last executing test programs: 4m28.903134217s ago: executing program 3 (id=2279): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f80100001900010000000000fddbdf257f000001000000000000000000010000ac0400bb0000000000000010000d000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000001020100000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000fe07000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003000000000000000000000000000000200100000000000000000000000000000000000033000000000000000a010101000000000000000000000000043500000000060000000000bf0a0000000000000a010100000000000000000000000000000004d46c00000000000000e0000001000000000000000000000000053500000500"/432], 0x1f8}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="fc00000018000703ab092500090007000a070200000000020000369321000100f9e553b40005d0000000000000b7550c8292773411419da79bb94b46fe000000bc000500ff006c6c256f1a272f2e118934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b4100"/252, 0xfc) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m27.700204627s ago: executing program 3 (id=2280): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x9}, 0x8) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0xfffc, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x300, 0x0, &(0x7f0000000200)) (fail_nth: 1) 4m27.045253218s ago: executing program 3 (id=2283): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12020, 0x0, 0xfffffffffffffebe) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102000000106a05d30040000102030109022d0001010330050901"], 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406e05fc000000000000010902240001000000000904007eaeb9c9950002030000000100feff00012205000905"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x59}, 0x0}, 0x0) r4 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1/file4\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) unshare(0x28000600) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xa8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1, 0x0) 4m23.729823332s ago: executing program 3 (id=2295): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x2, 0xaa31, 0x4b, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x8}}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x9}, 0x8) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') openat$kvm(0xffffff9c, &(0x7f0000000040), 0xedfee3c6902929e4, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x300, 0x0, &(0x7f0000000200)) 4m20.413656702s ago: executing program 3 (id=2304): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x254, 0xffffff7a, 0xffffffff, 0x254, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, 0x0, 0x0, 'veth1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x41}, 0x6, 0x98, 0x100, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x9, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, '\x00', 'syz1\x00', {0x400}}}}, {{@uncond, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ah={{0x2c}, {[0x3, 0x2], 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x5, 0x0, 0x6, 'snmp\x00', 'syz0\x00', {0x5fd}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x344) (fail_nth: 3) 4m19.797354744s ago: executing program 3 (id=2307): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000104000000000000000001000000", @ANYRES32=r1, @ANYBLOB="000000000000000014004000000001"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) 4m19.465637089s ago: executing program 32 (id=2307): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000104000000000000000001000000", @ANYRES32=r1, @ANYBLOB="000000000000000014004000000001"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) 28.706882745s ago: executing program 4 (id=2996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8000000, 0x2, 0x0, 0x1, 0x80}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="3a10bd003aba0c702633", 0xa}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb"], 0x60}], 0x1, 0x8001) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/nfsfs\x00') prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(r5, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, &(0x7f0000000380)) 27.366598809s ago: executing program 4 (id=2999): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x102) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0xe01, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x627ac146}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6ab4ce18}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0xcc, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x8a, 0x6, "a38d5c13b1eabba4dcc800cd29d5d44c3dce4039fdb43b10b5bef6b35af97f683086e32e4430e46c1bb5615bf6a610bc3d570d86efb8ab765174d696a48ba64f27d57d81d69d96ec13808a27069a8b71578503ce56c47b9c9053a0640b35287f64358465778e45a8e20ecc4925d6aa1479e7ef3fd484f28f981204f811d914f64844a2943a40"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x70, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}]}, @NFTA_SET_USERDATA={0xc, 0xd, 0x1, 0x0, "0000797a22b5be88"}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x138, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xbe, 0x7, 0x1, 0x0, "3fd6aefc02c5b97655a67bb816baf29b19760f287da97f64320de7d8d4cb88742862cca5f0cde7283513416fd465f8eee017f36052d3ca34a5f4b7fe303a2d837de26cd5c57fb6c6c833ac29083d30a1b16d60fca25def6b598dc25011b66e38eaa79b2c77fbfa268fdc3abf7ac464220d5cf41fefe57b92d3baf483169ff363eb2709f705ad91c63e8c7841b2372509a181168d165af601277195b10fac53234acc2573ef8bbb70d0ed541add602cf2437fa8f58033c5a9e011"}, @NFTA_RULE_USERDATA={0xa, 0x7, 0x1, 0x0, "8a05c6d8795e"}]}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x368}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 26.329719735s ago: executing program 4 (id=3000): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) unshare(0x64000600) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x44080) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x89b) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x1fb0, 0x2a, 0xd27, 0xec0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x6, 0xfff1}, {0xf}, {0x4, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2e0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xffe0}}, @TCA_MATCHALL_ACT={0x2d4, 0x2, [@m_sample={0x160, 0x8, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x393d, 0x1, 0x10000000, 0x1, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}]}, {0xf1, 0x6, "be38d9dc7d56d0237f8693b9abe79faf78f0c8c3743d822cd4f364ef98413af1b1579a2dfbe48984c99b8d6c60c26545634aab2301968f8e34838f4c05e5e3df0881bf3e07e2be0a4bc99e6dd6a9ff7e32706b9d517951bf613fe2da6ead46bb7ea3fa5ac901b576ac5e67af281625c17b6de6590fb6552c47fbff6b3deb3d97fb397dec2d85031ca747fc7a8fc2f94430e9621cc300048b71eac868c9ad6ac799721525897034439abd45a9e24ce37ba3c12fc02544151ceb7560b3d6ab622dfedbf52d431dd9354deb5a808a6da82276f1fc24bc93014cc434f94fd55470e11266392e40def91218cfaf4787"}, {0xc}, {0xc}}}, @m_ife={0x170, 0x19, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x2, 0x67, 0x100}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xacb, 0xc, 0x6, 0xffff, 0x1000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0x7f, 0x20000005, 0x400, 0x2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xd7, 0x7, 0xd4, 0x8000}}}]}, {0xd8, 0x6, "dd5432dd88d1607b39fc01ec166db4fe3a18b639c41eec69607171ffd26e64e0127197f9279c9b2efa2ade14dde8d733c60c1f18c2419b8cc6e20cfc0a219bba2f0ac9d6528b22ab74b9f0673b50b9f522e995b6a830ea687dcc35681542752c7db90fa3b87d0ab038b2568a43674a59158dae617528dd90a48b0067f4312f8fec9f849f7c4cd98856bcb73d2537c75fbb9dabdd6383cc8a7fbe537fb5c115a21593caab7bdc9d6d6d045475a79a1ac00b46d70d2c888b13cf5bef86e6cdf33b60f45e7b1b5f3e04b89f91868169972ea3b62815"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1}}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c5c, 0x2, [@TCA_ROUTE4_ACT={0x11c8, 0x6, [@m_ct={0x144, 0x3, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x1a}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "12fe951ee1d4cd7c408c07ed17d97395"}]}, {0xd1, 0x6, "2d606f6de5b19c6f2b9460561dbad356694311ef12c69d7e62dc5fc4b6d0d023a3dc9cc35b637d5b4b691b8aab68f6c06a5321e751112fee946dfd96eb23788827ca0c542c36779d74dfca1501f776ae0c6a5754d163bb7aa79bd71570f129089a15c1041e5e4843e5229fdd753bb8663858e05b052dec0a19fb7d7e78424ae31ea9b4c1f7e7c8a795c2e8429d0c685e738166b822cc06c3cbf17de02780ebd6caabca4b3b09b7e5a59b73407512ec98d8e4247f52fd0293a8e663f171da8ab33c1773a829b5003a37a54544b0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1080, 0x12, 0x0, 0x0, {{0xa}, {0x1000, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x7, 0xff, 0x0, 0x8, 0x8}, 0x8, 0x0, [{0x7fffffff, 0x3, 0x9, 0x1, 0x2, 0x1aa8}, {0x9, 0x7f, 0x7, 0x0, 0x9}, {0x400, 0x7, 0x3, 0x8, 0x0, 0x5}, {0x0, 0x9, 0x3, 0x2, 0x10000, 0x8}, {0x5ce6, 0xff, 0x7, 0x9, 0xfffffff8, 0x5}, {0x8, 0x3ff, 0x0, 0x9, 0xf02, 0x2d3e}, {0xa, 0xe07a, 0x8, 0xfffffff8, 0x80, 0x2}, {0x6, 0x0, 0xfff, 0x0, 0xff, 0xe41e}, {0x5, 0x64f7, 0x400, 0xfff, 0x7, 0x1}]}, [{0x0, 0x7fff, 0x8001, 0xff, 0x6, 0x6}, {0xfffffffb, 0x7, 0x36c2, 0x4, 0x4, 0x3}, {0x9, 0xf, 0x9, 0xb, 0x10000, 0x2}, {0x6, 0x7, 0xff, 0x13cac803, 0xdc5, 0x8}, {0x1, 0x8, 0x7, 0x7, 0x8, 0x1}, {0x6, 0x2, 0x4, 0x92fb, 0xfff, 0x9}, {0x10, 0x2, 0xe, 0x9, 0x7, 0x6}, {0x7, 0xfffffff7, 0xb5c, 0x7, 0x4bc, 0xf84}, {0x9, 0xffff, 0x3, 0x1, 0xb, 0x40}, {0xd, 0x2, 0x5, 0x2, 0x9, 0xc}, {0x1, 0x7, 0xc2, 0xc, 0x4, 0x2}, {0xfffffff8, 0x7595, 0x2, 0x4, 0x4, 0x2}, {0xfffffffd, 0x4, 0x9, 0x2, 0xffffffff, 0x5}, {0x7f, 0x0, 0x1000, 0x4, 0x1, 0x3}, {0xb, 0x3, 0x200, 0xc832, 0x7, 0xf207}, {0x5, 0x9, 0xff, 0x1b, 0xf48, 0x6d6}, {0x0, 0xfffffffd, 0x0, 0x9, 0xff, 0x3}, {0x4, 0x0, 0x1, 0x8, 0x2, 0x4}, {0xfff, 0x8, 0x10, 0x4, 0x4, 0x800}, {0x4, 0x0, 0x6, 0x5, 0x5, 0x19f}, {0x5, 0x0, 0x1, 0x8, 0x80000000, 0x14}, {0x7fff, 0x4, 0x4, 0x4, 0x2, 0x8}, {0x7, 0x8, 0xfffffffe, 0x9, 0xf}, {0x2, 0x5, 0x1, 0x1000, 0x2, 0xd}, {0x8000, 0x5, 0x4, 0x4, 0x7fff, 0x960a}, {0x80000000, 0x2, 0x1, 0x80000001, 0x4cb2bd01, 0x4}, {0x5, 0x1, 0xfffffff9, 0xae8, 0xffff, 0x40}, {0x4bf7eb4b, 0x7, 0x2b, 0x3d13, 0x4}, {0x7, 0xff06, 0x9, 0x0, 0x9f7c, 0x81}, {0x1, 0xfad, 0x6, 0x8, 0x2, 0x7}, {0x0, 0x80, 0x400, 0x0, 0x1, 0x5}, {0x4, 0x9, 0xb, 0x0, 0x3, 0x8001}, {0x2, 0x4, 0xfffffffe, 0x5, 0x2, 0x5}, {0x9, 0x7f, 0xd969, 0x80000000, 0xb02, 0x40}, {0xa, 0x101, 0x8001, 0x146, 0x4, 0x6}, {0x4, 0x4, 0x3, 0x4, 0x5, 0x6}, {0x9, 0x4, 0x81, 0x9, 0x416}, {0x1ff, 0xa, 0x3, 0x3, 0xfffffffb, 0x2}, {0x5, 0x101, 0xe, 0x1, 0x9, 0x3}, {0x9, 0x1, 0xfffffffb, 0xfff, 0x7, 0x1}, {0x0, 0x1, 0x7f, 0x400, 0x9, 0x7}, {0x5, 0x6, 0x8, 0xad, 0x9, 0x5}, {0x8, 0xc, 0xba5, 0x3a1f, 0x5, 0x6}, {0x8, 0x1, 0x3800, 0x7dbe, 0xffff, 0x5}, {0x80, 0xb3d, 0x0, 0x380, 0x3, 0x2}, {0x5, 0xbf, 0x1, 0xe08e, 0x10000000, 0x7}, {0x819, 0x4d, 0x8, 0xc33, 0x1119}, {0x4, 0xd, 0x4, 0x92e7, 0x1, 0x5}, {0x4, 0x1, 0x7, 0x9, 0x3, 0xd}, {0x6, 0x4, 0x10001, 0x9, 0x42e, 0x8}, {0xfffffffa, 0x2, 0x7, 0x8, 0x8, 0x8}, {0x5, 0x6, 0x53e0, 0x0, 0x9, 0x7}, {0xbb8, 0x0, 0x2, 0x80000001, 0x7, 0x1}, {0x2, 0xd, 0x3, 0x10001, 0x8}, {0x9, 0x10000, 0x3, 0x4, 0x7, 0xfffffffd}, {0x9, 0x7, 0x7, 0x6, 0xe0, 0x3}, {0x8, 0x138d, 0x8, 0x0, 0xf, 0x1}, {0x5, 0x8000000, 0x4, 0x9, 0x9, 0x8}, {0x3, 0x8, 0x0, 0x63, 0x10, 0x2}, {0xc5, 0x9, 0xd, 0x7, 0x72d, 0x7ef1}, {0xcbd, 0x66, 0x9, 0x5, 0x7f, 0x8}, {0x3ff, 0x0, 0x401, 0x1, 0x1, 0x400}, {0x9, 0x0, 0x0, 0x0, 0x2, 0x7}, {0x2, 0xc, 0x8, 0x7f, 0x5, 0x7}, {0x80000000, 0x7, 0x3, 0x5, 0x6, 0x8000}, {0xfffffffc, 0x101, 0x3, 0xfffffffd}, {0x7, 0xfffffff7, 0x40, 0xffff, 0x5, 0x200}, {0x7, 0x20000, 0x1ff, 0x8, 0x7, 0x2}, {0x5, 0x6, 0x7, 0x5, 0x85e6, 0x7}, {0x0, 0x0, 0x7, 0xd, 0x7, 0x2}, {0x4, 0x100, 0xfffffffe, 0x2, 0x2, 0x1}, {0x7, 0xfffffffb, 0x4e4, 0x5, 0x9, 0xfffffffe}, {0x0, 0xb2, 0x0, 0xf457, 0x2, 0xdec5}, {0xb4f, 0xff, 0x7, 0x9, 0x3, 0x1}, {0x10000, 0x3, 0x2, 0x0, 0x3, 0x6}, {0x609a, 0xa, 0x6, 0x2, 0x6, 0x8}, {0x0, 0x5, 0x6000, 0x100, 0x7f, 0x8}, {0xfffffffd, 0x8, 0x5, 0x4, 0x40, 0x59d}, {0xb5, 0x60000000, 0x80000001, 0x1, 0x4, 0xe30}, {0x2, 0x4, 0x8, 0x880c, 0x8, 0x4a11}, {0x1, 0x6, 0x5, 0x73, 0x9, 0x3}, {0x1, 0x7, 0x580, 0x80, 0x81, 0xfff}, {0x0, 0x3, 0xc3, 0x80, 0xb297, 0x1}, {0x4, 0x0, 0x2000, 0x80, 0x9, 0x5}, {0xfffffff2, 0x5, 0xa, 0x8, 0xffff93a0, 0x9}, {0xd, 0xfffffffa, 0xc5, 0x400, 0xfffffffb, 0x9}, {0x4, 0x7, 0x9, 0x4, 0x2, 0xb}, {0xa, 0xb, 0x6, 0xfffffff7, 0x2, 0x4}, {0xffff, 0x3, 0x8, 0x4, 0x2, 0xa}, {0x4, 0x80000001, 0x968, 0x4a2566cd, 0x2, 0x10}, {0xfff, 0x9, 0x1, 0xffff, 0x2}, {0x4e4, 0x4, 0x5, 0x81, 0x0, 0x6}, {0xe7, 0x2, 0x2, 0x1000, 0x9, 0x7}, {0x9, 0x9, 0x6, 0x8, 0xffff, 0x6}, {0xfee, 0x1, 0x3, 0xf, 0x3, 0x7}, {0x1, 0x60f, 0x5, 0x51c, 0x400}, {0x2, 0xbc, 0x4, 0x8001, 0x6, 0x87}, {0x800, 0x1, 0x2, 0x0, 0x1, 0x8001}, {0x4, 0x79, 0x7, 0x100, 0x7ff, 0x6}, {0xffff, 0x6ae3, 0x3, 0x8, 0x5, 0xe5e}, {0x401, 0x0, 0x0, 0x6, 0x3, 0xbd2e}, {0xe, 0x8, 0x0, 0x4, 0xfffffffe, 0x3}, {0x3, 0x7fffffff, 0x5, 0xa, 0x8, 0x1}, {0x8, 0x941, 0x1ff, 0x80000001, 0x10000, 0x40}, {0xfffffffa, 0x81, 0x0, 0xfffffa23, 0x6, 0x9}, {0x6, 0x2, 0x163, 0x7ff, 0x8, 0x1}, {0x0, 0xf, 0x7, 0x7, 0x6, 0x400}, {0x1ff, 0xb, 0x0, 0x461, 0x3, 0x3}, {0x1, 0xf98, 0x338, 0x7f, 0x5000}, {0x3, 0xd2, 0x3, 0xcb5, 0x1, 0x9}, {0x0, 0x5, 0x4, 0x0, 0x2ced1ab9, 0x1}, {0x5, 0x4, 0xe13, 0x1, 0x3, 0x1}, {0x8, 0x6, 0xffff1cb9, 0xfffffff9, 0x1, 0x6}, {0x0, 0xf1, 0x0, 0x7fff, 0xec8, 0x8001}, {0x1cf, 0x1, 0x7fffffff, 0x0, 0x1, 0xd451}, {0x0, 0x7, 0x9, 0x7, 0xf}, {0x5, 0x8, 0x8, 0xffffffff, 0x4, 0xa}, {0x3ae7, 0x0, 0xffffffce, 0xb, 0x8, 0x9}, {0x9, 0x0, 0x0, 0xffffffff, 0x8, 0x200}, {0xf, 0x5, 0x5, 0x100, 0x0, 0x401}, {0x5, 0x7, 0x100000, 0x4, 0x10000, 0x1}, {0x1, 0x4, 0xd, 0x6, 0x5, 0x5}, {0x80000001, 0x54, 0x3, 0xfffffff9, 0x0, 0x80000001}, {0xc, 0x3, 0xc0b, 0x5, 0x5, 0x6}, {0x1, 0x9, 0x9, 0xffff98e9, 0x0, 0x4}, {0x3, 0x59, 0xc8, 0x7f, 0x9, 0xfff}, {0x6a, 0x2, 0x6, 0x7, 0x9, 0xfffffffe}, {0x5, 0x6, 0x3, 0x800, 0xa0a, 0x8}], [{0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0xcf84aa23c7e8228f}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3}, {0x3}, {0x4}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x5}, {0x4, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0xa8edd121ca6121af}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7}, {0x4}, {0x5}, {0x2}, {0x4}, {0x3}, {}, {0x5}, {0x3}, {0x2, 0x1}, {}, {0x5}, {0x2, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x104, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x55, 0x6, "89e24a33b7e8483b4b2d694f33c15a547aa8ffe04d0a667ae2b744f63b3b1aad4fc156aaec0bfa0c325fb9b6c1c964eb8c183d8cf90da623ed3a56132b83b21d5c9a37f5d9e3fc24924082c61d5fdc8d6a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5}, @TCA_ROUTE4_ACT={0x5dc, 0x6, [@m_skbedit={0xf0, 0x13, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}]}, {0xa4, 0x6, "64342c66f3a510b49b68c8d6635d6cf5ba9fea81da4cc2bd70dd76eff3442c5b0aa0d43dd5c6562e887259a4aa3c5f4c8ba2aad176f29b27f6ed21799d81f0b45230fdcf513205aa896a1d8c9a0f2fac34d7c74dc13fea1bf54a45edd64cdab9e55fe7fc57706cf970c6eb47a375a7136a876d26f9dd3b3021dfcc8421072a5375b79b77c1ba184c4ce0b8e33b7a8d4f43de77b4b7a55512db1dd01e166a27b3"}, {0xc, 0x7, {0x5bca4c302d5c6cc3}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x108, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xffffff06, 0x5, 0x81}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x18b}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x9e, 0x6, "e6678077d1a07cbaa229beb0d8075781b64f32f7157ae224bbe55297a3d4378aeb19ee795bc93a408584c3c0960f7f81ab7cb2572415bfa72b5450bd1d03178535757275bde5d77188f38da825cfbb89fc4ffa701c4cbbc577321ad32a55a3586a3f39c0201e8e99ecd475dbb8c636dc9a582f4b508e4bd4bca56065c93d9aef89cac3650c6943d376e7df30dbefd8e9d8934e12634b39409f7b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0xa8, 0x1e, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x3, 0x4, 0x4, 0xc21}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x2, 0x9, 0x400}, 0x5c}}]}, {0x43, 0x6, "4edc48882d0afdd85afe0f19ab78298f7fa1ed6cd2a5251c1fd7ba78b2d6c4da62461bcbaa7a64d7daa4b9b029b43b20341c144488ba8181b562cb3fd2986a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x74, 0xd, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x2}}]}, {0x40, 0x6, "5844fdb8d6cfdc874c5bd2599e7e96b6d8f34daa27e9dba2e0cc5dd5ae295df03c32d8da57d4c3580b2d850c202eb4d3f50f1f44302513a28b2cc1b3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x128, 0x1c, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x1, 0x4, 0x7, 0x40000000, 0x331}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="e0f7d7051c0f"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x101}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x8001, 0x7, 0x0, 0x6}, 0x4}}]}, {0x7b, 0x6, "5c185c99d1a506e94d5a518ab13e8d5d2a5649cd9713caccf0457ef4ab43d65721530f9ae3719e6a7fc4fa14314538379d0f6e4a7c7ed61fad4f338d898fe8c7de3b6b7e421fcacbc5a496ee513d7ab58b77f6b6c76bc91b5207d2bfdab6fa4471f849f64de3b7ca8c79c2e85e189099a88ae40e479196"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x140, 0xa, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x800}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="a63dfd4acb1a"}]}, {0xe4, 0x6, "f5c4a395bada3fbac476e551ca61550fcaa6170be2351c5422655588449ae3eff8afe64c205372884d78d991a374e0898ba1a1161b535a68b48c2ce9f47812847016b8b2cea94745f5b810fce0d12de8c6c9f12bf28f79ef845cb044312210878ffec1ccec8ac2c23d7f946078556f4ecc53f651ddff17d35e3251bdf779f25f899b28320f0b6882f221e45a0b358853e3ef8effcf403162f1755464c82b766648d1e8d44b7a6a70ce70a2dba1e9d83a7a7ed25687194bcacb842e198368ccd12e279d9bdaae7dc33d6d4781d0e859d7c09aa3a6dd4c9a46b6c3160e7ec45dc6"}, {0xc}, {0xc}}}, @m_gact={0x5c, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2070, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x262b, 0x6}}]}, {0x16, 0x6, "fdf7a3f8254efafbd3bb978a5ea47fcd58e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_ROUTE4_POLICE={0x84, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe3, 0x4, 0x8, 0x8, 0x9, {0x9, 0x0, 0x6, 0x8000, 0x6, 0xfffffff7}, {0x8, 0x0, 0xbc, 0xffff, 0xfff9, 0x7}, 0x0, 0x1, 0xc0a}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x62f, 0x7, 0xa848, 0xc96c, 0x101, {0x60, 0x1, 0x3, 0x6, 0xc119, 0x10}, {0xff, 0x0, 0x4, 0x160d, 0xfff5, 0xb0}, 0x10000, 0x9, 0xa}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x8, 0x200, 0xffffffff, 0x81, 0xfffffff9, 0x5, 0x84f, 0x1, 0x2, 0x2, 0x4, 0x2, 0x7, 0x3, 0x7, 0x1, 0x6, 0x3, 0x9, 0x9, 0x7, 0x5, 0x8, 0xe, 0x721, 0x9, 0xa, 0x8, 0xff, 0x4, 0x3, 0x200, 0x81, 0xfffffff7, 0xb1df, 0x67, 0x1, 0x1, 0x5, 0xac27, 0x3, 0x2, 0x0, 0x1, 0x7, 0x7ff, 0xfffffffc, 0xb, 0x10000, 0x9, 0x5f251279, 0x8000, 0x8, 0x1000000, 0x1000, 0x5cf3, 0xfff, 0x7, 0x7, 0x81, 0x6, 0x9, 0x3, 0x7, 0x1, 0x4, 0x3, 0xff, 0x0, 0x4075106f, 0x2, 0xfffffffb, 0x21a3, 0x4, 0x5, 0x5, 0x10000, 0xfffffffa, 0x0, 0x8, 0x7, 0x6, 0x9, 0x3, 0x401, 0x4a42b99d, 0x4, 0xf9ef, 0x5, 0xe, 0x3, 0x200, 0x5, 0x40, 0x12, 0xc1, 0x9, 0xfffffffd, 0x3, 0x6, 0x6, 0x6, 0x80000000, 0x9, 0x6, 0x8, 0x4, 0x1000, 0x899b, 0x7, 0x3fd, 0x9, 0x6, 0x6, 0x101, 0x4, 0x7, 0x744, 0xb, 0x9, 0x6, 0x8001, 0x80000001, 0x1, 0x6, 0x9, 0x1, 0x8, 0x7000000, 0x8, 0x2, 0x5d40, 0x21, 0x7f, 0x4, 0x7, 0x6, 0x6, 0x3, 0x59d9a51c, 0xb30b, 0x3ff, 0x6, 0x2, 0x1, 0x75e4, 0x15ca, 0x1, 0x10000, 0x0, 0x3, 0xc3, 0x5, 0xe, 0xb, 0x8, 0x40, 0x9, 0x4, 0x1c0, 0x8, 0x4, 0x1cc, 0x81, 0x4, 0x785d, 0x8000, 0x809c, 0x0, 0x9, 0x10, 0x2000, 0x9, 0x80000000, 0x9, 0x3, 0x0, 0x8, 0x4, 0x5, 0x8, 0xfb5d, 0xee6c, 0x7, 0x92, 0xffffffae, 0x7fffffff, 0x2, 0x7, 0x135, 0x4, 0x4, 0xc8b4, 0x867, 0x2, 0xe, 0x5, 0x4bf, 0x9, 0x7, 0x6, 0x8, 0x5, 0xfffffffd, 0x80000000, 0x3ff, 0x5, 0x401, 0x8, 0xfffffffb, 0x9c, 0x3, 0x0, 0xfffffffa, 0x1ff, 0xfffffff0, 0x8, 0x7, 0xe4, 0x4, 0x662, 0x2ae3, 0x6, 0x10000, 0x4, 0x75f5, 0x5, 0x4, 0x3, 0x20, 0xb5e, 0x70e, 0x2, 0x8, 0x9, 0x9, 0x5, 0x4, 0x58a7, 0x9, 0x21b8, 0x3, 0x9, 0x2, 0x2, 0xffff8001, 0x5, 0x8000000, 0x6, 0x43ad, 0x7fffffff, 0x0, 0x1, 0x2, 0x6]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3c}]}, 0x1fb0}}, 0x0) pipe2(&(0x7f0000000100), 0x180d00) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x1) flock(0xffffffffffffffff, 0x1) r5 = open(&(0x7f0000000200)='./file0\x00', 0x40042, 0x94) flock(r5, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x60480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.668105316s ago: executing program 4 (id=3012): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000140), 0x400080, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0x4f}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0xfc], 0x80, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x4008804) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400003ae, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x1d, r5}, 0x10, &(0x7f0000000980)={&(0x7f0000000900)={0x2, 0x9, 0x3, {0x0, 0x2710}, {}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0x15, 0x3, 0x0, 0x0, "c5a897bb23816489415d67a4db2b9fa4b6019af0f95b349de725b0ca17ec75269c47dc52a8b8882114982e61621159f62a7709e9586d166e11fbe499a588c987"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40088c0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "bc"}, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 18.738760261s ago: executing program 4 (id=3019): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) pread64(r1, 0x0, 0x0, 0x8) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') syz_emit_ethernet(0x0, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 14.71898748s ago: executing program 4 (id=3030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4, 0x18}, 0x50) 11.876849029s ago: executing program 2 (id=3039): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x1c) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007640)={0x1ff, 0x400, {r0}, {0xee00}, 0x51, 0x6}) madvise(&(0x7f000041d000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16=r1, @ANYRES16=r1, @ANYRES8=r1], 0x0) 8.740758197s ago: executing program 2 (id=3045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x130, 0x0, 0x8267, {0x6, 0x6, 0x0, '\x00', {0x200, 0x403, 0x0, 0x4, r3, r4, 0x6000, '\x00', 0x1, 0x5, 0x5, 0x3, {0x6, 0xe}, {0x7fff, 0x7}, {0x100000002, 0x1}, {0x68, 0xff}, 0x0, 0xef7, 0x9, 0x2}}}}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x19000, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x3ff}}, {@default_permissions}, {@default_permissions}], [{@fsname={'fsname', 0x3d, '/dev/vbi#\x00'}}, {@obj_user={'obj_user', 0x3d, '{#\'%*'}}]}}, 0x0, 0x0, &(0x7f0000000280)="732f08632f1d83519026aa62fd9cb04f8e0bfbed02f9235be3c2b996c66560305122f26ef7e8c1e205a16a00a69e256f035334cd0b136f70acffb53028da9d802843967225f6510c8ccbc727a529934d56b83ee4af8a9345f57cd83bdad31822583bb5ce19ace7b8705db7b6809df02c83ca33651e02b9f37f834005a75edf5d1913dbdcfdb53323a690") getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000005c0)={0x1, @pix={0x3, 0x0, 0x38415262, 0x0, 0x1, 0x0, 0x3, 0x13}}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffc) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000080)={0x1, 0x12000, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r10, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f00000000c0)={0x980000, 0x7, 0x3ff, 0xffffffffffffffff, 0x0, 0x0}) 7.486607758s ago: executing program 0 (id=3050): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a4, 0x274, 0x350, 0x0, 0x350, 0x350, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wg0\x00', 'ip6gre0\x00'}, 0x5e02, 0xd4, 0xf8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@physdev={{0x64}, {'bond_slave_1\x00', {0xff}, 'nicvf0\x00', {}, 0x11, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x94, 0xc4, 0x0, {0x0, 0x6000}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00', {0xff}, {}, 0x88}, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}}]}, @ECN={0x24}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}}]}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x485e026}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @loopback, 0x1000}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0xfffffffd, "ff0f000000000000f5a72d866b0000000000f0fffefe0000000000000300"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, r4, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xe, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0xa4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) 6.920555714s ago: executing program 2 (id=3053): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@gettaction={0x24, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x100000, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x4000010) syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0xd, 0x20, 0xd6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x3d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0xff, 0x6, "ad", "bf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x9, 0x0, {0x7, 0x25, 0x1, 0x1, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xac, 0x10, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x3, "8a0ffb"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0xd, 0xd, "01b3"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x41, 0x2, "46b9c5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x13, 0x1, {0x7, 0x25, 0x1, 0x82, 0x2}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x3, 0xf8, 0x2, 0xe7, 0x4}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0x7}]}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3fd75be752b2651e}}, {0x3a, &(0x7f0000000180)=@string={0x3a, 0x3, "41b4e373e452a8eb0f42836984ae3a9fa615149634f2ea607cd16ace6966f589b6080f0ba1383272a015b115f173cbcf31c2c123ef23fea9"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x440a}}, {0xdb, &(0x7f00000002c0)=@string={0xdb, 0x3, "8ab99be614223427b705f961cd1ba9fe3f1258254de7f15cae7e12d65e4cece9a719f07b5ec49fd18c2cec4925bfe255704be80187de0c1a0d3f7a5e08e6b665a97a7a27227e075173de2c7e90c35f433cf2f39f666b818e8d512c991217f8f6ee8702fac4995e6aebefd1839d3001acaf059ace9843e59823237bc08ce0487892a8e2043b10ed0e58a32e1af62d6aef9f5f3101f410974e21a45a235222715717ef3ce3c372382f1b3cf136300976fb32685937749362769655ff4419be72a8c19c20d924acaa012bc346aacffc9221038749de5b7e2b0bad"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}, {0x8e, &(0x7f0000000400)=@string={0x8e, 0x3, "87caa360e15c41a9696cc4f9b3f8ec87384530b77e1b447f552577b5c31325ec422a77fe1683800348c1fee9d1f66ac81319beb91802a1ba114f545ee1759cb4a5b8b9790e295573f80f675c9373f4d0e14fc5e9a8f4fd3c0658477edf8046ef698c9793c4c2f89ab4e3504e9dbf429613baf3a53448717a4e9277ebd862356b9557fb0996c882638e67e396"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io(r0, 0x0, 0x0) r2 = add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0x57, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000002280)=""/4100, 0x1004) syz_usb_control_io(r0, &(0x7f0000000980)={0x18, &(0x7f0000000740)={0x20, 0xb2a15e67802d54a0, 0x9, {0x9, 0x3, "f282692c628c22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.216984351s ago: executing program 0 (id=3054): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x6c, 0x13, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_OBJ_USERDATA={0x55, 0x8, "bef48884531f48f96dd4d877939ebbd9450b9716e8d384dedb8f1018595a36450c1c3b45acab970bc4e2e1d6a158e235b2f3359a71608ae92fb183162326970efdfd4b2e5002c36eaeb40dcf11b94e7d38"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[]) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r4, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.342712826s ago: executing program 5 (id=3056): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, 0x0, 0xa000002) 5.212584103s ago: executing program 0 (id=3057): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80020000160001000000001000000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000a"], 0x280}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000080000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000100000000000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000820000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf8}}, 0x0) 5.016243644s ago: executing program 2 (id=3058): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000140), 0x400080, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0x4f}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0xfc], 0x80, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x4008804) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400003ae, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x1d, r4}, 0x10, &(0x7f0000000980)={&(0x7f0000000900)={0x2, 0x9, 0x3, {0x0, 0x2710}, {}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0x15, 0x3, 0x0, 0x0, "c5a897bb23816489415d67a4db2b9fa4b6019af0f95b349de725b0ca17ec75269c47dc52a8b8882114982e61621159f62a7709e9586d166e11fbe499a588c987"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40088c0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "bc"}, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4.902368466s ago: executing program 0 (id=3059): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x18, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x7, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001280)=ANY=[@ANYBLOB="08000800060002000300140000000000000031232724e4aa185758a0d08664eb9aa037c4fabda4d7fe0bb3f3b082ba19fed2bb407e21ecbfe6475af4e3d363e01eb40b7b37266272bf80c07099c0e83a2eb13218242772456650c8a21f0d86127ff46b11d0647e1793d150b179cdc181ea57a7186fc407bc9d7b72b9711fd63423ed9426dc62c3639c5a1b4f7a67407dac97b3042c8a1a70e2a573b7f5c744b87a8e71a56453130352067abfe48f6dc86b3042ee72e0ede346bedfca703fba26b7cae371d273da63dc15caae636c98efc1e58366d43c068c75369647dbe62ce94100c03e2eb36f0e409a6271fe7a8a5d282ad24e21072bac2278cb8d79e4e111cf0b1085415af2675c3ce47e5de18ec5e8959cc403812f574a6bcfa60a7db7baddc97e4bf0308e16399d9e539fa209fccfa2435d8ce3c8a2dcd66ab90a7904d1a66054e21731171a429d1e72f87d3c36923639392084261c4c6e0d76f925ce1991bde270b08fc0d75d0ddbd16c3add74c91921dddf6b4a00c3fad4e5c6b76cb254f274ef94b635db00f9dc8cf1b37a7879af5e62e97ef2d24818853754ac842f34e1bd989adafc638e133674d0066afd43c21872b5fc561cb7123c9cc56f367ba56b9044b65e7963e753d172c334a2be545967536e87dd3dbdafa95115456219f401a2a60f8b5fd2b1a4f3197966fdd0c33684f7f2c5155caf512e7aee5ebca1741ed02f9822ce016eef8e2c1d352ad1cfb7d203b6e6f2ebfa779471b36831eb9094aa875d59b067a3ad8373d81c694619cc06c6b37baa3f222e56be29a2b7cd9eec081c1b01dc7189b1aac977c7b3b68162b2adeefd76dc4af3c91a238888d9d5a8d232d3df8c0228cc12a2f8a05d602b7c45aeaa44c3e00a959539d92eb5aeac58d026781400dd1c9a8343480b76ed846781d16b841033f21180751c235bedbf605494982d852b96884cf1b15309881ff83ce6b2e066fae1c00c2063b456b555825619e9f2aed4e8d63314e9ed08c3b56986f021d34c830008bd1a16df590c42919969c6ace88043b632f17a98d9fe23b856c30fb0a705f0c19e67d46b8813a519733368ed2e473a77140e4b012537a4038c999bc964bd734fdc7273db14f4420f72f90980ca64bd6d52f84ec932e04ffd2c994842e4163bdfb30fe90eb3b022fff9f007b33ce86ed59e64ffc40528cb1877654546d32b9390dd57ecef9341306544c47cf90dfb1ea4e631775f6c0636b636971b687b5005aafc6aec6470036aa933008b73c30fd13a23ab7376cd084d4f62ccf61a585d6aff6225201e7630f8fe6b5277cbd8f24a24289bb8b942cee63d9c8a26cf66be4b1aaf683e1f60808244c6567870c3d7aa7181e37d70902821905fcbe202138cb3532034d7e3c1ed8a6cd5394514473c17b73d991b10bbe6fdf60c12e2750b4b69c1a8053a921e1052d03c85f7f06e409fcbbe02f5e7a1fce3ac8470762b05a0fd37ce31c55d3dc2fd143a083f065aa973d2c84059c7ac87b776b2314d63e81ed34b4b90b6fd7383f5945f468d4a061a9a32d1792545be05df9ced58aca88960ea79ce9910778479479c4810881347421a21bdfa8d16c163f802b8faab6fe50873b316999aa84bfd9ae13e93f1ccd01efd881dd48655ab89d0716fe77b36b3e63d28f84d4d2b446cf4556b7dced28ce10f15c9daedd4d5f793aaab5a4feda723e6143e4c2340931776b8707069b3d18e8a5ebca7099b808cfcc7f2719a3b50cd6c3fab5a12331e3d80f1b7d7e0e2e030263697693f4ed146550b3e40bd56483a38982c59bc76fd7b47528ba43f68a1a1d4b6b35a58431b3d098fb6ef665eeb5000aceb21b64c9df77e3ac56d6225ffed76304cb71ece21f32b84055cdb8c895bb131eddf1fb3d3ef1951e061dd36e32bd4063dc5288ffc973c4c586ef6354ff6dc399aa6e4ad59631e52d05645dbf0c4d8fe871a9a36af297dd336e3d9edd1bb91f79431d5a20b03726bfcc27b76d3a275c5ac6462cc899afac77a87d5d5e20cfdb19806e33906cd89ca61769ab71f21bbdb8df711525310856bbbb1c4a1fe1f72ec6cb5c98015065cd76f28545de9c6c8cc46b6ab9047c9ceac508bd9e503d73987c9a90b799fea3530c87ee45e4b220790eb1ed1e03b6c8ce2beadf238404b2f895cb888b57ec944c15eb50c9649925e7633e513fe44e3b8e3ddb274a526edbc831ef179b9c39d81d0e52e5f293595c1818f69924774be88de05a87076b1b2419765239be0bbac6001bd4b7123c8a012efca08efdb9ad1e52563c3eee8814ded7d0b775846a04f6779d1505e6575efc19a3b8f8e85aa3d10a2c347814b7bedfca72f4d78d8f8ac3db8dc75e93496448d5938edf88229c37a259c4a256394a7eec1556262d6507f2f590d08d1dcf07d3fcf2abe4ca13fe56a76220e1f2418099a8a759d6f96cb9badcd7b43c50be4194130e7facc8ae40e0814d11b9739665c79df66e05ff78de2aa0d404157a9030160565b4ffeb603705ca41743b59744894a00dd384a164c30c1f7608c807e1a5060f9634a8c5dac1174ef1bada3b3b930a79dc25726a616ba9c285347654534b14b782a288cf945bf657441806ab0f6a1d56ddca29db184f5b03fb6e58b51a6d8e9d900a4716c2610b79e427aa1b95d16393f49867fed57e12371caa32b8f8a5503a0d764ba7384aade1d6838af4ab5769badbcf2dc2b7d2977d510266c8039f21e485e4e1b99cb23304214b701728f47767a3957a0cb7143145a9e7a80098e68ad2b867ef25e6d8ccb88c8043d21d2cdb6d9760e6ba5055d383acd68e90fe8f10822a40fd31ebf496fe3b0553096c67511d561bc9cd78e577905d74c916bdcdb222544c9ace89288a9259416173ab501b2f95d3e8905848c3abe1bb1fbd4b80065d7f8ef8b9d26d19b7da9252e7e9e8c3dcdaf2dcba16309e8e4186f0b8c7a82fded536ee86d70e567edb42c2c681d6d38142136a22be47af02df226deb5d2fe31c08cad83d81d10d86eeca81dcb9cd66146918859f0366bd115544e10eb4cbb8c6d245c85c4d10fc401233e49517c46d82291501d7d10067ac44bc861e5df77f72b174e3950ea05077d7d819d1e337b89836cf92ed6452c25ee8d86daca13a136408228333b9d5768781d8c6302577ce6b8a2dec592add4069dd9276ab3109467f269059416e21500fc814fb365fce598376f1ce8cbcbfd014b599a89c6db53ce49c3593ec69b087c154ffcb02512ca9d7888a69ffd67c1e1b72d66f208b7f4d1ddb7a9e0c9eaee035ccc3bd514dd538ada7468855739d49f17c06e301297dfbd24c77bb8afaf6c1ebaffafa971e9f36164cdb265764f1bf2a72f0cd630697ec4936420eda59b401f0771a7be233f1dff0ff9d6c3cf08df0839fb6c27371cfdcfc5901ee60601ab5bedc3f701ca1bf3584ec44a039b7f6d38184888847d02c8bf034b1e4a623d767abc45b6785887b5e5d3ceb400bd459a44bd6209d244f62f4037e04de080c602168a1cc1c8331c491ced575b1cbd1d5d51493d8bf26ed588712029ac4123e44531123f5aeb1123eecfed571a2df7868ab6b4effc3f15035a0c180d51ce07a16425b009af621a8fcf063f8ebff623f67a040d8a334aa9bc6b87c4d56ece48ec234fe5262329d0c4b64abe06e6752fea478744a0a8b8506cf104f687a8b51ee1635346062972f506911b854d0b19a52d7a9bf7fef94087bd46468b311c7721d2ee257132d6ff3bb86d7c7723a4f4f8fe8574eaa1a45cb15e2aebc6c459ca7ef25bc04a10ea90735ccf847b4d19e0acbdadb77380e65bed4574f0a1eb3bdce139ee492fdd2da36de3236c4b56b9757181518d1dce1d09316680d46f1b5862e61181ce9dc1b9131eb5791a8cf36dba05dc4bc6e79ae0c2eb71659a9833307dae0e3adb624fb7503e36366d509821d759721d951c1747d76893c10c0368e09d99f0b561fce014eacd9cde240bba44915130d49fc207712880a7f2d15dbb74789902bb0db1e190d023d0261e97593d60374d813931fb2720ab1f781b47a39f1de44cd2135242a1f411eaf6b7df4a56f17877202aee4e833ec1f2b7b72d50ea83a14ccd7702b9e0b06eedaf4ffe8003f92fcbb3b7105f3532cb768e815acaae7f696083dcadbe40bc1d208e3c82a5817d92faaa0a6fb62ea48f2306416e6faf7dae5e2223078e738d8af91ba55a20afcf41022793e570fd351514a147ab6856c86f47442096fdd657059d8eb8f16ceb1df205f788cf481ca6d616b74436804cbb7e50e0e74555d3f90b73f5e39d61f233c9cc589d19d8ca7495f4af8ff5057df4a60d72dadbb75c043a716506031fbd69c577570b49f9ab7b53fddc15056d9bc45853465fbb84cfa444c9c3e029b8d73295f753054a3dd3ffa5ab424748449b61447d7f93798ce6394399ef667262d196a46f0387024f81b7f76cf60ec530185e93dc9dd0339eb19dce91f8f645ec470e7a1c50da0235038a6dda7474256d4e4be5521a99de338906f782c14c884040dd69b1e7c87d567690280e2485c42b5ba05ef54df111992923ab213e8b8e798855ab28f91a2100cffa4bd140a7d67697d1a12f2798c6bb6f38ee8291186a505c4ec7f4bc2ec23a5a88b52f89547d4a376a104ec54198bad88f03a69b33925060f8792c0753682cb0c03e806497cfd93ed46db715877b477c3757b960fae5ae7bee76f79b90a8f9c08d6bbb46d5215b82a47a4646f4cc020cca30cd1869097227a0a1a41a2dfa9c46bb16aa645c1359368540cfd2b654028e1235db1992df691bf4d361139baac0634fcc04a6f2cf52ff6a8759d1ff68163a4f54d59117c809c2698e677c5fd7a5c63245c16356b1ba65e010362902bc9206265b94f90ccd62cd8698668c4c9406533426709d09f0275e252a3cc43a0a1f4a877b1ec504cf1a1dd3177e1f3c3f94d7ea1562d86bdc79fd2aa1799ffcd402b13de8fa213f27d96fc69c55e738f8fbee3aaf7c04ebe318cfc6af4bd169ed03f677a8436c0bfaffc7c964bb5935f8c65e68b309e709a241ce0e579c4f0fe2dbb93bba5a25bfb87ea87fd6944bfbf8787c914cf9000c623c76ea36bb18318e7f50c62bfa7337420c7975a972ce163de8a9e3e0e7124fe9552ea6f0818b5f82cd96522f0c8d02bd068d0051986dec8f1e762306e46a0e985c5ec202463cee5207c59ec1320aaa128dbcc5e2de641af913918e4c30eb968464ce1abcd4c737e4a74a0bfc08a18c0e89ecfad7643b73409091abd29ddb415169c3120418f905d87a3f97cd15d6106bc1be02942dc4c68a8cd741f3722d8b34e878b0b0b54e53daf132a67c0e581e5823877846f254a232d78c1e185d6f46ac76245519b6eec56c8102e5bd71c98c2b24f6397796144ebf63941f86ccc93037559f25bfb2ac6ace21ea0989f19476832b96793751b6710fb1d6040cfa01fb3550504aaffe2c11b767b16b13dd126a5dbf8a3edef3e9da6be80706f5b44ef181797689c36fb366d01578ac8a7c1aa49f4a4ea7d2f8d5f38b338dd4d294a45cdbfcdafab76720e8330b56cedd67df50bd144bd4b99dd7e5e81395315907072c059531370b29d3311d06ddc25b6499f408ac0470bed702c1d42b6360b56065b5e6450f2ccaaa1a9075cea2c787ec30baaa6c5d967417b3a4c53cc90c9c7408a5636b2c455c662d2cddc4dc2b168489f695f65107182c1526f8a0237767df640ad9bd0498ae6ff5113438fee7b211693da87afdbdbca50382cbc0b528555a7ab9b4894920763bd11e6e09eb0f3e4cd0984b5429b6a4dfefecfea50c006b615d71ef808e02631861b09da2c7dd73418d34fe828fd1ce656438d9c02bcd3f4a397e0adba9da3f1019c6eabeaa6db3834a3753f5f14936858e6a7d936d436323bb734561c53796a9afecf2a9acf2fbc81708b00605ac8ada6c3ea71e1b321f300f24c180263f6e52285c011b0e5a63100edbdf64f9ce42ac1f80096c7293c5b8dcfce9e335a1c6e3d1848e52baa66b8c01d5b6aadbfd0b57833e2b6ae67b728bdd4e3a025bab454bdf816cd70580c405da6cf332c9dd314c880ec480b69477f89c2a47798100"/4312], 0x1012) syz_io_uring_setup(0x68d6, &(0x7f0000000100)={0x0, 0xf618, 0x4000, 0x0, 0x1de}, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)) 4.535362768s ago: executing program 1 (id=3061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x870bd2a, 0x1200, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}}, 0x0) 4.282316534s ago: executing program 5 (id=3062): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4084) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = fsopen(0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) fchdir(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r5 = syz_open_pts(r3, 0x121500) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {0x4, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40448c2) 3.952884859s ago: executing program 0 (id=3063): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a4, 0x274, 0x350, 0x0, 0x350, 0x350, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wg0\x00', 'ip6gre0\x00'}, 0x5e02, 0xd4, 0xf8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@physdev={{0x64}, {'bond_slave_1\x00', {0xff}, 'nicvf0\x00', {}, 0x11, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x94, 0xc4, 0x0, {0x0, 0x6000}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00', {0xff}, {}, 0x88}, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}}]}, @ECN={0x24}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}}]}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x485e026}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @loopback, 0x1000}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0xfffffffd, "ff0f000000000000f5a72d866b0000000000f0fffefe0000000000000300"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, r4, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xe, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0xa4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) 3.856476589s ago: executing program 1 (id=3064): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1fffd) write$eventfd(r2, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x0, 0x5}) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@empty}, {}, {}, 0x0, 0x6e6bb6}}, [@mark={0xc}]}, 0xcc}}, 0x0) 3.344377912s ago: executing program 2 (id=3065): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = gettid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000001b00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x5, @loopback, 0xfffffffe}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1b2e", 0x2}], 0x1}}], 0x2, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20004804) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000003c0)={0x1, 0x8002, 0xffffffff, 0x0, 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0x3, 0x3}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x2c}}, 0x2044) syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz0\x00', 0xd3}, 0x1, 0x2, 0x2, r1, 0x0, 0x2080, 'syz1\x00', 0x0}) 3.254463093s ago: executing program 5 (id=3066): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) pread64(r1, 0x0, 0x0, 0x8) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') syz_emit_ethernet(0x0, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 2.908341169s ago: executing program 0 (id=3067): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x10fe8, "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"}, 0x11000}) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000400)=0x3) syz_usb_disconnect(r1) syz_usb_control_io$printer(r1, &(0x7f0000000200)={0xc, &(0x7f0000000140)={0x0, 0x9, 0x14, {0x14, 0xb, "84045719c99a3df749718167428966dd8b7b"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="002ddf9b377e04672daa"]}, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x20, 0x18, 0x20, "c3f8263e5f724e70f6208a10ade6ea1b993b360288d52cd03ec65b85934a781a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x87}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0x20, 0x0, 0x22, {0x20, "71f7ae76806c4338e6454cbbbe99624bf576193b2f1a4469eba37412d99ce792"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0xd7}}) uname(&(0x7f0000000000)=""/214) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0xed, &(0x7f0000000100)) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYBLOB="031c"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x10fe8, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x11000}) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000400)=0x3) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io$printer(r1, &(0x7f0000000200)={0xc, &(0x7f0000000140)={0x0, 0x9, 0x14, {0x14, 0xb, "84045719c99a3df749718167428966dd8b7b"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="002ddf9b377e04672daa"]}, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x20, 0x18, 0x20, "c3f8263e5f724e70f6208a10ade6ea1b993b360288d52cd03ec65b85934a781a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x87}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0x20, 0x0, 0x22, {0x20, "71f7ae76806c4338e6454cbbbe99624bf576193b2f1a4469eba37412d99ce792"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0xd7}}) (async) uname(&(0x7f0000000000)=""/214) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0xed, &(0x7f0000000100)) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYBLOB="031c"], 0x0) (async) 2.620552104s ago: executing program 1 (id=3068): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x2000000, 0xa, 0x301, 0x0, 0x0, 0x2) 2.295805018s ago: executing program 2 (id=3069): r0 = syz_open_dev$video(&(0x7f00000008c0), 0x101, 0x80081) r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x20004000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRESOCT=0x0, @ANYRESHEX=r3], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="830004002a60000020000d8008000100736950562cdc49254864597630266bbd9832740014000280"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2044840) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000200)={0xf000002, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) get_mempolicy(0x0, 0x0, 0x45c, &(0x7f0000011000/0x3000)=nil, 0xd) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000300)={r5, 0x0, 0x8, 0x6}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000280), &(0x7f00000002c0)={'U-', 0xfffff00000000000}, 0x16, 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000000c0)={r2, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1c, 0x1c, "0273c4b3bbc01c2cc895c9dac2b0ac50afd6c488b9560398f34478280431e9f97917bc065cf9c7bd595745c2a44f064063e478503ac577ceb7c3b9908e28609f", "6df48d51fa25c71626b995c19c95c1a296b039ba8abfc81e768c43b0155fbd45ba920f7fb61f4e855363bf9223b1f836510f628e5e73bd6d6b443876743d3518", "a00ed71b62fc67fa6b80baf9b3bc595be9456933423a6a14f746d3b9583c4612", [0x1, 0xb]}}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYRES8=r1, @ANYRES32, @ANYRESOCT=r2, @ANYBLOB="c902df77a791843861f71775ac5001c7b3bf10970ca513d32d32b4477a8e3e73721f6a33b7eb245b4409d056297969a5ec1033e0e7356ea643881f6ee608ef71276f7c9dddc43d8bf95dcd8a94c0cd9c5e697214ecb6d575b76bae1783d1136272f849ea0a02346b309ba51d9c4d4a09bfa4a5922435078ec46f55a1278ce095a980579c0e9d9baf896403d4cacb03f1cb387c182a864f91259eb7e7fe646fbe4669db3abce5216db1bedc0c15c71f4994b1c7ddd21c670e750040fabb9780d4b8675292f5528d0a202f4eaedce79e9fd84254d946b3", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, &(0x7f0000000b80)={0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="00f1c9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x0, 0x20000014) recvmmsg(r9, &(0x7f00000000c0), 0x0, 0x40000003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r11, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, &(0x7f0000000240)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0xf21) 1.661521676s ago: executing program 1 (id=3070): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000001c0)='keyring\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x2f25, &(0x7f0000000300)={0x0, 0x6240, 0x4, 0x2, 0x327}, &(0x7f00000000c0), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f00000eb000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, r3, 0x8000000) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @ioapic={0x1, 0xf, 0x8, 0x2, 0x0, [{0x6, 0x2, 0x3, '\x00', 0xfd}, {0x7, 0x2, 0x7}, {0x81, 0x5, 0x8, '\x00', 0x7}, {0x7c, 0x24, 0x3, '\x00', 0x4}, {0x2, 0x4, 0x9, '\x00', 0x3}, {0x8, 0x1, 0x8, '\x00', 0x9}, {0x6, 0x1, 0x3, '\x00', 0x7f}, {0x15, 0x5, 0x2, '\x00', 0x5}, {0xff, 0xd, 0x1, '\x00', 0x3}, {0xd, 0x89, 0x4, '\x00', 0x6}, {0x5f, 0x2, 0x4, '\x00', 0x4}, {0x10, 0x4, 0xff, '\x00', 0x7}, {0x81, 0x22, 0xbc}, {0x4, 0x2, 0x2, '\x00', 0x4}, {0x0, 0xa7, 0xb, '\x00', 0x6}, {0x6, 0x0, 0x9, '\x00', 0x4}, {0x4, 0x1, 0x3, '\x00', 0x5}, {0x3, 0x2, 0x8, '\x00', 0x6}, {0x1, 0x7, 0xa1, '\x00', 0x1}, {0x40, 0xf9, 0x4, '\x00', 0x4d}, {0x10, 0x0, 0x9c, '\x00', 0x2}, {0x4, 0x6, 0x2}, {0x7c, 0x7, 0x6, '\x00', 0x5}, {0x9, 0x5, 0xc, '\x00', 0xc}]}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)={@map, 0xffffffffffffffff, 0x15, 0x20}, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x43, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f91, 0x0, 0x0, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) 1.550613249s ago: executing program 5 (id=3071): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)='b', 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x4}, 0x15}, 0x25) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @loopback, 0x1000}, 0x1c) (fail_nth: 19) 563.615394ms ago: executing program 1 (id=3072): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3cc09a1d749", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfff7f038}, {0x6, 0xff}]}, 0x8) r3 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000000)={0x2, 0x9}, 0x0) sendmmsg$unix(r0, &(0x7f0000007580), 0x0, 0x4002104) 536.505539ms ago: executing program 5 (id=3073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) userfaultfd(0x80001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket(0xa, 0x2400000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000800000000000000701161000a0000000400008004d0b2491400", @ANYRES32=r2], 0x1c}}, 0x20040814) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) ppoll(&(0x7f0000000480)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = io_uring_setup(0x168f, &(0x7f0000000180)={0x0, 0x631d, 0x20, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x0}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) 376.231718ms ago: executing program 1 (id=3074): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000140), 0x400080, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0x4f}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0xfc], 0x80, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x4008804) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400003ae, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x1d, r4}, 0x10, &(0x7f0000000980)={&(0x7f0000000900)={0x2, 0x9, 0x3, {0x0, 0x2710}, {}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0x15, 0x3, 0x0, 0x0, "c5a897bb23816489415d67a4db2b9fa4b6019af0f95b349de725b0ca17ec75269c47dc52a8b8882114982e61621159f62a7709e9586d166e11fbe499a588c987"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40088c0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "bc"}, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 0s ago: executing program 5 (id=3075): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b80)=@newtfilter={0x878, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3ff, 0x9, 0x8, 0x1, 0x0, 0x7, 0x7ff, 0x2, 0x0, 0xb, 0x6, 0xf2, 0x4, 0x9, 0x6, 0x5, 0x0, 0x3, 0x3, 0x7, 0x8001, 0x7fff, 0x417f45fd, 0x8, 0x9, 0x401, 0x0, 0x4, 0x7fffffff, 0x3aba, 0x1, 0xffff, 0x7, 0x1, 0x4, 0xdee2, 0xc8a, 0x5, 0x5, 0x41, 0x9, 0xa7, 0x7, 0x9, 0x0, 0x1, 0x7, 0x4, 0x2, 0x1, 0x8, 0x4, 0xfffff55e, 0x42, 0x5, 0x40, 0xf, 0x6, 0xffffff03, 0xc35f, 0xba, 0x101, 0x7, 0xe2, 0x8000, 0x3, 0x100, 0x0, 0x0, 0x9, 0x100, 0x7, 0x1, 0x2, 0x0, 0x8, 0x66, 0x3, 0x3, 0xff, 0x4, 0x3, 0x8, 0xf59, 0x962, 0x9, 0xe9, 0xc, 0x9, 0x6, 0x6, 0x1, 0xffffff81, 0x8, 0x4, 0x7, 0x800, 0x1, 0x0, 0xfff, 0xb66e, 0x6, 0x3d1e, 0x101, 0xfffffff9, 0x7, 0x800000, 0x9, 0x4, 0x80, 0x4, 0x10000, 0x3, 0x0, 0x6, 0x6, 0x9044, 0x9, 0x9, 0x7, 0x7, 0x6, 0x6, 0x0, 0x9, 0x4, 0x7fffffff, 0x2, 0x4b5, 0x400, 0x1, 0xffffff6e, 0x2, 0x7, 0x401, 0xfffffff8, 0x7, 0x88c, 0xff, 0xffff, 0x6, 0x60000000, 0xff, 0x7ff, 0x5, 0x853f, 0x4, 0x7, 0x9, 0x5fc57df1, 0x5, 0xf, 0x3, 0x2, 0x39, 0x0, 0x1, 0x6, 0x7fffffff, 0x4, 0x8e, 0x5, 0xc0000, 0x8, 0x2, 0x7, 0x3, 0x8, 0x3, 0xffffffff, 0x4, 0x25ab, 0x7, 0x377, 0x4, 0xe69, 0x7fff, 0x7ff, 0x19, 0x9, 0x51c95e74, 0xba33, 0x7, 0x5, 0xbdf, 0xffffffff, 0xe, 0x101, 0x3, 0xffff, 0x3, 0x45d4, 0x6, 0x9c9d, 0x7, 0x4, 0x33b, 0x0, 0x6, 0xfffffffc, 0x8, 0x1000000, 0x80, 0x81, 0x3, 0x2, 0x8, 0x6, 0xfffffff9, 0x5, 0x200, 0xc00000, 0x3, 0xde65, 0xfffffff7, 0x5, 0x9b1, 0x0, 0x2, 0x313, 0x8, 0x9, 0x9, 0x9, 0x1, 0x1, 0x9, 0x36, 0xfffffff7, 0x6, 0x2, 0x24, 0x8, 0x7, 0x40, 0x4, 0xffff7fff, 0x1, 0x7, 0x5, 0x3, 0x3, 0x9, 0x2, 0xfffffffa, 0xfffffffd, 0x5, 0x8001, 0x6cd3053d, 0x2, 0x9, 0x7ff, 0x9, 0xfffffffd, 0x22]}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x1ff, 0x5, 0xc00, 0x8, 0xe659, 0x5, 0x7c2a, 0x7, 0x71, 0x10001, 0x4, 0x5, 0xea9, 0x30, 0x0, 0x9, 0x6, 0x5, 0x7, 0x987, 0x9, 0x0, 0x9, 0x8, 0x6, 0xb39a, 0x81, 0x3ff, 0x26, 0x5, 0xfff, 0xfffffff8, 0x2, 0x0, 0x0, 0xe20, 0xb015, 0x3, 0x6, 0x2f, 0xc, 0x8, 0x4, 0x1, 0x449, 0x1, 0x7, 0x6, 0x5, 0x1, 0x3d, 0x81, 0x1, 0x2, 0x8, 0x8000, 0x10001, 0x10001, 0x5826, 0x10001, 0x3, 0x2, 0x81, 0x4, 0x7, 0x3, 0x8001, 0x7, 0xffffff31, 0x2, 0x401, 0x101, 0x401, 0xfdd, 0x18e5, 0x7, 0x100, 0x7, 0x5, 0x3, 0x240, 0x0, 0x5, 0xfffffffd, 0x9, 0x7, 0x4d, 0x8, 0x9, 0x2f8, 0x7f, 0x4, 0x100, 0x2, 0x9, 0x400, 0x9, 0x9, 0x1, 0x6, 0x1, 0x0, 0x74062ffd, 0x0, 0x5, 0x0, 0x7f, 0x1, 0x7c, 0x82, 0x71b, 0x1, 0x5, 0xfffff330, 0x7, 0x2, 0x0, 0x1, 0x0, 0x9, 0x6ef074ac, 0x6, 0x0, 0x9, 0x8, 0x7, 0xcbbe, 0x3, 0x5, 0xffffac42, 0xfffffff9, 0x8001, 0x3, 0x4fe, 0x4, 0x7, 0xd, 0x2, 0xa1, 0xff, 0xff, 0x7, 0x6, 0x95, 0x1, 0x10, 0x80000000, 0x1, 0xb, 0x4, 0x3, 0x3, 0x1ff, 0x9, 0xffff, 0x21b, 0x8, 0x5, 0xfffffff9, 0x7f, 0xffff8279, 0xfffffff8, 0x3, 0x6, 0x8000, 0x2, 0x8, 0x2, 0x9, 0x6, 0x1, 0x3, 0x2, 0x5, 0xad, 0x9, 0x8000, 0x4, 0x0, 0x401, 0x0, 0xfffffff8, 0x2000000, 0x800, 0x3, 0x0, 0x7ff, 0x3, 0xffff, 0xa, 0xffffc2ca, 0xffffff01, 0x0, 0x800, 0xfffffff7, 0xf4, 0xfffffffc, 0x96, 0xfffffffb, 0xb, 0x6, 0xffff011a, 0x7, 0x4, 0x0, 0x80000000, 0x5, 0x44, 0x2e, 0x219aa204, 0xfff, 0x2, 0x5, 0x7, 0x2, 0x4, 0x3, 0x0, 0x5, 0xfffffff8, 0x8, 0xf1e, 0x9, 0x5, 0x9, 0xc, 0x7, 0x7, 0x35, 0x10000, 0x8, 0x8, 0x0, 0x3, 0xfff, 0xcbb7, 0x4, 0x16, 0x5, 0x10000, 0x18, 0x9, 0x2, 0x5, 0x8, 0x2d9, 0x6, 0xce5, 0x6, 0x7, 0x7, 0x9, 0x5, 0x3, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xba, 0x7, 0x3, 0x8, 0x54, {0x1, 0x1, 0x68b, 0x5, 0xbc5, 0x9}, {0x4, 0x1, 0x9, 0x2, 0x5, 0x2}, 0x9, 0x7, 0x4}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r11, 0x5452, &(0x7f0000000040)=0x8001) r12 = getpgid(0x0) fcntl$setownex(r11, 0xf, &(0x7f0000000140)={0x2, r12}) sendmmsg$unix(r10, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) ioctl$PTP_SYS_OFFSET_PRECISE(r9, 0xc0403d08, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000d9ff00000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x5) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={0x0, 0x3ace, 0x80000000, 0x1}) r14 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r14, &(0x7f0000000240)=[{&(0x7f0000000140)="f9", 0x1}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r14, 0x40085618, &(0x7f00000001c0)=0x1700) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={r13, "1c4309ba87f90647a781d79d90b51e74"}) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): f length 0, skipping remainder of the config [ 866.109914][ T5918] usb 2-1: config 0 has no interface number 0 [ 866.187861][ T5918] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 866.228020][ T5918] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 866.364546][ T5918] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 866.397137][ T5918] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 866.450533][ T5918] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 866.502467][ T5918] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 866.512311][ T6316] gspca_sunplus: reg_w_riv err -71 [ 866.517813][ T6316] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 866.529992][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.557671][ T6316] usb 6-1: USB disconnect, device number 23 [ 866.576206][ T5918] usb 2-1: config 0 descriptor?? [ 866.583362][T16478] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 866.619252][T16478] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 866.645970][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 866.976008][T16499] vlan0: entered promiscuous mode [ 866.991079][T16499] batadv0: entered promiscuous mode [ 867.303223][ T6316] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 867.443315][ T6316] usb 1-1: device descriptor read/64, error -71 [ 867.623092][ T6326] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 867.683099][ T6316] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 867.813083][ T6316] usb 1-1: device descriptor read/64, error -71 [ 867.905066][ T6326] usb 3-1: no configurations [ 867.910672][ T6326] usb 3-1: can't read configurations, error -22 [ 867.924016][ T6316] usb usb1-port1: attempt power cycle [ 868.063127][ T6326] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 868.231341][ T6326] usb 3-1: no configurations [ 868.240148][ T6326] usb 3-1: can't read configurations, error -22 [ 868.273733][ T6316] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 868.293377][ T6326] usb usb3-port1: attempt power cycle [ 868.324106][ T6316] usb 1-1: device descriptor read/8, error -71 [ 868.587415][ T5905] usb 2-1: USB disconnect, device number 16 [ 868.626117][ T6316] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 868.653850][ T6326] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 868.683497][ T6316] usb 1-1: device descriptor read/8, error -71 [ 868.733239][ T6325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 868.743942][ T6326] usb 3-1: no configurations [ 868.748578][ T6326] usb 3-1: can't read configurations, error -22 [ 868.819767][T16519] loop6: detected capacity change from 0 to 7 [ 868.827116][ T6316] usb usb1-port1: unable to enumerate USB device [ 868.854416][T16519] Dev loop6: unable to read RDB block 7 [ 868.906956][T16519] loop6: unable to read partition table [ 868.920226][ T6325] usb 5-1: Using ep0 maxpacket: 16 [ 868.921314][T16519] loop6: partition table beyond EOD, truncated [ 868.935984][T16519] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 868.951347][ T6326] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 869.030776][T16517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.040993][T16517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.086440][ T6326] usb 3-1: no configurations [ 869.091289][ T6326] usb 3-1: can't read configurations, error -22 [ 869.105274][ T6326] usb usb3-port1: unable to enumerate USB device [ 869.241549][ T5905] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 869.478213][ T5905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 869.486484][ T5905] usb 2-1: config 0 has no interface number 0 [ 869.505103][ T5905] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 869.514337][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.523281][ T5905] usb 2-1: Product: syz [ 869.534663][ T5905] usb 2-1: Manufacturer: syz [ 869.543442][ T5905] usb 2-1: SerialNumber: syz [ 869.562362][ T5905] usb 2-1: config 0 descriptor?? [ 869.733185][ T6326] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 869.890792][ T6326] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 869.900260][ T6326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.911319][ T6326] usb 6-1: Product: syz [ 869.930099][ T6326] usb 6-1: Manufacturer: syz [ 869.938932][ T6326] usb 6-1: SerialNumber: syz [ 869.964817][ T6326] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 869.973027][ T5905] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 869.981091][ T5905] usb 2-1: USB disconnect, device number 17 [ 870.101363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.110955][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.164721][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2792'. [ 870.256443][ T6320] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 870.763353][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 870.929196][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 870.954556][ T43] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 870.976085][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.020283][ T43] usb 1-1: config 0 descriptor?? [ 871.374312][ T6320] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 871.381839][ T6320] ath9k_htc: Failed to initialize the device [ 871.410551][ T6320] usb 6-1: ath9k_htc: USB layer deinitialized [ 871.444557][ T43] stadia 0003:18D1:9400.0036: item fetching failed at offset 0/3 [ 871.465157][ T43] stadia 0003:18D1:9400.0036: parse failed [ 871.492673][ T43] stadia 0003:18D1:9400.0036: probe with driver stadia failed with error -22 [ 871.861595][ T6325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 871.870665][ T6325] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 871.998526][ T6325] usb 5-1: can't read configurations, error -71 [ 872.179181][ T5834] Bluetooth: hci1: command 0x040f tx timeout [ 872.575605][ T5905] usb 6-1: USB disconnect, device number 24 [ 873.175203][ T30] audit: type=1326 audit(1751430690.022:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.200741][ T30] audit: type=1326 audit(1751430690.042:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.223543][ T30] audit: type=1326 audit(1751430690.042:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.246420][ T30] audit: type=1326 audit(1751430690.042:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.389943][ T30] audit: type=1326 audit(1751430690.042:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.443157][ T30] audit: type=1326 audit(1751430690.042:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.467631][ T30] audit: type=1326 audit(1751430690.042:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.491007][ T30] audit: type=1326 audit(1751430690.042:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.575822][ T30] audit: type=1326 audit(1751430690.042:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 873.634952][ T6326] usb 1-1: USB disconnect, device number 16 [ 873.715672][ T30] audit: type=1326 audit(1751430690.042:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 874.738262][ T6326] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 874.936269][ T6326] usb 3-1: Using ep0 maxpacket: 16 [ 874.943859][ T6326] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 875.041733][ T6326] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 875.163141][ T6326] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 875.250375][ T6326] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 875.271778][ T6326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.279918][ T6326] usb 3-1: Product: syz [ 875.284196][ T6326] usb 3-1: Manufacturer: syz [ 875.288800][ T6326] usb 3-1: SerialNumber: syz [ 875.515076][T16575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.533757][T16575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.861768][T16591] netlink: 'syz.5.2809': attribute type 9 has an invalid length. [ 875.900061][ T6326] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 875.913209][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 875.924753][ T6326] usb 3-1: unit 1 not found! [ 875.967155][ T6326] usb 3-1: USB disconnect, device number 7 [ 876.027363][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.303111][ T5905] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 876.310732][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 876.366784][T16586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.379065][T16586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.544727][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 876.563753][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.574898][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.834926][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2813'. [ 878.629259][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 878.704044][T16627] bond0: entered promiscuous mode [ 878.709274][T16627] bond_slave_0: entered promiscuous mode [ 878.715590][T16627] bond_slave_1: entered promiscuous mode [ 878.775040][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 878.792155][ T43] usb 5-1: can't read configurations, error -71 [ 879.129590][T16629] xt_CONNSECMARK: invalid mode: 0 [ 879.420695][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'. [ 879.532176][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 879.564434][ T5905] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 879.572261][ T5905] usb 2-1: can't read configurations, error -71 [ 880.013112][ T5905] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 880.185673][ T5905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 880.218207][ T5905] usb 2-1: config 0 has no interface number 0 [ 880.272857][ T5905] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 880.329488][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.344260][ T5905] usb 2-1: config 0 descriptor?? [ 880.356069][ T5905] usb 2-1: selecting invalid altsetting 1 [ 880.375487][ T5905] dvb_ttusb_budget: ttusb_init_controller: error [ 880.386525][ T5905] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 880.434390][T16644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2825'. [ 880.526463][ T5905] DVB: Unable to find symbol cx22700_attach() [ 880.556855][T16637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.653638][T16637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.765350][ T5905] DVB: Unable to find symbol tda10046_attach() [ 880.832106][ T5905] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 880.888024][ T5905] usb 2-1: USB disconnect, device number 19 [ 882.132486][T16671] xt_CONNSECMARK: invalid mode: 0 [ 882.320728][ T6320] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 882.337110][ T6326] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 882.504323][ T6320] usb 2-1: Using ep0 maxpacket: 16 [ 882.509580][ T6326] usb 5-1: Using ep0 maxpacket: 32 [ 882.549445][T16672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.559523][T16672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.587500][ T6326] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 882.647796][ T6326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.656794][ T6326] usb 5-1: Product: syz [ 882.661122][ T6326] usb 5-1: Manufacturer: syz [ 882.667720][ T6326] usb 5-1: SerialNumber: syz [ 882.714416][ T6326] usb 5-1: config 0 descriptor?? [ 882.871503][ T6326] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 883.020503][ T6326] usb 5-1: USB disconnect, device number 10 [ 883.023108][ T5905] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 883.217380][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 883.229192][ T5918] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 883.320819][ T5905] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 883.533138][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 883.611522][ T5905] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 883.628261][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.642518][ T5918] usb 3-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.661607][ T5905] usb 6-1: Product: syz [ 883.670261][T16690] FAULT_INJECTION: forcing a failure. [ 883.670261][T16690] name failslab, interval 1, probability 0, space 0, times 0 [ 883.685126][ T5905] usb 6-1: Manufacturer: syz [ 883.685434][T16690] CPU: 0 UID: 0 PID: 16690 Comm: syz.4.2839 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 883.685457][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 883.685468][T16690] Call Trace: [ 883.685475][T16690] [ 883.685483][T16690] dump_stack_lvl+0x189/0x250 [ 883.685512][T16690] ? __pfx____ratelimit+0x10/0x10 [ 883.685537][T16690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.685560][T16690] ? __pfx__printk+0x10/0x10 [ 883.685585][T16690] ? ref_tracker_alloc+0x318/0x460 [ 883.685607][T16690] should_fail_ex+0x414/0x560 [ 883.685631][T16690] should_failslab+0xa8/0x100 [ 883.685650][T16690] kmem_cache_alloc_noprof+0x73/0x3c0 [ 883.685674][T16690] ? skb_clone+0x212/0x3a0 [ 883.685698][T16690] skb_clone+0x212/0x3a0 [ 883.685728][T16690] __netlink_deliver_tap+0x404/0x850 [ 883.685759][T16690] ? netlink_deliver_tap+0x2e/0x1b0 [ 883.685778][T16690] netlink_deliver_tap+0x19c/0x1b0 [ 883.685797][T16690] netlink_unicast+0x72f/0x8d0 [ 883.685823][T16690] netlink_sendmsg+0x805/0xb30 [ 883.685850][T16690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.685871][T16690] ? __import_iovec+0x5d4/0x7f0 [ 883.685884][T16690] ? aa_sock_msg_perm+0x94/0x160 [ 883.685905][T16690] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 883.685925][T16690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.685944][T16690] __sock_sendmsg+0x219/0x270 [ 883.685969][T16690] ____sys_sendmsg+0x505/0x830 [ 883.685994][T16690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 883.686029][T16690] ___sys_sendmsg+0x21f/0x2a0 [ 883.686050][T16690] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.686104][T16690] ? __fget_files+0x2a/0x420 [ 883.686121][T16690] ? __fget_files+0x3a0/0x420 [ 883.686149][T16690] __sys_sendmsg+0x164/0x220 [ 883.686169][T16690] ? __pfx___sys_sendmsg+0x10/0x10 [ 883.686202][T16690] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 883.686226][T16690] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.686249][T16690] __do_fast_syscall_32+0xb6/0x2b0 [ 883.686273][T16690] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.686298][T16690] do_fast_syscall_32+0x34/0x80 [ 883.686320][T16690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 883.686339][T16690] RIP: 0023:0xf7fa4539 [ 883.686353][T16690] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 883.686368][T16690] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 883.686386][T16690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 883.686398][T16690] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 883.686407][T16690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 883.686416][T16690] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 883.686426][T16690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.686452][T16690] [ 883.971869][ T5918] usb 3-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.989930][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 884.000844][ T5918] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 884.010311][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.045418][ T5918] usb 3-1: config 0 descriptor?? [ 884.157778][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 884.242566][ T5905] usb 6-1: SerialNumber: syz [ 884.361973][T16687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.385009][T16687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.396889][T16682] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 884.412467][ T5905] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 884.453896][ T5939] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 884.563103][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 884.753252][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 884.764501][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.776235][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.787114][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 884.842760][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.927090][ T5918] usbhid 3-1:0.0: can't add hid device: -71 [ 884.948714][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 884.991117][ T5918] usb 3-1: USB disconnect, device number 8 [ 885.013650][ T43] usb 5-1: config 0 descriptor?? [ 885.236392][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2840'. [ 885.285822][ T6320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 885.305584][ T6320] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 885.316973][ T6320] usb 2-1: can't read configurations, error -71 [ 885.468210][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 885.601269][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 885.667920][ T43] usb 5-1: USB disconnect, device number 11 [ 885.703150][ T5939] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 885.723518][ T5939] ath9k_htc: Failed to initialize the device [ 885.817756][ T5939] usb 6-1: ath9k_htc: USB layer deinitialized [ 885.854307][T16706] sctp: [Deprecated]: syz.2.2844 (pid 16706) Use of int in maxseg socket option. [ 885.854307][T16706] Use struct sctp_assoc_value instead [ 885.965333][T16706] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.2844'. [ 886.018975][ T43] usb 6-1: USB disconnect, device number 25 [ 886.305823][ T30] audit: type=1326 audit(1751430703.152:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.4.2846" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x0 [ 886.378245][T16723] binder: 16722:16723 ioctl c0306201 0 returned -14 [ 886.406703][T16723] FAULT_INJECTION: forcing a failure. [ 886.406703][T16723] name failslab, interval 1, probability 0, space 0, times 0 [ 886.421504][T16723] CPU: 0 UID: 0 PID: 16723 Comm: syz.2.2851 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 886.421530][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 886.421541][T16723] Call Trace: [ 886.421549][T16723] [ 886.421557][T16723] dump_stack_lvl+0x189/0x250 [ 886.421586][T16723] ? __pfx____ratelimit+0x10/0x10 [ 886.421609][T16723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.421633][T16723] ? __pfx__printk+0x10/0x10 [ 886.421657][T16723] ? __pfx___might_resched+0x10/0x10 [ 886.421679][T16723] ? fs_reclaim_acquire+0x7d/0x100 [ 886.421703][T16723] should_fail_ex+0x414/0x560 [ 886.421729][T16723] should_failslab+0xa8/0x100 [ 886.421748][T16723] __kmalloc_noprof+0xcb/0x4f0 [ 886.421764][T16723] ? io_cache_alloc_new+0x40/0x100 [ 886.421785][T16723] ? __lock_acquire+0xab9/0xd20 [ 886.421811][T16723] io_cache_alloc_new+0x40/0x100 [ 886.421835][T16723] __io_prep_rw+0x23f/0xd80 [ 886.421863][T16723] ? __pfx___io_prep_rw+0x10/0x10 [ 886.421879][T16723] ? percpu_ref_get_many+0x21/0x1e0 [ 886.421895][T16723] ? percpu_ref_get_many+0x21/0x1e0 [ 886.421923][T16723] io_prep_rwv+0x8c/0x3d0 [ 886.421941][T16723] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 886.421965][T16723] ? __pfx_io_prep_rwv+0x10/0x10 [ 886.421994][T16723] io_submit_sqes+0x90f/0x1c50 [ 886.422045][T16723] __se_sys_io_uring_enter+0x2df/0x2b20 [ 886.422069][T16723] ? seccomp_cache_check_allow_bitmap+0x5f/0x80 [ 886.422087][T16723] ? __seccomp_filter+0x18ff/0x1a40 [ 886.422123][T16723] ? ksys_write+0x1cb/0x250 [ 886.422139][T16723] ? __pfx___seccomp_filter+0x10/0x10 [ 886.422162][T16723] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 886.422179][T16723] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 886.422203][T16723] ? __pfx_vfs_write+0x10/0x10 [ 886.422229][T16723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 886.422256][T16723] ? __fget_files+0x3a0/0x420 [ 886.422286][T16723] ? ksys_write+0x22a/0x250 [ 886.422306][T16723] ? __secure_computing+0xe2/0x2a0 [ 886.422331][T16723] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 886.422360][T16723] __do_fast_syscall_32+0xb6/0x2b0 [ 886.422384][T16723] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.422410][T16723] do_fast_syscall_32+0x34/0x80 [ 886.422434][T16723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 886.422454][T16723] RIP: 0023:0xf7f26539 [ 886.422469][T16723] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 886.422485][T16723] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 886.422503][T16723] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000000847ba [ 886.422515][T16723] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 886.422529][T16723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 886.422540][T16723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 886.422551][T16723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 886.422577][T16723] [ 886.741930][T16723] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2851'. [ 886.764834][T16723] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2851'. [ 887.943283][T16747] xt_CONNSECMARK: invalid mode: 0 [ 887.973332][ T6316] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 888.133270][ T6316] usb 6-1: Using ep0 maxpacket: 16 [ 888.152398][T16743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.171533][T16743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.313298][ T6326] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 888.479661][ T6326] usb 5-1: Using ep0 maxpacket: 16 [ 888.505197][ T6326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.556641][ T6326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.637204][ T6326] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 888.701820][ T6326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.790746][ T6326] usb 5-1: config 0 descriptor?? [ 889.009180][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2857'. [ 889.074582][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2859'. [ 889.243360][ T6326] usbhid 5-1:0.0: can't add hid device: -71 [ 889.249679][ T6326] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 889.272422][ T6326] usb 5-1: USB disconnect, device number 12 [ 889.821301][T16768] FAULT_INJECTION: forcing a failure. [ 889.821301][T16768] name failslab, interval 1, probability 0, space 0, times 0 [ 889.878864][T16768] CPU: 1 UID: 0 PID: 16768 Comm: syz.4.2863 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 889.878891][T16768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 889.878902][T16768] Call Trace: [ 889.878909][T16768] [ 889.878914][T16768] dump_stack_lvl+0x189/0x250 [ 889.878934][T16768] ? __pfx____ratelimit+0x10/0x10 [ 889.878950][T16768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 889.878972][T16768] ? __pfx__printk+0x10/0x10 [ 889.878996][T16768] ? ref_tracker_alloc+0x318/0x460 [ 889.879020][T16768] should_fail_ex+0x414/0x560 [ 889.879045][T16768] should_failslab+0xa8/0x100 [ 889.879058][T16768] kmem_cache_alloc_noprof+0x73/0x3c0 [ 889.879073][T16768] ? skb_clone+0x212/0x3a0 [ 889.879088][T16768] skb_clone+0x212/0x3a0 [ 889.879101][T16768] __netlink_deliver_tap+0x404/0x850 [ 889.879129][T16768] ? netlink_deliver_tap+0x2e/0x1b0 [ 889.879149][T16768] netlink_deliver_tap+0x19c/0x1b0 [ 889.879170][T16768] netlink_unicast+0x72f/0x8d0 [ 889.879197][T16768] netlink_sendmsg+0x805/0xb30 [ 889.879214][T16768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.879226][T16768] ? __import_iovec+0x5d4/0x7f0 [ 889.879234][T16768] ? aa_sock_msg_perm+0x94/0x160 [ 889.879247][T16768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 889.879261][T16768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.879287][T16768] __sock_sendmsg+0x219/0x270 [ 889.879315][T16768] ____sys_sendmsg+0x505/0x830 [ 889.879341][T16768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.879364][T16768] ___sys_sendmsg+0x21f/0x2a0 [ 889.879377][T16768] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.879407][T16768] ? __fget_files+0x2a/0x420 [ 889.879422][T16768] ? __fget_files+0x3a0/0x420 [ 889.879452][T16768] __sys_sendmsg+0x164/0x220 [ 889.879474][T16768] ? __pfx___sys_sendmsg+0x10/0x10 [ 889.879503][T16768] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 889.879518][T16768] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.879532][T16768] __do_fast_syscall_32+0xb6/0x2b0 [ 889.879546][T16768] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.879564][T16768] do_fast_syscall_32+0x34/0x80 [ 889.879588][T16768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 889.879608][T16768] RIP: 0023:0xf7fa4539 [ 889.879623][T16768] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 889.879638][T16768] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 889.879653][T16768] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 889.879659][T16768] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 889.879665][T16768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 889.879670][T16768] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 889.879676][T16768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 889.879690][T16768] [ 889.879765][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2863'. [ 890.604995][ T6316] usb 6-1: unable to get BOS descriptor or descriptor too short [ 890.642213][ T6316] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 890.733294][ T6316] usb 6-1: can't read configurations, error -71 [ 890.983106][ T43] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 890.993502][ T6320] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 891.123074][ T43] usb 3-1: device descriptor read/64, error -71 [ 891.164072][ T6320] usb 5-1: Using ep0 maxpacket: 16 [ 891.167933][T16791] xt_CONNSECMARK: invalid mode: 0 [ 891.197318][ T6320] usb 5-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 891.272276][ T6320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 891.345096][ T6320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 42369, setting to 1024 [ 891.363160][ T43] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 891.420458][ T6320] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 891.493047][ T5939] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 891.513045][ T43] usb 3-1: device descriptor read/64, error -71 [ 891.544330][ T6320] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 891.564957][ T6320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.584403][ T6320] usb 5-1: Product: syz [ 891.588939][ T6320] usb 5-1: Manufacturer: syz [ 891.600050][ T6320] usb 5-1: SerialNumber: syz [ 891.610348][ T6320] usb 5-1: config 0 descriptor?? [ 891.623566][ T43] usb usb3-port1: attempt power cycle [ 891.640541][ T6320] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 891.643115][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 891.716513][ T6320] gspca_stv06xx: st6422 sensor detected [ 891.718787][ T5939] usb 1-1: config 0 has no interfaces? [ 891.744197][ T5939] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 891.780778][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.827799][ T5939] usb 1-1: config 0 descriptor?? [ 891.963599][ T43] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 891.985196][ T6320] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 892.005362][ T6320] usb 5-1: USB disconnect, device number 13 [ 892.025689][ T43] usb 3-1: device descriptor read/8, error -71 [ 892.125623][ T6316] usb 1-1: USB disconnect, device number 17 [ 892.273105][ T43] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 892.304250][ T43] usb 3-1: device descriptor read/8, error -71 [ 892.406791][T16802] FAULT_INJECTION: forcing a failure. [ 892.406791][T16802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.429417][ T43] usb usb3-port1: unable to enumerate USB device [ 892.452518][T16802] CPU: 1 UID: 0 PID: 16802 Comm: syz.4.2874 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 892.452544][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 892.452556][T16802] Call Trace: [ 892.452564][T16802] [ 892.452572][T16802] dump_stack_lvl+0x189/0x250 [ 892.452601][T16802] ? __pfx____ratelimit+0x10/0x10 [ 892.452625][T16802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.452649][T16802] ? __pfx__printk+0x10/0x10 [ 892.452668][T16802] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 892.452699][T16802] ? filemap_get_entry+0xad/0x2f0 [ 892.452716][T16802] ? filemap_get_entry+0xad/0x2f0 [ 892.452738][T16802] should_fail_ex+0x414/0x560 [ 892.452764][T16802] copy_folio_from_iter_atomic+0x311/0x18f0 [ 892.452797][T16802] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 892.452841][T16802] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 892.452874][T16802] ? shmem_write_begin+0x15f/0x2b0 [ 892.452903][T16802] generic_perform_write+0x5f1/0x910 [ 892.452939][T16802] ? __pfx_generic_perform_write+0x10/0x10 [ 892.452960][T16802] ? down_write+0x162/0x1f0 [ 892.452980][T16802] ? file_update_time+0x2da/0x490 [ 892.453004][T16802] shmem_file_write_iter+0xf8/0x120 [ 892.453022][T16802] vfs_write+0x54b/0xa90 [ 892.453048][T16802] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 892.453064][T16802] ? __pfx_vfs_write+0x10/0x10 [ 892.453099][T16802] ? __fget_files+0x2a/0x420 [ 892.453126][T16802] ksys_write+0x145/0x250 [ 892.453145][T16802] ? __pfx_ksys_write+0x10/0x10 [ 892.453164][T16802] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 892.453187][T16802] ? lockdep_hardirqs_on+0x9c/0x150 [ 892.453210][T16802] __do_fast_syscall_32+0xb6/0x2b0 [ 892.453234][T16802] ? lockdep_hardirqs_on+0x9c/0x150 [ 892.453259][T16802] do_fast_syscall_32+0x34/0x80 [ 892.453281][T16802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.453301][T16802] RIP: 0023:0xf7fa4539 [ 892.453316][T16802] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 892.453331][T16802] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 892.453349][T16802] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 892.453360][T16802] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 892.453371][T16802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.453380][T16802] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 892.453390][T16802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.453417][T16802] [ 892.938564][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 893.024753][ T6320] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 893.183225][ T6320] usb 6-1: Using ep0 maxpacket: 16 [ 893.192109][ T6320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.205180][ T6320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.215969][ T6320] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 893.233705][ T6320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.252631][ T6320] usb 6-1: config 0 descriptor?? [ 893.283145][ T6316] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 893.453683][ T6316] usb 2-1: Using ep0 maxpacket: 16 [ 893.476345][T16805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2873'. [ 893.491366][T16813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.501268][T16813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.686672][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'. [ 893.739124][ T6320] usbhid 6-1:0.0: can't add hid device: -71 [ 893.745461][ T6320] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 893.782898][ T6320] usb 6-1: USB disconnect, device number 28 [ 893.792840][T16820] sctp: [Deprecated]: syz.2.2880 (pid 16820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 893.792840][T16820] Use struct sctp_sack_info instead [ 894.459917][T16833] xt_CONNSECMARK: invalid mode: 0 [ 895.073877][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 895.086411][T16836] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2884'. [ 895.323756][ T43] usb 1-1: config 0 has no interfaces? [ 895.411405][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 895.448491][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.495905][ T43] usb 1-1: Product: syz [ 895.500115][ T43] usb 1-1: Manufacturer: syz [ 895.534436][ T43] usb 1-1: SerialNumber: syz [ 895.565811][ T43] usb 1-1: config 0 descriptor?? [ 895.993615][T16830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.005240][T16830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.036547][T16830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.048627][T16830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.073735][T16830] @: renamed from vlan0 (while UP) [ 896.693612][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 897.263133][ T6326] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 897.358972][ T43] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 897.403345][ T6326] usb 5-1: device descriptor read/64, error -71 [ 897.440112][ T43] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 897.481129][ T6316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 897.491196][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 897.515176][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.556866][ T6316] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 897.589139][ T6316] usb 2-1: can't read configurations, error -71 [ 897.624053][ T43] usb 1-1: USB disconnect, device number 18 [ 897.643241][ T6326] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 897.773376][ T30] audit: type=1326 audit(1751430714.602:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.2.2887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 897.911969][ T30] audit: type=1326 audit(1751430714.602:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.2.2887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 897.943352][ T6326] usb 5-1: device descriptor read/64, error -71 [ 898.076306][ T6326] usb usb5-port1: attempt power cycle [ 898.083514][ T6316] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 898.112888][ T30] audit: type=1326 audit(1751430714.602:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.2.2887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 898.247529][ T6316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 898.263910][ T6316] usb 2-1: not running at top speed; connect to a high speed hub [ 898.281254][ T6316] usb 2-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 898.297288][ T6316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 898.306528][ T6316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.323084][ T30] audit: type=1326 audit(1751430714.602:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.2.2887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 898.358581][ T30] audit: type=1326 audit(1751430714.602:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.2.2887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 898.362529][ T6316] usb 2-1: Product: syz [ 898.387165][ T30] audit: type=1326 audit(1751430714.602:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.2.2887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 898.455591][ T6326] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 898.478786][ T6316] usb 2-1: Manufacturer: syz [ 898.498340][ T6326] usb 5-1: device descriptor read/8, error -71 [ 898.506756][ T6316] usb 2-1: SerialNumber: syz [ 898.596908][ T5939] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 898.596916][ T6316] usb 2-1: bad CDC descriptors [ 898.697000][T16871] xt_CONNSECMARK: invalid mode: 0 [ 898.743038][ T6326] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 898.743103][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 898.775635][ T6326] usb 5-1: device descriptor read/8, error -71 [ 898.835301][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.864493][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.898470][ T5939] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 898.903045][ T6326] usb usb5-port1: unable to enumerate USB device [ 898.960354][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.020702][ T5939] usb 1-1: config 0 descriptor?? [ 899.237618][T16869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2893'. [ 899.325402][ T43] usb 3-1: USB disconnect, device number 13 [ 899.453807][ T5939] usbhid 1-1:0.0: can't add hid device: -71 [ 899.461474][ T5939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 899.490729][ T5939] usb 1-1: USB disconnect, device number 19 [ 899.544399][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2896'. [ 900.513282][T16894] input: syz0 as /devices/virtual/input/input68 [ 900.565237][T16898] xt_CONNSECMARK: invalid mode: 0 [ 900.582297][T16899] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2905'. [ 900.651122][T16899] veth0_to_team: entered promiscuous mode [ 900.660157][T16899] veth0_to_team: entered allmulticast mode [ 901.113465][ T5939] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 901.253184][ T5939] usb 1-1: device descriptor read/64, error -71 [ 901.523126][ T5939] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 901.554611][ T6326] usb 2-1: USB disconnect, device number 23 [ 901.663235][ T5939] usb 1-1: device descriptor read/64, error -71 [ 901.853473][ T6316] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 901.863520][ T5939] usb usb1-port1: attempt power cycle [ 901.949178][T16921] syzkaller1: entered promiscuous mode [ 901.955215][T16921] syzkaller1: entered allmulticast mode [ 902.034199][ T6316] usb 3-1: Using ep0 maxpacket: 16 [ 902.045207][ T6316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.068518][ T6316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.078525][ T6326] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 902.091809][ T6316] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 902.102586][ T6316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.115433][ T6316] usb 3-1: config 0 descriptor?? [ 902.223098][ T6326] usb 5-1: device descriptor read/64, error -71 [ 902.223176][ T5939] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 902.271298][ T5939] usb 1-1: device descriptor read/8, error -71 [ 902.326100][T16912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2910'. [ 902.403139][T16925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2915'. [ 902.513265][ T6326] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 902.546753][ T5939] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 902.614321][ T6316] usbhid 3-1:0.0: can't add hid device: -71 [ 902.631226][ T6316] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 902.646050][ T6326] usb 5-1: device descriptor read/64, error -71 [ 902.664303][ T5939] usb 1-1: device descriptor read/8, error -71 [ 902.735102][ T6316] usb 3-1: USB disconnect, device number 14 [ 902.855202][ T6326] usb usb5-port1: attempt power cycle [ 902.949799][ T5939] usb usb1-port1: unable to enumerate USB device [ 903.244167][ T6326] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 903.573736][ T6326] usb 5-1: device descriptor read/8, error -71 [ 903.763444][T16931] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 903.770020][T16931] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 903.909886][ T6326] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 903.920254][T16931] vhci_hcd vhci_hcd.0: Device attached [ 903.943731][ T6326] usb 5-1: device descriptor read/8, error -71 [ 904.053586][ T6326] usb usb5-port1: unable to enumerate USB device [ 904.087606][T16940] loop6: detected capacity change from 0 to 524287999 [ 904.193146][ T5939] usb 38-1: SetAddress Request (6) to port 0 [ 904.199244][ T5939] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 904.332917][T16933] vhci_hcd: connection reset by peer [ 904.342068][ T9616] vhci_hcd: stop threads [ 904.353042][ T9616] vhci_hcd: release socket [ 904.358696][ T9616] vhci_hcd: disconnect device [ 904.562008][T16943] xt_CONNSECMARK: invalid mode: 0 [ 906.199667][ T6320] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 906.603238][ T6320] usb 3-1: Using ep0 maxpacket: 16 [ 906.953273][ T6320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.077051][ T6320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.051519][ T6320] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 908.091082][ T6320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.101852][ T6320] usb 3-1: config 0 descriptor?? [ 908.345139][T16965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2926'. [ 908.657405][ T6320] usbhid 3-1:0.0: can't add hid device: -71 [ 908.699227][ T6320] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 908.816715][ T6320] usb 3-1: USB disconnect, device number 15 [ 909.153009][ T6316] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 909.374116][ T5939] usb 38-1: device descriptor read/8, error -110 [ 909.393090][ T6316] usb 1-1: device descriptor read/64, error -71 [ 910.274869][ T5939] usb usb38-port1: attempt power cycle [ 910.323076][ T6316] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 910.593128][ T6316] usb 1-1: device descriptor read/64, error -71 [ 910.611836][T17000] xt_CONNSECMARK: invalid mode: 0 [ 910.713820][ T6316] usb usb1-port1: attempt power cycle [ 910.874259][ T5939] usb usb38-port1: unable to enumerate USB device [ 911.093085][ T6316] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 911.165475][T17006] FAULT_INJECTION: forcing a failure. [ 911.165475][T17006] name failslab, interval 1, probability 0, space 0, times 0 [ 911.205676][T17006] CPU: 1 UID: 0 PID: 17006 Comm: syz.5.2937 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 911.205703][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 911.205714][T17006] Call Trace: [ 911.205723][T17006] [ 911.205731][T17006] dump_stack_lvl+0x189/0x250 [ 911.205760][T17006] ? __pfx____ratelimit+0x10/0x10 [ 911.205784][T17006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.205808][T17006] ? __pfx__printk+0x10/0x10 [ 911.205838][T17006] ? __pfx___might_resched+0x10/0x10 [ 911.205861][T17006] ? fs_reclaim_acquire+0x7d/0x100 [ 911.205887][T17006] should_fail_ex+0x414/0x560 [ 911.205913][T17006] should_failslab+0xa8/0x100 [ 911.205933][T17006] kmem_cache_alloc_noprof+0x73/0x3c0 [ 911.205957][T17006] ? __kernfs_new_node+0xd7/0x7e0 [ 911.205982][T17006] __kernfs_new_node+0xd7/0x7e0 [ 911.206001][T17006] ? __lock_acquire+0xab9/0xd20 [ 911.206031][T17006] ? __pfx___kernfs_new_node+0x10/0x10 [ 911.206052][T17006] ? kernfs_root+0x1c/0x230 [ 911.206077][T17006] ? kernfs_root+0x1c/0x230 [ 911.206095][T17006] ? kernfs_root+0x1c/0x230 [ 911.206111][T17006] ? kernfs_root+0x1c/0x230 [ 911.206135][T17006] kernfs_new_node+0x102/0x210 [ 911.206161][T17006] __kernfs_create_file+0x4b/0x2e0 [ 911.206188][T17006] sysfs_add_file_mode_ns+0x238/0x300 [ 911.206214][T17006] internal_create_group+0x66d/0x1110 [ 911.206251][T17006] ? __pfx_internal_create_group+0x10/0x10 [ 911.206269][T17006] ? kernfs_add_one+0xf0/0x520 [ 911.206293][T17006] sysfs_create_groups+0x59/0x120 [ 911.206313][T17006] device_add_attrs+0x13f/0x5a0 [ 911.206337][T17006] ? __pfx_device_add_attrs+0x10/0x10 [ 911.206357][T17006] ? device_add_class_symlinks+0x21f/0x240 [ 911.206375][T17006] device_add+0x496/0xb50 [ 911.206394][T17006] input_register_device+0x9ca/0x10b0 [ 911.206422][T17006] uinput_create_device+0x422/0x670 [ 911.206452][T17006] uinput_ioctl_handler+0x3f0/0x1570 [ 911.206477][T17006] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 911.206512][T17006] ? __fget_files+0x2a/0x420 [ 911.206539][T17006] __ia32_compat_sys_ioctl+0x543/0x840 [ 911.206567][T17006] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 911.206591][T17006] ? __fget_files+0x3a0/0x420 [ 911.206616][T17006] ? fput+0xa0/0xd0 [ 911.206637][T17006] ? ksys_write+0x22a/0x250 [ 911.206660][T17006] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 911.206682][T17006] ? lockdep_hardirqs_on+0x9c/0x150 [ 911.206704][T17006] __do_fast_syscall_32+0xb6/0x2b0 [ 911.206726][T17006] ? lockdep_hardirqs_on+0x9c/0x150 [ 911.206752][T17006] do_fast_syscall_32+0x34/0x80 [ 911.206775][T17006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 911.206794][T17006] RIP: 0023:0xf707e539 [ 911.206810][T17006] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 911.206823][T17006] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 911.206880][T17006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 911.206892][T17006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 911.206902][T17006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 911.206912][T17006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 911.206922][T17006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 911.206949][T17006] [ 911.744085][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 911.765832][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 911.776809][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 911.787925][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 911.796849][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 912.274149][ T6316] usb 1-1: device descriptor read/8, error -71 [ 912.340123][ T5939] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 912.355195][ T5939] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 912.543688][T17020] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2940'. [ 912.929752][T17008] chnl_net:caif_netlink_parms(): no params data found [ 913.284353][ T6326] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 913.527061][ T6326] usb 5-1: config 0 has no interfaces? [ 913.539875][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2939'. [ 913.548530][ T6326] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 913.573187][ T6326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.583492][ T6326] usb 5-1: Product: syz [ 913.587691][ T6326] usb 5-1: Manufacturer: syz [ 913.602917][ T6326] usb 5-1: SerialNumber: syz [ 913.603481][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2939'. [ 913.611058][ T6326] usb 5-1: config 0 descriptor?? [ 913.648744][ T9614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.775586][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2939'. [ 913.854510][ T5840] Bluetooth: hci5: command tx timeout [ 914.096730][ T9614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.132798][T17008] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.151610][T17008] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.166698][T17008] bridge_slave_0: entered allmulticast mode [ 914.181458][T17008] bridge_slave_0: entered promiscuous mode [ 914.245393][ T9614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.293888][T17008] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.333316][T17008] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.340702][T17008] bridge_slave_1: entered allmulticast mode [ 914.361343][T17008] bridge_slave_1: entered promiscuous mode [ 914.431874][ T9614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.645349][T17047] xt_CONNSECMARK: invalid mode: 0 [ 914.695679][T17008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.909418][T17008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.067298][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2947'. [ 915.295545][T17008] team0: Port device team_slave_0 added [ 915.369458][T17008] team0: Port device team_slave_1 added [ 915.566020][T17053] FAULT_INJECTION: forcing a failure. [ 915.566020][T17053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.610929][T17008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.620860][T17053] CPU: 0 UID: 0 PID: 17053 Comm: syz.5.2948 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 915.620883][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 915.620892][T17053] Call Trace: [ 915.620899][T17053] [ 915.620906][T17053] dump_stack_lvl+0x189/0x250 [ 915.620935][T17053] ? __pfx____ratelimit+0x10/0x10 [ 915.620957][T17053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 915.620978][T17053] ? __pfx__printk+0x10/0x10 [ 915.620996][T17053] ? __might_fault+0xb0/0x130 [ 915.621022][T17053] should_fail_ex+0x414/0x560 [ 915.621046][T17053] _copy_from_user+0x2d/0xb0 [ 915.621064][T17053] snd_seq_oss_write+0x515/0x930 [ 915.621103][T17053] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 915.621126][T17053] ? common_file_perm+0x199/0x200 [ 915.621150][T17053] ? security_file_permission+0x75/0x290 [ 915.621176][T17053] odev_write+0x5a/0x80 [ 915.621194][T17053] ? __pfx_odev_write+0x10/0x10 [ 915.621214][T17053] vfs_write+0x27e/0xa90 [ 915.621245][T17053] ? __pfx_vfs_write+0x10/0x10 [ 915.621270][T17053] ? __fget_files+0x2a/0x420 [ 915.621291][T17053] ? __fget_files+0x2a/0x420 [ 915.621307][T17053] ? __fget_files+0x3a0/0x420 [ 915.621324][T17053] ? __fget_files+0x2a/0x420 [ 915.621351][T17053] ksys_write+0x145/0x250 [ 915.621370][T17053] ? __pfx_ksys_write+0x10/0x10 [ 915.621385][T17053] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 915.621408][T17053] ? lockdep_hardirqs_on+0x9c/0x150 [ 915.621438][T17053] __do_fast_syscall_32+0xb6/0x2b0 [ 915.621460][T17053] ? lockdep_hardirqs_on+0x9c/0x150 [ 915.621482][T17053] do_fast_syscall_32+0x34/0x80 [ 915.621503][T17053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 915.621523][T17053] RIP: 0023:0xf707e539 [ 915.621538][T17053] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 915.621551][T17053] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 915.621568][T17053] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 915.621579][T17053] RDX: 000000000000fd85 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.621588][T17053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.621597][T17053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 915.621605][T17053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.621628][T17053] [ 915.633368][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.929443][T17008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.947252][ T5840] Bluetooth: hci5: command tx timeout [ 915.958346][ T9614] bridge_slave_1: left allmulticast mode [ 916.003920][ T9614] bridge_slave_1: left promiscuous mode [ 916.026670][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.052202][ T9614] bridge_slave_0: left allmulticast mode [ 916.058276][ T9614] bridge_slave_0: left promiscuous mode [ 916.064586][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.383542][ T43] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 916.599441][ T6326] usb 5-1: USB disconnect, device number 22 [ 916.631236][ T43] usb 6-1: device descriptor read/64, error -71 [ 916.883057][ T43] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 916.918327][ T9614] bond3 (unregistering): (slave geneve2): Releasing active interface [ 916.939805][ T9614] geneve2 (unregistering): left promiscuous mode [ 916.961572][ T9614] geneve2 (unregistering): left allmulticast mode [ 917.048113][ T43] usb 6-1: device descriptor read/64, error -71 [ 917.160454][ T9614] batman_adv: batadv0: Removing interface: vxlan0 [ 917.177680][ T43] usb usb6-port1: attempt power cycle [ 917.528127][ T43] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 917.593101][ T43] usb 6-1: device descriptor read/8, error -71 [ 917.662196][T17091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2953'. [ 917.770969][ T9614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.780555][ T9614] bond_slave_0: left allmulticast mode [ 917.790636][ T9614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.810019][ T9614] bond_slave_1: left allmulticast mode [ 917.821290][ T9614] bond0 (unregistering): Released all slaves [ 917.842621][ T43] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 917.890529][ T43] usb 6-1: device descriptor read/8, error -71 [ 918.023564][ T5840] Bluetooth: hci5: command tx timeout [ 918.029025][ T43] usb usb6-port1: unable to enumerate USB device [ 918.258896][ T9614] bond1 (unregistering): Released all slaves [ 918.301877][ T9614] bond2 (unregistering): Released all slaves [ 918.320541][ T9614] bond3 (unregistering): Released all slaves [ 918.342750][T17008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.369950][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.457459][T17008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.747308][T17098] binder: 17097:17098 ioctl 801c581f 80000480 returned -22 [ 919.128825][T17008] hsr_slave_0: entered promiscuous mode [ 919.148439][T17008] hsr_slave_1: entered promiscuous mode [ 919.193588][T17008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 919.222483][T17008] Cannot create hsr debugfs directory [ 919.285002][ T6326] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 919.518089][ T6326] usb 1-1: Using ep0 maxpacket: 16 [ 919.529088][ T6326] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 919.541282][ T6326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 919.555506][ T6326] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 919.564936][ T6326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.572913][ T6326] usb 1-1: Product: syz [ 919.577417][ T6326] usb 1-1: Manufacturer: syz [ 919.581999][ T6326] usb 1-1: SerialNumber: syz [ 919.613942][ T6326] usb 1-1: config 0 descriptor?? [ 919.628355][ T6326] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 919.647971][ T6326] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 920.650742][ T5840] Bluetooth: hci5: command tx timeout [ 920.962323][ T6326] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 920.983429][ T6326] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 921.023562][ T6326] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 921.030525][ T6326] em28xx 1-1:0.0: No AC97 audio processor [ 922.114680][ T6320] usb 1-1: USB disconnect, device number 28 [ 922.133911][ T6320] em28xx 1-1:0.0: Disconnecting em28xx [ 922.181603][ T6320] em28xx 1-1:0.0: Freeing device [ 922.290797][ T5918] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 922.520654][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 922.545305][ T9614] hsr_slave_0: left promiscuous mode [ 922.552453][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 922.583000][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.610501][ T5918] usb 3-1: config 0 has an invalid interface number: 240 but max is 0 [ 922.620605][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.649641][ T5918] usb 3-1: config 0 has no interface number 0 [ 922.667222][ T6320] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 922.673112][ T5918] usb 3-1: config 0 interface 240 has no altsetting 0 [ 922.723514][ T5918] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ef [ 922.732609][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.752249][T17141] xt_CONNSECMARK: invalid mode: 0 [ 922.799809][ T5918] usb 3-1: Product: syz [ 922.811974][ T5918] usb 3-1: Manufacturer: syz [ 922.848576][ T5918] usb 3-1: SerialNumber: syz [ 922.884191][ T5918] usb 3-1: config 0 descriptor?? [ 922.971927][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2961'. [ 922.988678][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2961'. [ 923.105539][T17129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.125014][ T6320] usb 1-1: config 0 has no interfaces? [ 923.163195][T17129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.204060][ T5918] usb 3-1: Found UVC 0.00 device syz (8086:0b5b) [ 923.214505][ T6320] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 923.243163][ T6320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.251271][ T5918] usb 3-1: No valid video chain found. [ 923.273555][ T6320] usb 1-1: Product: syz [ 923.279239][ T6320] usb 1-1: Manufacturer: syz [ 923.291142][ T5918] usb 3-1: USB disconnect, device number 16 [ 923.294332][ T6320] usb 1-1: SerialNumber: syz [ 923.447158][ T6320] usb 1-1: config 0 descriptor?? [ 923.953268][ T6320] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 924.113324][ T6320] usb 5-1: Using ep0 maxpacket: 16 [ 924.122666][ T6320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.134735][ T6320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.226569][ T6320] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 924.325030][ T6320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.348495][ T6320] usb 5-1: config 0 descriptor?? [ 924.911475][ T9614] team0 (unregistering): Port device team_slave_1 removed [ 924.986129][ T9614] team0 (unregistering): Port device team_slave_0 removed [ 925.115956][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 925.136963][T17171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2966'. [ 925.692031][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2963'. [ 925.716323][ T6320] usbhid 5-1:0.0: can't add hid device: -71 [ 925.729766][ T6320] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 925.773493][ T6320] usb 5-1: USB disconnect, device number 23 [ 926.274893][ T6316] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 926.303047][ T5939] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 926.386344][ T9614] IPVS: stop unused estimator thread 0... [ 926.493275][ T6316] usb 3-1: device descriptor read/64, error -71 [ 926.493391][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 926.526721][T17184] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2969'. [ 926.566807][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.592810][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.609281][ T5939] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 926.628205][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.645405][T17187] netlink: 'syz.4.2969': attribute type 10 has an invalid length. [ 926.719936][ T5939] usb 6-1: config 0 descriptor?? [ 926.733194][ T5918] usb 1-1: USB disconnect, device number 29 [ 926.753105][ T6316] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 926.915755][T17187] team0: Device wlan1 is of different type [ 926.963118][ T6316] usb 3-1: device descriptor read/64, error -71 [ 926.981181][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2968'. [ 927.804741][ T5939] usbhid 6-1:0.0: can't add hid device: -71 [ 927.811077][ T6316] usb usb3-port1: attempt power cycle [ 927.823377][ T5939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 927.929303][ T5939] usb 6-1: USB disconnect, device number 33 [ 928.263265][ T6316] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 928.365150][ T6316] usb 3-1: device descriptor read/8, error -71 [ 928.480494][T17210] xt_CONNSECMARK: invalid mode: 0 [ 928.567367][T17213] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 928.624048][T17008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 928.666098][ T6316] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 928.716644][T17008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 928.731233][ T6316] usb 3-1: device descriptor read/8, error -71 [ 928.790456][T17008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 928.835849][T17008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 928.870817][ T6316] usb usb3-port1: unable to enumerate USB device [ 929.698201][T17008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.783687][ T5939] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 929.819009][T17008] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.914953][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.922122][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.965606][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.972825][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.005660][ T5939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 930.027884][ T5939] usb 5-1: not running at top speed; connect to a high speed hub [ 930.057470][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.085686][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.138446][ T5939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 930.231978][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.355283][ T6316] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 930.356029][ T5939] usb 5-1: Product: syz [ 930.521583][T17008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.183136][ T6316] usb 6-1: Using ep0 maxpacket: 32 [ 931.455290][ T6316] usb 6-1: config 203 has an invalid interface number: 241 but max is 0 [ 931.465616][ T6316] usb 6-1: config 203 has no interface number 0 [ 931.471934][ T6316] usb 6-1: config 203 interface 241 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 931.537169][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.547503][ T6316] usb 6-1: New USB device found, idVendor=1b80, idProduct=e39a, bcdDevice=91.96 [ 931.556918][T17008] veth0_vlan: entered promiscuous mode [ 931.562541][ T6316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.574265][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.585093][ T5939] usb 5-1: Manufacturer: syz [ 931.592750][T17008] veth1_vlan: entered promiscuous mode [ 931.593662][ T5939] usb 5-1: SerialNumber: syz [ 931.599586][ T6316] usb 6-1: Product: Й [ 931.623014][ T6316] usb 6-1: Manufacturer: 㲪ჾê…쬊銺둯殌彠∤ꎠṣâ¤ëˆê›ã‘¹æ«‚㓶頻堷纆娟㲌⑿촽ﭵႮ薿ᅃꈪ跮íºäƒä¸¼á¼Žß¡à«¥åˆ¢ä™“犉ê‡ë¦°ë‘©ç·ŒìŠí‰Žã˜êˆ“ᔿ掔秇꟮류ꎖ⵽é“㒙ꅫ賴í‡åš™ášã¥²ê£Ÿç§…犢㫡좜赴î喼ࡠ芚ç­æŒæ™†ç“ƒéˆ“àµë¤Žâ¬”á›ï¦ç•¨æ¬«à§•ì¿œä’²å«é“©ïºä€¨ç­‰è•ê…®ä¯“₆뽙èµà±¼í—¸ã¦–êˆé ¥í¬îƒ¨é‚• [ 931.743359][ T6316] usb 6-1: SerialNumber: 뺬쎟綫é‰è—±á‹„ê‘–ë€é³æ¶Œç·«Ý­çž† [ 931.793937][T17008] veth0_macvtap: entered promiscuous mode [ 931.850334][T17234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.871914][T17008] veth1_macvtap: entered promiscuous mode [ 931.910193][T17234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.947392][T17008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.974118][T17008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.020351][ T5939] usb 5-1: 0:2 : does not exist [ 932.035809][T17008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.065275][T17008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.082772][ T5939] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 932.102566][ T6316] usb 6-1: USB disconnect, device number 34 [ 932.103786][T17008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.139020][ T5939] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 932.174799][T17008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.202569][ T5939] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 932.238154][ T5939] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 932.335185][ T5939] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 932.401614][ T5939] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 932.454351][T13238] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 932.472876][ T5939] usb 5-1: USB disconnect, device number 24 [ 932.497738][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.524858][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.625127][T13238] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 932.660872][T13238] usb 1-1: config 0 has no interface number 0 [ 932.688962][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.696815][T13238] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 932.696844][T13238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.704278][T13238] usb 1-1: config 0 descriptor?? [ 932.760000][T13238] gspca_main: spca561-2.14.0 probing abcd:cdee [ 932.770864][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.509374][T13238] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 933.553071][T13238] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 933.553123][ T5905] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 933.586679][T13238] usb 1-1: MIDIStreaming interface descriptor not found [ 933.722877][T17286] netlink: 'syz.1.2935': attribute type 11 has an invalid length. [ 933.774640][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 933.815850][T13238] usb 1-1: USB disconnect, device number 30 [ 933.823158][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.915587][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.974856][ T5905] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 934.018409][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.094030][ T5905] usb 5-1: config 0 descriptor?? [ 934.401913][T17299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.451013][T17299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.563067][T13238] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 934.604623][ T6326] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 934.613027][ T6316] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 934.760019][T13238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.770662][T13238] usb 2-1: config 0 has no interfaces? [ 934.776368][ T6316] usb 1-1: Using ep0 maxpacket: 16 [ 934.787818][ T6326] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 934.803760][T13238] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 934.820323][T17278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2983'. [ 934.829733][ T6326] usb 6-1: config 0 has no interface number 1 [ 934.839714][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 934.851648][ T6326] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 934.851802][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 934.870014][ T6316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.882993][T13238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.914694][ T6316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 934.926150][ T6326] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 934.940287][T13238] usb 2-1: config 0 descriptor?? [ 934.970532][ T6316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 934.981580][ T6326] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 935.007981][ T5905] usb 5-1: USB disconnect, device number 25 [ 935.024640][ T6326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 935.041178][ T6316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 935.061226][ T6326] usb 6-1: SerialNumber: syz [ 935.076746][ T6316] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 935.125199][ T6326] usb 6-1: config 0 descriptor?? [ 935.153488][ T6326] usb 6-1: Found UVC 0.00 device (0002:0000) [ 935.199584][ T6316] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 935.203747][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 935.225012][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 935.226665][ T6326] usb 6-1: No valid video chain found. [ 935.248210][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 935.256559][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 935.264879][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 935.338864][ T6316] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 935.365095][T17302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2987'. [ 935.406372][ T6316] usb 1-1: Manufacturer: syz [ 935.468660][ T6316] usb 1-1: config 0 descriptor?? [ 935.536859][T17302] macsec1: entered allmulticast mode [ 935.601627][T17302] bridge0: entered allmulticast mode [ 935.657360][T17302] bridge0: port 3(macsec1) entered blocking state [ 935.665460][T17302] bridge0: port 3(macsec1) entered disabled state [ 935.739598][T17318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.767531][T17318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.776667][T17302] bridge0: left allmulticast mode [ 935.837962][T17318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.853206][ T6316] rc_core: IR keymap rc-hauppauge not found [ 935.860307][ T6316] Registered IR keymap rc-empty [ 935.902051][T17318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.936038][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.947911][T17318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.975602][ T5905] usb 6-1: USB disconnect, device number 35 [ 935.983770][ T6326] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 936.023387][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.025342][T17319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.093427][T17318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.109906][ T6316] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 936.126199][ T6326] usb 5-1: device descriptor read/64, error -71 [ 936.154463][T17319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.195595][ T6316] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input72 [ 936.225522][T17319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.286350][ T9616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 936.311292][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.347378][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.372880][T17319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.408665][ T6326] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 936.437451][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.504727][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.527963][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.551788][ T9616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 936.577220][ T6326] usb 5-1: device descriptor read/64, error -71 [ 936.584085][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.623544][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.663631][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.681470][ T9616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 936.683440][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.700776][ T6326] usb usb5-port1: attempt power cycle [ 936.757078][ T6316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 936.829992][ T6316] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 936.847651][ T6316] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 936.877109][ T6316] usb 1-1: USB disconnect, device number 31 [ 936.911772][ T9616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 937.063324][ T6326] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 937.114943][ T6326] usb 5-1: device descriptor read/8, error -71 [ 937.303623][ T5834] Bluetooth: hci4: command tx timeout [ 937.384381][ T6326] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 937.416757][ T6326] usb 5-1: device descriptor read/8, error -71 [ 937.424905][T17311] chnl_net:caif_netlink_parms(): no params data found [ 937.553393][ T6326] usb usb5-port1: unable to enumerate USB device [ 937.639093][ T5939] usb 2-1: USB disconnect, device number 24 [ 938.285481][ T9616] dvmrp1 (unregistering): left allmulticast mode [ 938.343069][ T5905] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 938.562032][ T5905] usb 6-1: config 0 has no interfaces? [ 938.735338][ T5905] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 938.744852][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.787542][ T5905] usb 6-1: Product: syz [ 938.791831][ T5905] usb 6-1: Manufacturer: syz [ 938.823060][ T5905] usb 6-1: SerialNumber: syz [ 938.843408][ T5905] usb 6-1: config 0 descriptor?? [ 939.388613][ T5834] Bluetooth: hci4: command tx timeout [ 939.555527][ T9616] bond0 (unregistering): Released all slaves [ 940.133491][ T6326] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 940.333435][ T9616] tipc: Left network mode [ 940.338850][T17311] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.395612][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.421699][T17311] bridge_slave_0: entered allmulticast mode [ 940.448664][T17311] bridge_slave_0: entered promiscuous mode [ 940.497772][T17311] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.534181][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.559324][T17311] bridge_slave_1: entered allmulticast mode [ 940.574386][ T6326] usb 1-1: config 0 has no interfaces? [ 940.585667][T17311] bridge_slave_1: entered promiscuous mode [ 940.598562][ T6326] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 940.641646][ T6326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.744627][ T6326] usb 1-1: Product: syz [ 940.755445][ T6326] usb 1-1: Manufacturer: syz [ 940.770864][ T6326] usb 1-1: SerialNumber: syz [ 940.773040][ T5905] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 940.854000][ T6326] usb 1-1: config 0 descriptor?? [ 941.003088][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 941.063261][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.091719][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.190303][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.201510][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.233343][ T5905] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 941.290952][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.336039][ T5905] usb 2-1: config 0 descriptor?? [ 941.399884][T13238] usb 6-1: USB disconnect, device number 36 [ 941.469812][ T5834] Bluetooth: hci4: command tx timeout [ 941.621768][T17311] team0: Port device team_slave_0 added [ 941.785670][T17398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2998'. [ 941.854033][T17311] team0: Port device team_slave_1 added [ 941.894595][ T5905] usbhid 2-1:0.0: can't add hid device: -71 [ 941.944101][ T5905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 942.055710][ T5905] usb 2-1: USB disconnect, device number 25 [ 942.332338][T17419] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3001'. [ 942.474777][T17425] netlink: 'syz.5.3001': attribute type 10 has an invalid length. [ 942.572881][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3001'. [ 942.622543][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.655186][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.747836][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.800642][T17425] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.807917][T17425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.817161][T17425] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.824393][T17425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.984596][T17425] bridge0: entered promiscuous mode [ 943.018643][T17425] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 943.093078][T17422] bridge_slave_1: left allmulticast mode [ 943.114706][T17422] bridge_slave_1: left promiscuous mode [ 943.132434][ T5939] usb 1-1: USB disconnect, device number 32 [ 943.139330][T17422] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.232436][T17422] bridge_slave_0: left allmulticast mode [ 943.275273][T17422] bridge_slave_0: left promiscuous mode [ 943.286680][T17422] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.379493][T17422] bond0: (slave bridge0): Releasing backup interface [ 943.407822][T17422] bridge0 (unregistering): left promiscuous mode [ 943.493610][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.520676][T17445] can: request_module (can-proto-0) failed. [ 943.533036][ T5834] Bluetooth: hci4: command tx timeout [ 943.544856][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.574946][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 943.612311][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.659488][ T9616] hsr_slave_0: left promiscuous mode [ 943.665481][ T9616] hsr_slave_1: left promiscuous mode [ 943.708405][ T6326] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 943.896737][ T6326] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 943.906576][ T6326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.915094][ T6326] usb 1-1: Product: syz [ 943.919331][ T6326] usb 1-1: Manufacturer: syz [ 943.925206][ T6326] usb 1-1: SerialNumber: syz [ 944.002048][ T6326] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 944.045475][T13238] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 945.298301][T13238] usb 1-1: Service connection timeout for: 256 [ 945.319001][T13238] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 945.365547][T13238] ath9k_htc: Failed to initialize the device [ 945.393949][T13238] usb 1-1: ath9k_htc: USB layer deinitialized [ 945.439753][T17452] bridge_slave_0: left allmulticast mode [ 945.453734][T17452] bridge_slave_0: left promiscuous mode [ 945.461458][T17452] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.477914][T17452] bridge_slave_1: left allmulticast mode [ 945.484573][T17452] bridge_slave_1: left promiscuous mode [ 945.490533][T17452] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.515042][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3006'. [ 945.554306][T17452] bond0: (slave bond_slave_0): Releasing backup interface [ 945.764265][T17452] bond0: (slave bond_slave_1): Releasing backup interface [ 945.814564][T17452] team0: Port device team_slave_0 removed [ 945.840389][T17452] team0: Port device team_slave_1 removed [ 945.859783][T17452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.887992][T17452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.925072][T17452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.959289][T17452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.207884][T17311] hsr_slave_0: entered promiscuous mode [ 946.230425][T17311] hsr_slave_1: entered promiscuous mode [ 946.331117][ T6316] usb 1-1: USB disconnect, device number 33 [ 946.372257][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 946.821765][ T9616] IPVS: stop unused estimator thread 0... [ 947.013149][ T6326] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 947.335520][ T6326] usb 1-1: config 0 has no interfaces? [ 947.347048][ T5939] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 947.405271][ T6326] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 947.483600][ T6326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.506806][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 947.514916][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.530272][ T6326] usb 1-1: Product: syz [ 947.539227][ T6326] usb 1-1: Manufacturer: syz [ 947.548928][ T6326] usb 1-1: SerialNumber: syz [ 947.556683][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.574748][ T6326] usb 1-1: config 0 descriptor?? [ 947.647459][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 947.659610][ T5939] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 947.679307][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.707229][ T5939] usb 5-1: config 0 descriptor?? [ 947.949170][T17490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3012'. [ 948.218478][ T5939] usbhid 5-1:0.0: can't add hid device: -71 [ 948.239265][ T5939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 948.310205][ T5939] usb 5-1: USB disconnect, device number 30 [ 948.481524][T17311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 948.530442][T17311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 948.641837][T17311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 948.703154][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'. [ 948.712374][T17509] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 948.720784][T17509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.880229][T17311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 950.038060][T17311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.157814][T17311] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.173563][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.180678][ T9616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.267048][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.274325][ T9616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.544772][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 950.645684][ T5939] usb 1-1: USB disconnect, device number 34 [ 950.820116][T17311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.891292][T17544] FAULT_INJECTION: forcing a failure. [ 950.891292][T17544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.913940][T17544] CPU: 1 UID: 0 PID: 17544 Comm: syz.0.3024 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 950.913966][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 950.913978][T17544] Call Trace: [ 950.913985][T17544] [ 950.913994][T17544] dump_stack_lvl+0x189/0x250 [ 950.914023][T17544] ? __pfx____ratelimit+0x10/0x10 [ 950.914046][T17544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.914070][T17544] ? __pfx__printk+0x10/0x10 [ 950.914088][T17544] ? __might_fault+0xb0/0x130 [ 950.914116][T17544] should_fail_ex+0x414/0x560 [ 950.914148][T17544] _copy_from_user+0x2d/0xb0 [ 950.914166][T17544] mfill_atomic_copy+0x758/0x12f0 [ 950.914202][T17544] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 950.914235][T17544] userfaultfd_ioctl+0x29ba/0x4bc0 [ 950.914265][T17544] ? __do_fast_syscall_32+0xb6/0x2b0 [ 950.914287][T17544] ? do_fast_syscall_32+0x34/0x80 [ 950.914309][T17544] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 950.914339][T17544] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 950.914373][T17544] ? do_vfs_ioctl+0x12ba/0x1990 [ 950.914398][T17544] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 950.914427][T17544] ? kasan_quarantine_put+0xdd/0x220 [ 950.914460][T17544] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 950.914481][T17544] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 950.914499][T17544] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 950.914517][T17544] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 950.914557][T17544] ? __lock_acquire+0xab9/0xd20 [ 950.914599][T17544] ? __fget_files+0x2a/0x420 [ 950.914621][T17544] ? __fget_files+0x3a0/0x420 [ 950.914638][T17544] ? __fget_files+0x2a/0x420 [ 950.914659][T17544] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 950.914685][T17544] __ia32_compat_sys_ioctl+0x543/0x840 [ 950.914712][T17544] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 950.914735][T17544] ? __fget_files+0x3a0/0x420 [ 950.914760][T17544] ? fput+0xa0/0xd0 [ 950.914780][T17544] ? ksys_write+0x22a/0x250 [ 950.914803][T17544] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 950.914827][T17544] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.914852][T17544] __do_fast_syscall_32+0xb6/0x2b0 [ 950.914875][T17544] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.914902][T17544] do_fast_syscall_32+0x34/0x80 [ 950.914925][T17544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 950.914945][T17544] RIP: 0023:0xf70be539 [ 950.914961][T17544] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 950.914976][T17544] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 950.914994][T17544] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 950.915006][T17544] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 950.915017][T17544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 950.915027][T17544] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 950.915038][T17544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 950.915065][T17544] [ 951.237003][T17311] veth0_vlan: entered promiscuous mode [ 951.251085][T17311] veth1_vlan: entered promiscuous mode [ 951.567178][T17550] xt_CONNSECMARK: invalid mode: 0 [ 951.694886][T17553] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 951.731593][T17311] veth0_macvtap: entered promiscuous mode [ 951.754934][T17311] veth1_macvtap: entered promiscuous mode [ 951.845614][T17311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.420616][T17311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.475086][T17557] xt_CONNSECMARK: invalid mode: 0 [ 952.566425][T17311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.604553][T17311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.646973][T17311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.658810][T17311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.783573][T17563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3029'. [ 952.915378][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.923662][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.017941][ T9614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.026657][ T9614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.034891][T13238] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 953.137195][T17570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.253459][T13238] usb 1-1: Using ep0 maxpacket: 16 [ 953.339097][T13238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.351037][T13238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.361453][T13238] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 953.371541][T13238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.390861][T13238] usb 1-1: config 0 descriptor?? [ 953.433248][ T5939] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 953.453191][ T6316] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 953.617836][T17564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3028'. [ 953.645259][ T6316] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 953.654337][ T6316] usb 6-1: config 0 has no interface number 0 [ 953.658078][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 953.670516][ T6316] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 953.679609][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.681524][ T6316] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 953.748833][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 953.760080][ T6316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.837405][T13238] usbhid 1-1:0.0: can't add hid device: -71 [ 953.843950][T13238] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 953.860973][T13238] usb 1-1: USB disconnect, device number 35 [ 953.885354][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 953.951539][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 953.954227][ T6316] usb 6-1: config 0 descriptor?? [ 954.018354][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 954.045663][T17573] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 954.054722][ T6316] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 954.133270][ T5939] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 954.148146][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 954.200109][ T5939] usb 2-1: Product: syz [ 954.214281][ T5939] usb 2-1: Manufacturer: syz [ 954.218929][ T5939] usb 2-1: SerialNumber: syz [ 954.254127][ T5939] usb 2-1: config 0 descriptor?? [ 954.483913][ T5918] usb 6-1: USB disconnect, device number 37 [ 954.773448][ T5939] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 954.788882][ T5939] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 955.201203][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 955.214709][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 955.224768][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 955.236537][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 955.245357][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 955.498084][ T9616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.509434][ T9616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.538927][T17590] tipc: Started in network mode [ 955.547843][T17590] tipc: Node identity fc02, cluster identity 4711 [ 955.556004][T17590] tipc: Enabling of bearer rejected, failed to enable media [ 955.585596][T17594] xt_CONNSECMARK: invalid mode: 0 [ 955.630492][ T9616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.643752][ T9616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.673490][ T5939] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 955.760986][ T9616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.771955][ T9616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.833071][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 955.846905][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.867905][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.884943][ T9616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.895530][ T9616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.908142][ T5939] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 955.931771][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.959427][ T5939] usb 6-1: config 0 descriptor?? [ 955.983785][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 956.063160][ T5905] usb 2-1: USB disconnect, device number 26 [ 956.069078][T17586] chnl_net:caif_netlink_parms(): no params data found [ 956.124618][ T5918] usb 3-1: device descriptor read/64, error -71 [ 956.264803][ T9616] bridge0: port 3(batadv0) entered disabled state [ 956.284191][ T9616] bridge_slave_1: left allmulticast mode [ 956.291897][ T9616] bridge_slave_1: left promiscuous mode [ 956.298141][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.309737][ T9616] bridge_slave_0: left allmulticast mode [ 956.315546][ T9616] bridge_slave_0: left promiscuous mode [ 956.322290][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.383130][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 956.404247][ T5939] gt683r_led 0003:1770:FF00.0038: ignoring exceeding usage max [ 956.423523][ T5939] gt683r_led 0003:1770:FF00.0038: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.5-1/input0 [ 956.543314][ T5918] usb 3-1: device descriptor read/64, error -71 [ 956.584685][T17592] FAULT_INJECTION: forcing a failure. [ 956.584685][T17592] name failslab, interval 1, probability 0, space 0, times 0 [ 956.624100][T17592] CPU: 0 UID: 0 PID: 17592 Comm: syz.5.3037 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 956.624125][T17592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.624136][T17592] Call Trace: [ 956.624144][T17592] [ 956.624152][T17592] dump_stack_lvl+0x189/0x250 [ 956.624181][T17592] ? __pfx____ratelimit+0x10/0x10 [ 956.624205][T17592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 956.624228][T17592] ? __pfx__printk+0x10/0x10 [ 956.624252][T17592] ? __pfx___might_resched+0x10/0x10 [ 956.624282][T17592] ? fs_reclaim_acquire+0x7d/0x100 [ 956.624307][T17592] should_fail_ex+0x414/0x560 [ 956.624334][T17592] should_failslab+0xa8/0x100 [ 956.624354][T17592] kmem_cache_alloc_noprof+0x73/0x3c0 [ 956.624377][T17592] ? __kernfs_new_node+0xd7/0x7e0 [ 956.624402][T17592] __kernfs_new_node+0xd7/0x7e0 [ 956.624421][T17592] ? __lock_acquire+0xab9/0xd20 [ 956.624451][T17592] ? __pfx___kernfs_new_node+0x10/0x10 [ 956.624471][T17592] ? kernfs_root+0x1c/0x230 [ 956.624496][T17592] ? kernfs_root+0x1c/0x230 [ 956.624514][T17592] ? kernfs_root+0x1c/0x230 [ 956.624530][T17592] ? kernfs_root+0x1c/0x230 [ 956.624553][T17592] kernfs_new_node+0x102/0x210 [ 956.624579][T17592] __kernfs_create_file+0x4b/0x2e0 [ 956.624606][T17592] sysfs_add_file_mode_ns+0x238/0x300 [ 956.624632][T17592] internal_create_group+0x66d/0x1110 [ 956.624669][T17592] ? __pfx_internal_create_group+0x10/0x10 [ 956.624690][T17592] ? kernfs_add_one+0xf0/0x520 [ 956.624718][T17592] sysfs_create_groups+0x59/0x120 [ 956.624740][T17592] device_add_attrs+0x13f/0x5a0 [ 956.624764][T17592] ? __pfx_device_add_attrs+0x10/0x10 [ 956.624787][T17592] ? device_add_class_symlinks+0x21f/0x240 [ 956.624807][T17592] device_add+0x496/0xb50 [ 956.624828][T17592] input_register_device+0x9ca/0x10b0 [ 956.624856][T17592] uinput_create_device+0x422/0x670 [ 956.624886][T17592] uinput_ioctl_handler+0x3f0/0x1570 [ 956.624910][T17592] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 956.624947][T17592] ? __fget_files+0x2a/0x420 [ 956.624975][T17592] __ia32_compat_sys_ioctl+0x543/0x840 [ 956.625002][T17592] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 956.625026][T17592] ? __fget_files+0x3a0/0x420 [ 956.625052][T17592] ? fput+0xa0/0xd0 [ 956.625073][T17592] ? ksys_write+0x22a/0x250 [ 956.625096][T17592] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 956.625121][T17592] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.625145][T17592] __do_fast_syscall_32+0xb6/0x2b0 [ 956.625169][T17592] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.625196][T17592] do_fast_syscall_32+0x34/0x80 [ 956.625217][T17592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 956.625236][T17592] RIP: 0023:0xf707e539 [ 956.625251][T17592] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 956.625265][T17592] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 956.625285][T17592] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501 [ 956.625297][T17592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 956.625307][T17592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 956.625318][T17592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 956.625327][T17592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.625348][T17592] [ 957.013357][ T5918] usb usb3-port1: attempt power cycle [ 957.060737][ T5905] usb 6-1: USB disconnect, device number 38 [ 957.072496][ T24] gt683r_led 0003:1770:FF00.0038: failed to send set report request: -19 [ 957.171903][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 957.357274][ T5840] Bluetooth: hci3: command tx timeout [ 957.396595][ T5918] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 957.426808][ T5918] usb 3-1: device descriptor read/8, error -71 [ 957.617429][ T9616] bond2 (unregistering): (slave geneve3): Releasing active interface [ 957.636444][ T9616] geneve3 (unregistering): left promiscuous mode [ 957.645380][ T9616] geneve3 (unregistering): left allmulticast mode [ 957.683685][ T5918] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 957.738631][ T5918] usb 3-1: device descriptor read/8, error -71 [ 957.863909][ T5918] usb usb3-port1: unable to enumerate USB device [ 957.924168][ T6326] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 958.069826][ T9616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.078562][ T6326] usb 6-1: Using ep0 maxpacket: 32 [ 958.086239][ T6326] usb 6-1: too many endpoints for config 0 interface 0 altsetting 30: 253, using maximum allowed: 30 [ 958.098870][ T6326] usb 6-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.101556][ T9616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.125813][ T6326] usb 6-1: config 0 interface 0 altsetting 30 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 958.139257][ T5918] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 958.147516][ T6326] usb 6-1: config 0 interface 0 has no altsetting 0 [ 958.148796][ T9616] bond0 (unregistering): Released all slaves [ 958.154324][ T6326] usb 6-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 958.154350][ T6326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.165847][ T6326] usb 6-1: config 0 descriptor?? [ 958.181226][ T9616] bond1 (unregistering): Released all slaves [ 958.209418][ T9616] bond2 (unregistering): Released all slaves [ 958.232577][ T9616] bond3 (unregistering): Released all slaves [ 958.290989][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 958.322795][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.361982][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.375602][T17586] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.382858][T17586] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.390422][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 958.401526][T17586] bridge_slave_0: entered allmulticast mode [ 958.411736][T17586] bridge_slave_0: entered promiscuous mode [ 958.418435][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.429609][T17586] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.455708][ T5918] usb 2-1: config 0 descriptor?? [ 958.481359][T17586] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.496939][T17586] bridge_slave_1: entered allmulticast mode [ 958.509878][T17586] bridge_slave_1: entered promiscuous mode [ 958.564191][T17622] kvm: pic: non byte read [ 958.573385][T17622] kvm: pic: non byte read [ 958.587909][T17622] kvm: pic: non byte read [ 958.598136][T17622] kvm: pic: non byte read [ 958.613521][T17622] kvm: pic: non byte read [ 958.618000][T17622] kvm: pic: non byte read [ 958.622447][T17622] kvm: pic: non byte read [ 958.628581][T17622] kvm: pic: non byte read [ 958.634335][T17622] kvm: pic: non byte read [ 958.639705][T17622] kvm: pic: non byte read [ 958.654945][ T6326] ntrig 0003:1B96:000D.0039: item fetching failed at offset 5/7 [ 958.665733][T17586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.676906][ T6326] ntrig 0003:1B96:000D.0039: parse failed [ 958.696573][ T6326] ntrig 0003:1B96:000D.0039: probe with driver ntrig failed with error -22 [ 958.776945][T17617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3043'. [ 958.789796][T17586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.879667][T17629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.890371][T17629] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 958.961128][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 958.969069][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 959.003528][ T5918] usb 2-1: USB disconnect, device number 27 [ 959.062847][T17615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.201854][T17586] team0: Port device team_slave_0 added [ 959.232296][T17615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.285437][T17615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.330977][T17615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.373207][ T5840] Bluetooth: hci3: command 0x041b tx timeout [ 959.391015][T17586] team0: Port device team_slave_1 added [ 959.605342][ T5918] usb 6-1: USB disconnect, device number 39 [ 959.668307][T17586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.692889][T17586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.833304][T17586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.873285][ T9616] hsr_slave_0: left promiscuous mode [ 959.892405][ T9616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.916804][ T9616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.959658][ T9616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.971189][T17656] FAULT_INJECTION: forcing a failure. [ 959.971189][T17656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.003040][T17656] CPU: 0 UID: 0 PID: 17656 Comm: syz.1.3049 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 960.003065][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 960.003076][T17656] Call Trace: [ 960.003083][T17656] [ 960.003090][T17656] dump_stack_lvl+0x189/0x250 [ 960.003118][T17656] ? __pfx____ratelimit+0x10/0x10 [ 960.003139][T17656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.003162][T17656] ? __pfx__printk+0x10/0x10 [ 960.003193][T17656] should_fail_ex+0x414/0x560 [ 960.003223][T17656] _copy_to_user+0x31/0xb0 [ 960.003241][T17656] simple_read_from_buffer+0xe1/0x170 [ 960.003263][T17656] proc_fail_nth_read+0x1df/0x250 [ 960.003284][T17656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 960.003305][T17656] ? rw_verify_area+0x258/0x650 [ 960.003328][T17656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 960.003349][T17656] vfs_read+0x200/0x980 [ 960.003378][T17656] ? __pfx___mutex_lock+0x10/0x10 [ 960.003401][T17656] ? __pfx_vfs_read+0x10/0x10 [ 960.003425][T17656] ? __fget_files+0x2a/0x420 [ 960.003445][T17656] ? __fget_files+0x3a0/0x420 [ 960.003460][T17656] ? __fget_files+0x2a/0x420 [ 960.003486][T17656] ksys_read+0x145/0x250 [ 960.003510][T17656] ? __pfx_ksys_read+0x10/0x10 [ 960.003535][T17656] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 960.003557][T17656] ? lockdep_hardirqs_on+0x9c/0x150 [ 960.003580][T17656] __do_fast_syscall_32+0xb6/0x2b0 [ 960.003603][T17656] ? lockdep_hardirqs_on+0x9c/0x150 [ 960.003626][T17656] do_fast_syscall_32+0x34/0x80 [ 960.003648][T17656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 960.003667][T17656] RIP: 0023:0xf707e539 [ 960.003681][T17656] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 960.003696][T17656] RSP: 002b:00000000f502c590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 960.003713][T17656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f502c620 [ 960.003725][T17656] RDX: 000000000000000f RSI: 00000000f73e3ff4 RDI: 0000000000000000 [ 960.003734][T17656] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 960.003744][T17656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 960.003754][T17656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 960.003780][T17656] [ 960.241790][ T9616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.380429][T17658] xt_CONNSECMARK: invalid mode: 0 [ 960.394528][ T9616] veth1_macvtap: left promiscuous mode [ 960.400123][ T9616] veth0_macvtap: left promiscuous mode [ 960.405772][ T9616] veth1_vlan: left promiscuous mode [ 960.411050][ T9616] veth0_vlan: left promiscuous mode [ 960.683410][ T6326] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 960.853026][ T6326] usb 2-1: Using ep0 maxpacket: 8 [ 960.866957][ T6326] usb 2-1: config 1 interface 0 has no altsetting 0 [ 960.889031][ T6326] usb 2-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 960.914023][ T5918] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 960.949154][ T6326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.976406][ T6326] usb 2-1: Product: syz [ 960.998368][ T6326] usb 2-1: SerialNumber: syz [ 961.073720][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 961.096994][ T5918] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 961.108030][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.130500][ T5918] usb 3-1: config 0 descriptor?? [ 961.136239][T17666] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 961.215386][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3052'. [ 961.242214][ T6326] usbhid 2-1:1.0: can't add hid device: -71 [ 961.248568][ T6326] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 961.261197][ T6326] usb 2-1: USB disconnect, device number 28 [ 961.366083][T17666] netlink: 'syz.2.3053': attribute type 1 has an invalid length. [ 961.394084][T17666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.404657][T17666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.468599][ T5840] Bluetooth: hci3: command 0x041b tx timeout [ 961.680956][ T5918] arvo 0003:1E7D:30D4.003A: item fetching failed at offset 2/5 [ 961.764302][ T5918] arvo 0003:1E7D:30D4.003A: parse failed [ 961.783124][ T5918] arvo 0003:1E7D:30D4.003A: probe with driver arvo failed with error -22 [ 961.880363][ T6320] usb 3-1: USB disconnect, device number 25 [ 962.131813][ T9616] team0 (unregistering): Port device team_slave_1 removed [ 962.474304][ T9616] team0 (unregistering): Port device team_slave_0 removed [ 962.483262][T17682] netlink: 396 bytes leftover after parsing attributes in process `syz.0.3057'. [ 962.526553][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 962.773691][ T6326] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 962.933433][ T6326] usb 3-1: Using ep0 maxpacket: 16 [ 962.944488][ T6326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.969279][ T6326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.986818][ T6326] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 962.996328][ T6326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.013479][ T6326] usb 3-1: config 0 descriptor?? [ 963.350060][T17586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.361176][T17586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.404700][T17586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.486868][T17693] xfrm1: entered promiscuous mode [ 963.492259][T17693] xfrm1: entered allmulticast mode [ 963.504863][T17685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3058'. [ 963.540820][ T6326] usbhid 3-1:0.0: can't add hid device: -71 [ 963.545190][ T5840] Bluetooth: hci3: command 0x041b tx timeout [ 963.553238][ T6326] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 963.627888][ T6326] usb 3-1: USB disconnect, device number 26 [ 963.692350][T17701] xt_CONNSECMARK: invalid mode: 0 [ 963.731558][T17586] hsr_slave_0: entered promiscuous mode [ 963.739811][T17586] hsr_slave_1: entered promiscuous mode [ 963.759920][T17586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.769628][T17586] Cannot create hsr debugfs directory [ 963.862526][T17707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3064'. [ 964.963341][ T5918] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 964.993488][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3066'. [ 965.136597][ T5918] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 965.148376][ T5918] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 965.194740][ T5918] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 965.223017][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.289265][T17723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 965.318076][ T5918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 965.354031][T17735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3069'. [ 965.411822][T17736] netlink: 'syz.2.3069': attribute type 13 has an invalid length. [ 965.540432][ T43] usb 1-1: USB disconnect, device number 36 [ 965.615377][ T5840] Bluetooth: hci3: command 0x041b tx timeout [ 965.745470][T17586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 965.757221][T17586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 965.832303][T17586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 965.839531][ T5905] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 965.900187][T17586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 966.033389][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 966.059033][ T5905] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 966.067426][ T43] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 966.075188][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 966.096508][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 966.118953][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 966.132792][T17752] FAULT_INJECTION: forcing a failure. [ 966.132792][T17752] name failslab, interval 1, probability 0, space 0, times 0 [ 966.146550][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.233723][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 966.237077][T17752] CPU: 0 UID: 0 PID: 17752 Comm: syz.5.3071 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 966.237101][T17752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.237111][T17752] Call Trace: [ 966.237120][T17752] [ 966.237128][T17752] dump_stack_lvl+0x189/0x250 [ 966.237156][T17752] ? __pfx____ratelimit+0x10/0x10 [ 966.237180][T17752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.237203][T17752] ? __pfx__printk+0x10/0x10 [ 966.237234][T17752] should_fail_ex+0x414/0x560 [ 966.237258][T17752] should_failslab+0xa8/0x100 [ 966.237279][T17752] __kmalloc_cache_noprof+0x70/0x3d0 [ 966.237294][T17752] ? sctp_add_bind_addr+0x8c/0x370 [ 966.237322][T17752] sctp_add_bind_addr+0x8c/0x370 [ 966.237349][T17752] sctp_copy_local_addr_list+0x30b/0x4e0 [ 966.237376][T17752] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 966.237400][T17752] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 966.237425][T17752] ? sctp_v6_is_any+0x64/0x80 [ 966.237445][T17752] ? sctp_copy_one_addr+0x93/0x360 [ 966.237471][T17752] sctp_bind_addr_copy+0xb3/0x3c0 [ 966.237495][T17752] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 966.237521][T17752] sctp_connect_new_asoc+0x2e0/0x690 [ 966.237543][T17752] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 966.237572][T17752] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 966.237591][T17752] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 966.237608][T17752] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 966.237628][T17752] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 966.237650][T17752] __sctp_connect+0x5ba/0xd50 [ 966.237681][T17752] ? __pfx___sctp_connect+0x10/0x10 [ 966.237710][T17752] sctp_inet_connect+0x12e/0x1e0 [ 966.237730][T17752] __sys_connect+0x313/0x440 [ 966.237748][T17752] ? __fget_files+0x3a0/0x420 [ 966.237766][T17752] ? __pfx___sys_connect+0x10/0x10 [ 966.237805][T17752] __ia32_sys_connect+0x7a/0x90 [ 966.237823][T17752] __do_fast_syscall_32+0xb6/0x2b0 [ 966.237847][T17752] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.237872][T17752] do_fast_syscall_32+0x34/0x80 [ 966.237895][T17752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 966.237914][T17752] RIP: 0023:0xf707e539 [ 966.237930][T17752] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 966.237945][T17752] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 966.237963][T17752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 966.237975][T17752] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 966.237985][T17752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.237995][T17752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 966.238005][T17752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.238031][T17752] [ 966.328495][T17586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.395107][T17586] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.396363][ T43] usb 1-1: device descriptor read/64, error -71 [ 966.562058][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.588760][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.596010][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.610003][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.617251][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.793157][ T43] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 966.824418][ T5905] usb 3-1: usb_control_msg returned -32 [ 966.830053][ T5905] usbtmc 3-1:16.0: can't read capabilities [ 966.852638][T17586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.924128][ T43] usb 1-1: device descriptor read/64, error -71 [ 967.031222][T17586] veth0_vlan: entered promiscuous mode [ 967.043762][ T43] usb usb1-port1: attempt power cycle [ 967.161821][T17586] veth1_vlan: entered promiscuous mode [ 967.375943][T17586] veth0_macvtap: entered promiscuous mode [ 967.393053][ T43] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 967.424648][ T43] usb 1-1: device descriptor read/8, error -71 [ 967.435558][T17586] veth1_macvtap: entered promiscuous mode [ 967.463069][ T5905] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 967.498321][T17586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.575167][T17586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.598356][T17586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.602469][T17773] [ 967.609523][T17773] ===================================================== [ 967.616463][T17773] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 967.623063][T17586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.623914][T17773] 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 Not tainted [ 967.632569][T17586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.639648][T17773] ----------------------------------------------------- [ 967.639657][T17773] syz.5.3075/17773 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 967.639673][T17773] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 967.671687][T17773] [ 967.671687][T17773] and this task is already holding: [ 967.675608][T17586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.679041][T17773] ffff888027cd88a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 967.696430][T17773] which would create a new lock dependency: [ 967.702322][T17773] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 967.709899][T17773] [ 967.709899][T17773] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 967.719333][T17773] (&client->buffer_lock){..-.}-{3:3} [ 967.719356][T17773] [ 967.719356][T17773] ... which became SOFTIRQ-irq-safe at: [ 967.732390][T17773] lock_acquire+0x120/0x360 [ 967.736974][T17773] _raw_spin_lock+0x2e/0x40 [ 967.741553][T17773] evdev_pass_values+0xb9/0xbd0 [ 967.746476][T17773] evdev_events+0x1e6/0x340 [ 967.751049][T17773] input_pass_values+0x288/0x890 [ 967.756058][T17773] input_event_dispose+0x3e5/0x6b0 [ 967.761248][T17773] input_event+0x8c/0xc0 [ 967.765568][T17773] hidinput_hid_event+0x132c/0x1c90 [ 967.770839][T17773] hid_process_event+0x4be/0x620 [ 967.775848][T17773] hid_report_raw_event+0xe91/0x16d0 [ 967.781210][T17773] hid_input_report+0x43e/0x520 [ 967.786133][T17773] hid_irq_in+0x47e/0x6d0 [ 967.790536][T17773] __usb_hcd_giveback_urb+0x417/0x690 [ 967.795978][T17773] dummy_timer+0x862/0x4550 [ 967.800550][T17773] __hrtimer_run_queues+0x52c/0xc60 [ 967.805829][T17773] hrtimer_run_softirq+0x187/0x2b0 [ 967.811012][T17773] handle_softirqs+0x286/0x870 [ 967.815850][T17773] __irq_exit_rcu+0xca/0x1f0 [ 967.820515][T17773] irq_exit_rcu+0x9/0x30 [ 967.824831][T17773] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 967.830545][T17773] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 967.836598][T17773] __handle_mm_fault+0x3797/0x5620 [ 967.841787][T17773] handle_mm_fault+0x40a/0x8e0 [ 967.846625][T17773] __get_user_pages+0x1af4/0x30b0 [ 967.851726][T17773] populate_vma_page_range+0x26b/0x340 [ 967.857261][T17773] __mm_populate+0x24c/0x380 [ 967.861926][T17773] vm_mmap_pgoff+0x3f0/0x4c0 [ 967.866594][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 967.871784][T17773] do_fast_syscall_32+0x34/0x80 [ 967.876715][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 967.883120][T17773] [ 967.883120][T17773] to a SOFTIRQ-irq-unsafe lock: [ 967.890123][T17773] (tasklist_lock){.+.+}-{3:3} [ 967.890146][T17773] [ 967.890146][T17773] ... which became SOFTIRQ-irq-unsafe at: [ 967.902742][T17773] ... [ 967.902749][T17773] lock_acquire+0x120/0x360 [ 967.909889][T17773] _raw_read_lock+0x36/0x50 [ 967.914474][T17773] __do_wait+0xde/0x740 [ 967.918702][T17773] do_wait+0x1f8/0x520 [ 967.922841][T17773] kernel_wait+0xab/0x170 [ 967.927244][T17773] call_usermodehelper_exec_work+0xbe/0x230 [ 967.933212][T17773] process_scheduled_works+0xade/0x17b0 [ 967.938832][T17773] worker_thread+0x8a0/0xda0 [ 967.943496][T17773] kthread+0x70e/0x8a0 [ 967.947636][T17773] ret_from_fork+0x3fc/0x770 [ 967.952299][T17773] ret_from_fork_asm+0x1a/0x30 [ 967.957138][T17773] [ 967.957138][T17773] other info that might help us debug this: [ 967.957138][T17773] [ 967.967351][T17773] Chain exists of: [ 967.967351][T17773] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 967.967351][T17773] [ 967.980556][T17773] Possible interrupt unsafe locking scenario: [ 967.980556][T17773] [ 967.988858][T17773] CPU0 CPU1 [ 967.994206][T17773] ---- ---- [ 967.999555][T17773] lock(tasklist_lock); [ 968.003788][T17773] local_irq_disable(); [ 968.010527][T17773] lock(&client->buffer_lock); [ 968.017882][T17773] lock(&f_owner->lock); [ 968.024718][T17773] [ 968.028159][T17773] lock(&client->buffer_lock); [ 968.033169][T17773] [ 968.033169][T17773] *** DEADLOCK *** [ 968.033169][T17773] [ 968.041298][T17773] 2 locks held by syz.5.3075/17773: [ 968.046484][T17773] #0: ffff88802a7448c0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x187/0x5a0 [ 968.055007][T17773] #1: ffff888027cd88a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 968.064136][T17773] [ 968.064136][T17773] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 968.074528][T17773] -> (&client->buffer_lock){..-.}-{3:3} { [ 968.080423][T17773] IN-SOFTIRQ-W at: [ 968.084562][T17773] lock_acquire+0x120/0x360 [ 968.091052][T17773] _raw_spin_lock+0x2e/0x40 [ 968.097543][T17773] evdev_pass_values+0xb9/0xbd0 [ 968.104378][T17773] evdev_events+0x1e6/0x340 [ 968.110864][T17773] input_pass_values+0x288/0x890 [ 968.117781][T17773] input_event_dispose+0x3e5/0x6b0 [ 968.124877][T17773] input_event+0x8c/0xc0 [ 968.131103][T17773] hidinput_hid_event+0x132c/0x1c90 [ 968.138283][T17773] hid_process_event+0x4be/0x620 [ 968.145203][T17773] hid_report_raw_event+0xe91/0x16d0 [ 968.152482][T17773] hid_input_report+0x43e/0x520 [ 968.159320][T17773] hid_irq_in+0x47e/0x6d0 [ 968.165639][T17773] __usb_hcd_giveback_urb+0x417/0x690 [ 968.172997][T17773] dummy_timer+0x862/0x4550 [ 968.179490][T17773] __hrtimer_run_queues+0x52c/0xc60 [ 968.186682][T17773] hrtimer_run_softirq+0x187/0x2b0 [ 968.193774][T17773] handle_softirqs+0x286/0x870 [ 968.200526][T17773] __irq_exit_rcu+0xca/0x1f0 [ 968.207099][T17773] irq_exit_rcu+0x9/0x30 [ 968.213330][T17773] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 968.220945][T17773] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 968.228911][T17773] __handle_mm_fault+0x3797/0x5620 [ 968.236010][T17773] handle_mm_fault+0x40a/0x8e0 [ 968.242757][T17773] __get_user_pages+0x1af4/0x30b0 [ 968.249767][T17773] populate_vma_page_range+0x26b/0x340 [ 968.257212][T17773] __mm_populate+0x24c/0x380 [ 968.263787][T17773] vm_mmap_pgoff+0x3f0/0x4c0 [ 968.270361][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 968.277473][T17773] do_fast_syscall_32+0x34/0x80 [ 968.284314][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.292625][T17773] INITIAL USE at: [ 968.296680][T17773] lock_acquire+0x120/0x360 [ 968.303081][T17773] _raw_spin_lock+0x2e/0x40 [ 968.309486][T17773] evdev_pass_values+0xb9/0xbd0 [ 968.316233][T17773] evdev_events+0x1e6/0x340 [ 968.322629][T17773] input_pass_values+0x288/0x890 [ 968.329462][T17773] input_event_dispose+0x330/0x6b0 [ 968.336475][T17773] input_inject_event+0x1fe/0x320 [ 968.343398][T17773] evdev_write+0x2fc/0x480 [ 968.349710][T17773] vfs_write+0x27e/0xa90 [ 968.355855][T17773] ksys_write+0x145/0x250 [ 968.362082][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 968.369092][T17773] do_fast_syscall_32+0x34/0x80 [ 968.375843][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.384072][T17773] } [ 968.386727][T17773] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 968.395043][T17773] -> (&new->fa_lock){....}-{3:3} { [ 968.400248][T17773] INITIAL USE at: [ 968.404214][T17773] lock_acquire+0x120/0x360 [ 968.410440][T17773] _raw_write_lock_irq+0xa2/0xf0 [ 968.417194][T17773] fasync_remove_entry+0xf1/0x1c0 [ 968.423942][T17773] lease_modify+0x1ca/0x3c0 [ 968.430167][T17773] locks_remove_file+0x4bf/0xea0 [ 968.436841][T17773] __fput+0x3ab/0xa70 [ 968.442558][T17773] task_work_run+0x1d1/0x260 [ 968.448880][T17773] exit_to_user_mode_loop+0xec/0x110 [ 968.455897][T17773] __do_fast_syscall_32+0x1f4/0x2b0 [ 968.462825][T17773] do_fast_syscall_32+0x34/0x80 [ 968.469411][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.477463][T17773] INITIAL READ USE at: [ 968.481865][T17773] lock_acquire+0x120/0x360 [ 968.488532][T17773] _raw_read_lock_irqsave+0xaf/0x100 [ 968.495977][T17773] kill_fasync+0x199/0x4d0 [ 968.502552][T17773] lease_break_callback+0x26/0x30 [ 968.509737][T17773] __break_lease+0x6a5/0x1620 [ 968.516572][T17773] do_dentry_open+0xd62/0x1970 [ 968.523494][T17773] vfs_open+0x3b/0x340 [ 968.529719][T17773] dentry_open+0x61/0xa0 [ 968.536118][T17773] do_mq_open+0x59e/0x780 [ 968.542602][T17773] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 968.550389][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 968.557662][T17773] do_fast_syscall_32+0x34/0x80 [ 968.564673][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.573163][T17773] } [ 968.575740][T17773] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 968.584494][T17773] ... acquired at: [ 968.588369][T17773] lock_acquire+0x120/0x360 [ 968.593037][T17773] _raw_read_lock_irqsave+0xaf/0x100 [ 968.598488][T17773] kill_fasync+0x199/0x4d0 [ 968.603082][T17773] evdev_pass_values+0x627/0xbd0 [ 968.608199][T17773] evdev_events+0x1e6/0x340 [ 968.612877][T17773] input_pass_values+0x288/0x890 [ 968.617978][T17773] input_event_dispose+0x330/0x6b0 [ 968.623263][T17773] input_inject_event+0x1fe/0x320 [ 968.628467][T17773] evdev_write+0x2fc/0x480 [ 968.633056][T17773] vfs_write+0x27e/0xa90 [ 968.637465][T17773] ksys_write+0x145/0x250 [ 968.641951][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 968.647226][T17773] do_fast_syscall_32+0x34/0x80 [ 968.652240][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.658730][T17773] [ 968.661045][T17773] -> (&f_owner->lock){....}-{3:3} { [ 968.666252][T17773] INITIAL USE at: [ 968.670133][T17773] lock_acquire+0x120/0x360 [ 968.676191][T17773] _raw_write_lock_irq+0xa2/0xf0 [ 968.682683][T17773] __f_setown+0x67/0x370 [ 968.688481][T17773] fcntl_dirnotify+0x3d6/0x690 [ 968.694796][T17773] do_fcntl+0x6d0/0x1910 [ 968.700588][T17773] do_compat_fcntl64+0x477/0x720 [ 968.707074][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 968.713739][T17773] do_fast_syscall_32+0x34/0x80 [ 968.720140][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.728038][T17773] INITIAL READ USE at: [ 968.732365][T17773] lock_acquire+0x120/0x360 [ 968.738867][T17773] _raw_read_lock_irqsave+0xaf/0x100 [ 968.746145][T17773] send_sigio+0x38/0x370 [ 968.752373][T17773] kill_fasync+0x24d/0x4d0 [ 968.758776][T17773] lease_break_callback+0x26/0x30 [ 968.765788][T17773] __break_lease+0x6a5/0x1620 [ 968.772449][T17773] do_dentry_open+0xd62/0x1970 [ 968.779195][T17773] vfs_open+0x3b/0x340 [ 968.785258][T17773] dentry_open+0x61/0xa0 [ 968.791491][T17773] do_mq_open+0x59e/0x780 [ 968.797807][T17773] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 968.805515][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 968.812613][T17773] do_fast_syscall_32+0x34/0x80 [ 968.819448][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.827778][T17773] } [ 968.830275][T17773] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 968.839128][T17773] ... acquired at: [ 968.842918][T17773] lock_acquire+0x120/0x360 [ 968.847607][T17773] _raw_read_lock_irqsave+0xaf/0x100 [ 968.853068][T17773] send_sigio+0x38/0x370 [ 968.857475][T17773] kill_fasync+0x24d/0x4d0 [ 968.862057][T17773] lease_break_callback+0x26/0x30 [ 968.867251][T17773] __break_lease+0x6a5/0x1620 [ 968.872092][T17773] do_dentry_open+0xd62/0x1970 [ 968.877017][T17773] vfs_open+0x3b/0x340 [ 968.881248][T17773] dentry_open+0x61/0xa0 [ 968.885657][T17773] do_mq_open+0x59e/0x780 [ 968.890144][T17773] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 968.895935][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 968.901212][T17773] do_fast_syscall_32+0x34/0x80 [ 968.906225][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.912716][T17773] [ 968.915029][T17773] [ 968.915029][T17773] the dependencies between the lock to be acquired [ 968.915038][T17773] and SOFTIRQ-irq-unsafe lock: [ 968.928521][T17773] -> (tasklist_lock){.+.+}-{3:3} { [ 968.933636][T17773] HARDIRQ-ON-R at: [ 968.937602][T17773] lock_acquire+0x120/0x360 [ 968.943743][T17773] _raw_read_lock+0x36/0x50 [ 968.949883][T17773] __do_wait+0xde/0x740 [ 968.955675][T17773] do_wait+0x1f8/0x520 [ 968.961381][T17773] kernel_wait+0xab/0x170 [ 968.967345][T17773] call_usermodehelper_exec_work+0xbe/0x230 [ 968.974877][T17773] process_scheduled_works+0xade/0x17b0 [ 968.982066][T17773] worker_thread+0x8a0/0xda0 [ 968.988297][T17773] kthread+0x70e/0x8a0 [ 968.994004][T17773] ret_from_fork+0x3fc/0x770 [ 969.000233][T17773] ret_from_fork_asm+0x1a/0x30 [ 969.006636][T17773] SOFTIRQ-ON-R at: [ 969.010602][T17773] lock_acquire+0x120/0x360 [ 969.016760][T17773] _raw_read_lock+0x36/0x50 [ 969.022918][T17773] __do_wait+0xde/0x740 [ 969.028724][T17773] do_wait+0x1f8/0x520 [ 969.034438][T17773] kernel_wait+0xab/0x170 [ 969.040411][T17773] call_usermodehelper_exec_work+0xbe/0x230 [ 969.047946][T17773] process_scheduled_works+0xade/0x17b0 [ 969.055132][T17773] worker_thread+0x8a0/0xda0 [ 969.061364][T17773] kthread+0x70e/0x8a0 [ 969.067068][T17773] ret_from_fork+0x3fc/0x770 [ 969.073299][T17773] ret_from_fork_asm+0x1a/0x30 [ 969.079700][T17773] INITIAL USE at: [ 969.083581][T17773] lock_acquire+0x120/0x360 [ 969.089638][T17773] _raw_write_lock_irq+0xa2/0xf0 [ 969.096142][T17773] copy_process+0x224f/0x3c00 [ 969.102369][T17773] kernel_clone+0x21e/0x870 [ 969.108422][T17773] user_mode_thread+0xdd/0x140 [ 969.114732][T17773] rest_init+0x23/0x300 [ 969.120436][T17773] start_kernel+0x47d/0x500 [ 969.126487][T17773] x86_64_start_reservations+0x24/0x30 [ 969.133495][T17773] x86_64_start_kernel+0x143/0x1c0 [ 969.140173][T17773] common_startup_64+0x13e/0x147 [ 969.146685][T17773] INITIAL READ USE at: [ 969.151008][T17773] lock_acquire+0x120/0x360 [ 969.157506][T17773] _raw_read_lock+0x36/0x50 [ 969.163999][T17773] __do_wait+0xde/0x740 [ 969.170155][T17773] do_wait+0x1f8/0x520 [ 969.176227][T17773] kernel_wait+0xab/0x170 [ 969.182557][T17773] call_usermodehelper_exec_work+0xbe/0x230 [ 969.190441][T17773] process_scheduled_works+0xade/0x17b0 [ 969.197995][T17773] worker_thread+0x8a0/0xda0 [ 969.204578][T17773] kthread+0x70e/0x8a0 [ 969.210630][T17773] ret_from_fork+0x3fc/0x770 [ 969.217207][T17773] ret_from_fork_asm+0x1a/0x30 [ 969.223955][T17773] } [ 969.226442][T17773] ... key at: [] tasklist_lock+0x18/0x40 [ 969.234151][T17773] ... acquired at: [ 969.237940][T17773] lock_acquire+0x120/0x360 [ 969.242608][T17773] _raw_read_lock+0x36/0x50 [ 969.247275][T17773] send_sigurg+0x12b/0x420 [ 969.251851][T17773] sk_send_sigurg+0x6c/0x2e0 [ 969.256604][T17773] queue_oob+0x490/0x5a0 [ 969.261006][T17773] unix_stream_sendmsg+0xaf9/0xc90 [ 969.266280][T17773] __sock_sendmsg+0x219/0x270 [ 969.271117][T17773] ____sys_sendmsg+0x52d/0x830 [ 969.276042][T17773] ___sys_sendmsg+0x21f/0x2a0 [ 969.280877][T17773] __sys_sendmmsg+0x28e/0x430 [ 969.285709][T17773] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 969.291416][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 969.296694][T17773] do_fast_syscall_32+0x34/0x80 [ 969.301720][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 969.308210][T17773] [ 969.310524][T17773] [ 969.310524][T17773] stack backtrace: [ 969.316402][T17773] CPU: 0 UID: 0 PID: 17773 Comm: syz.5.3075 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 969.316419][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 969.316428][T17773] Call Trace: [ 969.316434][T17773] [ 969.316441][T17773] dump_stack_lvl+0x189/0x250 [ 969.316462][T17773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 969.316481][T17773] ? __pfx__printk+0x10/0x10 [ 969.316498][T17773] validate_chain+0x1f05/0x2140 [ 969.316518][T17773] __lock_acquire+0xab9/0xd20 [ 969.316537][T17773] ? send_sigurg+0x12b/0x420 [ 969.316552][T17773] lock_acquire+0x120/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 969.316568][T17773] ? send_sigurg+0x12b/0x420 [ 969.316583][T17773] ? _raw_read_lock_irqsave+0xbb/0x100 [ 969.316603][T17773] _raw_read_lock+0x36/0x50 [ 969.316617][T17773] ? send_sigurg+0x12b/0x420 [ 969.316632][T17773] send_sigurg+0x12b/0x420 [ 969.316649][T17773] sk_send_sigurg+0x6c/0x2e0 [ 969.316667][T17773] queue_oob+0x490/0x5a0 [ 969.316684][T17773] ? __pfx_queue_oob+0x10/0x10 [ 969.316698][T17773] ? __pfx___might_resched+0x10/0x10 [ 969.316717][T17773] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 969.316735][T17773] unix_stream_sendmsg+0xaf9/0xc90 [ 969.316752][T17773] ? aa_sk_perm+0x81e/0x950 [ 969.316766][T17773] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 969.316781][T17773] ? __asan_memset+0x22/0x50 [ 969.316797][T17773] ? __import_iovec+0x5d4/0x7f0 [ 969.316808][T17773] ? aa_sock_msg_perm+0x94/0x160 [ 969.316823][T17773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 969.316838][T17773] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 969.316852][T17773] __sock_sendmsg+0x219/0x270 [ 969.316870][T17773] ____sys_sendmsg+0x52d/0x830 [ 969.316886][T17773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 969.316905][T17773] ___sys_sendmsg+0x21f/0x2a0 [ 969.316920][T17773] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.316933][T17773] ? preempt_schedule+0xae/0xc0 [ 969.316949][T17773] ? __pfx_preempt_schedule+0x10/0x10 [ 969.316979][T17773] ? __fget_files+0x2a/0x420 [ 969.316992][T17773] ? __fget_files+0x3a0/0x420 [ 969.317008][T17773] __sys_sendmmsg+0x28e/0x430 [ 969.317024][T17773] ? __pfx___sys_sendmmsg+0x10/0x10 [ 969.317041][T17773] ? __pfx_do_futex+0x10/0x10 [ 969.317061][T17773] ? rcu_is_watching+0x15/0xb0 [ 969.317080][T17773] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 969.317098][T17773] __do_fast_syscall_32+0xb6/0x2b0 [ 969.317119][T17773] do_fast_syscall_32+0x34/0x80 [ 969.317136][T17773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 969.317152][T17773] RIP: 0023:0xf707e539 [ 969.317164][T17773] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 969.317175][T17773] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 969.317190][T17773] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800001c0 [ 969.317199][T17773] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 969.317208][T17773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 969.317217][T17773] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 969.317225][T17773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 969.317238][T17773] [ 969.317317][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 969.639642][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 969.641401][T17773] netlink: 'syz.5.3075': attribute type 11 has an invalid length. [ 969.656520][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.667785][T17773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3075'. [ 969.713067][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.757340][ T5905] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 969.793066][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.805228][ T5905] usb 2-1: config 0 descriptor?? [ 969.853193][ T43] usb 1-1: device not accepting address 40, error -71 [ 969.860294][ T43] usb usb1-port1: unable to enumerate USB device [ 969.891212][T17773] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 970.626455][ T5905] usb 2-1: can't set config #0, error -71 [ 970.719800][ T5905] usb 2-1: USB disconnect, device number 29 [ 970.748801][ T9614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.790421][ T43] usb 3-1: USB disconnect, device number 27 [ 970.880552][ T9614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.987714][ T9614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.061968][ T9614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.351561][ T9614] bond0 (unregistering): Released all slaves [ 971.564716][ T9614] hsr_slave_0: left promiscuous mode [ 971.578073][ T9614] hsr_slave_1: left promiscuous mode [ 971.588289][ T9614] veth1_macvtap: left promiscuous mode [ 971.600931][ T9614] veth0_macvtap: left promiscuous mode [ 971.607057][ T9614] veth1_vlan: left promiscuous mode [ 971.612344][ T9614] veth0_vlan: left promiscuous mode [ 972.319277][ T9614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.358165][ T9614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.410670][ T9614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.481069][ T9614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.589407][ T9614] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.644198][ T9614] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.732121][ T9614] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.781273][ T9614] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.920054][ T9614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.961256][ T9614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.014835][ T9614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.058868][ T9614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.169820][ T9614] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.224671][ T9614] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.272150][ T9614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.339139][ T9614] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.442875][ T9614] bridge_slave_1: left allmulticast mode [ 973.454322][ T9614] bridge_slave_1: left promiscuous mode [ 973.460055][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.472010][ T9614] bridge_slave_0: left allmulticast mode [ 973.478895][ T9614] bridge_slave_0: left promiscuous mode [ 973.484859][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.495676][ T9614] bridge_slave_1: left allmulticast mode [ 973.501342][ T9614] bridge_slave_1: left promiscuous mode [ 973.507278][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.517392][ T9614] bridge_slave_0: left allmulticast mode [ 973.526873][ T9614] bridge_slave_0: left promiscuous mode [ 973.532577][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.547753][ T9614] bridge_slave_1: left allmulticast mode [ 973.553623][ T9614] bridge_slave_1: left promiscuous mode [ 973.559309][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.568564][ T9614] bridge_slave_0: left allmulticast mode [ 973.574903][ T9614] bridge_slave_0: left promiscuous mode [ 973.580590][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.713277][ T9614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.722876][ T9614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.732314][ T9614] bond0 (unregistering): Released all slaves [ 973.870703][ T9614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.879885][ T9614] bond_slave_0: left promiscuous mode [ 973.886420][ T9614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.896085][ T9614] bond_slave_1: left promiscuous mode [ 973.902031][ T9614] bond0 (unregistering): Released all slaves [ 973.965322][ T9614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.976690][ T9614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.987585][ T9614] bond0 (unregistering): Released all slaves [ 974.075587][ T9614] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 974.085660][ T9614] bridge0 (unregistering): left allmulticast mode [ 974.345996][ T9614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.354814][ T9614] bond_slave_0: left promiscuous mode [ 974.360251][ T9614] bond_slave_0: left allmulticast mode [ 974.366968][ T9614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.376087][ T9614] bond_slave_1: left promiscuous mode [ 974.381538][ T9614] bond_slave_1: left allmulticast mode [ 974.388078][ T9614] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 974.396641][ T9614] batadv0: left allmulticast mode [ 974.402404][ T9614] bond0 (unregistering): Released all slaves [ 974.505625][ T9614] bond1 (unregistering): (slave veth5): Releasing active interface [ 974.513627][ T9614] batadv1: entered promiscuous mode [ 974.520307][ T9614] bond1 (unregistering): (slave batadv1): Releasing active interface [ 974.529480][ T9614] bond1 (unregistering): (slave batadv2): Releasing active interface [ 974.538793][ T9614] bond1 (unregistering): (slave batadv3): Releasing active interface [ 974.547927][ T9614] bond1 (unregistering): (slave batadv4): Releasing active interface [ 974.557826][ T9614] bond1 (unregistering): (slave batadv5): Releasing active interface [ 974.567066][ T9614] bond1 (unregistering): (slave batadv6): Releasing active interface [ 974.576854][ T9614] bond1 (unregistering): (slave batadv7): Releasing active interface [ 974.586530][ T9614] bond1 (unregistering): (slave batadv8): Releasing active interface [ 974.595720][ T9614] bond1 (unregistering): (slave batadv9): Releasing active interface [ 974.605247][ T9614] bond1 (unregistering): (slave batadv10): Releasing active interface [ 974.614931][ T9614] bond1 (unregistering): (slave batadv11): Releasing active interface [ 974.624189][ T9614] bond1 (unregistering): Released all slaves [ 974.632713][ T9614] bond2 (unregistering): Released all slaves [ 974.741379][ T9614] tipc: Left network mode [ 975.161114][ T9614] hsr_slave_0: left promiscuous mode [ 975.168385][ T9614] hsr_slave_1: left promiscuous mode [ 975.174344][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.181760][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.194648][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.202079][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.217983][ T9614] hsr_slave_0: left promiscuous mode [ 975.226891][ T9614] hsr_slave_1: left promiscuous mode [ 975.232674][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.241698][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.254753][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.262237][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.277238][ T9614] hsr_slave_0: left promiscuous mode [ 975.283173][ T9614] hsr_slave_1: left promiscuous mode [ 975.289017][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.296487][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.305678][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.314000][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.324741][ T9614] hsr_slave_0: left promiscuous mode [ 975.330572][ T9614] hsr_slave_1: left promiscuous mode [ 975.336471][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.343934][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.351780][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.359546][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.376211][ T9614] veth1_macvtap: left promiscuous mode [ 975.381711][ T9614] veth0_macvtap: left promiscuous mode [ 975.387897][ T9614] veth1_vlan: left promiscuous mode [ 975.393227][ T9614] veth0_vlan: left promiscuous mode [ 975.399034][ T9614] veth1_macvtap: left promiscuous mode [ 975.405116][ T9614] veth0_macvtap: left promiscuous mode [ 975.410628][ T9614] veth1_vlan: left promiscuous mode [ 975.415984][ T9614] veth0_vlan: left promiscuous mode [ 975.421834][ T9614] veth1_macvtap: left promiscuous mode [ 975.427371][ T9614] veth0_macvtap: left promiscuous mode [ 975.432887][ T9614] veth1_vlan: left promiscuous mode [ 975.438358][ T9614] veth0_vlan: left promiscuous mode [ 975.444568][ T9614] veth1_macvtap: left promiscuous mode [ 975.450049][ T9614] veth0_macvtap: left promiscuous mode [ 975.455780][ T9614] veth1_vlan: left promiscuous mode [ 975.461024][ T9614] veth0_vlan: left promiscuous mode [ 975.709213][ T9614] team0 (unregistering): Port device team_slave_1 removed [ 975.738215][ T9614] team0 (unregistering): Port device team_slave_0 removed [ 975.937660][ T9614] team0 (unregistering): Port device team_slave_1 removed [ 975.964534][ T9614] team0 (unregistering): Port device team_slave_0 removed [ 976.140441][ T9614] team0 (unregistering): Port device team_slave_1 removed [ 976.166559][ T9614] team0 (unregistering): Port device team_slave_0 removed [ 976.376137][ T9614] team0 (unregistering): Port device team_slave_1 removed [ 976.395301][ T9614] team0 (unregistering): Port device team_slave_0 removed