef0c46756f9a9640cdce5dc67ca6654b27990b96ee4308a8829f6c47f92abb24098db67830b395bfb69b90394f9d1b55614b721b4ab77f7a56b34c6341d7ee07c5f4237d560a341cd7366d37c621a61c323b77eee8a86fc563f840d5012a1cef397d9a66d47dfb5f039cd2aa5d2f6d9465f719f72b8f518bac150f5a9c80817d12fcb2b26bd614bca114972ba0f6ede235447f59c54b0030a10e5049d384d2f15b39cab9a346fc2b055ae14ff7f500951c6542c7fc4cb35417a7f4211e1e1a187b6aba8afd73112d880fedf9a04d128443c403f0d805cb50ef6f7374720b6ae7786485d6d905ddb03cfc59890668375d4c598febf72ca96be427368ade5a7745de43fa22d8ed6f19616f87bf8f461b31b3e1e475c7bd078c999f3bd2711bd6996316d046514766c2248eceb42eadda8720fac05152796e54d6a5b533b44dec2ddebaeec10fb77e970c6312c730644add47d707975663dc27162f8ffaf351cbd999286d177c7342820c5884666d7c32e3cd1bf12921163426a6c6f4f0aac4f52d2c1b1ec9dd5b43397f351a9d3dadf3a270ed502445838ebf90c8d3d937b9e3cef2b75cf6e4e6e51e53ebeda00ccd56594d3b8e528fce9a9d3cc4a1832d157fff2dd73c3dd393f9e29c52bc6c3dbb2db40f25298a4dab41fe85a5f462d02117412d4f2fb88e06baa1826ed8c3831f79cd4b583569918c02510aa6b392d5be0d72bab8123cefd6d5fc6cd119a6cd6609942662ccc36aca5ed9b8ff6a9f7a5b02ce4dab601ff17d3a4704a07d79a10ac18f9ba34b3fb3a8f3b314ed2d9fb09236d25874fab29cd4e65261bdcf42f62e34ea888fa92dc27d53e5ea3bc4369e13fb39ea8d4d7631eda4aaf573f60ba1589cf372a5be5b5b851bc42279a07d9028a03b70839421ddb6d6eac137ff438ec51957799f3669815dd59aedcb995b742cb4b997936aa72e7a9f66f6fd0099fbded615096aa6449f53ac481793c1eeca28bc8fd6e8a263d08b2e9d390e6fffb29ba9e4f747cf67cd251ea5f7abac58ecbf393fb0c1d894616268e3121cd19558be034d85aca9f4038e365bafd2b8ac475610d4071612d9b08eb708abecf5aa88d65329d8fd800e88a22beda360f337c4e87e85ffe0ecc9367bf8e6e9a6f90bed8cdf4593519b3924bcce2ab77714f0850cf23af320792545905930b06d773407e8f0822ce760f1de463fcb7a9847ae9c6d74122d82b1821a3297b55572fb547cba44af1bce03143339793d493046682777f2000943eb10a2c1474053f02dce2b6ab0c03630d5e69b4b0bad8f776ab3907af2f81167614620fff4e2fdff92cabfbe0afb919e2bc10a0ba1b59585f8f3ebc7b8703e778223b8e2d5b9a19bf92f6bfd0c8aabc712c37904b1d4632efe19c3a7c8d6ff1610adc3105f9ddb1249ea05e061a92c01e61d17ef22f8ace5f6094e3b8df604e2a38ddbe9ad89479d73c47a9eaf5e109668a1a74a2bf3cd4d6f22c007d68000143b54a28185c74060cc31f3f19c8eaa286b3a7578797d8cde08ca2d04cd0d95c20a2a40de5d5099903b970ffed93d92298a0bb147e264d663004df3155bab3b3e2350c8b342ab9d933e1414a6029a74fa461b4d780c4fb5bf1275af7e89925a7cedf4926e807dddc7aae772e8078da355839fb995755c2d818fde60613d083531e271ba829e6c6a5fb961e2c4647b87bb9423c474e4df1dc23631ddbbf8f489de155daeafb597298b91994c88ba2b15fcd2dda8d3a6f73241198a580b387c0d3fe9f07950ef730c63728ddeddfe4175367f920a98ab4c69756dbd17b999f93d97a81598b75618f6ac7ff1e824519760ab2643e18732c41d098c3eed372d8646b2f9392dd5e865023c4c21be6aebcec8cf7c0879c0277c73ecb8b9f02c314d5083bdcc9cdd5b8c9a5e736089305253ba3fb60eb8763a0c22513c83ed1fd3e153a4023a9968508d50cb0e8923463e33a8bb4dacf3f3a1e60c90cb03fd932b017b61c47d97455ff6f5afcbff018fc41ce4f6b512b0609938f4f2b82ff36422faae1d7ac83013c525caa4b597c651e369ef9622c1b7fa4d1805b10d55ce56d792fe393daf565b2939521816b2ec226a14c38cf2489627edffc76ff4b8113e88c46f000d749ff013fae8600f44f408cc6fade226853c84fd7eea77170307d1d510a9d77d9f91ff7ba84cfb3f2d7c21b52b976858b320396ceb9eee9f6ab8a0958f0ee3cedf25b741d35f1738f73bf9c1d94e5975733edeaa4c9301550fc98740ebe4d87c3f18d85e038ebcd7bd9952d65d4f36a1d5bcbfd607719167c29c162757355ecc91f7650081aa9515b7219d7ee377bc46aa84c55c1ddabfeece90fac73e47e30fef2d78bbe146d9c1bff59a21d62ae79b39f510c3ecd5fe7af804cf9c5adeee20f5f00db032c83089c72ecda2b52338282c1012779b89cbf2a8ac21fd1ea813e6eb75faa6ebac44c622fcd0f04b8c44548b2862abdff9648ec63175b4c590b18085b717a4cac7725666a118cc2b19f2a0c60a154c417b773e70a6321002a19054e107daf167dea3d8f9c86c4c5dcb3efa411375de986b822d1de975153f09acc50763d6d096773088ebf273cbaa8ce0c176b2ccae731478a190037476cf183749efc32d51b6af068e34edc7c8b622636a87d8c325c778fc7aee77334b13f4f84b398c12d7cdb3f1824fe7edae88025ca1ae192a2a1e8a37d303ee4e24c49570f6737f6d2a5e5927e0ac387bc88f0ec4eb88b055f52ecefe92b2eb26e7725ae7b33817509c5d4a495e03295623579994fcd96c2a1ad38305b377e701aff65a2673c295609fc767975415efea54a5daf6bfd9de16e1b27b7847c3b628d26cac50c1ebd08759a08ec5638f55f69199bc46c331e5504f99bc7fa24acbc3127a4994bbd0d9d03b16e6300e04c18a9c0098c3510cdb55f3f619ecf9a6509ffe4a9609ee519d3daf30b1813519405489d8cbfcf55b2e50d598056be8992a7a373aab99556067c6c697d423bd9698cfe323b23ebc8574c1ac3c2dc7099506c3d7728d9f03fc86536c71c3b82af7102c5ee37c4dac6b72f9fe76bc525b3bf07c7dbc6bd03bc6655afd8935c32f0efcb028721e0be334522ab9be5faf37a9337967ac688b0404610f5883eba6bc2c04c28336a8fbbd70f7ed570eeeb20bfb1a50ad59b56625f43f6dacc46899bcd41565e426b3a1d0f887f17d7a865666e410b6299c89e9e5ed519af8278c3d373c5dd8fffc53488ab6fc93732e9e08bd685ff2506f87dd3bb43e958217c94647d0186e7936b371c0cbe2506cc4e1d8d9bb26bea945137fafc7068240a03ae00ef67741ea8b8feb9416b4481ca8953f48668ef5191a894c81ad72d31b9c0a5cd28ab1f6a6512d4b605f76b308410e129364c8a9d184b4071fc46065298adf05c1d1025320a3b188e1177265ecd7f4f1d6136c256b689041540f41428f75a6443e4eafbb27099d2c47ee9314ce1102d6533282737f40a968fba761a4e069c4eee42471fc2f8910d312dcc886d7d1806594336050d5782ff3344a82cfbb0aff7101f3e9c8d8afb556143e1e698b37fc3c9caa23392a7a97a9145065b250d7a167039f60d84538617572964246c9c6261fef2363454a59e40781a10799f1be77fd0ce7be8349e90384b6a8df5868061c7cbe2ed1c764d35d2734552c8218d35c35eec8a67b64833bd2588edde735bc1882a3c41e49ad97dc51d7659d0de8ab6ef9cf9d5c1f8ed6604c7d66fdc26cd81baca69d4dc471efe5e81b3a2fb1c9ef721d1755ee65aa6a480613fb19545c4276d9ac1170009eb7ac9fd97e5521969d59290b1667f6fe3764859d835f17db94e18fde69c8e6f6d2a3f28daeb559aba235c06dec016697327e66ee6f690de00e30ce84eae7496fbd2914cf993034f89b8aaa5ca45fbe3451c5db5fa6448045775d5badf27066854380f11d79981cf3c0fa2b4b995b4bab49867bdd677a1e70b086d8113618c785adc4657ad3a59bcab46ce24bf4e5e67cf254a277788f5ea8e07083f927376cdcff502879f5158b1dd1a0d951d394b6ee18742d1fbb47aafd9e2ac21afe7fcf17ee6d21bfaa28d60fc1f950bf019c1e4601e06608d3f9113b87b42b612e90ad8f15b39c01bcfc80d9361f627dbf0cc7fb2561a5b4fe8b9b75abc74cd83d1497aabde9f7cd197d5af4972285cf24535b8c2da241b68dc672ca2bdda190990b81108784e63210567bb3e5f1b41990606f37241e03510361be9bb9b4c8243696d3eb4b399e2a4ed49298c013f19f863d08ed21450a2c400001801400020073797a5f74756e0000000000000000000800030002000000080003000100000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="6c00018008000100", @ANYRES32=0x0, @ANYBLOB="56183bb7", @ANYRES32, @ANYBLOB="1400020062726964676530000000000000000000140002006d6163736563300000000000000000001400020073697430000000000000000000000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000300cb766aff580001801400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f767469300000000000000000001400020064756d6d793000000000000000000000080003000200000008000300020000006c0003806700050006593349102821301e34e2cb6a20152f33cd0a4ffb47085ebfb18c6f4d493c29cf2f015998fc1f05e1da770d79947d971d0d988060f95ac928bfeb89ad21041f42790f2ffc165e4b23c3e4f1fd6c5281d28acb8f0412d1820d89c7d68742ce0319807200"], 0x1458}, 0x1, 0x0, 0x0, 0x4c041}, 0x814) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 622.510364ms ago: executing program 4 (id=11045): syz_emit_ethernet(0x3e, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0xfffe, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xab, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x16, 0x6b, @local, @multicast1}}}}}}, 0x0) 597.552471ms ago: executing program 2 (id=11046): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) write$sndseq(r0, &(0x7f0000000500)=[{0x84, 0xba, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x9, 0x0, 0x5, 0x83, @tick=0x8, {0xfd, 0x40}, {0x3}, @time=@time={0x0, 0x4}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @raw8={"93ec0ccdd44e1cfec21c2b14"}}, {0xf7, 0x81, 0x1, 0xaf, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}, {0x2, 0xff, 0x81, 0xc0, @tick=0x7f, {0xc, 0x9}, {0x48, 0x5}, @result={0xa80, 0x9f92}}], 0x8c) 518.090782ms ago: executing program 4 (id=11047): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001580)={0x3, 0x8, 0x80, "55ac07d4c7e2d1870000060000000000200000000000000200", 0x56544943}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_NETNS_COOKIE(0xffffffffffffffff, 0x1, 0x47, &(0x7f00000003c0), &(0x7f0000001500)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r5 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r5) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) syz_emit_ethernet(0xbd, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004add00af006500000c0190780a010102e0000001445408730000000000000010ac1e0101000000060a010101ffffff26ac1414aa00000007ac1e0001000000080a010100000000800000000000000007e0000002000003abac1e010100000e4fe00000010000000203009078000000014f10fe01006800070ab10294040100441495937f000001000000000a01010100000006830f45ac1e0001ac"], 0x0) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newlink={0x44, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x4000000) r7 = dup3(r2, r1, 0x0) recvmmsg(r7, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) unshare(0x2030b00) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc}) request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000180)=""/198) 401.543067ms ago: executing program 2 (id=11048): socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b80)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000007, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x7, 0x2, 0x91, 0x51, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x63, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x6, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x81, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000008, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x0, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0xffffffff, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x30000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001580)=[@text32={0x20, &(0x7f00000015c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001600)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 328.809575ms ago: executing program 2 (id=11049): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfffffffc, 0x800000, 0x80000000, 0x0, 0x9, 0x8, 0x7, 0xf, 0x608, 0x3e4, 0x4, 0x18ab2128, 0x0, 0x5, 0xffffffff, 0x9, 0x0, 0x3ff, 0x3, 0xc5b, 0x1, 0x3, 0xffffffff, 0xfff, 0x6, 0xeba7, 0x5, 0x7fffffff, 0xe0000000, 0x6, 0x6, 0x30, 0x8, 0x1, 0x1, 0x9a, 0x8, 0x7f, 0x1c00000, 0x9, 0x7467c447, 0x1, 0x100, 0xb, 0x2, 0x8, 0x86, 0xffff8000, 0x0, 0xffffffbc, 0x80000000, 0x5, 0x3, 0x7, 0x40, 0x9, 0x1, 0x7, 0x80000000, 0x1ff, 0xa00000, 0x0, 0x7, 0x5, 0xfff, 0x0, 0x1000, 0xa8, 0x2, 0x1, 0x2, 0x4d2dd04c, 0x7, 0x23d4, 0x7fffffff, 0x80000000, 0x8000, 0x8001, 0xcbe, 0x8, 0x6, 0x712669d, 0x8, 0x9, 0x4, 0x99, 0xc60a, 0x6, 0x7, 0xd, 0x9, 0x4, 0x8, 0x53f, 0x3, 0xd0000, 0x6, 0x2, 0xe4de, 0x10001, 0x3, 0x5, 0x8, 0x8, 0x6, 0x0, 0x7, 0x8, 0x8, 0x9, 0x8, 0x40000001, 0x0, 0x1, 0x51, 0x1, 0xa, 0x8d, 0x1, 0xc, 0xadc, 0x5, 0x2d9, 0x400, 0x0, 0x7fffffff, 0x9, 0x2, 0x5, 0xe87a, 0xfffffd47, 0x8, 0x3, 0x51d5, 0x5, 0xd, 0x80000000, 0x1, 0x7, 0x0, 0x6, 0x9, 0x400, 0x6, 0x5, 0x28b, 0x1, 0x1124, 0x5, 0x8, 0x7, 0x8, 0x1, 0x3, 0x4, 0xa5, 0x7, 0x812, 0x10001, 0x80000000, 0x2, 0xfff, 0x778, 0x3, 0x8, 0x9, 0x8, 0x1000, 0x6, 0x1, 0x4, 0x4, 0xff, 0xb, 0x3, 0xc, 0x3, 0xc, 0x9, 0x2, 0xc, 0x1, 0x6, 0x2, 0xfff, 0xfffffff7, 0x8, 0x4, 0x0, 0x0, 0x3, 0x7, 0x522f, 0x800, 0x80, 0x7, 0x6, 0x4, 0x8, 0x9, 0xfff, 0x4, 0x9, 0x100, 0x5, 0x8000, 0x3, 0x532, 0x81, 0x1, 0x4, 0x1, 0x233, 0x100, 0x63, 0xffff, 0x73, 0x5, 0x1, 0x7, 0x4386, 0x6, 0x82, 0x8, 0x2, 0x7, 0x2, 0x5, 0x5, 0x0, 0x1, 0x4, 0x4, 0x9, 0x4, 0x7, 0x9, 0xc, 0x7, 0x459, 0x5, 0xfff, 0x6, 0x8, 0x4, 0x6, 0xc, 0x0, 0xa85, 0x7c, 0xd, 0x9, 0x4, 0x7f, 0x7, 0x80]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="fa372fc9be04005352"], 0x8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000003c0), 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_pidfd_open(r4, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000400), 0x200, 0x8001) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f93000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000239000/0x1000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000444000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x24050095) r6 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x2020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) read$FUSE(r6, 0x0, 0x0) r8 = io_uring_setup(0x1195, &(0x7f0000002a80)={0x0, 0x2150, 0xc000, 0x3, 0xce}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) io_uring_enter(r8, 0x2219, 0xcf74, 0x52, 0x0, 0x0) 212.222857ms ago: executing program 1 (id=11050): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x8855) removexattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') connect$can_bcm(0xffffffffffffffff, &(0x7f0000000480), 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x5, 0xff, 0x9ee0, 0x8, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0x0, 0x4}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000640)={@loopback, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x8000, 0x40, 0x2cb, 0x6, {{0x15, 0x4, 0x0, 0x20, 0x54, 0x66, 0x0, 0xd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, {[@noop, @timestamp_prespec={0x44, 0x3c, 0x73, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x3}, {@broadcast, 0x45}, {@multicast2, 0xff}, {@local, 0x5}, {@rand_addr=0x64010102, 0x4}, {@broadcast}, {@multicast2, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x1, 0x40, 0xfffffff8, 0xb, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@end]}}}}}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x80, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x25, 0x7, 0x6, 0x7fff, 0x5, 0x36}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xc, 0x5, 0x401, 0xc, 0x1}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x42051}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a40)={'veth0_macvtap\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x30}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000cc0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xa, 0xb}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40850) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x258, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}}]}}, {{0x8, 0x1, r1}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7304}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x54}, 0x5) r15 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x6, 0x4000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x1, 0x1}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0x6}) close(r15) 54.240052ms ago: executing program 2 (id=11051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000019d40)={0x0, 0x0, &(0x7f0000019d80)={&(0x7f0000019dc0)=ANY=[@ANYBLOB="600000001000ffff27bd7020fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c000280140007000000000000000000fffffffffffffffe1400060000000000000000000000ffff"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000000)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000140)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000200)=0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000a40)={0x8000042}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000e80)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r5, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000540)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xf2, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0x1, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000a00)={&(0x7f0000000e80), 0x14000, 0x0, 0x10000}, 0xffffffffffffff12) setsockopt$XDP_TX_RING(r13, 0x11b, 0x3, &(0x7f0000000a80)=0x800, 0x4) r14 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r13, 0x11b, 0x6, &(0x7f0000000ac0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000b00)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r13, 0x11b, 0x5, &(0x7f0000000b40)=0x4000, 0x4) bind$xdp(r13, &(0x7f0000000b80)={0x2c, 0x0, r15, 0x40000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000e40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40028000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x1c4, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40}, 0x404c880) 0s ago: executing program 3 (id=11052): r0 = openat(0xffffffffffffff9c, &(0x7f0000019840)='./file1\x00', 0x103a42, 0x32) sigaltstack(&(0x7f0000019880)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f00000198c0)={0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000019a00), 0x1c3902, 0x0) r2 = fsopen(&(0x7f0000019a40)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000019a80)='fsid\x00', &(0x7f0000019ac0)='\x00\x00\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000019b00)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r1, r1, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000019b40)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000019b80)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000019bc0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000019c00)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000019c40)={'syzkaller1\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000019c80)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000019cc0)={0x0, 0x0, &(0x7f0000019d00)={&(0x7f0000019d40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)=ANY=[@ANYBLOB="580000000206010800000000000000000100000305000400010000050001000700000011000300686173683a69702c706f727400000000050005000a0000000c0007800800064000000008"], 0x58}, 0x1, 0x0, 0x0, 0x2006c884}, 0x8000) sendmsg$nl_route_sched(r5, &(0x7f0000019e80)={0x0, 0x0, &(0x7f0000019ec0)={&(0x7f0000019f00)=@newtfilter={0x114, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x19, 0x7}, {0x0, 0x7, 0xfe000000, 0x1}, {0x0, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0xe, 0xcf1713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x2, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x114}}, 0x0) write$tun(r4, &(0x7f000001a040)=ANY=[], 0xfd6c) sendmmsg(r3, &(0x7f000001a080), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 529:12982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.3.10599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f879e1d9 code=0x7ffc0000 [ 2152.052328][ T31] audit: type=1326 audit(1791809713.529:12983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.3.10599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f879e1d9 code=0x7ffc0000 [ 2152.052413][ T31] audit: type=1326 audit(1791809713.529:12984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.3.10599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f879e1d9 code=0x7ffc0000 [ 2152.052548][ T31] audit: type=1326 audit(1791809713.529:12985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.3.10599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0f879e1d9 code=0x7ffc0000 [ 2152.132116][ T5678] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2152.139581][ T5678] usb 5-1: USB disconnect, device number 119 [ 2152.263935][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2152.409473][ T2337] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2152.409992][ T2337] ath9k_htc: Failed to initialize the device [ 2152.481890][ T2337] usb 3-1: ath9k_htc: USB layer deinitialized [ 2152.577225][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10600'. [ 2152.592197][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10600'. [ 2152.755446][ T5618] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2152.755477][ T5618] cp210x 2-1:0.0: querying part number failed [ 2152.777307][ T5618] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2152.790570][ T5618] usb 2-1: USB disconnect, device number 73 [ 2152.796636][ T5618] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2152.797146][ T5618] cp210x 2-1:0.0: device disconnected [ 2153.351736][ T5618] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 2153.510040][ T5618] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 2153.511492][ T5618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2153.511524][ T5618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2153.512103][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.669187][ T5678] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2153.821578][ T5678] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2153.822938][ T5678] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2153.822971][ T5678] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2153.823032][ T5678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.827589][ T5984] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2153.881841][ T5678] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2154.014844][ T5678] usb 3-1: USB disconnect, device number 26 [ 2154.482897][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2154.568868][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2154.643817][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3f02, bcdDevice= 0.40 [ 2154.647921][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2154.648011][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 2154.665511][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.665554][ T9] usb 3-1: Product: syz [ 2154.665585][ T9] usb 3-1: Manufacturer: syz [ 2154.665616][ T9] usb 3-1: SerialNumber: syz [ 2154.721961][ T5678] usb 2-1: USB disconnect, device number 74 [ 2154.823198][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10604'. [ 2154.825487][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.837494][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.864343][ T5618] pegasus 4-1:1.0: can't reset MAC [ 2154.864627][ T5618] pegasus 4-1:1.0: probe with driver pegasus failed with error -5 [ 2154.888042][ T5618] usb 4-1: USB disconnect, device number 46 [ 2155.011157][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2155.120765][ T9] usb 3-1: USB disconnect, device number 27 [ 2155.164095][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2155.340498][ T2337] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 2155.393336][ T6009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10616'. [ 2155.401380][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10616'. [ 2155.430444][ T6009] netlink: 'syz.1.10616': attribute type 10 has an invalid length. [ 2155.501949][ T2337] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2155.502491][ T2337] usb 5-1: not running at top speed; connect to a high speed hub [ 2155.502523][ T2337] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 2155.503559][ T2337] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.503584][ T2337] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2155.503683][ T2337] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2155.505833][ T2337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.505849][ T2337] usb 5-1: Product: syz [ 2155.505868][ T2337] usb 5-1: Manufacturer: syz [ 2155.505876][ T2337] usb 5-1: SerialNumber: syz [ 2155.816258][ T2337] usb 5-1: USB disconnect, device number 120 [ 2155.892186][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2156.125759][ T6023] tipc: Started in network mode [ 2156.125789][ T6023] tipc: Node identity 12bc84a77941, cluster identity 4711 [ 2156.126100][ T6023] tipc: Enabled bearer , priority 0 [ 2156.126778][ T6023] syzkaller0: entered promiscuous mode [ 2156.126810][ T6023] syzkaller0: entered allmulticast mode [ 2156.193307][ T6023] syzkaller0: mtu greater than device maximum [ 2156.194480][ T6022] tipc: Resetting bearer [ 2156.219396][ T6022] tipc: Disabling bearer [ 2156.259208][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2156.338897][T28563] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2156.411481][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2156.414327][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2156.416206][ T9] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 2156.416262][ T9] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 2156.416300][ T9] usb 3-1: config 166 has no interface number 0 [ 2156.416334][ T9] usb 3-1: config 166 has no interface number 1 [ 2156.416430][ T9] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2156.416468][ T9] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2156.416557][ T9] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2156.416599][ T9] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2156.416654][ T9] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2156.416697][ T9] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2156.416752][ T9] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2156.416794][ T9] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2156.416848][ T9] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2156.416890][ T9] usb 3-1: config 166 interface 177 has no altsetting 0 [ 2156.416926][ T9] usb 3-1: config 166 interface 34 has no altsetting 0 [ 2156.426088][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.426127][ T9] usb 3-1: Product: syz [ 2156.426158][ T9] usb 3-1: Manufacturer: syz [ 2156.426187][ T9] usb 3-1: SerialNumber: syz [ 2156.510451][T28563] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2156.542855][T28563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.542944][T28563] usb 4-1: Product: syz [ 2156.542976][T28563] usb 4-1: Manufacturer: syz [ 2156.542991][T28563] usb 4-1: SerialNumber: syz [ 2156.678449][ T9] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 2156.707994][ T2337] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2156.881385][ T9] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 2157.023060][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.023471][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.047404][ T6021] netlink: 'syz.3.10621': attribute type 12 has an invalid length. [ 2157.047424][ T6021] netlink: 'syz.3.10621': attribute type 29 has an invalid length. [ 2157.047437][ T6021] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10621'. [ 2157.047456][ T6021] netlink: 'syz.3.10621': attribute type 1 has an invalid length. [ 2157.047467][ T6021] netlink: 47 bytes leftover after parsing attributes in process `syz.3.10621'. [ 2157.116171][ T9] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 2157.309558][ T9] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 2157.309673][ T9] uvcvideo 3-1:166.34: No valid video chain found. [ 2157.350650][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10630'. [ 2157.358349][ T9] usb 3-1: USB disconnect, device number 28 [ 2157.380389][ T6046] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10629'. [ 2157.392460][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10630'. [ 2157.460265][ T6048] netlink: 'syz.4.10630': attribute type 10 has an invalid length. [ 2157.819142][T28563] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 2157.859018][ T2337] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2157.859508][ T2337] ath9k_htc: Failed to initialize the device [ 2157.905120][ T2337] usb 4-1: ath9k_htc: USB layer deinitialized [ 2157.981038][T28563] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2157.982296][T28563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.012738][T28563] usb 2-1: config 0 descriptor?? [ 2158.028102][T28563] cp210x 2-1:0.0: cp210x converter detected [ 2158.036360][ T31] kauditd_printk_skb: 132 callbacks suppressed [ 2158.036398][ T31] audit: type=1326 audit(1791809719.509:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2158.036519][ T31] audit: type=1326 audit(1791809719.509:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2158.036599][ T31] audit: type=1326 audit(1791809719.509:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2158.036685][ T31] audit: type=1326 audit(1791809719.509:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2158.036784][ T31] audit: type=1326 audit(1791809719.509:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe030f9df42 code=0x7ffc0000 [ 2158.036857][ T31] audit: type=1326 audit(1791809719.509:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe030f9df42 code=0x7ffc0000 [ 2158.044003][ T31] audit: type=1326 audit(1791809719.509:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2158.044104][ T31] audit: type=1326 audit(1791809719.519:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2158.044195][ T31] audit: type=1326 audit(1791809719.519:13126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2158.044287][ T31] audit: type=1326 audit(1791809719.519:13127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2158.178492][ T6058] syzkaller1: entered promiscuous mode [ 2158.178514][ T6058] syzkaller1: entered allmulticast mode [ 2158.206262][ T6059] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10634'. [ 2158.206510][ T6058] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10634'. [ 2158.320258][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2158.360156][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2158.366960][ T6059] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 2158.368072][ T6059] bond0 (unregistering): Released all slaves [ 2158.472261][T28563] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2158.472330][T28563] cp210x 2-1:0.0: querying part number failed [ 2158.504975][T28563] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2158.519455][T28563] usb 2-1: USB disconnect, device number 75 [ 2158.557297][T28563] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2158.573062][T28563] cp210x 2-1:0.0: device disconnected [ 2158.601973][ T6062] binder: 6061:6062 ioctl c0306201 200000000100 returned -14 [ 2158.606054][ T6062] binder: 6061:6062 ioctl c0306201 200000000200 returned -14 [ 2158.943251][ T6072] fuse: Unknown parameter '' [ 2159.255808][ T5618] usb 4-1: USB disconnect, device number 47 [ 2159.342397][ T6081] syzkaller0: entered promiscuous mode [ 2159.342435][ T6081] syzkaller0: entered allmulticast mode [ 2159.728907][T28563] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2159.896139][T28563] usb 4-1: Using ep0 maxpacket: 16 [ 2159.905446][T28563] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 2159.936612][T28563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.936669][T28563] usb 4-1: Product: syz [ 2159.936702][T28563] usb 4-1: Manufacturer: syz [ 2159.936736][T28563] usb 4-1: SerialNumber: syz [ 2159.993783][T28563] usb 4-1: config 0 descriptor?? [ 2160.025477][T28563] usb 4-1: selecting invalid altsetting 1 [ 2160.025515][T28563] technisat-usb2: could not set alternate setting to 0 [ 2160.208759][T28563] technisat-usb2: firmware version: 0.0 [ 2160.208855][T28563] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 2160.331531][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.331591][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.449360][ T5678] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 2160.599827][ T5678] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2160.600965][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.605630][ T5678] usb 5-1: config 0 descriptor?? [ 2160.619543][ T5678] cp210x 5-1:0.0: cp210x converter detected [ 2160.661516][T28563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2160.664269][T28563] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 2160.664368][T28563] usb 4-1: media controller created [ 2160.665065][T28563] technisat-usb2: i2c-error: out failed 53 = -22 [ 2160.665164][T28563] dvb-usb: MAC address reading failed. [ 2160.784564][T28563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2160.946872][ T6122] __nla_validate_parse: 2 callbacks suppressed [ 2160.946915][ T6122] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10653'. [ 2160.989220][ T5678] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2160.989248][ T5678] cp210x 5-1:0.0: querying part number failed [ 2160.998711][T28563] DVB: Unable to find symbol stv090x_attach() [ 2161.013623][T28563] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 2161.034083][ T5678] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2161.055671][ T5678] usb 5-1: USB disconnect, device number 121 [ 2161.092536][ T5678] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2161.093102][ T5678] cp210x 5-1:0.0: device disconnected [ 2161.228724][T28563] rc_core: IR keymap rc-technisat-usb2 not found [ 2161.228776][T28563] Registered IR keymap rc-empty [ 2161.232276][T28563] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 2161.238162][T28563] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input188 [ 2161.279894][T28563] dvb-usb: schedule remote query interval to 100 msecs. [ 2161.300685][T28563] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 2161.323343][T28563] usb 4-1: USB disconnect, device number 48 [ 2161.522686][T28563] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 2161.883800][T28563] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2161.949506][ T5618] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2162.033101][T28563] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2162.035201][T28563] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2162.035260][T28563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2162.035319][T28563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2162.035357][T28563] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2162.035429][T28563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.115680][ T5618] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 2162.117408][T28563] usb 4-1: config 0 descriptor?? [ 2162.117413][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2162.117441][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2162.117477][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.355551][T28563] plantronics 0003:047F:FFFF.004D: ignoring exceeding usage max [ 2162.391687][T28563] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2162.705321][ T6458] usb 4-1: USB disconnect, device number 49 [ 2162.894887][ T6156] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10664'. [ 2163.028789][T28563] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2163.188824][T28563] usb 3-1: Using ep0 maxpacket: 16 [ 2163.190163][T28563] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2163.191816][T28563] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.191842][T28563] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2163.194889][T28563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.194922][T28563] usb 3-1: Product: syz [ 2163.194933][T28563] usb 3-1: Manufacturer: syz [ 2163.194954][T28563] usb 3-1: SerialNumber: syz [ 2163.267845][T28563] usb 3-1: 0:2 : does not exist [ 2163.269324][ T6458] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2163.419169][ T6458] usb 5-1: Using ep0 maxpacket: 16 [ 2163.419914][ T6458] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2163.421870][ T6458] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.421894][ T6458] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2163.423062][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10659'. [ 2163.424754][ T6458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.424778][ T6458] usb 5-1: Product: syz [ 2163.424792][ T6458] usb 5-1: Manufacturer: syz [ 2163.424807][ T6458] usb 5-1: SerialNumber: syz [ 2163.428330][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.436035][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.474480][ T6152] 8021q: VLANs not supported on ip6_vti0 [ 2163.476235][ T5618] pegasus 2-1:1.0: can't reset MAC [ 2163.476510][ T5618] pegasus 2-1:1.0: probe with driver pegasus failed with error -5 [ 2163.552636][ T5618] usb 2-1: USB disconnect, device number 76 [ 2163.602412][T28563] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2163.693020][ T6163] FAULT_INJECTION: forcing a failure. [ 2163.693020][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.693056][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.0.10666 Tainted: G L syzkaller #0 PREEMPT(full) [ 2163.693083][ T6163] Tainted: [L]=SOFTLOCKUP [ 2163.693091][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2163.693103][ T6163] Call Trace: [ 2163.693111][ T6163] [ 2163.693121][ T6163] dump_stack_lvl+0xe8/0x150 [ 2163.693155][ T6163] should_fail_ex+0x410/0x560 [ 2163.693188][ T6163] should_failslab+0xa8/0x100 [ 2163.693219][ T6163] __kmalloc_noprof+0xfe/0x720 [ 2163.693243][ T6163] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2163.693276][ T6163] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2163.693313][ T6163] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2163.693355][ T6163] genl_family_rcv_msg_doit+0xda/0x340 [ 2163.693400][ T6163] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2163.693439][ T6163] ? apparmor_capable+0x126/0x170 [ 2163.693465][ T6163] ? bpf_lsm_capable+0x9/0x20 [ 2163.693486][ T6163] ? security_capable+0x7e/0x2c0 [ 2163.693522][ T6163] genl_rcv_msg+0x614/0x7a0 [ 2163.693558][ T6163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2163.693586][ T6163] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2163.693611][ T6163] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 2163.693630][ T6163] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2163.693658][ T6163] ? __asan_memcpy+0x40/0x70 [ 2163.693678][ T6163] ? __skb_clone+0x5c/0x6c0 [ 2163.693707][ T6163] netlink_rcv_skb+0x226/0x4a0 [ 2163.693733][ T6163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2163.693764][ T6163] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2163.693803][ T6163] ? down_read+0x2be/0x330 [ 2163.693833][ T6163] genl_rcv+0x28/0x40 [ 2163.693860][ T6163] netlink_unicast+0x7bd/0x940 [ 2163.693893][ T6163] netlink_sendmsg+0x813/0xb40 [ 2163.693926][ T6163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2163.693960][ T6163] ? apparmor_socket_sendmsg+0x98/0x360 [ 2163.693989][ T6163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2163.694013][ T6163] sock_sendmsg_nosec+0x13a/0x180 [ 2163.694042][ T6163] ____sys_sendmsg+0x54e/0x850 [ 2163.694069][ T6163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2163.694098][ T6163] ? import_iovec+0x73/0xa0 [ 2163.694130][ T6163] ___sys_sendmsg+0x2a5/0x360 [ 2163.694151][ T6163] ? __lock_acquire+0x747/0x2de0 [ 2163.694177][ T6163] ? __pfx____sys_sendmsg+0x10/0x10 [ 2163.694229][ T6163] ? __fget_files+0x2a/0x420 [ 2163.694248][ T6163] ? __fget_files+0x3a2/0x420 [ 2163.694277][ T6163] __x64_sys_sendmsg+0x1b1/0x290 [ 2163.694301][ T6163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2163.694341][ T6163] do_syscall_64+0x166/0x520 [ 2163.694364][ T6163] ? trace_irq_disable+0x3b/0x140 [ 2163.694392][ T6163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.694413][ T6163] ? clear_bhb_loop+0x70/0xc0 [ 2163.694438][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.694458][ T6163] RIP: 0033:0x7f06c2f9e1d9 [ 2163.694478][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2163.694496][ T6163] RSP: 002b:00007f06c3e8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2163.694518][ T6163] RAX: ffffffffffffffda RBX: 00007f06c3225fa0 RCX: 00007f06c2f9e1d9 [ 2163.694533][ T6163] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 2163.694547][ T6163] RBP: 00007f06c3e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.694560][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2163.694573][ T6163] R13: 00007f06c3226038 R14: 00007f06c3225fa0 R15: 00007f06c334fa48 [ 2163.694605][ T6163] [ 2163.695281][ T6458] usb 5-1: 0:2 : does not exist [ 2163.704845][T28563] usb 3-1: USB disconnect, device number 29 [ 2163.766649][ T6161] 8021q: VLANs not supported on ip6_vti0 [ 2164.055564][ T6458] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2164.151953][ T6458] usb 5-1: USB disconnect, device number 122 [ 2164.287695][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2164.659972][ T6174] binder: 6172:6174 ioctl 4018620d 0 returned -22 [ 2164.663793][ T6174] binder: 6172:6174 ioctl c0306201 200000000100 returned -14 [ 2164.693803][ T6174] binder: 6172:6174 ioctl c0306201 200000000200 returned -14 [ 2165.278896][T28563] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2165.403742][ T6189] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10675'. [ 2165.472339][T28563] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2165.472460][T28563] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 2165.474534][T28563] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2165.531741][T28563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.531804][T28563] usb 4-1: Product: syz [ 2165.531838][T28563] usb 4-1: Manufacturer: syz [ 2165.531871][T28563] usb 4-1: SerialNumber: syz [ 2165.765598][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10673'. [ 2165.765628][ T6185] netlink: 'syz.3.10673': attribute type 3 has an invalid length. [ 2165.791604][ T6463] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2165.914189][ T6195] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2165.940996][ T6463] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2165.943916][ T6463] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 2165.943983][ T6463] usb 2-1: config 0 has no interface number 0 [ 2165.944078][ T6463] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2165.944144][ T6463] usb 2-1: config 0 interface 69 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2166.017814][ T6463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.017873][ T6463] usb 2-1: Product: syz [ 2166.017906][ T6463] usb 2-1: Manufacturer: syz [ 2166.017963][ T6463] usb 2-1: SerialNumber: syz [ 2166.074400][ T6463] usb 2-1: config 0 descriptor?? [ 2166.076182][ T6191] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2166.081209][ T6463] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2166.134728][ T6463] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 2166.187490][ T6463] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2166.264224][ T6201] tc_dump_action: action bad kind [ 2166.593660][T28563] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2166.601516][T28563] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2166.801844][T28563] usb 4-1: USB disconnect, device number 50 [ 2166.848968][ T6463] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 2166.871827][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2166.965526][ T2331] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 2167.022695][ T6463] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 2167.024694][ T6463] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2167.024740][ T6463] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2167.024823][ T6463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.140934][ T2331] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 2167.142164][ T2331] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2167.142204][ T2331] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2167.142229][ T2331] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2167.142248][ T2331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.145386][ T2331] usb 3-1: config 0 descriptor?? [ 2167.555971][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556018][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556101][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556118][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556144][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556170][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556186][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556231][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556247][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.556272][ T2331] kye 0003:0458:0138.004E: unknown main item tag 0x0 [ 2167.572695][ T2331] kye 0003:0458:0138.004E: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 2167.759210][ T5618] usb 3-1: USB disconnect, device number 30 [ 2168.076695][ T6231] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10687'. [ 2168.261225][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10678'. [ 2168.261564][ T6207] vlan0: entered promiscuous mode [ 2168.295859][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2168.296361][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2168.329750][ T6463] pegasus 5-1:1.0: can't reset MAC [ 2168.330320][ T6463] pegasus 5-1:1.0: probe with driver pegasus failed with error -5 [ 2168.369578][ T6463] usb 5-1: USB disconnect, device number 123 [ 2168.459223][ T5618] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2168.513774][ T6458] usb 2-1: USB disconnect, device number 77 [ 2168.531232][ T6458] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2168.531822][ T6458] cyberjack 2-1:0.69: device disconnected [ 2168.589241][ T5618] usb 4-1: device descriptor read/64, error -71 [ 2168.810788][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 2168.810819][ T31] audit: type=1326 audit(1791809730.289:13143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.811237][ T31] audit: type=1326 audit(1791809730.289:13144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.811280][ T31] audit: type=1326 audit(1791809730.289:13145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.811318][ T31] audit: type=1326 audit(1791809730.289:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.811359][ T31] audit: type=1326 audit(1791809730.289:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.812279][ T31] audit: type=1326 audit(1791809730.289:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.812912][ T31] audit: type=1326 audit(1791809730.289:13149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.812956][ T31] audit: type=1326 audit(1791809730.289:13150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.812997][ T31] audit: type=1326 audit(1791809730.289:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.813037][ T31] audit: type=1326 audit(1791809730.289:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.10692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bfb99e1d9 code=0x7ffc0000 [ 2168.876390][ T5618] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2169.009813][ T6463] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2169.082706][ T5618] usb 4-1: device descriptor read/64, error -71 [ 2169.170252][ T6463] usb 3-1: Using ep0 maxpacket: 16 [ 2169.175584][ T6463] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2169.178438][ T6463] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 2169.178464][ T6463] usb 3-1: config 252 has no interface number 0 [ 2169.178499][ T6463] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2169.183779][ T6463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.183818][ T6463] usb 3-1: Product: syz [ 2169.183849][ T6463] usb 3-1: Manufacturer: syz [ 2169.183879][ T6463] usb 3-1: SerialNumber: syz [ 2169.203214][ T5618] usb usb4-port1: attempt power cycle [ 2169.243168][ T6463] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2169.460866][ T6254] sctp: [Deprecated]: syz.2.10691 (pid 6254) Use of int in maxseg socket option. [ 2169.460866][ T6254] Use struct sctp_assoc_value instead [ 2169.462620][ T6254] netlink: 'syz.2.10691': attribute type 29 has an invalid length. [ 2169.462952][ T6240] netlink: 'syz.2.10691': attribute type 29 has an invalid length. [ 2169.464680][ T5496] usb 3-1: Failed to submit usb control message: -71 [ 2169.464747][ T5496] usb 3-1: unable to send the bmi data to the device: -71 [ 2169.464783][ T5496] usb 3-1: unable to get target info from device [ 2169.464817][ T5496] usb 3-1: could not get target info (-71) [ 2169.464872][ T5496] usb 3-1: could not probe fw (-71) [ 2169.464944][ T5678] usb 3-1: USB disconnect, device number 31 [ 2169.614039][ T5618] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2169.629983][ T5618] usb 4-1: device descriptor read/8, error -71 [ 2169.869310][ T5618] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2169.889858][ T5618] usb 4-1: device descriptor read/8, error -71 [ 2170.000572][ T5618] usb usb4-port1: unable to enumerate USB device [ 2170.085569][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10697'. [ 2170.303602][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10700'. [ 2170.303642][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10700'. [ 2170.489928][ T6274] xt_hashlimit: size too large, truncated to 1048576 [ 2170.781033][ T6463] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 2170.940778][ T6463] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 2170.947049][ T6463] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2170.947080][ T6463] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2170.947115][ T6463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.749221][ T5618] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2171.901381][ T5618] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2171.901432][ T5618] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 2171.905385][ T5618] usb 3-1: config 12 has an invalid interface number: 99 but max is 0 [ 2171.905411][ T5618] usb 3-1: config 12 has no interface number 0 [ 2171.905452][ T5618] usb 3-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 2171.905479][ T5618] usb 3-1: config 12 interface 99 has no altsetting 0 [ 2171.918334][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.918360][ T5618] usb 3-1: Product: syz [ 2171.918375][ T5618] usb 3-1: Manufacturer: syz [ 2171.918390][ T5618] usb 3-1: SerialNumber: syz [ 2172.216224][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10703'. [ 2172.243868][ T5618] usb 3-1: no audio or video endpoints found [ 2172.257553][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.269292][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.275627][ T6463] pegasus 5-1:1.0: can't reset MAC [ 2172.276224][ T6463] pegasus 5-1:1.0: probe with driver pegasus failed with error -5 [ 2172.277779][ T5618] usb 3-1: USB disconnect, device number 32 [ 2172.357290][ T6463] usb 5-1: USB disconnect, device number 124 [ 2172.439257][ T2335] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2172.507935][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10710'. [ 2172.507964][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10710'. [ 2172.507979][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10710'. [ 2172.509253][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10710'. [ 2172.609532][ T2335] usb 2-1: Using ep0 maxpacket: 16 [ 2172.610346][ T2335] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2172.611729][ T2335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.611751][ T2335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2172.614279][ T2335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.614302][ T2335] usb 2-1: Product: syz [ 2172.614327][ T2335] usb 2-1: Manufacturer: syz [ 2172.614342][ T2335] usb 2-1: SerialNumber: syz [ 2172.691051][ T2335] usb 2-1: 0:2 : does not exist [ 2172.866533][ T6308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2172.894373][ T6298] 8021q: VLANs not supported on ip6_vti0 [ 2172.977693][ T2335] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2173.031646][ T2335] usb 2-1: USB disconnect, device number 78 [ 2173.124057][ T6317] FAULT_INJECTION: forcing a failure. [ 2173.124057][ T6317] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2173.134068][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.4.10716 Tainted: G L syzkaller #0 PREEMPT(full) [ 2173.134100][ T6317] Tainted: [L]=SOFTLOCKUP [ 2173.134109][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2173.134121][ T6317] Call Trace: [ 2173.134130][ T6317] [ 2173.134139][ T6317] dump_stack_lvl+0xe8/0x150 [ 2173.134173][ T6317] should_fail_ex+0x410/0x560 [ 2173.134206][ T6317] get_futex_key+0x8e2/0x1580 [ 2173.134240][ T6317] ? __pfx_get_futex_key+0x10/0x10 [ 2173.134277][ T6317] futex_wake_op+0x15c/0xdc0 [ 2173.134296][ T6317] ? __lock_acquire+0x747/0x2de0 [ 2173.134330][ T6317] ? __pfx_futex_wake_op+0x10/0x10 [ 2173.134354][ T6317] ? taprio_dequeue+0x26/0x540 [ 2173.134385][ T6317] ? taprio_dequeue+0x26/0x540 [ 2173.134408][ T6317] ? taprio_dequeue+0x26/0x540 [ 2173.134430][ T6317] ? taprio_dequeue+0x26/0x540 [ 2173.134458][ T6317] do_futex+0x480/0x4e0 [ 2173.134491][ T6317] ? __pfx_do_futex+0x10/0x10 [ 2173.134525][ T6317] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 2173.134558][ T6317] __se_sys_futex+0x3a8/0x450 [ 2173.134591][ T6317] ? __pfx___se_sys_futex+0x10/0x10 [ 2173.134627][ T6317] ? __x64_sys_futex+0x21/0xf0 [ 2173.134657][ T6317] do_syscall_64+0x166/0x520 [ 2173.134681][ T6317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.134702][ T6317] ? clear_bhb_loop+0x70/0xc0 [ 2173.134726][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.134746][ T6317] RIP: 0033:0x7fe030f9e1d9 [ 2173.134765][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2173.134783][ T6317] RSP: 002b:00007fe031dde028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2173.134804][ T6317] RAX: ffffffffffffffda RBX: 00007fe031226090 RCX: 00007fe030f9e1d9 [ 2173.134819][ T6317] RDX: 0000000080000008 RSI: 0000000000000005 RDI: 0000200000000740 [ 2173.134834][ T6317] RBP: 00007fe031dde090 R08: 0000200000000740 R09: 0000000002000000 [ 2173.134848][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2173.134860][ T6317] R13: 00007fe031226128 R14: 00007fe031226090 R15: 00007fe03134fa48 [ 2173.134893][ T6317] [ 2173.252067][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2173.536445][ T6325] netlink: NAT attribute has 5 unknown bytes [ 2173.536479][ T6325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2174.043928][ T6342] __nla_validate_parse: 6 callbacks suppressed [ 2174.043975][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10727'. [ 2174.044012][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10727'. [ 2174.237959][ T6348] fuse: Unknown parameter 'roOtmode' [ 2174.360899][ T2335] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2174.468024][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 2174.468069][ T31] audit: type=1326 audit(1791809735.939:13200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.2.10733" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d10b9e1d9 code=0x0 [ 2174.509220][ T2335] usb 5-1: Using ep0 maxpacket: 8 [ 2174.510086][ T2335] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2174.511191][ T2335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.511215][ T2335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2174.511260][ T2335] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.511301][ T2335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.517409][ T2335] hub 5-1:1.0: bad descriptor, ignoring hub [ 2174.517434][ T2335] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2174.517962][ T2335] cdc_wdm 5-1:1.0: skipping garbage [ 2174.517978][ T2335] cdc_wdm 5-1:1.0: skipping garbage [ 2174.571218][ T2335] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2174.571239][ T2335] cdc_wdm 5-1:1.0: Unknown control protocol [ 2174.624865][ T6358] tipc: Enabling of bearer rejected, failed to enable media [ 2174.708961][ T6463] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2174.858884][ T6463] usb 4-1: Using ep0 maxpacket: 16 [ 2174.859955][ T6463] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2174.862348][ T6463] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.862388][ T6463] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2174.868146][ T6463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.868188][ T6463] usb 4-1: Product: syz [ 2174.868219][ T6463] usb 4-1: Manufacturer: syz [ 2174.868249][ T6463] usb 4-1: SerialNumber: syz [ 2174.951125][ T6463] usb 4-1: 0:2 : does not exist [ 2174.973985][ T6363] netlink: 'syz.1.10735': attribute type 16 has an invalid length. [ 2174.974008][ T6363] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.10735'. [ 2174.977027][ T6363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10735'. [ 2175.145971][ T6354] 8021q: VLANs not supported on ip6_vti0 [ 2175.192630][ T6463] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2175.259356][ T6463] usb 4-1: USB disconnect, device number 55 [ 2175.355804][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2175.840252][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10739'. [ 2175.840282][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10739'. [ 2177.603217][ T6390] binder: 6389:6390 ioctl c0306201 200000000200 returned -14 [ 2178.096779][ T6402] usb usb9: usbfs: process 6402 (syz.1.10744) did not claim interface 0 before use [ 2178.189463][ T5618] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2178.273104][ T2335] usb 5-1: USB disconnect, device number 125 [ 2178.308893][ T2337] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 2178.339984][ T5618] usb 4-1: Using ep0 maxpacket: 8 [ 2178.340857][ T5618] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2178.342211][ T5618] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.342235][ T5618] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2178.342303][ T5618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.342342][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.380338][ T5618] hub 4-1:1.0: bad descriptor, ignoring hub [ 2178.380365][ T5618] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2178.399285][ T5618] cdc_wdm 4-1:1.0: skipping garbage [ 2178.399306][ T5618] cdc_wdm 4-1:1.0: skipping garbage [ 2178.399388][ T5618] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2178.534311][ T2337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2178.534415][ T2337] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2178.559774][ T2337] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2178.559840][ T2337] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 2178.559882][ T2337] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 2178.559936][ T2337] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2178.637272][ T2337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.637307][ T2337] usb 3-1: Manufacturer: ࠠ [ 2178.637326][ T2337] usb 3-1: SerialNumber: ﾃ䳯ᢽ巂ｏ鈍滩湜鈝偑詺଩폟赓ᢵ뉭烈륅ꟺ꫾静྄♠⷏譿昙儔쒖蕃콏ꋓ셰鹀굣䗬竣㶫됽莽涊펞蚜钺瞌畁椦翦揤䇗ሄꌫ㧔꿒燙崐窄ដ覬頭耛ⷙ⼋㉋ጀ队⎄ꍮㄥ啡欄 [ 2178.694832][ T6392] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2178.694920][ T6392] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2178.694993][ T6392] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2178.696799][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2178.799931][ T2335] usb 4-1: USB disconnect, device number 56 [ 2179.169012][ T2331] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2179.338953][ T2331] usb 4-1: Using ep0 maxpacket: 8 [ 2179.340702][ T2331] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2179.368421][ T2331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.368488][ T2331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2179.380834][ T2331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2179.380875][ T2331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.445645][ T2331] hub 4-1:1.0: bad descriptor, ignoring hub [ 2179.445691][ T2331] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2179.448211][ T2331] cdc_wdm 4-1:1.0: skipping garbage [ 2179.448249][ T2331] cdc_wdm 4-1:1.0: skipping garbage [ 2179.448478][ T2331] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2179.692467][ T6400] kvm: apic: phys broadcast and lowest prio [ 2179.739376][ T2335] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2179.852827][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10750'. [ 2179.852855][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10750'. [ 2179.878145][ T5618] usb 4-1: USB disconnect, device number 57 [ 2179.899147][ T2335] usb 5-1: Using ep0 maxpacket: 16 [ 2179.899988][ T2335] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2179.901527][ T2335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.901551][ T2335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2179.921223][ T2335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.921247][ T2335] usb 5-1: Product: syz [ 2179.921261][ T2335] usb 5-1: Manufacturer: syz [ 2179.921276][ T2335] usb 5-1: SerialNumber: syz [ 2180.002682][ T2335] usb 5-1: 0:2 : does not exist [ 2180.196824][ T6419] 8021q: VLANs not supported on ip6_vti0 [ 2180.303938][ T2335] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2180.493728][ T2335] usb 5-1: USB disconnect, device number 126 [ 2180.585263][ T6430] binder: BINDER_SET_CONTEXT_MGR already set [ 2180.585279][ T6430] binder: 6429:6430 ioctl 4018620d 2000000001c0 returned -16 [ 2180.588395][ T6430] binder: 6429:6430 ioctl c0306201 200000000200 returned -14 [ 2180.667297][ T3422] udevd[3422]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2180.911682][ T2337] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2180.950867][ T2337] usb 3-1: USB disconnect, device number 33 [ 2181.624657][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10761'. [ 2181.624687][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10761'. [ 2182.564040][ T6481] binder: 6478:6481 ioctl c0306201 200000000200 returned -14 [ 2182.829414][ T2337] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2182.923344][ T6495] bridge_slave_0: invalid flags given to default FDB implementation [ 2182.978707][ T2337] usb 2-1: Using ep0 maxpacket: 16 [ 2182.980122][ T2337] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2182.982575][ T2337] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.982634][ T2337] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2183.044860][ T2337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.044905][ T2337] usb 2-1: Product: syz [ 2183.044938][ T2337] usb 2-1: Manufacturer: syz [ 2183.044970][ T2337] usb 2-1: SerialNumber: syz [ 2183.102246][ T2337] usb 2-1: 0:2 : does not exist [ 2183.123130][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10772'. [ 2183.123218][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10772'. [ 2183.294559][ T6486] 8021q: VLANs not supported on ip6_vti0 [ 2183.370748][ T2337] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2183.422720][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.435477][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.474693][ T5514] IPVS: starting estimator thread 0... [ 2183.475528][ T2337] usb 2-1: USB disconnect, device number 79 [ 2183.547868][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2183.560490][ T6518] IPVS: using max 31 ests per chain, 74400 per kthread [ 2183.589661][ T5618] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2183.637856][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.638290][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.730608][ T5618] usb 5-1: device descriptor read/64, error -71 [ 2183.969349][ T5618] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2184.033187][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033225][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033255][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033283][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033310][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033337][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033364][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033391][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033417][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.033444][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034033][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034061][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034086][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034112][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034137][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034162][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034188][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034213][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034238][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034263][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034289][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034314][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034340][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034365][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034391][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034416][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034441][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034467][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034500][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034525][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034551][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034576][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.034601][ T6525] IPVS: set_ctl: invalid protocol: 11609 172.20.20.170:20003 [ 2184.099194][ T5618] usb 5-1: device descriptor read/64, error -71 [ 2184.209427][ T5618] usb usb5-port1: attempt power cycle [ 2184.442228][ T6534] binder: 6533:6534 ioctl c0306201 200000000200 returned -14 [ 2184.550759][ T5618] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2184.574762][ T5618] usb 5-1: device descriptor read/8, error -71 [ 2184.811316][ T5618] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2184.831789][ T5618] usb 5-1: device descriptor read/8, error -71 [ 2184.931658][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10785'. [ 2184.931685][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10785'. [ 2184.942515][ T5618] usb usb5-port1: unable to enumerate USB device [ 2185.423312][ T6564] program syz.3.10791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2185.423356][ T6564] FAULT_INJECTION: forcing a failure. [ 2185.423356][ T6564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2185.423385][ T6564] CPU: 1 UID: 0 PID: 6564 Comm: syz.3.10791 Tainted: G L syzkaller #0 PREEMPT(full) [ 2185.423411][ T6564] Tainted: [L]=SOFTLOCKUP [ 2185.423419][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2185.423431][ T6564] Call Trace: [ 2185.423440][ T6564] [ 2185.423449][ T6564] dump_stack_lvl+0xe8/0x150 [ 2185.423486][ T6564] should_fail_ex+0x410/0x560 [ 2185.423521][ T6564] _copy_from_user+0x2d/0xb0 [ 2185.423547][ T6564] scsi_ioctl+0x1821/0x2130 [ 2185.423674][ T6564] ? __pfx_scsi_ioctl+0x10/0x10 [ 2185.423727][ T6564] ? kasan_quarantine_put+0xbb/0x1f0 [ 2185.423762][ T6564] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2185.423791][ T6564] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2185.423821][ T6564] ? do_vfs_ioctl+0x116f/0x1530 [ 2185.423849][ T6564] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2185.423909][ T6564] ? hook_file_ioctl+0x1f2/0x600 [ 2185.423940][ T6564] sg_ioctl+0x14d1/0x21b0 [ 2185.424038][ T6564] ? __pfx_sg_ioctl+0x10/0x10 [ 2185.424061][ T6564] ? __fget_files+0x2a/0x420 [ 2185.424082][ T6564] ? __fget_files+0x2a/0x420 [ 2185.424100][ T6564] ? __fget_files+0x3a2/0x420 [ 2185.424118][ T6564] ? __fget_files+0x2a/0x420 [ 2185.424140][ T6564] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2185.424162][ T6564] ? __pfx_sg_ioctl+0x10/0x10 [ 2185.424183][ T6564] __se_sys_ioctl+0xfc/0x170 [ 2185.424209][ T6564] do_syscall_64+0x166/0x520 [ 2185.424234][ T6564] ? trace_irq_disable+0x3b/0x140 [ 2185.424256][ T6564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.424277][ T6564] ? clear_bhb_loop+0x70/0xc0 [ 2185.424302][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.424323][ T6564] RIP: 0033:0x7fe0f879e1d9 [ 2185.424342][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2185.424360][ T6564] RSP: 002b:00007fe0f69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2185.424381][ T6564] RAX: ffffffffffffffda RBX: 00007fe0f8a25fa0 RCX: 00007fe0f879e1d9 [ 2185.424397][ T6564] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 2185.424410][ T6564] RBP: 00007fe0f69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.424423][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.424436][ T6564] R13: 00007fe0f8a26038 R14: 00007fe0f8a25fa0 R15: 00007fe0f8b4fa48 [ 2185.424467][ T6564] [ 2185.612312][T28563] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2185.693761][ T6574] binder: 6573:6574 ioctl c0306201 200000000200 returned -14 [ 2185.798836][T28563] usb 3-1: Using ep0 maxpacket: 16 [ 2185.801422][T28563] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2185.805157][T28563] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.805226][T28563] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2185.849463][T28563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.849527][T28563] usb 3-1: Product: syz [ 2185.849560][T28563] usb 3-1: Manufacturer: syz [ 2185.849594][T28563] usb 3-1: SerialNumber: syz [ 2185.863655][ T6571] syzkaller0: entered promiscuous mode [ 2185.863676][ T6571] syzkaller0: entered allmulticast mode [ 2185.958843][T28563] usb 3-1: 0:2 : does not exist [ 2185.983296][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10795'. [ 2186.270007][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10797'. [ 2186.270046][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10797'. [ 2188.491045][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2190.365982][ T6559] 8021q: VLANs not supported on ip6_vti0 [ 2190.538367][T28563] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2190.709395][T28563] usb 3-1: USB disconnect, device number 34 [ 2190.734768][ T31] audit: type=1326 audit(1791809752.209:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.734818][ T31] audit: type=1326 audit(1791809752.209:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.737969][ T6605] fuse: fd is not a fuse device [ 2190.761252][ T31] audit: type=1326 audit(1791809752.229:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.761309][ T31] audit: type=1326 audit(1791809752.229:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.761348][ T31] audit: type=1326 audit(1791809752.229:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.765631][ T31] audit: type=1326 audit(1791809752.229:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.765678][ T31] audit: type=1326 audit(1791809752.239:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.765722][ T31] audit: type=1326 audit(1791809752.239:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.773709][ T31] audit: type=1326 audit(1791809752.249:13209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2190.773756][ T31] audit: type=1326 audit(1791809752.249:13210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2191.124585][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2191.197300][ T6610] binder: 6609:6610 ioctl c0306201 200000000100 returned -14 [ 2191.207313][ T6610] binder: 6609:6610 ioctl c0306201 200000000200 returned -14 [ 2191.299566][ T6612] netlink: Conntrack attr has 8 unknown bytes [ 2191.299600][ T6612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2191.455294][T28563] hid_parser_main: 14 callbacks suppressed [ 2191.455351][T28563] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 2191.475154][T28563] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2191.774269][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10808'. [ 2191.774296][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10808'. [ 2192.086025][ T6624] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10810'. [ 2192.579101][ T2337] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2192.729668][ T2337] usb 3-1: Using ep0 maxpacket: 16 [ 2192.731940][ T2337] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2192.736812][ T2337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.736855][ T2337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2192.747178][ T2337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.747234][ T2337] usb 3-1: Product: syz [ 2192.747265][ T2337] usb 3-1: Manufacturer: syz [ 2192.747296][ T2337] usb 3-1: SerialNumber: syz [ 2192.844985][ T2337] usb 3-1: 0:2 : does not exist [ 2193.015617][ T6630] 8021q: VLANs not supported on ip6_vti0 [ 2193.068077][ T2337] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2193.080048][T28563] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2193.222315][ T2337] usb 3-1: USB disconnect, device number 35 [ 2193.240872][T28563] usb 2-1: Using ep0 maxpacket: 32 [ 2193.244312][T28563] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 2193.250609][T28563] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.250663][T28563] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2193.250774][T28563] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2193.305462][T28563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.305491][T28563] usb 2-1: Product: syz [ 2193.305510][T28563] usb 2-1: Manufacturer: syz [ 2193.305519][T28563] usb 2-1: SerialNumber: syz [ 2193.432444][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2193.963261][ T6646] binder: 6645:6646 ioctl c0306201 200000000100 returned -14 [ 2193.974499][ T6646] binder: 6645:6646 ioctl c0306201 200000000200 returned -14 [ 2194.621498][T28563] usb 2-1: 0:2 : does not exist [ 2194.916016][T28563] usb 2-1: USB disconnect, device number 80 [ 2195.057451][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2195.668393][ T6675] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2195.931267][ T6458] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2196.004609][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10831'. [ 2196.079608][ T6458] usb 3-1: Using ep0 maxpacket: 16 [ 2196.080497][ T6458] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2196.081746][ T6458] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.081769][ T6458] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2196.084094][ T6458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.084118][ T6458] usb 3-1: Product: syz [ 2196.084133][ T6458] usb 3-1: Manufacturer: syz [ 2196.084148][ T6458] usb 3-1: SerialNumber: syz [ 2196.238039][ T6458] usb 3-1: 0:2 : does not exist [ 2196.455459][ T6677] 8021q: VLANs not supported on ip6_vti0 [ 2196.529657][ T6458] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2196.627678][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10832'. [ 2196.749935][ T6458] usb 3-1: USB disconnect, device number 36 [ 2196.876884][ T3071] udevd[3071]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2196.979547][ T2337] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2197.142277][ T2337] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2197.144173][ T2337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.147282][ T2337] usb 5-1: config 0 descriptor?? [ 2197.383912][ T2337] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2197.386472][ T2337] [drm:udl_init] *ERROR* Selecting channel failed [ 2197.463419][ T6697] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10834'. [ 2197.483503][ T2337] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 2197.483562][ T2337] [drm] Initialized udl on minor 1 [ 2197.507270][ T2337] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2197.516599][ T2337] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2197.520465][ T2331] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2197.552261][ T2337] usb 5-1: USB disconnect, device number 5 [ 2197.599025][ T2331] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2198.164744][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10838'. [ 2198.474500][ T2337] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2198.624487][ T2337] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2198.625834][ T2337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.634975][ T2337] usb 5-1: config 0 descriptor?? [ 2198.829260][ T2331] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2198.919242][ T2337] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2198.921928][ T2337] [drm:udl_init] *ERROR* Selecting channel failed [ 2198.982284][ T2331] usb 2-1: device descriptor read/64, error -71 [ 2199.017562][ T6718] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 2199.045703][ T2337] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 2199.045735][ T2337] [drm] Initialized udl on minor 1 [ 2199.069483][ T2337] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2199.076996][ T2337] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2199.113918][ T2337] usb 5-1: USB disconnect, device number 6 [ 2199.115204][T10974] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 2199.134279][T10974] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2199.243459][ T2331] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2199.372345][ T2331] usb 2-1: device descriptor read/64, error -71 [ 2199.479499][ T2331] usb usb2-port1: attempt power cycle [ 2199.828808][ T2331] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2199.849984][ T2331] usb 2-1: device descriptor read/8, error -71 [ 2200.091253][ T2331] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2200.121312][ T2331] usb 2-1: device descriptor read/8, error -71 [ 2200.230526][ T2331] usb usb2-port1: unable to enumerate USB device [ 2200.939144][ T6458] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2201.089222][ T6458] usb 5-1: Using ep0 maxpacket: 32 [ 2201.090068][ T6458] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2201.092033][ T6458] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2201.092058][ T6458] usb 5-1: config 0 has no interface number 0 [ 2201.094163][ T6458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.094187][ T6458] usb 5-1: Product: syz [ 2201.094202][ T6458] usb 5-1: Manufacturer: syz [ 2201.094217][ T6458] usb 5-1: SerialNumber: syz [ 2201.097226][ T6458] usb 5-1: config 0 descriptor?? [ 2201.161362][ T6458] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2201.341554][ T6458] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2201.363864][ T6458] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2201.969263][ T6458] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 2202.119895][ T6458] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2202.121325][ T6458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.125108][ T6458] usb 2-1: config 0 descriptor?? [ 2202.161042][ T6458] cp210x 2-1:0.0: cp210x converter detected [ 2202.689027][ T2331] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2202.690545][ T5618] nintendo 0005:057E:2017.0050: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 2202.728094][ T5618] nintendo 0005:057E:2017.0050: controller MAC = 00:11:22:33:44:55 [ 2202.853813][ T2331] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2202.855096][ T2331] usb 3-1: config 0 has no interfaces? [ 2202.855166][ T2331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.871056][ T2331] usb 3-1: config 0 descriptor?? [ 2203.085368][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.086357][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.091362][ T2337] usb 3-1: USB disconnect, device number 37 [ 2203.269681][ T2331] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2203.440107][ T2331] usb 4-1: New USB device found, idVendor=007c, idProduct=fa80, bcdDevice= 0.09 [ 2203.440182][ T2331] usb 4-1: no configurations [ 2203.440210][ T2331] usb 4-1: can't read configurations, error -22 [ 2203.549559][ T2337] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2203.568903][ T2331] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2203.706549][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2203.707192][ T6463] usb 5-1: USB disconnect, device number 7 [ 2203.719089][ T2337] usb 3-1: Using ep0 maxpacket: 32 [ 2203.722815][ T2331] usb 4-1: New USB device found, idVendor=007c, idProduct=fa80, bcdDevice= 0.09 [ 2203.722883][ T2331] usb 4-1: no configurations [ 2203.722911][ T2331] usb 4-1: can't read configurations, error -22 [ 2203.723274][ T2331] usb usb4-port1: attempt power cycle [ 2203.724559][ T2337] usb 3-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 2203.728024][ T2337] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 2203.728063][ T2337] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.728097][ T2337] usb 3-1: config 0 has no interface number 0 [ 2203.728183][ T2337] usb 3-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2203.728223][ T2337] usb 3-1: config 0 interface 74 has no altsetting 0 [ 2203.732643][ T2337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.732684][ T2337] usb 3-1: Product: syz [ 2203.732715][ T2337] usb 3-1: Manufacturer: syz [ 2203.732746][ T2337] usb 3-1: SerialNumber: syz [ 2203.734491][ T6463] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2203.752537][ T2337] usb 3-1: config 0 descriptor?? [ 2203.754020][ T6463] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2203.755416][ T6463] quatech2 5-1:0.51: device disconnected [ 2203.768130][ T2337] em28xx 3-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 2203.768177][ T2337] em28xx 3-1:0.74: Video interface 74 found: [ 2204.069607][ T2331] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2204.090819][ T2331] usb 4-1: New USB device found, idVendor=007c, idProduct=fa80, bcdDevice= 0.09 [ 2204.090872][ T2331] usb 4-1: no configurations [ 2204.090912][ T2331] usb 4-1: can't read configurations, error -22 [ 2204.229526][ T2331] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2204.261935][ T2331] usb 4-1: New USB device found, idVendor=007c, idProduct=fa80, bcdDevice= 0.09 [ 2204.261997][ T2331] usb 4-1: no configurations [ 2204.262005][ T2331] usb 4-1: can't read configurations, error -22 [ 2204.262678][ T2331] usb usb4-port1: unable to enumerate USB device [ 2204.362273][ T2337] em28xx 3-1:0.74: unknown em28xx chip ID (0) [ 2204.771223][ T6458] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2204.771252][ T6458] cp210x 2-1:0.0: querying part number failed [ 2204.800344][ T6458] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2204.802689][ T6458] usb 2-1: USB disconnect, device number 85 [ 2204.807216][ T6458] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2204.807710][ T6458] cp210x 2-1:0.0: device disconnected [ 2204.889508][ T5618] nintendo 0005:057E:2017.0050: Failed to set report mode; ret=-110 [ 2204.889535][ T5618] nintendo 0005:057E:2017.0050: Failed to initialize controller; ret=-110 [ 2204.955423][ T5618] nintendo 0005:057E:2017.0050: probe - fail = -110 [ 2204.955549][ T5618] nintendo 0005:057E:2017.0050: probe with driver nintendo failed with error -110 [ 2205.270435][ T6463] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 2205.289317][ T6458] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2205.305427][ T2337] em28xx 3-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 2205.305650][ T2337] em28xx 3-1:0.74: board has no eeprom [ 2205.421804][ T6458] usb 2-1: device descriptor read/64, error -71 [ 2205.430479][ T6463] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2205.432513][ T6463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.441551][ T6463] usb 5-1: config 0 descriptor?? [ 2205.464918][ T6463] cp210x 5-1:0.0: cp210x converter detected [ 2205.538481][ T2337] em28xx 3-1:0.74: failed to get i2c transfer status from bridge register (error=-5) [ 2205.540521][ T2337] em28xx 3-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 2205.556009][ T2337] em28xx 3-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 2205.556079][ T2337] em28xx 3-1:0.74: couldn't read from i2c device 0xba: error -5 [ 2205.558725][ T2337] em28xx 3-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 2205.558798][ T2337] em28xx 3-1:0.74: couldn't read from i2c device 0x90: error -5 [ 2205.559559][ T2337] em28xx 3-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 2205.559614][ T2337] em28xx 3-1:0.74: couldn't read from i2c device 0x42: error -5 [ 2205.560309][ T2337] em28xx 3-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 2205.560363][ T2337] em28xx 3-1:0.74: couldn't read from i2c device 0x60: error -5 [ 2205.560404][ T2337] em28xx 3-1:0.74: No sensor detected [ 2205.628735][ T2337] em28xx 3-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 2205.628793][ T2337] em28xx 3-1:0.74: Currently, V4L2 is not supported on this model [ 2205.674935][ T2337] usb 3-1: USB disconnect, device number 38 [ 2205.676758][ T2331] em28xx 3-1:0.74: Registering snapshot button... [ 2205.700386][ T6458] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2205.708474][ T2337] em28xx 3-1:0.74: Disconnecting em28xx [ 2205.779517][ T2331] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.74/input/input189 [ 2205.829694][ T6458] usb 2-1: device descriptor read/64, error -71 [ 2205.873907][ T2331] em28xx 3-1:0.74: Remote control support is not available for this card. [ 2205.874002][ T2337] em28xx 3-1:0.74: Closing input extension [ 2205.874721][ T2337] em28xx 3-1:0.74: Deregistering snapshot button [ 2205.939553][ T6458] usb usb2-port1: attempt power cycle [ 2205.943962][ T6792] tipc: Started in network mode [ 2205.943981][ T6792] tipc: Node identity 4, cluster identity 4711 [ 2205.943994][ T6792] tipc: Node number set to 4 [ 2205.944742][ T6463] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2205.944781][ T6463] cp210x 5-1:0.0: querying part number failed [ 2205.966614][ T6463] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2205.994952][ T6463] usb 5-1: USB disconnect, device number 8 [ 2206.049813][ T6463] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2206.050267][ T6463] cp210x 5-1:0.0: device disconnected [ 2206.146552][ T2337] em28xx: Freeing device [ 2206.279521][ T6458] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2206.300348][ T6458] usb 2-1: device descriptor read/8, error -71 [ 2206.387858][ T6799] syzkaller0: entered promiscuous mode [ 2206.387884][ T6799] syzkaller0: entered allmulticast mode [ 2206.539540][ T6458] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2206.560442][ T6458] usb 2-1: device descriptor read/8, error -71 [ 2206.655026][ T6809] netlink: 'syz.2.10871': attribute type 2 has an invalid length. [ 2206.669973][ T6458] usb usb2-port1: unable to enumerate USB device [ 2206.849049][T10974] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2206.909165][ T6458] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 2207.010266][T10974] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2207.011770][T10974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.016026][T10974] usb 4-1: config 0 descriptor?? [ 2207.059895][ T6458] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2207.060990][ T6458] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.061481][ T6458] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2207.065019][ T6458] usb 3-1: string descriptor 0 read error: -22 [ 2207.065206][ T6458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.124011][ T6458] cdc_ether 3-1:1.0: skipping garbage [ 2207.124033][ T6458] cdc_ether 3-1:1.0: missing cdc ether descriptor [ 2207.202147][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10874'. [ 2207.329647][ T6458] usb 3-1: USB disconnect, device number 39 [ 2207.640601][ T6804] binder: BINDER_SET_CONTEXT_MGR already set [ 2207.640616][ T6804] binder: 6803:6804 ioctl 4018620d 200000000200 returned -16 [ 2207.640792][ T6804] binder_alloc: 6803: binder_alloc_buf, no vma [ 2207.693564][ T6815] binder_alloc: 6803: binder_alloc_buf, no vma [ 2207.699631][T10974] usb 4-1: Cannot set autoneg [ 2207.700084][T10974] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 2208.137914][ T6821] geneve3: entered promiscuous mode [ 2208.169518][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10878'. [ 2208.179993][ T6825] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 2208.180019][ T6825] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 2208.273641][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10878'. [ 2208.275085][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 2208.275118][ T31] audit: type=1326 audit(1791809769.749:13218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2208.275209][ T31] audit: type=1326 audit(1791809769.749:13219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2208.277402][ T31] audit: type=1326 audit(1791809769.749:13220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2208.277479][ T31] audit: type=1326 audit(1791809769.749:13221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2208.277568][ T31] audit: type=1326 audit(1791809769.749:13222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2208.277638][ T31] audit: type=1326 audit(1791809769.749:13223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2208.278169][ T31] audit: type=1326 audit(1791809769.749:13224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2208.322676][ T31] audit: type=1326 audit(1791809769.749:13225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2209.008786][ T2337] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2209.171388][ T2337] usb 5-1: Using ep0 maxpacket: 16 [ 2209.173349][ T2337] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2209.195991][ T2337] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 2209.196049][ T2337] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 2209.196086][ T2337] usb 5-1: config 252 has no interface number 0 [ 2209.235902][ T2337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.235964][ T2337] usb 5-1: Product: syz [ 2209.235998][ T2337] usb 5-1: Manufacturer: syz [ 2209.236030][ T2337] usb 5-1: SerialNumber: syz [ 2209.292463][ T2337] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2209.609487][ T6839] kvm: pic: non byte write [ 2209.657844][ T5496] usb 5-1: Failed to submit usb control message: -71 [ 2209.657882][ T5496] usb 5-1: unable to send the bmi data to the device: -71 [ 2209.657900][ T5496] usb 5-1: unable to get target info from device [ 2209.657916][ T5496] usb 5-1: could not get target info (-71) [ 2209.657940][ T5496] usb 5-1: could not probe fw (-71) [ 2209.661522][ T5618] usb 5-1: USB disconnect, device number 9 [ 2209.793882][ T2335] usb 4-1: USB disconnect, device number 62 [ 2210.283613][ T5504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.843974][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10889'. [ 2210.901447][ T5504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.133779][T25765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2211.187295][ T2335] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2211.187855][T25765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2211.199320][T25765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2211.217079][T25765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2211.232726][T25765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2211.271093][ T4934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2211.275079][ T4934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2211.276322][ T4934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2211.277556][ T4934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2211.278405][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2211.370127][ T2335] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 2211.372869][ T2335] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2211.372898][ T2335] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2211.374961][ T2335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.374987][ T2335] usb 4-1: Product: syz [ 2211.375002][ T2335] usb 4-1: Manufacturer: syz [ 2211.375029][ T2335] usb 4-1: SerialNumber: syz [ 2211.480798][ T5504] bond0: (slave netdevsim1): Releasing backup interface [ 2211.583542][ T5504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.640917][ T6869] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10890'. [ 2211.677237][ T2335] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 2211.696294][ T6881] netlink: 'syz.3.10890': attribute type 10 has an invalid length. [ 2211.724092][ T6884] fuse: Bad value for 'fd' [ 2212.079190][ T5678] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2212.126782][T10974] usb 4-1: USB disconnect, device number 63 [ 2212.152961][T10974] usblp0: removed [ 2212.214296][ T5504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.234550][ T5678] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2212.237956][ T5678] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 2212.238003][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2212.238027][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 2212.297649][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.297677][ T5678] usb 5-1: Product: syz [ 2212.297693][ T5678] usb 5-1: Manufacturer: syz [ 2212.297708][ T5678] usb 5-1: SerialNumber: syz [ 2212.324483][ T5678] usb 5-1: config 0 descriptor?? [ 2212.695826][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10892'. [ 2213.159329][ T2335] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2213.311092][ T2335] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2213.313197][ T2335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.313269][ T2335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.365646][ T2335] usb 4-1: config 0 descriptor?? [ 2213.372142][T25765] Bluetooth: hci2: command tx timeout [ 2213.418379][ T5504] bridge_slave_1: left allmulticast mode [ 2213.418425][ T5504] bridge_slave_1: left promiscuous mode [ 2213.433249][ T5504] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.463537][ T5504] bridge_slave_0: left allmulticast mode [ 2213.463564][ T5504] bridge_slave_0: left promiscuous mode [ 2213.463854][ T5504] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.525525][ T5504] dvmrp0: left allmulticast mode [ 2213.620818][ T6458] usb 4-1: USB disconnect, device number 64 [ 2214.078795][ T6458] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2214.232696][ T6458] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2214.234318][ T6458] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2214.234368][ T6458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.303707][ T6458] usb 4-1: config 0 descriptor?? [ 2214.776445][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.784035][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.961587][ T2337] usb 4-1: USB disconnect, device number 65 [ 2215.365447][ T2333] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 2215.396539][ T2333] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2215.450972][T25765] Bluetooth: hci2: command tx timeout [ 2215.685696][ T5678] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 2215.854452][ T5504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2215.914030][ T5504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2215.933418][ T5678] usb 5-1: USB disconnect, device number 10 [ 2215.940698][ T5504] bond0 (unregistering): Released all slaves [ 2216.103402][ T5504] bond1 (unregistering): Released all slaves [ 2216.152021][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2216.195995][ T5504] bond2 (unregistering): Released all slaves [ 2216.232378][ T5504] bond3 (unregistering): Released all slaves [ 2216.311629][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2216.312247][ T6938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2217.032727][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 2217.032902][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 2217.033040][ T6877] bridge_slave_0: entered allmulticast mode [ 2217.034864][ T6877] bridge_slave_0: entered promiscuous mode [ 2217.073128][ T5504] tipc: Left network mode [ 2217.105373][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 2217.105489][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 2217.105652][ T6877] bridge_slave_1: entered allmulticast mode [ 2217.179497][ T6877] bridge_slave_1: entered promiscuous mode [ 2217.542514][T25765] Bluetooth: hci2: command tx timeout [ 2217.827650][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2217.858499][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2217.944265][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2217.944595][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.179596][ T5678] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 2218.243318][ T6877] team0: Port device team_slave_0 added [ 2218.311629][ T6877] team0: Port device team_slave_1 added [ 2218.330920][ T5678] usb 3-1: not running at top speed; connect to a high speed hub [ 2218.330958][ T5678] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 2218.332079][ T5678] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 2218.332104][ T5678] usb 3-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 2218.332125][ T5678] usb 3-1: config 11 has no interface number 0 [ 2218.332164][ T5678] usb 3-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2218.332191][ T5678] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2218.332218][ T5678] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2218.332245][ T5678] usb 3-1: config 11 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2218.332272][ T5678] usb 3-1: config 11 interface 95 has no altsetting 0 [ 2218.334521][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 2218.334548][ T5678] usb 3-1: Manufacturer: syz [ 2218.440004][ T6978] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2218.651274][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.651812][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.712657][ T5678] usb 3-1: USB disconnect, device number 40 [ 2218.931763][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2218.931792][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2218.931828][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2219.121265][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2219.121315][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2219.121360][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2219.462153][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2219.573640][ T6877] hsr_slave_0: entered promiscuous mode [ 2219.582071][ T6877] hsr_slave_1: entered promiscuous mode [ 2219.608921][T25765] Bluetooth: hci2: command tx timeout [ 2219.627846][ T5504] hsr_slave_0: left promiscuous mode [ 2219.634689][ T5504] hsr_slave_1: left promiscuous mode [ 2219.635730][ T5504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2219.635750][ T5504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2219.636890][ T5504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2219.636909][ T5504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2219.662817][ T5504] veth1_vlan: left promiscuous mode [ 2219.879288][ T2335] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2220.041416][ T2335] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 2220.046844][ T2335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.046891][ T2335] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2220.046914][ T2335] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2220.085010][ T2335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.085035][ T2335] usb 3-1: Product: syz [ 2220.085049][ T2335] usb 3-1: Manufacturer: syz [ 2220.085064][ T2335] usb 3-1: SerialNumber: syz [ 2220.165985][ T2335] ttusb_dec_send_command: command bulk message failed: error -8 [ 2220.166318][ T2335] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -8 [ 2220.295379][ T7020] sock: sock_timestamping_bind_phc: sock not bind to device [ 2220.378086][ T5504] team0 (unregistering): Port device team_slave_1 removed [ 2220.406763][ T5504] team0 (unregistering): Port device team_slave_0 removed [ 2220.747261][T10974] usb 3-1: USB disconnect, device number 41 [ 2221.777231][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.777291][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.385019][ T7058] xt_l2tp: v2 tid > 0xffff: 65537 [ 2223.340704][ T5678] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2223.492369][ T5678] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 2223.494477][ T5678] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.494525][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 2223.494551][ T5678] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2223.498174][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.498198][ T5678] usb 5-1: Product: syz [ 2223.498213][ T5678] usb 5-1: Manufacturer: syz [ 2223.498228][ T5678] usb 5-1: SerialNumber: syz [ 2223.503168][ T5678] usb 5-1: config 0 descriptor?? [ 2223.510720][ T5678] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2223.517702][ T5678] usb 5-1: Detected SIO [ 2223.517720][ T5678] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 2223.527926][ T5678] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2223.661159][ T6877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2223.681038][ T6877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2223.683144][ T6877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2223.704692][ T6877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2223.723888][ T6877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2223.727548][ T6877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2223.728509][ T6877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2223.757693][ T6877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2224.374618][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2224.467261][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 2224.520927][ T5495] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.521033][ T5495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.561627][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.561687][ T5504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.604405][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10930'. [ 2225.060896][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2225.122518][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10931'. [ 2225.275012][ T6877] veth0_vlan: entered promiscuous mode [ 2225.313838][ T6877] veth1_vlan: entered promiscuous mode [ 2225.426007][ T6877] veth0_macvtap: entered promiscuous mode [ 2225.444871][ T6877] veth1_macvtap: entered promiscuous mode [ 2225.557099][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2225.603118][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2225.642572][ T5678] usb 5-1: USB disconnect, device number 11 [ 2225.671904][T32069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.671950][T32069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.671985][T32069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.672022][T32069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.676338][ T5678] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2225.676891][ T5678] ftdi_sio 5-1:0.0: device disconnected [ 2226.295666][ T5495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2226.295690][ T5495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2226.480314][ T2331] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2226.595530][ T5505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2226.595570][ T5505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2226.629416][ T2331] usb 5-1: Using ep0 maxpacket: 8 [ 2226.632983][ T2331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2226.633082][ T2331] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 2226.635848][ T2331] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2226.635932][ T2331] usb 5-1: can't read configurations, error -61 [ 2226.789098][ T2331] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2226.896672][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10885'. [ 2226.958782][ T2331] usb 5-1: Using ep0 maxpacket: 8 [ 2226.962362][ T2331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2226.962477][ T2331] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 2226.972215][ T2331] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2226.972285][ T2331] usb 5-1: can't read configurations, error -61 [ 2226.972638][ T2331] usb usb5-port1: attempt power cycle [ 2227.179298][ T6458] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2227.294141][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.294553][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2227.334023][ T2331] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2227.335329][ T6458] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2227.341811][ T6458] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2227.341839][ T6458] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2227.341862][ T6458] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2227.345285][ T6458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.345310][ T6458] usb 2-1: Product: syz [ 2227.345325][ T6458] usb 2-1: Manufacturer: syz [ 2227.345340][ T6458] usb 2-1: SerialNumber: syz [ 2227.348180][ T6458] usb 2-1: config 0 descriptor?? [ 2227.375925][ T2331] usb 5-1: Using ep0 maxpacket: 8 [ 2227.442037][ T2331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2227.442086][ T2331] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 2227.503627][ T2331] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2227.503699][ T2331] usb 5-1: can't read configurations, error -61 [ 2227.520917][ T5678] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2227.562892][ T6458] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2227.629589][ T2331] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2227.662067][ T2331] usb 5-1: Using ep0 maxpacket: 8 [ 2227.665802][ T2331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2227.665903][ T2331] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 2227.671656][ T5678] usb 3-1: Using ep0 maxpacket: 16 [ 2227.672351][ T5678] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2227.673454][ T5678] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.673497][ T5678] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2227.675475][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.675497][ T5678] usb 3-1: Product: syz [ 2227.675511][ T5678] usb 3-1: Manufacturer: syz [ 2227.675525][ T5678] usb 3-1: SerialNumber: syz [ 2227.683639][ T5678] usb 3-1: config 0 descriptor?? [ 2227.692414][ T5678] mcba_usb 3-1:0.0: Can't find endpoints [ 2227.796679][ T2331] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2227.796752][ T2331] usb 5-1: can't read configurations, error -61 [ 2227.797205][ T2331] usb usb5-port1: unable to enumerate USB device [ 2227.933042][ T6463] usb 3-1: USB disconnect, device number 42 [ 2228.913610][ T31] audit: type=1326 audit(1791809790.389:13226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.2.10943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2228.915281][ T31] audit: type=1326 audit(1791809790.389:13227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.2.10943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2228.949894][ T31] audit: type=1326 audit(1791809790.389:13228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.2.10943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2228.950326][ T31] audit: type=1326 audit(1791809790.429:13229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.2.10943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2228.950669][ T31] audit: type=1326 audit(1791809790.429:13230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.2.10943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2228.950930][ T31] audit: type=1326 audit(1791809790.429:13231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.2.10943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d10b5ea0e code=0x7ffc0000 [ 2229.013234][ T7173] libceph: secret too big 258 [ 2229.018415][ T31] audit: type=1326 audit(1791809790.489:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.2.10943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d10b5ea0e code=0x7ffc0000 [ 2229.083271][ T31] audit: type=1326 audit(1791809790.489:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.2.10943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9e1d9 code=0x7ffc0000 [ 2229.503080][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10945'. [ 2229.742047][ T7193] key id 00000000 not found [ 2229.742964][ T7193] netlink: 'syz.3.10947': attribute type 7 has an invalid length. [ 2229.779263][ T7196] netlink: 'syz.3.10947': attribute type 7 has an invalid length. [ 2229.779420][ T7193] key id 00000000 not found [ 2229.871800][ T6458] usb 2-1: USB disconnect, device number 90 [ 2230.144280][ T7205] binder: 7204:7205 ioctl c0306201 200000000100 returned -14 [ 2230.164511][ T7205] binder: 7204:7205 ioctl c0306201 0 returned -14 [ 2230.274516][ T7208] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 2230.996871][ T7227] binder: 7226:7227 ioctl 801c581f 200000000580 returned -22 [ 2231.008966][T10974] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2231.171435][T10974] usb 5-1: Using ep0 maxpacket: 16 [ 2231.172778][T10974] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2231.174084][T10974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.177218][T10974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.177234][T10974] usb 5-1: Product: syz [ 2231.177252][T10974] usb 5-1: Manufacturer: syz [ 2231.177261][T10974] usb 5-1: SerialNumber: syz [ 2231.185967][T10974] usb 5-1: config 0 descriptor?? [ 2231.245222][T10974] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2231.525582][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.526227][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.551208][ T7222] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2231.553089][ T6458] usb 5-1: USB disconnect, device number 16 [ 2231.673675][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10959'. [ 2231.711892][ T7235] program syz.1.10959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2231.712814][ T7235] program syz.1.10959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2232.299276][ T7241] binder: 7239:7241 ioctl c0306201 200000000100 returned -14 [ 2232.355162][ T6458] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2232.355424][ T6458] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2232.355679][ T6458] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2232.355933][ T6458] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2232.355950][ T6458] rtc rtc0: __rtc_set_alarm: err=-22 [ 2232.556240][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10962'. [ 2232.980713][ T31] audit: type=1326 audit(1791809794.459:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.10965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2232.981017][ T31] audit: type=1326 audit(1791809794.459:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.10965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe030f9e1d9 code=0x7ffc0000 [ 2233.018280][ T7251] ip6gre1: entered allmulticast mode [ 2233.142149][ T7247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2233.883008][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10971'. [ 2233.970778][ T7280] netlink: 'syz.1.10967': attribute type 8 has an invalid length. [ 2233.994391][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 2233.994410][ T31] audit: type=1326 audit(1791809795.469:13245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.10972" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2233.994882][ T31] audit: type=1326 audit(1791809795.469:13246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.10972" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2234.035604][ T31] audit: type=1326 audit(1791809795.509:13247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.10972" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2234.035841][ T31] audit: type=1326 audit(1791809795.509:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.10972" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2234.036272][ T31] audit: type=1326 audit(1791809795.509:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.10972" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2234.193025][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10971'. [ 2234.193079][ T7288] ip6tnl0: Caught tx_queue_len zero misconfig [ 2234.294959][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10973'. [ 2234.456879][ T7297] binder: 7295:7297 ioctl c0306201 200000000100 returned -14 [ 2234.983706][ T7312] netlink: 'syz.0.10979': attribute type 1 has an invalid length. [ 2235.133822][ T7312] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2235.171040][ T7308] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10979'. [ 2235.883191][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10985'. [ 2236.254678][ T7343] binder: 7342:7343 ioctl c0306201 200000000100 returned -14 [ 2236.900564][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10992'. [ 2239.537177][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10998'. [ 2239.732283][ T7382] binder: 7381:7382 ioctl c0306201 200000000100 returned -14 [ 2239.830346][ T2331] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2240.003199][ T2331] usb 4-1: Using ep0 maxpacket: 8 [ 2240.004481][ T2331] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2240.006597][ T2331] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 2240.006638][ T2331] usb 4-1: config 0 has no interface number 0 [ 2240.011379][ T2331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.011419][ T2331] usb 4-1: Product: syz [ 2240.011448][ T2331] usb 4-1: Manufacturer: syz [ 2240.011478][ T2331] usb 4-1: SerialNumber: syz [ 2240.030695][ T2331] usb 4-1: config 0 descriptor?? [ 2240.208892][ T6463] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2240.315778][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.316397][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 2240.370603][ T6463] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 2240.378425][ T6463] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.378490][ T6463] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2240.378664][ T6463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.393350][ T6463] usb 3-1: config 0 descriptor?? [ 2240.592683][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2240.619969][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2240.720602][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2240.722319][ T7402] 8021q: adding VLAN 0 to HW filter on device team0 [ 2240.727304][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2240.799712][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2240.802034][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2240.807641][ T7402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2240.807663][ T7402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2240.855809][ T7402] veth1_vlan: left promiscuous mode [ 2240.865278][ T7402] vlan0: left promiscuous mode [ 2240.867908][ T7402] veth1_vlan: entered promiscuous mode [ 2240.892216][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2240.893306][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2240.893423][ T6463] ntrig 0003:1B96:0009.0052: item fetching failed at offset 5/7 [ 2240.894293][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2240.895754][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2240.898369][ T7402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2240.907716][ T6463] ntrig 0003:1B96:0009.0052: parse failed [ 2240.907971][ T6463] ntrig 0003:1B96:0009.0052: probe with driver ntrig failed with error -22 [ 2240.995301][ T7402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2240.995947][ T7402] xfrm1: left promiscuous mode [ 2240.997173][ T7402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2241.022652][ T7402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2241.058027][T32069] bridge0: port 1(bridge_slave_0) entered blocking state [ 2241.058135][T32069] bridge0: port 1(bridge_slave_0) entered listening state [ 2241.076555][T32069] bridge0: port 2(bridge_slave_1) entered blocking state [ 2241.076658][T32069] bridge0: port 2(bridge_slave_1) entered listening state [ 2241.177794][ T5496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2241.187846][ T5678] usb 3-1: USB disconnect, device number 43 [ 2241.221637][ T5496] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2241.221703][ T5496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.309460][ T5496] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2241.409774][ T5496] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2241.409834][ T5496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.413541][ T5495] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2241.413604][ T5495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.490412][ T5495] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2241.490513][ T5495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.663439][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11011'. [ 2242.358203][ T7441] binder: 7439:7441 ioctl c0306201 200000000100 returned -14 [ 2242.604887][ T2331] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2242.605048][ T2331] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 2242.605308][ T2331] uvcvideo 4-1:0.31: Failed to create links for entity 5 [ 2242.605343][ T2331] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 2242.692895][ T2331] usb 4-1: USB disconnect, device number 66 [ 2242.759241][ T2335] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2242.909183][ T2335] usb 3-1: Using ep0 maxpacket: 32 [ 2242.912293][ T2335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2242.912339][ T2335] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 2242.914890][ T2335] usb 3-1: config 8 has an invalid interface number: 94 but max is 0 [ 2242.914915][ T2335] usb 3-1: config 8 has no interface number 0 [ 2242.914944][ T2335] usb 3-1: config 8 interface 94 has no altsetting 0 [ 2242.976704][ T2335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.976731][ T2335] usb 3-1: Product: syz [ 2242.976747][ T2335] usb 3-1: Manufacturer: syz [ 2242.976762][ T2335] usb 3-1: SerialNumber: syz [ 2243.234890][ T7444] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11017'. [ 2243.275687][ T7444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11017'. [ 2243.278223][ T7444] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11017'. [ 2243.507123][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11022'. [ 2243.931587][ T2335] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 2243.937573][ T2335] gspca_sn9c2028: read1 error -71 [ 2243.956382][ T2335] gspca_sn9c2028: read1 error -71 [ 2243.956882][ T2335] gspca_sn9c2028: read1 error -71 [ 2243.956960][ T2335] sn9c2028 3-1:8.94: probe with driver sn9c2028 failed with error -71 [ 2243.985224][ T2335] usb 3-1: USB disconnect, device number 44 [ 2244.931608][ T7480] binder: 7479:7480 ioctl c0306201 200000000100 returned -14 [ 2245.285876][ T7489] pim6reg: entered allmulticast mode [ 2245.368985][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2245.474470][ T7489] team0: entered allmulticast mode [ 2245.474527][ T7489] team_slave_0: entered allmulticast mode [ 2245.474563][ T7489] team_slave_1: entered allmulticast mode [ 2245.485511][ T7489] pim6reg: left allmulticast mode [ 2245.492954][ T31] audit: type=1326 audit(1791809806.939:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.492998][ T31] audit: type=1326 audit(1791809806.939:13251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.493030][ T31] audit: type=1326 audit(1791809806.949:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.493060][ T31] audit: type=1326 audit(1791809806.949:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.493090][ T31] audit: type=1326 audit(1791809806.949:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.493118][ T31] audit: type=1326 audit(1791809806.949:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.493147][ T31] audit: type=1326 audit(1791809806.949:13256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.493176][ T31] audit: type=1326 audit(1791809806.949:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.493207][ T31] audit: type=1326 audit(1791809806.949:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.493237][ T31] audit: type=1326 audit(1791809806.959:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2f9e1d9 code=0x7ffc0000 [ 2245.629727][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2245.770042][ T7488] team0: left allmulticast mode [ 2245.770081][ T7488] team_slave_0: left allmulticast mode [ 2245.770114][ T7488] team_slave_1: left allmulticast mode [ 2245.822198][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11033'. [ 2245.991203][ T7497] input: syz0 as /devices/virtual/input/input191 [ 2247.342655][ T7520] binder: 7519:7520 ioctl c0306201 200000000100 returned -14 [ 2247.356726][ T7520] binder: 7519:7520 ioctl c0306201 200000000200 returned -14 [ 2247.483658][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11044'. [ 2249.642772][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b3c0c00: rx timeout, send abort [ 2250.142852][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b3c0c00: abort rx timeout. Force session deactivation [ 2256.328642][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 2256.328826][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 2257.608794][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2271.688601][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2271.688628][ C1] bridge0: topology change detected, propagating [ 2271.688972][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2271.688999][ C1] bridge0: topology change detected, propagating [ 2353.288510][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2353.362475][ C1] rcu: 0-...!: (3 ticks this GP) idle=9a44/1/0x4000000000000000 softirq=284782/284782 fqs=1 [ 2353.372634][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7533/1:b..l [ 2353.380539][ C1] rcu: (detected by 1, t=10502 jiffies, g=392065, q=374 ncpus=2) [ 2353.388338][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2353.393548][ C0] NMI backtrace for cpu 0 [ 2353.393569][ C0] CPU: 0 UID: 0 PID: 7537 Comm: syz.1.11050 Tainted: G L syzkaller #0 PREEMPT(full) [ 2353.393594][ C0] Tainted: [L]=SOFTLOCKUP [ 2353.393601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2353.393612][ C0] RIP: 0010:lock_release+0x6f/0x3c0 [ 2353.393641][ C0] Code: 0d e8 f5 04 09 00 84 c0 0f 84 9e 02 00 00 83 3d 96 0a d7 0f 00 0f 84 26 02 00 00 65 8b 05 c1 bb f2 12 85 c0 0f 85 17 02 00 00 <65> 4c 8b 3d 01 77 f2 12 41 83 bf a4 0b 00 00 00 0f 85 01 02 00 00 [ 2353.393658][ C0] RSP: 0018:ffffc90000007c88 EFLAGS: 00000046 [ 2353.393673][ C0] RAX: 0000000000000000 RBX: 0000000000000092 RCX: 0000000001000205 [ 2353.393686][ C0] RDX: 0000000000000001 RSI: ffffffff8c6ddb60 RDI: ffffffff8c6ddb20 [ 2353.393698][ C0] RBP: ffff8880566e9c50 R08: 0000000000000003 R09: 0000000000000004 [ 2353.393710][ C0] R10: dffffc0000000000 R11: fffff52000000f8c R12: ffff8880566e9c58 [ 2353.393723][ C0] R13: ffffffff84ec54bc R14: ffffffff9bc1b188 R15: 1ffff1100acdd38a [ 2353.393738][ C0] FS: 00007fa94c88b6c0(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 2353.393754][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2353.393767][ C0] CR2: 00007fe0f95556c8 CR3: 000000007f13e000 CR4: 00000000003526f0 [ 2353.393782][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000e0000011 [ 2353.393794][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2353.393806][ C0] Call Trace: [ 2353.393815][ C0] [ 2353.393829][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 2353.393852][ C0] debug_object_activate+0x2ec/0x420 [ 2353.393886][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 2353.393906][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 2353.393939][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 2353.393976][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 2353.394000][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2353.394020][ C0] [ 2353.394027][ C0] [ 2353.394035][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2353.394055][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 2353.394073][ C0] Code: f7 e8 7d a0 b8 f5 f7 c3 00 02 00 00 74 05 e8 70 ef e4 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 9d a9 f5 65 48 8b 05 0c a0 aa 08 48 85 c0 74 18 5b 41 5e e9 [ 2353.394089][ C0] RSP: 0018:ffffc90003db6ee8 EFLAGS: 00000206 [ 2353.394104][ C0] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 0000000000000202 [ 2353.394116][ C0] RDX: 0000000000000002 RSI: ffffffff8e46978f RDI: 0000000000000001 [ 2353.394128][ C0] RBP: ffffc90003db71d0 R08: ffffffff917a727f R09: 1ffffffff22f4e4f [ 2353.394142][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e50 R12: ffff888052cd02a8 [ 2353.394155][ C0] R13: dffffc0000000000 R14: ffff888052cd02a8 R15: ffff888052cd02f8 [ 2353.394178][ C0] taprio_change+0x346a/0x45c0 [ 2353.394212][ C0] ? __pfx_taprio_change+0x10/0x10 [ 2353.394255][ C0] taprio_init+0x994/0xc00 [ 2353.394275][ C0] ? __nla_parse+0x40/0x60 [ 2353.394299][ C0] ? __pfx_taprio_init+0x10/0x10 [ 2353.394323][ C0] ? __pfx_taprio_init+0x10/0x10 [ 2353.394344][ C0] qdisc_create+0x7b5/0xf00 [ 2353.394370][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 2353.394396][ C0] tc_modify_qdisc+0x17af/0x2390 [ 2353.394428][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 2353.394453][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 2353.394485][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 2353.394514][ C0] rtnetlink_rcv_msg+0x7b9/0xc00 [ 2353.394534][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2353.394550][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2353.394575][ C0] ? ref_tracker_free+0x689/0x830 [ 2353.394601][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 2353.394630][ C0] netlink_rcv_skb+0x226/0x4a0 [ 2353.394652][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2353.394679][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2353.394704][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 2353.394725][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 2353.394748][ C0] netlink_unicast+0x7bd/0x940 [ 2353.394772][ C0] netlink_sendmsg+0x813/0xb40 [ 2353.394798][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2353.394823][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 2353.394848][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2353.394869][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 2353.394894][ C0] ____sys_sendmsg+0x54e/0x850 [ 2353.394915][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2353.394938][ C0] ? import_iovec+0x73/0xa0 [ 2353.394965][ C0] ___sys_sendmsg+0x2a5/0x360 [ 2353.394982][ C0] ? __lock_acquire+0x747/0x2de0 [ 2353.395003][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 2353.395023][ C0] ? futex_wait+0x2a2/0x390 [ 2353.395054][ C0] ? __fget_files+0x2a/0x420 [ 2353.395072][ C0] ? __fget_files+0x3a2/0x420 [ 2353.395092][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 2353.395113][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2353.395141][ C0] do_syscall_64+0x166/0x520 [ 2353.395161][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2353.395179][ C0] ? clear_bhb_loop+0x70/0xc0 [ 2353.395199][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2353.395216][ C0] RIP: 0033:0x7fa94b99e1d9 [ 2353.395299][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2353.395316][ C0] RSP: 002b:00007fa94c88b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2353.395334][ C0] RAX: ffffffffffffffda RBX: 00007fa94bc25fa0 RCX: 00007fa94b99e1d9 [ 2353.395347][ C0] RDX: 0000000000000010 RSI: 0000200000000bc0 RDI: 0000000000000009 [ 2353.395359][ C0] RBP: 00007fa94ba35888 R08: 0000000000000000 R09: 0000000000000000 [ 2353.395371][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2353.395383][ C0] R13: 00007fa94bc26038 R14: 00007fa94bc25fa0 R15: 00007fa94bd4fa48 [ 2353.395405][ C0] [ 2353.952017][ C1] task:syz.4.11047 state:R running task stack:23240 pid:7533 tgid:7528 ppid:31492 task_flags:0x400040 flags:0x00080000 [ 2353.965572][ C1] Call Trace: [ 2353.968848][ C1] [ 2353.971784][ C1] __schedule+0x17db/0x58f0 [ 2353.976314][ C1] ? __lock_acquire+0x747/0x2de0 [ 2353.981263][ C1] ? __pfx___schedule+0x10/0x10 [ 2353.986127][ C1] preempt_schedule_irq+0x4b/0x90 [ 2353.991154][ C1] irqentry_exit+0x14f/0x920 [ 2353.995742][ C1] ? trace_irq_disable+0x3b/0x140 [ 2354.000776][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2354.006759][ C1] RIP: 0010:unwind_next_frame+0xb04/0x2550 [ 2354.012572][ C1] Code: 8b 44 24 30 42 0f b6 04 20 84 c0 4c 89 04 24 0f 85 26 14 00 00 48 89 dd 48 c1 ed 03 42 0f b6 44 25 00 84 c0 0f 85 3b 14 00 00 <0f> b6 72 01 83 e6 07 83 fe 04 0f 84 39 04 00 00 83 fe 03 0f 84 f1 [ 2354.032174][ C1] RSP: 0018:ffffc90004746bc0 EFLAGS: 00000246 [ 2354.038239][ C1] RAX: 0000000000000000 RBX: ffffffff929c24f1 RCX: ffffffff91ef7190 [ 2354.046208][ C1] RDX: ffffffff929c24f0 RSI: ffffffff929c24ec RDI: ffffffff8c6ddb20 [ 2354.054178][ C1] RBP: 1ffffffff253849e R08: ffffc90004747a20 R09: 0000000000000000 [ 2354.062149][ C1] R10: ffffc90004746cb8 R11: ffffffff81b2c5d0 R12: dffffc0000000000 [ 2354.070123][ C1] R13: ffffffff929c24ec R14: ffffc90004746c68 R15: 1ffff920008e8d8d [ 2354.078101][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2354.084280][ C1] ? ____sys_sendmsg+0x54e/0x850 [ 2354.089231][ C1] ? unwind_next_frame+0x8f/0x2550 [ 2354.094347][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2354.100501][ C1] arch_stack_walk+0x11b/0x150 [ 2354.105279][ C1] ? ____sys_sendmsg+0x54e/0x850 [ 2354.110224][ C1] stack_trace_save+0xa9/0x100 [ 2354.114989][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2354.120375][ C1] kasan_save_track+0x3e/0x80 [ 2354.125055][ C1] ? kasan_save_track+0x3e/0x80 [ 2354.129907][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 2354.134947][ C1] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 2354.141012][ C1] ? __alloc_skb+0x1db/0x7a0 [ 2354.145606][ C1] ? tipc_msg_build+0x15f/0xf50 [ 2354.150537][ C1] ? tipc_send_group_bcast+0x7db/0xad0 [ 2354.156029][ C1] ? __tipc_sendmsg+0x313/0x2b60 [ 2354.160966][ C1] ? tipc_sendmsg+0x55/0x70 [ 2354.165464][ C1] ? sock_sendmsg_nosec+0x13a/0x180 [ 2354.170665][ C1] ? ____sys_sendmsg+0x54e/0x850 [ 2354.175648][ C1] __kasan_slab_alloc+0x6c/0x80 [ 2354.180511][ C1] kmem_cache_alloc_node_noprof+0x354/0x610 [ 2354.186408][ C1] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 2354.192475][ C1] ? __alloc_skb+0x1db/0x7a0 [ 2354.197068][ C1] ? __alloc_skb+0x1db/0x7a0 [ 2354.201673][ C1] __alloc_skb+0x1db/0x7a0 [ 2354.206103][ C1] tipc_msg_build+0x15f/0xf50 [ 2354.210788][ C1] ? __release_sock+0x28b/0x390 [ 2354.215644][ C1] ? release_sock+0x190/0x260 [ 2354.220333][ C1] ? net_generic+0x1e/0x240 [ 2354.224929][ C1] ? __pfx_tipc_msg_build+0x10/0x10 [ 2354.230135][ C1] ? net_generic+0x1e/0x240 [ 2354.234652][ C1] ? net_generic+0x1e/0x240 [ 2354.239168][ C1] ? tipc_group_bc_cong+0x15f/0x210 [ 2354.244375][ C1] tipc_send_group_bcast+0x7db/0xad0 [ 2354.249677][ C1] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 2354.255480][ C1] ? kmem_cache_free+0x182/0x650 [ 2354.260429][ C1] ? tipc_sk_filter_rcv+0x2f19/0x3210 [ 2354.265863][ C1] ? __lock_acquire+0x747/0x2de0 [ 2354.270808][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 2354.276463][ C1] __tipc_sendmsg+0x313/0x2b60 [ 2354.281225][ C1] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 2354.287406][ C1] ? __pfx___tipc_sendmsg+0x10/0x10 [ 2354.292598][ C1] ? ktime_get+0x45/0x220 [ 2354.296935][ C1] ? aa_label_sk_perm+0x532/0x6e0 [ 2354.301974][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2354.307369][ C1] ? __lock_acquire+0x747/0x2de0 [ 2354.312335][ C1] ? __lock_acquire+0x747/0x2de0 [ 2354.317289][ C1] ? irqentry_exit+0x218/0x920 [ 2354.322072][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2354.327129][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2354.332521][ C1] ? tipc_sendmsg+0x47/0x70 [ 2354.337037][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 2354.342336][ C1] tipc_sendmsg+0x55/0x70 [ 2354.346671][ C1] ? __pfx_tipc_sendmsg+0x10/0x10 [ 2354.351697][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 2354.356735][ C1] ____sys_sendmsg+0x54e/0x850 [ 2354.361509][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2354.366805][ C1] ? import_iovec+0x73/0xa0 [ 2354.371331][ C1] ___sys_sendmsg+0x2a5/0x360 [ 2354.376045][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 2354.381261][ C1] ? __lock_acquire+0x747/0x2de0 [ 2354.386260][ C1] __sys_sendmmsg+0x273/0x4d0 [ 2354.390946][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2354.396148][ C1] ? do_futex+0x3e7/0x4e0 [ 2354.400495][ C1] ? irqentry_exit+0x218/0x920 [ 2354.405291][ C1] ? rcu_is_watching+0x16/0xb0 [ 2354.410081][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 2354.414947][ C1] do_syscall_64+0x166/0x520 [ 2354.419542][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2354.425621][ C1] ? clear_bhb_loop+0x70/0xc0 [ 2354.430311][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2354.436211][ C1] RIP: 0033:0x7fe030f9e1d9 [ 2354.440625][ C1] RSP: 002b:00007fe031dde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2354.449039][ C1] RAX: ffffffffffffffda RBX: 00007fe031226090 RCX: 00007fe030f9e1d9 [ 2354.457007][ C1] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 2354.464976][ C1] RBP: 00007fe031035888 R08: 0000000000000000 R09: 0000000000000000 [ 2354.472946][ C1] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2354.480915][ C1] R13: 00007fe031226128 R14: 00007fe031226090 R15: 00007fe03134fa48 [ 2354.488902][ C1] [ 2354.491919][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g392065 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 2354.503023][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2354.512984][ C1] rcu: RCU grace-period kthread stack dump: [ 2354.518864][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2354.532350][ C1] Call Trace: [ 2354.535627][ C1] [ 2354.538563][ C1] __schedule+0x17db/0x58f0 [ 2354.543096][ C1] ? __pfx___schedule+0x10/0x10 [ 2354.547941][ C1] ? lock_acquire+0x115/0x350 [ 2354.552627][ C1] ? schedule+0x90/0x2b0 [ 2354.556872][ C1] schedule+0x164/0x2b0 [ 2354.561031][ C1] schedule_timeout+0x152/0x2c0 [ 2354.565890][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2354.571267][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2354.576562][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2354.582368][ C1] ? prepare_to_swait_event+0x322/0x350 [ 2354.587924][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 2354.592790][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 2354.598686][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2354.603971][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2354.609182][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 2354.613780][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2354.618981][ C1] ? __kthread_parkme+0x71/0x1f0 [ 2354.623925][ C1] ? __kthread_parkme+0x199/0x1f0 [ 2354.628958][ C1] kthread+0x38b/0x480 [ 2354.633028][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2354.638226][ C1] ? __pfx_kthread+0x10/0x10 [ 2354.642819][ C1] ret_from_fork+0x514/0xb70 [ 2354.647413][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2354.652523][ C1] ? __switch_to+0xc89/0x1420 [ 2354.657218][ C1] ? __pfx_kthread+0x10/0x10 [ 2354.661812][ C1] ret_from_fork_asm+0x1a/0x30 [ 2354.666599][ C1] [ 2354.669624][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2354.675954][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2354.686461][ C1] Tainted: [L]=SOFTLOCKUP [ 2354.690783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2354.700835][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2354.706478][ C1] Code: 1b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 d6 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2354.726085][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 2354.732153][ C1] RAX: 0000000003c3af53 RBX: ffffffff819bed10 RCX: 8000000000000001 [ 2354.740124][ C1] RDX: 0000000000000001 RSI: ffffffff8e46978f RDI: ffffffff8c6ddb80 [ 2354.748094][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743 [ 2354.756061][ C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000 [ 2354.764031][ C1] R13: 1ffff11003ed1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 2354.772000][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 2354.780925][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2354.787506][ C1] CR2: 000020000000b038 CR3: 0000000063c9a000 CR4: 00000000003526f0 [ 2354.795480][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 2354.803449][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2354.811417][ C1] Call Trace: [ 2354.814696][ C1] [ 2354.817623][ C1] default_idle+0x9/0x20 [ 2354.821871][ C1] default_idle_call+0x72/0xb0 [ 2354.826645][ C1] do_idle+0x2e0/0x540 [ 2354.830722][ C1] ? __pfx_do_idle+0x10/0x10 [ 2354.835322][ C1] cpu_startup_entry+0x43/0x60 [ 2354.840087][ C1] start_secondary+0x101/0x110 [ 2354.844859][ C1] common_startup_64+0x13e/0x157 [ 2354.849821][ C1]