last executing test programs: 4m42.662268656s ago: executing program 0 (id=771): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gretap0\x00', &(0x7f0000001000)={'tunl0\x00', 0x0, 0x7, 0x50, 0x7, 0x5, {{0x6, 0x4, 0x3, 0x3a, 0x18, 0x66, 0x0, 0x81, 0x29, 0x0, @empty, @private=0xa010101, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001100)={'syztnl1\x00', &(0x7f0000001080)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0xb, 0x1b, 0x56, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @loopback, 0x40, 0x0, 0x5, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x5, {{0x1c, 0x4, 0x3, 0x3b, 0x70, 0x66, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @empty, {[@rr={0x7, 0x1f, 0xdb, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @rand_addr=0x64010100, @broadcast]}, @rr={0x7, 0x1f, 0xa, [@dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp={0x44, 0x10, 0xaa, 0x0, 0x8, [0x10000, 0x5, 0x17a889aa]}, @end, @end, @lsrr={0x83, 0xb, 0x32, [@broadcast, @private=0xa010100]}]}}}}}) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001400)={'syztnl2\x00', &(0x7f0000001380)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x999, 0x800, {{0x5, 0x4, 0x1, 0x10, 0x14, 0x65, 0x0, 0x83, 0x4, 0x0, @loopback, @loopback}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001440)={0xae4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6dd}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x97, 0xb, 0xfb}, {0xd9d2, 0x8, 0x2, 0x2}, {0x5, 0x8, 0xb7, 0x8001}, {0xe6e, 0xd, 0xb, 0x8}, {0x0, 0xf7, 0x0, 0x64}, {0x200, 0x9, 0xff}, {0x2, 0x0, 0xd, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7cdc}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa51c}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xae4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r16 = dup(r6) syz_ublk_setup_queues(r16, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 4m41.577710513s ago: executing program 0 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e00001400028006000100000000000600010002000000080005ff", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 4m41.355392193s ago: executing program 0 (id=775): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x8010) connect$inet(r0, 0x0, 0x0) ioctl$sock_proto_private(r1, 0x89ea, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x207, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}]}], {0x14}}, 0x98}}, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) 4m41.247688109s ago: executing program 0 (id=776): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwrite64(0xffffffffffffffff, 0x0, 0xffffffffffffff15, 0x239c1317) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x50, 0x37, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f410005141004046eb456019374598fa80cc99925c6e5b00a10030001000015"], 0x1, [{0x0, 0x0}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000001000071102800000000001f1a00000000000095fff30000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x58) 4m39.790823785s ago: executing program 0 (id=783): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc848}, 0x4080) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0) socket(0x28, 0x803, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x2, 0x2, 0x1041, 0x5}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0xc9, 0x5a1b}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000040)="3042f167aaccffb50f92c9192f30") syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc848}, 0x4080) (async) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0) (async) socket(0x28, 0x803, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) (async) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) (async) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x2, 0x2, 0x1041, 0x5}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0xc9, 0x5a1b}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) (async) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000040)="3042f167aaccffb50f92c9192f30") (async) 4m39.355940348s ago: executing program 0 (id=785): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x1, 0x2, 0xfffffffffffffee1, 0x70000, 0x9, {0x77359400}, {0x1, 0x8, 0x8, 0xc2, 0xba, 0xf0, "00a6fc07"}, 0x21, 0x1, {}, 0x3}) 4m24.157149824s ago: executing program 32 (id=785): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x1, 0x2, 0xfffffffffffffee1, 0x70000, 0x9, {0x77359400}, {0x1, 0x8, 0x8, 0xc2, 0xba, 0xf0, "00a6fc07"}, 0x21, 0x1, {}, 0x3}) 8.084222996s ago: executing program 3 (id=1983): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x806}, @void, @x25={0x1, 0x0, 0x1b, "dd8cc71ad26333e2d71d0887"}}, 0x13) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000fe0000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 7.759211036s ago: executing program 3 (id=1987): socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000c0) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write(r3, &(0x7f0000000000)="1546b2000000000001008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac3(0x3, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040532b31004000010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000480)=[{0x25, '\x00', @st={0x4, [{0x3, @svalue=0x5d7cbccb}, {0x1, @uvalue=0x7fff}, {0x2, @svalue=0x800}, {0x2, @uvalue=0x7}]}, 0xe8}, {0x45, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x0, @svalue=0x80000002}, {0x1, @svalue=0x5}, {0x1, @uvalue=0xfffffffffffffff8}]}, 0x4100f467}, {0x22, '\x00', @data=0x9fe, 0x7}, {0x2e, '\x00', @st={0x4, [{0x3, @svalue=0x1008}, {0x2, @svalue=0x6}, {0x3, @uvalue=0x6}, {0x3, @uvalue=0x3}]}, 0x7}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0xfffffffffffffffd, 0x1000000000000000, 0x975a, 0x40000000000305, 0x2, 0xd, {0x4, 0x800000000000003, 0x1, 0xfe2b25e, 0x1ffffffffffffffe, 0x0, 0x6, 0x4, 0x3, 0x0, 0x3, 0x0, 0x0, 0x8, 0x5417}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.815070199s ago: executing program 3 (id=1997): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x438403, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x3d42fb6ebd0ca4a5}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x6, 0xd, 0xe, 0x8e1}, {0xd5, 0x0, 0x2, 0x1, 0x80}, 0x80, 0x56b6, 0x1a10}}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@deltclass={0x7c, 0x29, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0x6}, {0xe, 0x3}, {0x0, 0xffff}}, [@tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_htb={{}, {0x0, 0x2, [@TCA_HTB_PARMS={0x0, 0x1, {{0x0, 0x2, 0x2, 0x9, 0x100, 0x1}, {0x4, 0x1, 0x1, 0x8, 0x40, 0x9}, 0x619, 0x7, 0x1ff, 0x28a, 0x5}}, @TCA_HTB_CTAB={0x0, 0x3, [0x9, 0x7c, 0x3, 0x10, 0x81, 0x70, 0x3b6, 0x10000, 0x1ff, 0x8000, 0x6, 0x4, 0x6, 0x7b3b, 0x9, 0x6, 0xba5, 0x10001, 0x6, 0x128, 0x5, 0x3, 0x8, 0x3, 0x5, 0x5, 0x3, 0x10001, 0x9, 0x6, 0x7, 0x4, 0x4, 0x4, 0x210, 0x1, 0x0, 0xca9, 0x5, 0x800, 0x401, 0x3, 0xb5c, 0x10000, 0x4, 0x1d, 0x8, 0x1af, 0x2, 0x2, 0x3ff, 0x7, 0xa, 0x3, 0x0, 0x5, 0x3, 0x4, 0x4, 0x3ff, 0x4, 0x6, 0x1, 0x4, 0x1, 0x80000000, 0x7, 0xffff, 0x5, 0x6, 0x5, 0x5, 0x920, 0xa, 0x8, 0x8, 0x7, 0x401, 0x7, 0x77ee, 0x6ae, 0x7fff, 0x3ff, 0x678f3cc5, 0x9, 0xfffffff9, 0x1, 0x3c, 0x1, 0x0, 0x8, 0x9, 0x3, 0x7, 0x9, 0x5, 0x4, 0xbca, 0x3, 0x6, 0x28, 0xfffeffff, 0x7, 0x9, 0x8, 0x3, 0x9, 0x6, 0x1, 0xffffffff, 0xdfd5, 0xfffffffb, 0xffffffff, 0xf, 0x10001, 0x3, 0x7ff, 0x32, 0x10, 0x0, 0x1, 0x80, 0x1000, 0x8, 0x0, 0x1, 0x96a, 0x60000000, 0x6, 0xfffffff9, 0x0, 0x4000, 0x1, 0x8, 0xe4b, 0x0, 0x2e, 0x8, 0x0, 0x1, 0x4, 0x3, 0x4, 0x0, 0x9, 0x3ce7, 0x8, 0x5, 0xfb, 0x4, 0xf, 0x1, 0xd, 0x9, 0xfffffbff, 0x3, 0x9, 0x3, 0xc438, 0xffff, 0x3, 0xa, 0x0, 0x9, 0x1000, 0x1, 0x7ff, 0xa, 0x3, 0xfffffffc, 0x2, 0x0, 0x6ef96860, 0x6, 0xfffffffe, 0x3, 0x6, 0x8000, 0x0, 0x8, 0x2, 0xffffffff, 0x200, 0x4, 0x3, 0x9, 0x2, 0xc, 0x2, 0x12, 0xfffffff0, 0x2, 0x4, 0x9, 0x400, 0x0, 0x8, 0x7fff, 0xc25, 0x4, 0x8000, 0x2, 0x7fffffff, 0x1, 0x0, 0x9, 0x3f38, 0xfffffff7, 0xe, 0x8, 0x9, 0x6839, 0x8e, 0x40, 0x3, 0x5, 0x0, 0x62, 0x4, 0xfffffffc, 0x260, 0x81, 0x0, 0xe1, 0x0, 0xffff, 0xfffffe01, 0xffff, 0x6, 0x2, 0x100, 0x80, 0x1, 0x2, 0xfffffff9, 0x1, 0x4, 0xbd0, 0xffffffff, 0x3, 0x4, 0xfff, 0x5db9, 0x7b, 0x0, 0x9, 0x6, 0x1, 0x1, 0x6000000, 0x3, 0xffff9810, 0x54, 0x4, 0xff, 0xe5]}, @TCA_HTB_RATE64={0x0, 0x6, 0x9}, @TCA_HTB_PARMS={0x0, 0x1, {{0x2, 0x0, 0x6, 0x1ff, 0xd15, 0xa076}, {0xe, 0x0, 0x7ff, 0x0, 0xfff, 0x5}, 0xe, 0x0, 0x9, 0x6, 0x1}}, @TCA_HTB_CEIL64={0x0, 0x7, 0x1}, @TCA_HTB_PARMS={0x0, 0x1, {{0x0, 0x2, 0x8, 0x5, 0x77a, 0x7}, {0x4, 0x0, 0x8, 0xafc, 0x4, 0x8}, 0x2, 0x5, 0x7, 0x672, 0x9}}]}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xf1, 0x3}}, @tclass_kind_options=@c_fq_codel={0xffffffffffffffee}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x23, 0x4e}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r7, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) fsopen(0x0, 0x0) unshare(0x64000600) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r8, 0x8008f512, &(0x7f0000000140)) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x355, 0x800) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904000702a35fc3030905080320000602040905"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r10, 0x1, 0x1, &(0x7f0000000680)=""/251, &(0x7f0000000000)=0xfb) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r9, 0x7aa, &(0x7f0000000080)={{@hyper, 0x2}, 0x100, 0x4}) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') chdir(&(0x7f0000000540)='./cgroup\x00') 5.613009182s ago: executing program 4 (id=1998): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101840) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x0, 0x9, {0xe7ff, 0x0, 0x406, 0xadd7}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01008000070000fd6022000002000000000000f5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r4, &(0x7f0000000080), 0x0}, 0x20) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e20, 0xfffffffd, @local}, 0x0, {[0x6, 0x0, 0x1, 0x2, 0x0, 0x9]}}, 0x5c) r6 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e1d, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) unshare(0x80) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000280)='./file2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000002c0)='./file0\x00', 0x0, r8) 4.483525675s ago: executing program 2 (id=2002): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.21987081s ago: executing program 2 (id=2004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffb800000000000000000000000000010ff02000000000000400000000000000189"], 0x340a) 4.185169627s ago: executing program 4 (id=2005): socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.81949581s ago: executing program 5 (id=2006): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800fd00000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 3.79494264s ago: executing program 2 (id=2007): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="74010000170001000000000000000000fe8800000000000000000000000001010000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32, @ANYRES8=r0, @ANYBLOB="ffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000a00ae00"], 0x174}}, 0x0) 3.76742363s ago: executing program 3 (id=2008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket(0x10, 0x6, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000140)=0xfffffffe) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0xb, 0x100f3, 0xfffffffe, 0x4, 0x722, 0x4, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth0_to_team\x00', &(0x7f0000000200)=@ethtool_rxfh_indir={0x33}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x194}}, 0x8000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 3.413220481s ago: executing program 2 (id=2010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)={0x55c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x52c, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x3b8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c000227734136bbd051f5248b73349484079ac37330b66c8c2d38b233240191"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1448a8e528a999aa0105b52a5c9c4640383354baf19b5f39af29b59422afd55"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e7ff7716b926810da1b5902e7a364627b7e5194a545926646ae03e188b880fed"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "67145cfa4d7b699c1e0846a50afd9ba74e30480f6df0e68218cc108c2128c513"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 3.351867458s ago: executing program 1 (id=2011): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000800)}], 0x1, 0x0, 0x0, 0x2804c044}, 0x8000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xf, 0x8}}, './file0\x00'}) r2 = socket(0x2, 0x80805, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = socket$inet(0x2, 0x80001, 0x84) close(0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000000)={'vlan0\x00', @broadcast}) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000808000300000000cb08000140000000ec0800020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) r6 = syz_io_uring_setup(0x5f37, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000006c0)=@IORING_OP_FUTEX_WAIT={0x33, 0x1, 0x0, 0x6, 0x8, 0x0}) io_uring_enter(r6, 0x6516, 0x6d93, 0x8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r10}, 0x20) 3.184658691s ago: executing program 2 (id=2012): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={r4, 0x1000, 0x2, "f6fd"}, 0xa) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'veth0_macvtap\x00', {0x5}, 0x6b5}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000200)=0x4, 0x4) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r5, &(0x7f00000002c0)='./file0\x00', r5, &(0x7f00000003c0)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000a5000000faed7821d7dfc7e934b4cd1d9baa9f738845e7a1ddc2c0d389940005cd24be54ee9a9db355a5b72e1c8214cb8b3a41741bb7f36efbe7c88d599e5d3609ea9cde58b80856b53da715957975952f521c1aafb7b59e64f9d303145308c63fd8d5609370db7070433d17422b1774d5641968c679070d7f9ba5fb1f21"]) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.100746309s ago: executing program 1 (id=2013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2, 0x0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00!', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.086012568s ago: executing program 4 (id=2014): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.847757033s ago: executing program 4 (id=2015): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000540)=ANY=[], 0x86) r1 = socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r2, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/107, 0x6b}, {&(0x7f0000002fc0)=""/241, 0xf1}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003340)=""/181, 0xb5}], 0x6}}, {{0x0, 0x0, &(0x7f00000038c0)}}], 0x5, 0x41, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r5, r0, 0x0) 2.673801352s ago: executing program 4 (id=2016): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="135eda1046082a64f6acc39f67165be9bae8bef81e8ee2223d8c6c92e8aad2c1a2e9cf3c2d4bbd5505775d8a66d4c57914d8db6e278103c00a5cc24cd43001ea040c787091443e32218627b3c1dd69a641ec93310c45dbfcedd48c444600df59ca79efc157aef5692f53ac63ffe7af03813badc8887fc8e9f34f3beba5ef21203ca7a28c4ce1273e1d033ab652a50abead225596186e782fecaa20bbfe5a16316064468e93f3c437b56dda1e015f4613286c5f917e433c3077c55f24f1a0bf7ce0fdfb83042b5e", 0xc7) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f00000004c0)={&(0x7f0000000400)='\x98./^\\$@\x00', &(0x7f0000000440)='lo\x00', 0x5}) r3 = socket(0x11, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r7 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b6"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x1, 0x7, 0x40, 0x7}}]}}, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_ALM_SET(r8, 0x40247007, &(0x7f0000000000)={0xfffffffd, 0x2e, 0xf, 0xb, 0x4007, 0x10, 0x6, 0xa0, 0x1}) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) unshare(0x26020480) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0x4008af21, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) sendmsg$AUDIT_USER(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e20, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x3}}, 0x8006, 0x400}, &(0x7f0000000480)=0x90) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0xfe) 2.458463623s ago: executing program 1 (id=2017): socket$netlink(0x10, 0x3, 0x6) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f00000004c0)=""/74, 0x4a}], 0x1}}], 0x4, 0x400122a0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) syz_open_dev$vim2m(0x0, 0x1, 0x2) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, r8, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0d5}, 0x20048000) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 2.111871556s ago: executing program 5 (id=2018): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) (async) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r3 = openat(r2, &(0x7f0000000300)='./file0\x00', 0x3c3c2, 0x10) ftruncate(r3, 0x8800000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000340)={0x2, 0x0, 0x8, 0x3, 0x7}) (async) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) (async) sendfile(r4, r3, 0x0, 0x578410eb) bind$inet(r3, &(0x7f0000000140)={0x2, 0x1, @loopback}, 0x10) (async) fcntl$lock(r2, 0x25, &(0x7f0000000200)={0x1, 0x0, 0x9, 0x0, r1}) (async) syz_clone3(&(0x7f00000003c0)={0x8000000, 0x0, 0x0, 0x0, {0x11d}, 0x0, 0xffffffffffffff10, 0x0, 0x0, 0x1747, {r2}}, 0x58) (async) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000011, r6, 0x9106c000) (async) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) (async) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r8) 1.878394881s ago: executing program 5 (id=2019): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gretap0\x00', &(0x7f0000001000)={'tunl0\x00', 0x0, 0x7, 0x50, 0x7, 0x5, {{0x6, 0x4, 0x3, 0x3a, 0x18, 0x66, 0x0, 0x81, 0x29, 0x0, @empty, @private=0xa010101, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001100)={'syztnl1\x00', &(0x7f0000001080)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0xb, 0x1b, 0x56, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @loopback, 0x40, 0x0, 0x5, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x5, {{0x1c, 0x4, 0x3, 0x3b, 0x70, 0x66, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @empty, {[@rr={0x7, 0x1f, 0xdb, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @rand_addr=0x64010100, @broadcast]}, @rr={0x7, 0x1f, 0xa, [@dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp={0x44, 0x10, 0xaa, 0x0, 0x8, [0x10000, 0x5, 0x17a889aa]}, @end, @end, @lsrr={0x83, 0xb, 0x32, [@broadcast, @private=0xa010100]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001400)={'syztnl2\x00', &(0x7f0000001380)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x999, 0x800, {{0xd, 0x4, 0x1, 0x10, 0x34, 0x65, 0x0, 0x83, 0x4, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x59}, @timestamp={0x44, 0x14, 0x75, 0x0, 0xa, [0xb99, 0x2, 0x6, 0x66c]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001440)={0x828, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6dd}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa51c}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r11}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x828}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r13 = dup(r6) syz_ublk_setup_queues(r13, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1.635421861s ago: executing program 1 (id=2020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffb800000000000000000000000000010ff02000000000000000000010000000189"], 0x340a) 1.411337413s ago: executing program 3 (id=2021): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) syz_open_dev$dri(0x0, 0x1f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xdf0a1e880e20666f) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x6}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r4, 0x1000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r5, 0x0, 0x0, 0xadc) setns(r5, 0x80) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000028c0)={{r1, &(0x7f0000002900)='5\x1cO\x9ec*&1>\x16\xbf\xe5E\xd0\xc0:P\x91\xc3>Cz\xf6\xa4\x19\x9d\x86\x82\xb9b\x1d\x89\x88}/\xf0\x8f\x1bj\xe5\x97\x04\xbb\x05\x7f\xc8\xf0', 0x44082, &(0x7f0000000400)={@_ha_fsid={[0x7, 0xffffffbf]}, {0x0, 0x7, 0x40005, 0x7fffffffffffffff}}, 0x8002, 0x0, &(0x7f0000002800)=0x3}, {[0x10000, 0x3, 0x3, 0xb]}, 0x8001, 0x7c, &(0x7f0000002840)=""/124}) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) 1.158915846s ago: executing program 1 (id=2022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000079a200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000003b0000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 901.463107ms ago: executing program 3 (id=2023): write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003", 0x1f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01020b010902120009000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 814.276882ms ago: executing program 1 (id=2024): socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 696.501101ms ago: executing program 5 (id=2025): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r0 = socket(0x2, 0x80805, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = socket$inet(0x2, 0x80001, 0x84) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000808000300000000cb08000140000000ec0800020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) rt_sigtimedwait(&(0x7f0000007340)={[0xfffffffffffffffa]}, &(0x7f0000007380), &(0x7f0000007400)={0x0, 0x989680}, 0x8) socket(0x2, 0x80805, 0x0) r3 = memfd_secret(0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x94, @tick=0x8001, 0x9, {0x9}, 0x81, 0x0, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r5}, 0x20) 427.413602ms ago: executing program 5 (id=2026): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af00000000000000001329000000000000000f00", "2809e8dbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x9, 0x2000000000001]}}) 85.700012ms ago: executing program 4 (id=2027): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000540)=ANY=[], 0x86) r1 = socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r2, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b700000001000000bfa300000000000007110000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/107, 0x6b}, {&(0x7f0000002fc0)=""/241, 0xf1}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003340)=""/181, 0xb5}], 0x6}}, {{0x0, 0x0, &(0x7f00000038c0)}}], 0x5, 0x41, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r5, r0, 0x0) 69.179866ms ago: executing program 2 (id=2028): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) r1 = io_uring_setup(0x224a, &(0x7f00000002c0)={0x0, 0x1670, 0x40, 0x2, 0x3d3}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x2, 0x3}, 0x50) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000180)="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", 0xff}, {&(0x7f0000000280)="b2d7195c29e0e181987680f4bbcc481af42af17b27983c92d389ff5d16c93b49df84562b478414e48f66a84ab3dc07b4c98cb9dbb962e0fc98656543f1cff14d27aee30f723c8fb253a480bc0de8a41fe08ff6fa1acc515fd354ee15a0edc18c432e9c2733739c4df912af1e44f62578a63ca8c80b8c0e9e17f2a1ef64724b8deb88684fa7ad097ae84f762653aae33eb70e340d9191ce2cd4f0cc13f334ca919f750dd5e3a3d2155f6c1344f03b7ceebe1d6929801c6255faf59705d3ac8264fe2e5c7f1a92ca54878b8920c6", 0xcd}, {&(0x7f0000000380)="2529aa1e34db5a85302fbcc2590361393999b055118dd12707ee381f06ee32cf28b75b42bb7bb4f507e078aafe751a6920d4fb0fbb115fa5dca3dd4ecc2d7a20752eca287d3b2e03467586f1cde729", 0x4f}, {&(0x7f0000000400)="1701df2ea6fb7d9d05b30ca9d22b0aadd1fff7b2b456bce580", 0x19}, {&(0x7f0000000440)="12f1296323aafb31f36afebf87bb4562d57b9dca5d3a24fbced1fea6a717bb3e05a8a9b10f827cfe9e5a3131f0aac0f5f1e26a2bc628049c0d0ea21749387e872d8cd69044dbd1860f37e3fb7534912457e66faeff0eca9185ec7301435bb7a6f2e9ce42ad9b6cab48e8cf9b9731b649e055e4fbe2642a5c595ad9ce76927623e5acecf7b6f62ac3e52723091ab8d4670556c02850f3c3a17bbfb9c42def3ac38ab8cf85", 0xa4}, {&(0x7f0000000500)="b9046c1b64b10daa96f11840503d54f23757b7a91808b16cd9b6ec567d269489fb4405fb824edb6f0cd2ae00f72c4b316eaad0f88ffdc0368a470e7b3f601f85b4fce55671f969302ee1591b440c1a47203c5fa8c2c19a02f5a797a35e3bce8fc8f7d2f813867d3609c7479b4cd2cc05c46534183f03d814b52f8752b727861b067d66487e", 0x85}, {&(0x7f00000005c0)="0458fad29b2c361bb89072e3318f0773fb3ed166c1560dac18819d754b62fc15863cf619906bfe3db282a79d483e670483717f9553be724b5a43d990f4be50445bc6d279c43dc868bd0a1b3dbdb1381e78d62383802216d8c7a9536d88ecbb899b9c8be894c0c2833961fd19c5f87e2a1ff4f1df2878f7a1cc1b640e2fea809a1d0142c70492479154e5d95de877a5417528918d4d2520f7c54cb724bd5cf9ede9c7740ac0a6a6b0ec513ffa92872288f171d0dc5c7647ddfbc2315b82afc424c0da6d38255e95fbe03a2d151234536c91671af3cb991ea81848444ee1e2c88935c4cf", 0xe3}], 0x7) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0x8000000000000000}, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000000c0)) 0s ago: executing program 5 (id=2029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c0022000000000400000000050024000100f8000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) kernel console output (not intermixed with test programs): onfig 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 485.416445][ T5358] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 485.472703][ T5358] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.493199][ T5358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.517899][ T5358] usb 6-1: Product: syz [ 485.530292][ T5358] usb 6-1: Manufacturer: ⑶氈鬎è®îš€ã™èª¬ï‚…蒂쎪㳚듻äªç œçž‹á‹‘计驼é¾æ²¹ëž¨é¹³á¸…厄é‘è¡­âŠæ´¹ç°×½á£±à³˜â•§î™–ईᰭì£á¦ƒå³éƒ½î¶¿ê®á¢’é¿Ÿê™´ã´åºçŸ»ë ¾á“§ê—‡ä‚®å¼°ï‰•ïƒ¼æ±§ä…굨ډì ì˜Šï‰‡à£™ì­¥è³¸èŒ²ë¥¥äƒ›å´„ှèªãžë¢†è§¡ã‰°à¯•ä¯¼è•±ì‘±ï…§é»œëŠ¶áš¸áª [ 485.630735][ T5358] usb 6-1: SerialNumber: syz [ 485.661915][T11605] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 485.883105][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.918059][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.955072][ T5358] cdc_ncm 6-1:1.0: bind() failure [ 485.989184][ T5358] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 486.017307][ T5358] cdc_ncm 6-1:1.1: bind() failure [ 486.059354][ T5358] usb 6-1: USB disconnect, device number 54 [ 486.212326][T11634] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1657'. [ 486.246959][T11634] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1657'. [ 486.742352][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1659'. [ 487.037577][ T187] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 487.175979][T11659] FAULT_INJECTION: forcing a failure. [ 487.175979][T11659] name failslab, interval 1, probability 0, space 0, times 0 [ 487.192118][T11659] CPU: 1 UID: 0 PID: 11659 Comm: syz.2.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.192152][T11659] Tainted: [L]=SOFTLOCKUP [ 487.192160][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 487.192173][T11659] Call Trace: [ 487.192183][T11659] [ 487.192192][T11659] dump_stack_lvl+0xe8/0x150 [ 487.192225][T11659] should_fail_ex+0x40c/0x560 [ 487.192259][T11659] should_failslab+0xa8/0x100 [ 487.192285][T11659] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 487.192318][T11659] ? local_lock_release+0x9c/0x160 [ 487.192340][T11659] ? __alloc_skb+0x1d7/0x7a0 [ 487.192359][T11659] ? __alloc_skb+0x1d7/0x7a0 [ 487.192386][T11659] __alloc_skb+0x1d7/0x7a0 [ 487.192413][T11659] netlink_dump+0x1e7/0xee0 [ 487.192440][T11659] ? __nla_parse+0x40/0x60 [ 487.192465][T11659] ? ip_set_dump_start+0x174/0x420 [ 487.192615][T11659] ? __pfx_netlink_dump+0x10/0x10 [ 487.192651][T11659] ? netlink_lookup+0x30/0x200 [ 487.192675][T11659] ? netlink_lookup+0x30/0x200 [ 487.192706][T11659] __netlink_dump_start+0x589/0x7b0 [ 487.192738][T11659] ip_set_dump+0x15b/0x1f0 [ 487.192762][T11659] ? __pfx_ip_set_dump+0x10/0x10 [ 487.192783][T11659] ? __pfx_ip_set_dump_start+0x10/0x10 [ 487.192806][T11659] ? __pfx_ip_set_dump_do+0x10/0x10 [ 487.192829][T11659] ? __pfx_ip_set_dump_done+0x10/0x10 [ 487.192869][T11659] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 487.192901][T11659] ? unwind_get_return_address+0x4d/0x90 [ 487.192945][T11659] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 487.192989][T11659] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 487.193066][T11659] netlink_rcv_skb+0x226/0x4a0 [ 487.193093][T11659] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 487.193119][T11659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.193158][T11659] ? bpf_lsm_capable+0x9/0x20 [ 487.193178][T11659] ? security_capable+0x7e/0x2c0 [ 487.193251][T11659] nfnetlink_rcv+0x2b9/0x28c0 [ 487.193279][T11659] ? __dev_queue_xmit+0x29b/0x37f0 [ 487.193358][T11659] ? __local_bh_enable_ip+0xd0/0x130 [ 487.193401][T11659] ? lockdep_hardirqs_on+0x7a/0x110 [ 487.193422][T11659] ? __dev_queue_xmit+0x29b/0x37f0 [ 487.193448][T11659] ? __local_bh_enable_ip+0xd0/0x130 [ 487.193477][T11659] ? __dev_queue_xmit+0x29b/0x37f0 [ 487.193504][T11659] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 487.193530][T11659] ? do_syscall_64+0x174/0x580 [ 487.193551][T11659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.193586][T11659] ? __dev_queue_xmit+0x29b/0x37f0 [ 487.193615][T11659] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 487.193644][T11659] ? __pfx___dev_queue_xmit+0x10/0x10 [ 487.193679][T11659] ? ref_tracker_free+0x689/0x830 [ 487.193715][T11659] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.193747][T11659] ? __asan_memcpy+0x40/0x70 [ 487.193777][T11659] ? __skb_clone+0x5c/0x6c0 [ 487.193808][T11659] ? __skb_clone+0x449/0x6c0 [ 487.193841][T11659] ? skb_clone+0x246/0x3a0 [ 487.193892][T11659] ? __netlink_deliver_tap+0x811/0x860 [ 487.193918][T11659] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.193952][T11659] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.193979][T11659] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.194012][T11659] netlink_unicast+0x7bb/0x940 [ 487.194049][T11659] netlink_sendmsg+0x813/0xb40 [ 487.194085][T11659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.194116][T11659] ? aa_sock_msg_perm+0xf1/0x1b0 [ 487.194151][T11659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.194178][T11659] sock_sendmsg_nosec+0x13a/0x180 [ 487.194213][T11659] ____sys_sendmsg+0x54e/0x850 [ 487.194245][T11659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.194296][T11659] ? import_iovec+0x73/0xa0 [ 487.194325][T11659] ___sys_sendmsg+0x2a5/0x360 [ 487.194350][T11659] ? __lock_acquire+0x683/0x2cf0 [ 487.194379][T11659] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.194450][T11659] ? __fget_files+0x2a/0x420 [ 487.194472][T11659] ? __fget_files+0x3a2/0x420 [ 487.194505][T11659] __x64_sys_sendmsg+0x1b1/0x290 [ 487.194535][T11659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.194583][T11659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.194607][T11659] do_syscall_64+0x174/0x580 [ 487.194632][T11659] ? clear_bhb_loop+0x40/0x90 [ 487.194659][T11659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.194682][T11659] RIP: 0033:0x7f0c42b9ce59 [ 487.194703][T11659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.194723][T11659] RSP: 002b:00007f0c439b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.194746][T11659] RAX: ffffffffffffffda RBX: 00007f0c42e15fa0 RCX: 00007f0c42b9ce59 [ 487.194762][T11659] RDX: 0000000000000400 RSI: 0000200000000180 RDI: 0000000000000003 [ 487.194776][T11659] RBP: 00007f0c439b2090 R08: 0000000000000000 R09: 0000000000000000 [ 487.194790][T11659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.194803][T11659] R13: 00007f0c42e16038 R14: 00007f0c42e15fa0 R15: 00007f0c42f3fa48 [ 487.194837][T11659] [ 487.669444][ T187] usb 6-1: device descriptor read/64, error -71 [ 487.807145][ T5358] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 487.907203][ T187] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 487.954066][T11661] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 487.962055][ T5358] usb 5-1: Using ep0 maxpacket: 16 [ 487.970828][ T5358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.011003][ T5358] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 488.048405][ T5358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.067324][ T187] usb 6-1: device descriptor read/64, error -71 [ 488.092632][ T5358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.119096][T11661] bond4: entered promiscuous mode [ 488.124546][T11661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.160824][ T5358] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 488.161594][T11661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.180963][ T5358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.182247][T11661] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 488.197117][ T187] usb usb6-port1: attempt power cycle [ 488.200762][T11661] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 488.224009][ T5358] usb 5-1: Product: syz [ 488.231159][T11661] bond4: (slave ip6gre2): making interface the new active one [ 488.247639][ T5358] usb 5-1: Manufacturer: syz [ 488.260997][T11661] ip6gre2: entered promiscuous mode [ 488.272655][ T5358] usb 5-1: SerialNumber: syz [ 488.282955][T11661] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 488.313937][ T5358] usb 5-1: config 0 descriptor?? [ 488.343719][ T5358] appledisplay 5-1:0.0: Submitting URB failed [ 488.364880][ T5358] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -5 [ 488.577534][ T187] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 488.597535][ T12] net_ratelimit: 27 callbacks suppressed [ 488.597554][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 488.612521][ T187] usb 6-1: device descriptor read/8, error -71 [ 488.718372][ T1017] bond3: (slave dummy0): failed to get link speed/duplex [ 488.847364][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 488.857352][ T187] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 488.877904][ T187] usb 6-1: device descriptor read/8, error -71 [ 488.957146][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 488.977162][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 488.989531][ T187] usb usb6-port1: unable to enumerate USB device [ 489.067410][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 489.159803][ T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 489.181898][ T9] usb 4-1: config 0 has no interface number 0 [ 489.188442][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 489.198416][ T9] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 489.225681][ T9] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 489.276276][ T9] usb 4-1: config 0 interface 255 has no altsetting 0 [ 489.301030][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 489.311459][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 489.328575][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.357563][ T9] usb 4-1: config 0 descriptor?? [ 489.374827][ T9] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 489.458328][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 489.531786][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 489.567266][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 489.579756][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.604011][T11669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.631274][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.659974][T11669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.679094][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 489.700219][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 489.753294][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 489.863508][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 489.887028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 489.912736][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 489.988549][ T5714] usb 4-1: USB disconnect, device number 91 [ 489.995363][ T5358] usb 5-1: USB disconnect, device number 95 [ 490.107375][T11689] ALSA: mixer_oss: invalid OSS volume '' [ 490.357296][ T24] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 490.427651][T11697] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 490.531252][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 490.548332][ T24] usb 6-1: can't read configurations, error -71 [ 490.627669][ T5714] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 490.708558][ T29] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 490.764846][T11713] netlink: 'syz.3.1684': attribute type 1 has an invalid length. [ 490.788039][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 490.795738][ T5714] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 490.815167][ T5714] usb 5-1: config 2 has no interface number 0 [ 490.840131][ T5714] usb 5-1: config 2 interface 88 has no altsetting 0 [ 490.847573][ T29] usb 2-1: device descriptor read/64, error -71 [ 490.856343][T11713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.867600][ T5714] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 490.878713][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.881935][T11716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1684'. [ 490.897554][ T5714] usb 5-1: Product: syz [ 490.905613][ T5714] usb 5-1: Manufacturer: syz [ 490.910753][ T5714] usb 5-1: SerialNumber: syz [ 490.919179][T11716] bond4: entered promiscuous mode [ 490.932712][T11716] bond4: entered allmulticast mode [ 490.953940][T11713] bond2: (slave dummy0): Releasing active interface [ 491.087496][ T29] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 491.122469][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 491.217703][ T29] usb 2-1: device descriptor read/64, error -71 [ 491.235848][T11721] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1686'. [ 491.337664][ T29] usb usb2-port1: attempt power cycle [ 491.677321][ T29] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 491.720180][ T29] usb 2-1: device descriptor read/8, error -71 [ 491.908446][ T5714] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 491.952147][ T5714] asix 5-1:2.88: probe with driver asix failed with error -71 [ 491.987407][ T29] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 491.999516][ T5714] usb 5-1: USB disconnect, device number 96 [ 492.028269][ T29] usb 2-1: device descriptor read/8, error -71 [ 492.157684][ T29] usb usb2-port1: unable to enumerate USB device [ 492.357113][ T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 492.529095][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 492.544813][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.588673][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 492.607395][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.623942][T11741] loop4: detected capacity change from 0 to 7 [ 492.634920][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.649595][T11741] Dev loop4: unable to read RDB block 7 [ 492.659722][T11741] loop4: unable to read partition table [ 492.669010][ T30] audit: type=1326 audit(1782533443.711:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 492.706964][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 492.724818][ T30] audit: type=1326 audit(1782533443.721:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 492.729474][T11741] loop4: partition table beyond EOD, [ 492.750336][ T30] audit: type=1326 audit(1782533443.721:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 492.782287][T11741] truncated [ 492.790446][T11741] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.811717][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.825091][ T24] usb 6-1: Product: syz [ 492.833928][ T24] usb 6-1: Manufacturer: syz [ 492.838718][ T24] usb 6-1: SerialNumber: syz [ 492.865597][ T30] audit: type=1326 audit(1782533443.721:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 492.932474][ T30] audit: type=1326 audit(1782533443.721:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 492.980308][ T24] usb 6-1: config 0 descriptor?? [ 492.995463][ T24] appledisplay 6-1:0.0: Submitting URB failed [ 493.011122][T11748] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 493.023816][ T30] audit: type=1326 audit(1782533443.751:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 493.035733][ T24] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -5 [ 493.073035][ T30] audit: type=1326 audit(1782533443.751:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 493.107969][ T30] audit: type=1326 audit(1782533443.751:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 493.157611][ T30] audit: type=1326 audit(1782533443.751:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 493.182578][ T30] audit: type=1326 audit(1782533443.751:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.2.1691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0c42b9ce59 code=0x7ffc0000 [ 493.277289][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 493.431319][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 493.446875][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 493.480201][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.531347][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 493.542878][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 493.554783][T11751] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 493.586585][ T9] usb 4-1: Product: syz [ 493.598769][ T9] usb 4-1: Manufacturer: syz [ 493.609891][T11752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1695'. [ 493.630837][ T9] usb 4-1: SerialNumber: syz [ 493.638302][ T48] net_ratelimit: 32 callbacks suppressed [ 493.638322][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 493.709812][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 493.745814][T11751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.754391][T11752] bond4: entered promiscuous mode [ 493.759982][T11752] bond4: entered allmulticast mode [ 493.818363][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 493.876028][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 493.957575][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 494.077700][ T1017] bond3: (slave dummy0): failed to get link speed/duplex [ 494.136315][T11747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.201125][ T29] usb 4-1: USB disconnect, device number 92 [ 494.218337][ T1017] bond3: (slave dummy0): failed to get link speed/duplex [ 494.255426][ T29] usblp0: removed [ 494.337725][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 494.457197][ T1017] bond3: (slave dummy0): failed to get link speed/duplex [ 494.587476][ T1017] bond3: (slave dummy0): failed to get link speed/duplex [ 494.728613][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 494.817480][ T24] usb 6-1: USB disconnect, device number 61 [ 494.863418][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 495.407504][ T187] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 495.580220][ T187] usb 5-1: config 1 has an invalid interface number: 69 but max is 0 [ 495.602650][ T187] usb 5-1: config 1 has no interface number 0 [ 495.625594][ T187] usb 5-1: config 1 interface 69 has no altsetting 0 [ 495.651612][ T187] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=ac.d9 [ 495.673211][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.682516][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 495.700697][ T187] usb 5-1: Product: syz [ 495.710495][ T187] usb 5-1: Manufacturer: syz [ 495.720586][ T187] usb 5-1: SerialNumber: syz [ 495.849173][ T9] usb 3-1: device descriptor read/64, error -71 [ 495.981687][ T187] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 496.031323][ T187] usbduxfast 5-1:1.69: driver 'usbduxfast' failed to auto-configure device. [ 496.072830][ T187] usb 5-1: USB disconnect, device number 97 [ 496.107924][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 496.267468][ T9] usb 3-1: device descriptor read/64, error -71 [ 496.388056][ T9] usb usb3-port1: attempt power cycle [ 496.657125][ T187] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 496.757114][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 496.788998][ T9] usb 3-1: device descriptor read/8, error -71 [ 496.819393][ T187] usb 2-1: descriptor type invalid, skip [ 496.840960][ T187] usb 2-1: descriptor type invalid, skip [ 496.860829][ T187] usb 2-1: descriptor type invalid, skip [ 496.878007][ T187] usb 2-1: string descriptor 0 read error: -22 [ 496.886092][ T187] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 496.906247][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.959753][ T187] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 496.987941][ T187] usb 2-1: MIDIStreaming interface descriptor not found [ 497.047619][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 497.101779][ T9] usb 3-1: device descriptor read/8, error -71 [ 497.226841][ T187] usb 2-1: USB disconnect, device number 100 [ 497.241759][ T9] usb usb3-port1: unable to enumerate USB device [ 497.402190][T11799] netlink: 'syz.5.1708': attribute type 1 has an invalid length. [ 497.437608][T11802] __nla_validate_parse: 1 callbacks suppressed [ 497.437629][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 497.475401][T11803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1708'. [ 497.498835][T11799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.545312][T11803] bond5: entered promiscuous mode [ 497.568385][T11799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1708'. [ 497.592906][T11803] bond5: entered allmulticast mode [ 497.918702][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 497.947429][ T24] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 497.967511][ T29] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 498.047150][ T187] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 498.077311][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 498.084950][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.095267][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 498.107554][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 498.109473][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.122390][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 498.128328][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.133782][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 498.147536][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 498.154198][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.157253][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.170244][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.170804][ T29] usb 6-1: too many configurations: 128, using maximum allowed: 8 [ 498.174908][ T9] usb 5-1: Product: syz [ 498.198377][ T9] usb 5-1: Manufacturer: syz [ 498.203043][ T9] usb 5-1: SerialNumber: syz [ 498.211085][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.221853][ T9] usb 5-1: config 0 descriptor?? [ 498.226538][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.240742][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.240879][ T29] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 498.259663][ T187] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.269972][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.270721][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 498.281091][ T29] usb 6-1: can't read configurations, error -61 [ 498.293811][ T187] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 498.307735][ T9] appledisplay 5-1:0.0: Submitting URB failed [ 498.314298][ T9] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -5 [ 498.323961][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.346621][ T187] usb 2-1: config 0 descriptor?? [ 498.432549][ T29] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 498.510817][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 498.516464][ T24] usbtmc 4-1:16.0: can't read capabilities [ 498.560957][ T9] usb 5-1: USB disconnect, device number 98 [ 498.585984][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1715'. [ 498.598813][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 498.604827][ T29] usb 6-1: too many configurations: 128, using maximum allowed: 8 [ 498.624205][ T29] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 498.641017][ T187] Bluetooth: Can't get state to change to load ram patch err [ 498.651114][ T29] usb 6-1: can't read configurations, error -61 [ 498.672864][ T187] Bluetooth: Loading patch file failed [ 498.675290][ T29] usb usb6-port1: attempt power cycle [ 498.692692][ T187] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 498.728356][ T187] usb 2-1: USB disconnect, device number 101 [ 498.739047][ T8220] net_ratelimit: 31 callbacks suppressed [ 498.739068][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 498.760372][T11806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1710'. [ 498.791509][ T24] usb 4-1: USB disconnect, device number 93 [ 498.888081][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 499.007805][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 499.057703][ T29] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 499.088129][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 499.094673][ T29] usb 6-1: too many configurations: 128, using maximum allowed: 8 [ 499.104216][ T29] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 499.114281][ T29] usb 6-1: can't read configurations, error -61 [ 499.127494][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 499.204998][T11824] binder: 11823:11824 ioctl c0306201 2000000001c0 returned -14 [ 499.248126][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 499.255320][ T29] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 499.277806][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 499.283864][ T29] usb 6-1: too many configurations: 128, using maximum allowed: 8 [ 499.295463][ T29] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 499.307366][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 499.318016][ T29] usb 6-1: can't read configurations, error -61 [ 499.326237][ T29] usb usb6-port1: unable to enumerate USB device [ 499.388773][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 499.487642][ T5714] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 499.495655][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 499.516751][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.521802][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 499.530918][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 499.549763][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.562653][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.590527][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 499.603217][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.611764][ T24] usb 3-1: Product: syz [ 499.616086][ T24] usb 3-1: Manufacturer: syz [ 499.621364][ T24] usb 3-1: SerialNumber: syz [ 499.634093][ T24] usb 3-1: config 0 descriptor?? [ 499.643185][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 499.663917][ T24] appledisplay 3-1:0.0: Submitting URB failed [ 499.671622][ T24] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 499.677760][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 499.690836][ T5714] usb 5-1: not running at top speed; connect to a high speed hub [ 499.701900][ T5714] usb 5-1: config 127 has an invalid interface number: 136 but max is 0 [ 499.711677][ T5714] usb 5-1: config 127 has no interface number 0 [ 499.720191][ T5714] usb 5-1: config 127 interface 136 altsetting 0 endpoint 0x5 has an invalid bInterval 127, changing to 4 [ 499.735533][ T5714] usb 5-1: config 127 interface 136 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 499.750482][ T5714] usb 5-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=a3.4c [ 499.760123][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.770022][ T5714] usb 5-1: Product: syz [ 499.774359][ T5714] usb 5-1: Manufacturer: syz [ 499.784607][ T5714] usb 5-1: SerialNumber: syz [ 499.817271][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 499.937338][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 499.956925][T11834] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 500.009365][ T5714] kaweth 5-1:127.136: couldn't find required endpoints [ 500.066700][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1721'. [ 500.088579][ T5714] usb 5-1: USB disconnect, device number 99 [ 500.180195][T11834] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.216013][T11836] bond5: entered promiscuous mode [ 500.235859][T11836] bond5: entered allmulticast mode [ 500.267047][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1721'. [ 500.462363][T11839] syzkaller0: entered promiscuous mode [ 500.468818][T11839] syzkaller0: entered allmulticast mode [ 500.475602][T11841] netlink: 'syz.3.1723': attribute type 17 has an invalid length. [ 500.490455][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1723'. [ 500.500201][T11839] tipc: Enabled bearer , priority 0 [ 500.508681][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1723'. [ 500.519380][T11838] tipc: Resetting bearer [ 500.535271][T11842] netlink: 'syz.3.1723': attribute type 2 has an invalid length. [ 500.568299][T11838] tipc: Disabling bearer [ 500.588190][T11841] erspan0: entered promiscuous mode [ 500.596881][T11841] erspan0: left promiscuous mode [ 500.950646][ T5714] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 500.967561][T11856] netlink: 'syz.3.1728': attribute type 13 has an invalid length. [ 501.001552][T11856] netlink: 'syz.3.1728': attribute type 17 has an invalid length. [ 501.147513][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 501.158039][ T5714] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 501.167800][ T5714] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 501.195726][ T5714] usb 2-1: config 3 has no interface number 0 [ 501.215287][ T5714] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.253420][ T5714] usb 2-1: config 3 interface 45 has no altsetting 0 [ 501.272127][ T5714] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 501.296484][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.339793][ T5714] usb 2-1: Product: syz [ 501.360489][ T5714] usb 2-1: Manufacturer: syz [ 501.373291][ T5714] usb 2-1: SerialNumber: syz [ 501.473452][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.480241][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.956565][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.981407][ T24] usb 3-1: USB disconnect, device number 109 [ 502.030801][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.537465][T11896] __nla_validate_parse: 6 callbacks suppressed [ 502.537511][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1739'. [ 502.699756][ T5714] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.761028][T11900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 502.903633][ T5714] usb 2-1: USB disconnect, device number 102 [ 503.051871][T11909] kAFS: unable to lookup cell 'ÿ' [ 503.083581][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.089685][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 503.161639][T11916] kAFS: unable to lookup cell '(,c¾Ì' [ 503.521598][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 503.848416][ T1174] net_ratelimit: 28 callbacks suppressed [ 503.848445][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 503.882994][T11929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1749'. [ 504.007142][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 504.117168][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 504.189588][ T187] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 504.247167][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 504.327158][ T187] usb 5-1: device descriptor read/64, error -71 [ 504.377486][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 504.518231][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 504.597471][ T187] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 504.668070][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 504.757158][ T187] usb 5-1: device descriptor read/64, error -71 [ 504.797225][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 504.887396][ T187] usb usb5-port1: attempt power cycle [ 504.927330][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 505.057683][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 505.199749][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 505.277509][ T187] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 505.322395][ T187] usb 5-1: device descriptor read/8, error -71 [ 505.390639][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 505.426427][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.490568][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 505.542912][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 505.578697][ T187] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 505.600700][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 505.642259][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.658853][ T187] usb 5-1: device descriptor read/8, error -71 [ 505.681244][ T9] usb 2-1: config 0 descriptor?? [ 505.706763][T11946] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 505.714453][T11933] syz.2.1746 (11933): drop_caches: 2 [ 505.759711][ T9] hub 2-1:0.0: USB hub found [ 505.779336][ T187] usb usb5-port1: unable to enumerate USB device [ 505.954815][ T9] hub 2-1:0.0: 2 ports detected [ 506.166091][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 506.198253][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 506.257876][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 506.276585][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 506.336765][ T9] usb 2-1: USB disconnect, device number 103 [ 506.988554][ T5692] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 507.158289][ T5692] usb 3-1: Using ep0 maxpacket: 8 [ 507.170647][ T5692] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 507.191158][ T5692] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 507.207150][ T24] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 507.221611][ T5692] usb 3-1: config 3 has no interface number 0 [ 507.240114][ T5692] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.279713][ T5692] usb 3-1: config 3 interface 45 has no altsetting 0 [ 507.307829][ T5692] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 507.318057][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.326130][ T5692] usb 3-1: Product: syz [ 507.331187][ T5692] usb 3-1: Manufacturer: syz [ 507.336378][ T5692] usb 3-1: SerialNumber: syz [ 507.369854][ T24] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 507.378545][ T5635] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 507.388525][ T24] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 507.402792][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.423746][ T24] usb 6-1: config 0 has no interface number 0 [ 507.437203][ T24] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 507.459581][ T24] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 14129, setting to 64 [ 507.483227][ T24] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 507.518829][ T24] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 507.531133][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.541581][ T5635] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 507.564928][ T24] usb 6-1: config 0 descriptor?? [ 507.577318][ T5635] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.607432][ T5635] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.640874][ T24] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 507.657695][ T5635] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 507.700281][ T5635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.777928][ T5635] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.813449][ T5635] usb 5-1: invalid MIDI out EP 0 [ 507.828644][T11982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.878114][T11974] binder: 11973:11974 ioctl c0189371 200000000080 returned -22 [ 507.896202][T11982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.136765][ T5635] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 508.152423][ T5692] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.185478][ T5635] usb 5-1: USB disconnect, device number 104 [ 508.264265][ T5692] usb 3-1: USB disconnect, device number 110 [ 508.307163][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 508.319398][ T5727] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 508.365909][ T7076] udevd[7076]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.457142][ T9] usb 2-1: device descriptor read/64, error -71 [ 508.479408][ T5727] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 508.488770][ T5727] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 508.502172][ T5727] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 508.512520][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.526430][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 508.540715][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 508.554506][ T5727] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 508.565949][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 508.575698][ T5727] usb 4-1: Product: syz [ 508.585182][ T5727] usb 4-1: Manufacturer: syz [ 508.595866][T11989] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 508.628433][ T5727] cdc_wdm 4-1:1.0: skipping garbage [ 508.649247][ T5727] cdc_wdm 4-1:1.0: skipping garbage [ 508.661065][ T8220] usb 6-1: Failed to submit usb control message: -110 [ 508.682591][ T8220] usb 6-1: unable to send the bmi data to the device: -110 [ 508.695757][ T5727] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 508.697086][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 508.708064][ T8220] usb 6-1: unable to get target info from device [ 508.726118][ T5727] cdc_wdm 4-1:1.0: Unknown control protocol [ 508.747573][ T8220] usb 6-1: could not get target info (-110) [ 508.772468][ T8220] usb 6-1: could not probe fw (-110) [ 508.867115][ T9] usb 2-1: device descriptor read/64, error -71 [ 508.927863][T11995] ALSA: mixer_oss: invalid OSS volume '' [ 508.958680][ T48] net_ratelimit: 31 callbacks suppressed [ 508.958702][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 508.987364][ T9] usb usb2-port1: attempt power cycle [ 509.014508][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.021380][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.028137][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.034788][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.041759][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.048400][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.056586][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.063224][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.070478][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.077144][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.085865][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.092503][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.099188][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.105832][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.112206][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.118852][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.125466][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.132111][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.138829][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 509.145473][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 509.178025][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 509.190012][ T5714] usb 4-1: USB disconnect, device number 94 [ 509.196155][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 509.288010][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 509.347257][ T9] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 509.378005][ T9] usb 2-1: device descriptor read/8, error -71 [ 509.407151][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 509.518473][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 509.628911][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 509.637307][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 509.677832][ T9] usb 2-1: device descriptor read/8, error -71 [ 509.757412][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 509.804345][ T9] usb usb2-port1: unable to enumerate USB device [ 509.887679][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 510.007416][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 510.065824][ T5727] usb 6-1: USB disconnect, device number 66 [ 510.148529][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 510.329089][ T5714] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 510.388848][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1775'. [ 510.497136][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 510.519582][ T5714] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 510.546025][ T5714] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 510.577548][ T5714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 510.607369][ T5714] usb 3-1: config 1 has no interface number 0 [ 510.621753][ T5714] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.646376][ T5714] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 510.696370][T12026] syzkaller0: entered promiscuous mode [ 510.707799][ T5714] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 510.711736][T12026] syzkaller0: entered allmulticast mode [ 510.742996][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.773787][T12026] tipc: Enabled bearer , priority 0 [ 510.808079][T12023] tipc: Resetting bearer [ 510.854634][ T5714] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 510.904993][T12023] tipc: Disabling bearer [ 510.981211][T12029] bridge0: port 4(ipvlan2) entered blocking state [ 511.009371][T12029] bridge0: port 4(ipvlan2) entered disabled state [ 511.044040][ T5714] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 511.053766][T12029] ipvlan2: entered allmulticast mode [ 511.079686][T12029] bridge0: entered allmulticast mode [ 511.125235][T12029] ipvlan2: left allmulticast mode [ 511.139887][T12029] bridge0: left allmulticast mode [ 511.328444][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 511.370491][T12042] bridge0: port 4(ipvlan2) entered blocking state [ 511.385560][T12042] bridge0: port 4(ipvlan2) entered disabled state [ 511.392876][T12042] ipvlan2: entered allmulticast mode [ 511.400096][T12042] bridge0: entered allmulticast mode [ 511.409679][T12042] ipvlan2: left allmulticast mode [ 511.414760][T12042] bridge0: left allmulticast mode [ 511.472936][T12047] netlink: 'syz.1.1785': attribute type 8 has an invalid length. [ 511.477962][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.489881][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 511.500941][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.518694][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 511.532879][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.558542][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.574077][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 511.584797][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.601749][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 511.612292][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.666098][ T5727] usb 3-1: USB disconnect, device number 111 [ 511.690830][ T5727] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 511.905106][ T9] usb 5-1: usb_control_msg returned -32 [ 511.924004][ T9] usbtmc 5-1:16.0: can't read capabilities [ 511.935202][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 512.037082][ T5716] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 512.199016][ T5716] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 512.225825][ T5716] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 512.263957][ T5716] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 512.296269][ T5716] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.332407][T12031] syzkaller0: entered promiscuous mode [ 512.354787][ T5716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 512.365119][T12031] syzkaller0: entered allmulticast mode [ 512.386666][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.404411][ T5716] usb 4-1: Product: syz [ 512.427841][ T5716] usb 4-1: Manufacturer: syz [ 512.434149][T12061] tipc: Enabled bearer , priority 0 [ 512.457604][ T5716] usb 4-1: SerialNumber: syz [ 512.493819][T12031] tipc: Resetting bearer [ 512.511991][ T5716] cdc_subset 4-1:1.0: probe with driver cdc_subset failed with error -22 [ 512.538037][ T5716] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 512.557417][T12061] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 512.567865][ T5716] cdc_ncm 4-1:1.0: bind() failure [ 512.616717][ T5716] cdc_subset 4-1:1.1: probe with driver cdc_subset failed with error -22 [ 512.638738][T12030] tipc: Resetting bearer [ 512.667928][ T5716] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 512.683383][ T5716] cdc_ncm 4-1:1.1: bind() failure [ 512.733511][ T5716] usb 4-1: USB disconnect, device number 95 [ 512.802365][T12030] tipc: Disabling bearer [ 512.889605][ T5635] usb 5-1: USB disconnect, device number 105 [ 513.578234][ T5716] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 513.602385][T12076] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 513.682334][T12077] xt_hashlimit: size too large, truncated to 1048576 [ 513.757454][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 513.776864][ T5716] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 513.804540][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.832853][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.861799][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 513.877181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 513.927448][ T5716] usb 4-1: New USB device found, idVendor=056a, idProduct=e0f8, bcdDevice= 0.ff [ 513.947449][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.989661][ T5716] usb 4-1: config 0 descriptor?? [ 514.027136][ T82] net_ratelimit: 25 callbacks suppressed [ 514.027157][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 514.216769][T12081] bridge0: port 1(ipvlan2) entered blocking state [ 514.252496][T12081] bridge0: port 1(ipvlan2) entered disabled state [ 514.275587][T12081] ipvlan2: entered allmulticast mode [ 514.290693][T12081] bridge0: entered allmulticast mode [ 514.319818][T12081] ipvlan2: left allmulticast mode [ 514.344207][T12081] bridge0: left allmulticast mode [ 514.417372][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 514.580500][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 514.631833][T12083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.697436][T12083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.804931][T12087] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 514.994773][ T5716] wacom 0003:056A:E0F8.003F: unknown main item tag 0x4 [ 515.013527][ T5716] wacom 0003:056A:E0F8.003F: reserved main item tag 0xd [ 515.037239][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 515.227405][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 515.325473][ T5716] usb 4-1: USB disconnect, device number 96 [ 515.367240][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 515.507698][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 515.654319][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 515.787742][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 516.015634][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 516.107324][ T5716] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 516.218790][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1800'. [ 516.277228][ T5716] usb 6-1: Using ep0 maxpacket: 16 [ 516.305981][ T5716] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.346303][ T5716] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 516.382551][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.411586][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.428362][ T5716] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 516.441766][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.451248][ T5716] usb 6-1: Product: syz [ 516.455971][ T5716] usb 6-1: Manufacturer: syz [ 516.494740][ T5716] usb 6-1: SerialNumber: syz [ 516.541388][ T5716] usb 6-1: config 0 descriptor?? [ 516.561116][ T5716] appledisplay 6-1:0.0: Submitting URB failed [ 516.570662][ T5716] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -5 [ 516.790808][ T5716] usb 6-1: USB disconnect, device number 67 [ 517.574065][T12117] netlink: 'syz.2.1803': attribute type 1 has an invalid length. [ 517.613974][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1804'. [ 517.660861][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1803'. [ 517.798798][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 517.894784][T12117] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.970481][T12121] bond5: entered promiscuous mode [ 517.977474][T12121] bond5: entered allmulticast mode [ 518.721705][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 519.130173][ T1174] net_ratelimit: 25 callbacks suppressed [ 519.130195][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 519.307562][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 519.429098][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 519.528036][T12154] FAULT_INJECTION: forcing a failure. [ 519.528036][T12154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.568914][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz.5.1814 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.568951][T12154] Tainted: [L]=SOFTLOCKUP [ 519.568960][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.568973][T12154] Call Trace: [ 519.568983][T12154] [ 519.568993][T12154] dump_stack_lvl+0xe8/0x150 [ 519.569027][T12154] should_fail_ex+0x40c/0x560 [ 519.569066][T12154] _copy_from_user+0x2d/0xb0 [ 519.569088][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 519.569092][T12154] ___sys_sendmsg+0x1c6/0x360 [ 519.569120][T12154] ? __lock_acquire+0x683/0x2cf0 [ 519.569210][T12154] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.569385][T12154] ? __fget_files+0x2a/0x420 [ 519.569446][T12154] ? __fget_files+0x3a2/0x420 [ 519.569530][T12154] __x64_sys_sendmsg+0x1b1/0x290 [ 519.569610][T12154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.569725][T12154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.569794][T12154] do_syscall_64+0x174/0x580 [ 519.569857][T12154] ? trace_irq_disable+0x3b/0x140 [ 519.569919][T12154] ? clear_bhb_loop+0x40/0x90 [ 519.569984][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.570047][T12154] RIP: 0033:0x7f870ed9ce59 [ 519.570102][T12154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.570154][T12154] RSP: 002b:00007f870fc32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.570217][T12154] RAX: ffffffffffffffda RBX: 00007f870f015fa0 RCX: 00007f870ed9ce59 [ 519.570255][T12154] RDX: 0000000004040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 519.570308][T12154] RBP: 00007f870fc32090 R08: 0000000000000000 R09: 0000000000000000 [ 519.570341][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.570374][T12154] R13: 00007f870f016038 R14: 00007f870f015fa0 R15: 00007f870f13fa48 [ 519.570454][T12154] [ 520.055711][T12157] ALSA: mixer_oss: invalid OSS volume '' [ 520.087917][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 520.197275][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 520.328322][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 520.353661][T12165] netlink: 'syz.5.1818': attribute type 1 has an invalid length. [ 520.466843][T12167] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1818'. [ 520.476914][T12169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1820'. [ 520.535287][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1818'. [ 520.600367][T12165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 520.651445][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 520.704439][T12167] bond6: entered promiscuous mode [ 520.730963][T12167] bond6: entered allmulticast mode [ 520.837189][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 520.849497][T12093] syz.4.1796 (12093): drop_caches: 1 [ 520.911075][T12095] syz.4.1796 (12095): drop_caches: 1 [ 520.947621][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 520.998061][ T5692] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 521.155040][T12183] syzkaller0: entered promiscuous mode [ 521.171646][T12183] syzkaller0: entered allmulticast mode [ 521.177793][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 521.189091][ T5692] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 521.201617][T12183] tipc: Enabled bearer , priority 0 [ 521.209651][ T5692] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 521.229509][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1826'. [ 521.243776][ T5692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 521.254643][T12182] tipc: Resetting bearer [ 521.263263][ T5692] usb 2-1: config 1 has no interface number 0 [ 521.271406][ T5692] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.293742][ T5692] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 521.324795][ T5692] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 521.342577][T12182] tipc: Disabling bearer [ 521.351918][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.384234][ T5692] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 521.561952][T12192] ALSA: mixer_oss: invalid OSS volume '' [ 521.586498][ T5692] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 521.597090][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 521.777539][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 521.791713][ T9] usb 5-1: config index 0 descriptor too short (expected 26, got 18) [ 521.812926][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 521.840512][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.865315][ T9] usb 5-1: Product: syz [ 521.872787][ T9] usb 5-1: Manufacturer: syz [ 521.882255][ T9] usb 5-1: SerialNumber: syz [ 521.921854][ T9] usb 5-1: config 0 descriptor?? [ 521.952759][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 522.057318][T12179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.085715][T12179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.143603][ T5727] usb 2-1: USB disconnect, device number 108 [ 522.181953][ T5727] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 522.370325][T12186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.420671][T12186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.477528][ T5716] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 522.667608][ T9] gspca_sq930x: ucbus_write failed -110 [ 522.907673][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 522.923711][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 523.257075][ T5692] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 523.443902][ T5692] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 523.465350][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.478320][ T5692] usb 4-1: Product: syz [ 523.482571][ T5692] usb 4-1: Manufacturer: syz [ 523.488340][ T5692] usb 4-1: SerialNumber: syz [ 523.519444][ T5692] usb 4-1: config 0 descriptor?? [ 523.546579][ T9] usb 5-1: USB disconnect, device number 106 [ 523.623893][T12222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1836'. [ 523.633615][T12221] loop4: detected capacity change from 0 to 7 [ 523.641226][T12221] Dev loop4: unable to read RDB block 7 [ 523.649239][T12221] loop4: unable to read partition table [ 523.655328][T12221] loop4: partition table beyond EOD, truncated [ 523.668973][T12221] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 523.777927][T12224] trusted_key: syz.2.1838 sent an empty control message without MSG_MORE. [ 523.809920][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 523.969756][T12232] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 524.159233][ T12] net_ratelimit: 26 callbacks suppressed [ 524.159254][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 524.307491][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 524.386663][T12250] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.429915][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 524.545157][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 524.550456][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 524.628514][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 524.668183][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 524.789923][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 524.817420][ T5635] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 524.907706][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 524.979623][ T5635] usb 3-1: config 1 has an invalid interface number: 82 but max is 1 [ 524.988799][ T5635] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.999740][ T5635] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 525.009778][ T5635] usb 3-1: config 1 has no interface number 2 [ 525.016292][ T5635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.028607][ T5635] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.039043][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 525.043117][ T5635] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.072872][ T5635] usb 3-1: config 1 interface 82 has no altsetting 0 [ 525.088870][ T5635] usb 3-1: config 1 interface 1 has no altsetting 0 [ 525.109570][ T5635] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.125337][ T5635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.156812][ T5635] usb 3-1: Product: syz [ 525.167895][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 525.182256][ T5635] usb 3-1: Manufacturer: syz [ 525.192502][ T5635] usb 3-1: SerialNumber: syz [ 525.210132][ T5635] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 525.229201][ T5635] cdc_ncm 3-1:1.0: bind() failure [ 525.298621][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 525.556209][T12281] IPVS: length: 98 != 8 [ 525.878438][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 525.985848][ T5714] usb 4-1: USB disconnect, device number 97 [ 526.039723][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 526.070479][ T9] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 526.127486][ T9] usb 6-1: config 0 has no interface number 0 [ 526.163324][ T9] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 526.185501][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 526.237835][ T9] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 526.270054][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 526.295740][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.304512][ T9] usb 6-1: Product: syz [ 526.310503][ T9] usb 6-1: Manufacturer: syz [ 526.315431][ T9] usb 6-1: SerialNumber: syz [ 526.329123][ T9] usb 6-1: config 0 descriptor?? [ 526.340001][T12285] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 526.383122][T12285] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 526.643311][T12285] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 526.670053][T12285] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 526.705891][T12296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.902610][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 527.098117][ T11] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 527.258171][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 527.274834][ T11] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 527.287175][ T11] usb 4-1: New USB device strings: Mfr=1, Product=249, SerialNumber=216 [ 527.305113][ T11] usb 4-1: Product: syz [ 527.316115][ T11] usb 4-1: Manufacturer: syz [ 527.329270][ T11] usb 4-1: SerialNumber: syz [ 527.372974][ T11] usb 4-1: config 0 descriptor?? [ 527.586026][ T187] usb 3-1: USB disconnect, device number 113 [ 527.687900][ T5716] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 527.708960][ T11] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 527.719090][ T11] gspca_sonixj: reg_w1 err -71 [ 527.724366][ T11] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 527.751881][ T11] usb 4-1: USB disconnect, device number 98 [ 527.834377][T12313] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1867'. [ 527.868896][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 527.878196][ T5716] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 527.896538][ T5716] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 527.909354][ T5716] usb 5-1: config 3 has no interface number 0 [ 527.915898][ T5716] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.931399][ T5716] usb 5-1: config 3 interface 45 has no altsetting 0 [ 527.952132][ T5716] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 527.969436][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.997964][ T5716] usb 5-1: Product: syz [ 528.005182][ T5716] usb 5-1: Manufacturer: syz [ 528.014479][T12315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1866'. [ 528.026000][ T5716] usb 5-1: SerialNumber: syz [ 528.105200][T12315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.214986][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 528.230834][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 528.265916][T12315] loop8: detected capacity change from 0 to 7 [ 528.274095][ T9] asix 6-1:0.34: probe with driver asix failed with error -71 [ 528.293816][ T9] usb 6-1: USB disconnect, device number 69 [ 528.369764][T12315] Dev loop8: unable to read RDB block 7 [ 528.375672][T12315] loop8: unable to read partition table [ 528.390051][T12315] loop8: partition table beyond EOD, truncated [ 528.414080][T12315] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 528.428317][ T5692] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 528.509450][T12326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.521273][T12326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.617405][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 528.635987][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.672749][ T5692] usb 2-1: config 0 interface 0 has no altsetting 0 [ 528.701788][ T5692] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 528.733700][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.768123][ T5692] usb 2-1: Product: syz [ 528.781966][ T5692] usb 2-1: Manufacturer: syz [ 528.798089][ T5692] usb 2-1: SerialNumber: syz [ 528.833766][ T5692] usb 2-1: config 0 descriptor?? [ 529.200283][ T5692] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 529.223668][ T5692] imon 2-1:0.0: unable to initialize intf0, err -19 [ 529.251648][ T5692] imon:imon_probe: failed to initialize context! [ 529.273605][ T5692] imon 2-1:0.0: unable to register, err -19 [ 529.304244][ T5692] usb 2-1: USB disconnect, device number 109 [ 529.332533][T12336] FAULT_INJECTION: forcing a failure. [ 529.332533][T12336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 529.357118][T12336] CPU: 1 UID: 0 PID: 12336 Comm: syz.1.1871 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.357153][T12336] Tainted: [L]=SOFTLOCKUP [ 529.357161][T12336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.357174][T12336] Call Trace: [ 529.357184][T12336] [ 529.357193][T12336] dump_stack_lvl+0xe8/0x150 [ 529.357227][T12336] should_fail_ex+0x40c/0x560 [ 529.357263][T12336] prepare_alloc_pages+0x230/0x650 [ 529.357297][T12336] __alloc_frozen_pages_noprof+0x12f/0x380 [ 529.357325][T12336] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 529.357354][T12336] ? __pfx_policy_nodemask+0x10/0x10 [ 529.357384][T12336] ? __lock_acquire+0x683/0x2cf0 [ 529.357410][T12336] alloc_pages_mpol+0x212/0x380 [ 529.357445][T12336] folio_alloc_mpol_noprof+0x39/0x160 [ 529.357473][T12336] vma_alloc_folio_noprof+0xe1/0x1e0 [ 529.357502][T12336] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 529.357539][T12336] ? __pte_offset_map+0x29/0x240 [ 529.357570][T12336] ? __pte_offset_map+0x29/0x240 [ 529.357603][T12336] do_pte_missing+0x173a/0x34b0 [ 529.357657][T12336] handle_mm_fault+0x1b36/0x3080 [ 529.357702][T12336] ? handle_mm_fault+0xec/0x3080 [ 529.357742][T12336] ? __pfx_handle_mm_fault+0x10/0x10 [ 529.357772][T12336] ? follow_page_pte+0x6ce/0xe70 [ 529.357808][T12336] ? __pfx_follow_page_pte+0x10/0x10 [ 529.357851][T12336] __get_user_pages+0x1678/0x2720 [ 529.357911][T12336] populate_vma_page_range+0x2be/0x3c0 [ 529.357942][T12336] ? __pfx_populate_vma_page_range+0x10/0x10 [ 529.357974][T12336] ? down_read+0x2be/0x330 [ 529.358004][T12336] __mm_populate+0x25f/0x390 [ 529.358033][T12336] ? __pfx___mm_populate+0x10/0x10 [ 529.358065][T12336] do_mlock+0x615/0x720 [ 529.358087][T12336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 529.358117][T12336] ? __pfx_do_mlock+0x10/0x10 [ 529.358143][T12336] ? fput+0xa0/0xd0 [ 529.358176][T12336] ? ksys_write+0x242/0x270 [ 529.358204][T12336] ? __pfx_ksys_write+0x10/0x10 [ 529.358236][T12336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.358262][T12336] __x64_sys_mlock+0x60/0x70 [ 529.358287][T12336] do_syscall_64+0x174/0x580 [ 529.358309][T12336] ? trace_irq_disable+0x3b/0x140 [ 529.358329][T12336] ? clear_bhb_loop+0x40/0x90 [ 529.358355][T12336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.358377][T12336] RIP: 0033:0x7fc95e19ce59 [ 529.358399][T12336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.358418][T12336] RSP: 002b:00007fc95f06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 529.358442][T12336] RAX: ffffffffffffffda RBX: 00007fc95e415fa0 RCX: 00007fc95e19ce59 [ 529.358458][T12336] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 529.358472][T12336] RBP: 00007fc95f06d090 R08: 0000000000000000 R09: 0000000000000000 [ 529.358486][T12336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.358499][T12336] R13: 00007fc95e416038 R14: 00007fc95e415fa0 R15: 00007fc95e53fa48 [ 529.358542][T12336] [ 529.907010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 530.147974][ T1174] net_ratelimit: 24 callbacks suppressed [ 530.147998][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 530.176220][ T5716] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 530.319334][ T1174] bond3: (slave dummy0): failed to get link speed/duplex [ 530.354898][ T5716] usb 5-1: USB disconnect, device number 107 [ 530.447172][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 530.455166][T12345] FAULT_INJECTION: forcing a failure. [ 530.455166][T12345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.525265][T12345] CPU: 0 UID: 0 PID: 12345 Comm: syz.1.1875 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.525301][T12345] Tainted: [L]=SOFTLOCKUP [ 530.525309][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 530.525322][T12345] Call Trace: [ 530.525332][T12345] [ 530.525342][T12345] dump_stack_lvl+0xe8/0x150 [ 530.525375][T12345] should_fail_ex+0x40c/0x560 [ 530.525420][T12345] _copy_from_iter+0x1d3/0x1660 [ 530.525440][T12345] ? kmem_cache_alloc_node_noprof+0x1e1/0x610 [ 530.525475][T12345] ? rcu_is_watching+0x15/0xb0 [ 530.525503][T12345] ? trace_kmem_cache_alloc+0x29/0xe0 [ 530.525537][T12345] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 530.525570][T12345] ? __pfx__copy_from_iter+0x10/0x10 [ 530.525684][T12345] ? __alloc_skb+0x276/0x7a0 [ 530.525705][T12345] ? __alloc_skb+0x276/0x7a0 [ 530.525733][T12345] ? netlink_sendmsg+0x650/0xb40 [ 530.525759][T12345] ? skb_put+0x112/0x210 [ 530.525785][T12345] netlink_sendmsg+0x6c0/0xb40 [ 530.525822][T12345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.525854][T12345] ? aa_sock_msg_perm+0xf1/0x1b0 [ 530.525890][T12345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.525916][T12345] sock_sendmsg_nosec+0x13a/0x180 [ 530.525950][T12345] ____sys_sendmsg+0x54e/0x850 [ 530.525982][T12345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.526017][T12345] ? import_iovec+0x73/0xa0 [ 530.526043][T12345] ___sys_sendmsg+0x2a5/0x360 [ 530.526067][T12345] ? __lock_acquire+0x683/0x2cf0 [ 530.526094][T12345] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.526158][T12345] ? __fget_files+0x2a/0x420 [ 530.526183][T12345] ? __fget_files+0x3a2/0x420 [ 530.526215][T12345] __x64_sys_sendmsg+0x1b1/0x290 [ 530.526244][T12345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.526287][T12345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.526310][T12345] do_syscall_64+0x174/0x580 [ 530.526331][T12345] ? trace_irq_disable+0x3b/0x140 [ 530.526350][T12345] ? clear_bhb_loop+0x40/0x90 [ 530.526380][T12345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.526401][T12345] RIP: 0033:0x7fc95e19ce59 [ 530.526417][T12345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.526431][T12345] RSP: 002b:00007fc95f06d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.526448][T12345] RAX: ffffffffffffffda RBX: 00007fc95e415fa0 RCX: 00007fc95e19ce59 [ 530.526460][T12345] RDX: 0000000004040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 530.526470][T12345] RBP: 00007fc95f06d090 R08: 0000000000000000 R09: 0000000000000000 [ 530.526479][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.526489][T12345] R13: 00007fc95e416038 R14: 00007fc95e415fa0 R15: 00007fc95e53fa48 [ 530.526512][T12345] [ 530.797836][T12349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.806746][T12349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.833390][T12349] loop5: detected capacity change from 0 to 14 [ 530.841909][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 530.854348][T12349] Dev loop5: unable to read RDB block 14 [ 530.860296][T12349] loop5: AHDI p1 p2 [ 530.864447][T12349] loop5: partition table partially beyond EOD, truncated [ 530.871989][T12349] loop5: p1 start 1668641394 is beyond EOD, truncated [ 531.044088][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 531.070467][ T187] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 531.218081][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 531.220451][ T187] usb 6-1: device descriptor read/64, error -71 [ 531.231721][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.438420][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 531.558672][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 531.577378][ T187] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 531.707132][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 531.717313][ T187] usb 6-1: device descriptor read/64, error -71 [ 531.840750][ T187] usb usb6-port1: attempt power cycle [ 531.858232][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 531.975583][T12366] netlink: 'syz.2.1880': attribute type 1 has an invalid length. [ 532.043425][T12366] 8021q: adding VLAN 0 to HW filter on device bond6 [ 532.121834][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1880'. [ 532.137199][T12366] bond6: entered promiscuous mode [ 532.144327][T12366] bond6: entered allmulticast mode [ 532.166712][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'. [ 532.217425][ T187] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 532.273023][ T187] usb 6-1: device descriptor read/8, error -71 [ 532.538539][ T187] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 532.592234][ T187] usb 6-1: device descriptor read/8, error -71 [ 532.732734][ T187] usb usb6-port1: unable to enumerate USB device [ 532.931183][T12380] syzkaller0: entered promiscuous mode [ 532.944146][T12380] syzkaller0: entered allmulticast mode [ 533.052919][T12382] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1885'. [ 533.292992][T12386] FAULT_INJECTION: forcing a failure. [ 533.292992][T12386] name failslab, interval 1, probability 0, space 0, times 0 [ 533.337845][T12386] CPU: 1 UID: 0 PID: 12386 Comm: syz.2.1887 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.337881][T12386] Tainted: [L]=SOFTLOCKUP [ 533.337890][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.337904][T12386] Call Trace: [ 533.337917][T12386] [ 533.337927][T12386] dump_stack_lvl+0xe8/0x150 [ 533.337960][T12386] should_fail_ex+0x40c/0x560 [ 533.337998][T12386] should_failslab+0xa8/0x100 [ 533.338026][T12386] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 533.338060][T12386] ? skb_clone+0x212/0x3a0 [ 533.338087][T12386] ? skb_clone+0x212/0x3a0 [ 533.338120][T12386] skb_clone+0x212/0x3a0 [ 533.338144][T12386] ? nfnetlink_rcv+0x4b0/0x28c0 [ 533.338171][T12386] nfnetlink_rcv+0x4de/0x28c0 [ 533.338199][T12386] ? __dev_queue_xmit+0x29b/0x37f0 [ 533.338229][T12386] ? __local_bh_enable_ip+0xd0/0x130 [ 533.338262][T12386] ? lockdep_hardirqs_on+0x7a/0x110 [ 533.338293][T12386] ? __dev_queue_xmit+0x29b/0x37f0 [ 533.338320][T12386] ? __local_bh_enable_ip+0xd0/0x130 [ 533.338351][T12386] ? __dev_queue_xmit+0x29b/0x37f0 [ 533.338376][T12386] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 533.338402][T12386] ? do_syscall_64+0x174/0x580 [ 533.338421][T12386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.338454][T12386] ? __dev_queue_xmit+0x29b/0x37f0 [ 533.338481][T12386] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 533.338520][T12386] ? ref_tracker_free+0x689/0x830 [ 533.338555][T12386] ? __pfx_ref_tracker_free+0x10/0x10 [ 533.338588][T12386] ? __asan_memcpy+0x40/0x70 [ 533.338618][T12386] ? __skb_clone+0x5c/0x6c0 [ 533.338646][T12386] ? __skb_clone+0x449/0x6c0 [ 533.338766][T12386] ? skb_clone+0x246/0x3a0 [ 533.338855][T12386] ? __netlink_deliver_tap+0x811/0x860 [ 533.338929][T12386] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.339018][T12386] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.339086][T12386] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.339171][T12386] netlink_unicast+0x7bb/0x940 [ 533.339266][T12386] netlink_sendmsg+0x813/0xb40 [ 533.339370][T12386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.339454][T12386] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.339540][T12386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.339606][T12386] sock_sendmsg_nosec+0x13a/0x180 [ 533.339700][T12386] ____sys_sendmsg+0x54e/0x850 [ 533.339786][T12386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.339868][T12386] ? import_iovec+0x73/0xa0 [ 533.339943][T12386] ___sys_sendmsg+0x2a5/0x360 [ 533.340006][T12386] ? __lock_acquire+0x683/0x2cf0 [ 533.340081][T12386] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.340297][T12386] ? __fget_files+0x2a/0x420 [ 533.340352][T12386] ? __fget_files+0x3a2/0x420 [ 533.340437][T12386] __x64_sys_sendmsg+0x1b1/0x290 [ 533.340514][T12386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.340630][T12386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.340703][T12386] do_syscall_64+0x174/0x580 [ 533.340758][T12386] ? trace_irq_disable+0x3b/0x140 [ 533.340817][T12386] ? clear_bhb_loop+0x40/0x90 [ 533.340890][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.340945][T12386] RIP: 0033:0x7f0c42b9ce59 [ 533.341006][T12386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.341057][T12386] RSP: 002b:00007f0c439b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.341123][T12386] RAX: ffffffffffffffda RBX: 00007f0c42e15fa0 RCX: 00007f0c42b9ce59 [ 533.341166][T12386] RDX: 0000000004040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 533.341199][T12386] RBP: 00007f0c439b2090 R08: 0000000000000000 R09: 0000000000000000 [ 533.341240][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.341279][T12386] R13: 00007f0c42e16038 R14: 00007f0c42e15fa0 R15: 00007f0c42f3fa48 [ 533.341366][T12386] [ 533.365969][T12390] tc action pedit unable to extract header offset for header type (0x5) [ 533.382383][T12391] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 0, id = 0 [ 533.992401][T12399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 534.345170][T12408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1894'. [ 535.488695][T12422] tipc: Enabled bearer , priority 0 [ 535.499404][T12422] syzkaller0: entered promiscuous mode [ 535.505740][ T5716] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 535.520991][T12422] syzkaller0: entered allmulticast mode [ 535.597511][T12422] tipc: Resetting bearer [ 535.692872][ T5716] usb 3-1: config 9 has an invalid interface number: 172 but max is 1 [ 535.726841][ T5716] usb 3-1: config 9 has an invalid interface number: 244 but max is 1 [ 535.749931][ T5716] usb 3-1: config 9 has no interface number 0 [ 535.756142][ T5716] usb 3-1: config 9 has no interface number 1 [ 535.763322][ T5716] usb 3-1: config 9 interface 172 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 0 [ 535.780595][T12421] tipc: Resetting bearer [ 535.789566][ T5716] usb 3-1: config 9 interface 172 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 8 [ 535.839222][ T5716] usb 3-1: config 9 interface 172 altsetting 5 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 535.866031][T12421] tipc: Disabling bearer [ 535.880703][ T5716] usb 3-1: config 9 interface 244 altsetting 16 endpoint 0x5 has invalid maxpacket 32, setting to 8 [ 535.915600][ T5716] usb 3-1: config 9 interface 244 altsetting 16 endpoint 0xB has invalid maxpacket 512, setting to 8 [ 535.941548][ T5714] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 535.972959][ T5716] usb 3-1: config 9 interface 244 altsetting 16 has a duplicate endpoint with address 0xB, skipping [ 536.011743][ T5716] usb 3-1: config 9 interface 244 altsetting 16 has a duplicate endpoint with address 0xE, skipping [ 536.047916][ T5716] usb 3-1: config 9 interface 244 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 536.084578][ T5716] usb 3-1: config 9 interface 244 altsetting 16 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 536.129002][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 536.144814][ T5716] usb 3-1: config 9 interface 244 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 536.158666][ T5714] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 536.182251][ T5714] usb 4-1: config 255 has no interface number 0 [ 536.195834][ T5714] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 536.211076][ T5714] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 536.224426][ T5714] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 951, setting to 64 [ 536.224443][ T5716] usb 3-1: config 9 interface 244 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 536.238952][ T5714] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid wMaxPacketSize 0 [ 536.257694][ T5716] usb 3-1: config 9 interface 244 altsetting 16 endpoint 0x6 has invalid maxpacket 16, setting to 8 [ 536.300087][ T5716] usb 3-1: config 9 interface 172 has no altsetting 0 [ 536.310595][ T5714] usb 4-1: config 255 interface 106 has no altsetting 0 [ 536.315058][ T5716] usb 3-1: config 9 interface 244 has no altsetting 0 [ 536.371634][ T5714] usb 4-1: New USB device found, idVendor=1199, idProduct=0018, bcdDevice=9a.00 [ 536.386059][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.407051][ T5714] usb 4-1: Product: syz [ 536.415724][ T5714] usb 4-1: Manufacturer: syz [ 536.432576][ T5714] usb 4-1: SerialNumber: syz [ 536.722243][T12439] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 536.722243][T12439] program syz.5.1904 not setting count and/or reply_len properly [ 536.761041][T12439] xt_TCPMSS: Only works on TCP SYN packets [ 536.817242][ T187] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 536.861022][T12442] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1905'. [ 537.002345][ T187] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 537.014114][ T187] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.027888][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 537.034623][ T187] usb 2-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.00 [ 537.046243][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.062288][ T187] usb 2-1: config 0 descriptor?? [ 537.167166][ T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 537.297241][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 537.337154][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 537.344429][ T9] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 537.353643][ T9] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 537.362845][ T9] usb 5-1: config 3 has no interface number 0 [ 537.369824][ T9] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.384926][ T9] usb 5-1: config 3 interface 45 has no altsetting 0 [ 537.398624][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 537.407984][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.416065][ T9] usb 5-1: Product: syz [ 537.420349][ T9] usb 5-1: Manufacturer: syz [ 537.425319][ T9] usb 5-1: SerialNumber: syz [ 537.683680][ T187] usbhid 2-1:0.0: can't add hid device: -71 [ 537.704396][ T187] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 537.741660][ T187] usb 2-1: USB disconnect, device number 110 [ 537.787253][T12450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.798301][T12450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.010547][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 538.150565][ T9] usb 5-1: USB disconnect, device number 108 [ 538.254872][ T5716] usb 3-1: New USB device found, idVendor=1bc7, idProduct=10c0, bcdDevice=cc.a4 [ 538.289118][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.331259][ T5716] usb 3-1: can't set config #9, error -71 [ 538.354652][ T5716] usb 3-1: USB disconnect, device number 114 [ 538.409073][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.663836][ T5714] sierra 4-1:255.106: Sierra USB modem converter detected [ 538.729777][ T5714] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 538.823858][ T5714] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 538.855872][ T5714] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 538.949544][ T5714] usb 4-1: USB disconnect, device number 99 [ 539.034609][ T5714] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 539.145718][ T5714] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 539.213032][ T5714] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 539.264641][ T5714] sierra 4-1:255.106: device disconnected [ 540.155301][T12480] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 540.289482][T12482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1915'. [ 540.337648][T12480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.415780][T12482] bond6: entered promiscuous mode [ 540.447864][T12482] bond6: entered allmulticast mode [ 541.163173][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 541.257088][ T5716] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 541.302537][T12508] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1924'. [ 541.362047][T12510] net_ratelimit: 1 callbacks suppressed [ 541.362064][T12510] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 541.427593][ T5716] usb 6-1: Using ep0 maxpacket: 16 [ 541.438800][ T5716] usb 6-1: config 0 has an invalid interface number: 178 but max is 0 [ 541.454630][ T5716] usb 6-1: config 0 has no interface number 0 [ 541.466760][ T5716] usb 6-1: config 0 interface 178 altsetting 66 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.487531][ T5716] usb 6-1: config 0 interface 178 altsetting 66 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.505664][ T5716] usb 6-1: config 0 interface 178 has no altsetting 0 [ 541.517833][ T5716] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 541.529376][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.554026][ T5716] usb 6-1: config 0 descriptor?? [ 541.837393][ T11] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 542.007156][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 542.037448][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.050699][ T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 542.066494][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.090469][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.114163][ T11] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 542.131948][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.151766][ T11] usb 5-1: Product: syz [ 542.160887][ T11] usb 5-1: Manufacturer: syz [ 542.174355][ T11] usb 5-1: SerialNumber: syz [ 542.183178][ T5716] usbhid 6-1:0.178: can't add hid device: -71 [ 542.196437][ T5716] usbhid 6-1:0.178: probe with driver usbhid failed with error -71 [ 542.216129][ T11] usb 5-1: config 0 descriptor?? [ 542.235037][ T5716] usb 6-1: USB disconnect, device number 74 [ 542.241182][ T9] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 542.249806][ T11] appledisplay 5-1:0.0: Submitting URB failed [ 542.269338][ T11] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -5 [ 542.360692][T12524] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 542.376723][T12524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 542.398346][T12526] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 542.449129][ T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 542.472707][ T11] usb 5-1: USB disconnect, device number 109 [ 542.480879][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 542.493280][ T9] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 542.504527][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 542.523274][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 542.548171][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 542.715641][T12534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1933'. [ 542.944833][T12538] binder: 12537:12538 ioctl c0306201 2000000001c0 returned -14 [ 544.242910][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 544.242925][ T30] audit: type=1326 audit(1782533495.291:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 544.297689][ T30] audit: type=1326 audit(1782533495.331:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 544.324817][ T30] audit: type=1326 audit(1782533495.361:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 544.414361][T12562] tipc: Failed to remove unknown binding: 66,0,0/1416516510:847420153/847420155 [ 544.447921][ T30] audit: type=1326 audit(1782533495.411:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 544.533349][T12557] tipc: Failed to remove unknown binding: 66,0,0/1416516510:1013540877/1013540878 [ 544.556590][ T30] audit: type=1326 audit(1782533495.421:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 544.602021][T12557] tipc: Failed to remove unknown binding: 66,0,0/1416516510:1013540877/1013540878 [ 544.640646][ T30] audit: type=1326 audit(1782533495.421:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 544.720930][ T30] audit: type=1326 audit(1782533495.421:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 544.865777][ T30] audit: type=1326 audit(1782533495.421:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 544.991445][ T30] audit: type=1326 audit(1782533495.421:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 545.069260][ T30] audit: type=1326 audit(1782533495.421:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5119ce59 code=0x7ffc0000 [ 545.124151][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 545.151908][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.180956][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 545.208144][ T9] usb 2-1: config 0 descriptor?? [ 545.230068][ T9] usb 2-1: can't set config #0, error -71 [ 545.258260][ T9] usb 2-1: USB disconnect, device number 111 [ 545.326531][T12580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.525482][T12582] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 545.677173][ T9] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 545.870474][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 545.893657][ T9] usb 2-1: config 0 has no interface number 0 [ 545.909904][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 545.922788][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.970628][ T9] usb 2-1: Product: syz [ 545.983540][ T9] usb 2-1: Manufacturer: syz [ 545.995423][ T9] usb 2-1: SerialNumber: syz [ 546.029752][ T9] usb 2-1: config 0 descriptor?? [ 546.059918][ T5716] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 546.212769][ T5635] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 546.259186][ T5716] usb 3-1: config 0 has no interfaces? [ 546.268128][ T5716] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 546.300360][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.325350][ T5716] usb 3-1: Product: syz [ 546.334196][ T9] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 546.353458][ T9] usb 2-1: USB disconnect, device number 112 [ 546.359665][ T5716] usb 3-1: Manufacturer: syz [ 546.365159][ T5716] usb 3-1: SerialNumber: syz [ 546.379097][ T5716] usb 3-1: config 0 descriptor?? [ 546.380066][ T5635] usb 6-1: Using ep0 maxpacket: 16 [ 546.419121][ T5635] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.451614][ T5635] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 546.477682][ T5635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.492249][ T5635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.537486][ T5635] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 546.546857][ T5635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.556914][ T5635] usb 6-1: Product: syz [ 546.563335][ T5635] usb 6-1: Manufacturer: syz [ 546.571856][ T5635] usb 6-1: SerialNumber: syz [ 546.586046][ T5635] usb 6-1: config 0 descriptor?? [ 546.601509][ T5635] appledisplay 6-1:0.0: Submitting URB failed [ 546.614052][ T5635] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -5 [ 546.630310][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.644888][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.830028][ T5635] usb 6-1: USB disconnect, device number 75 [ 547.221433][ T9] usb 3-1: USB disconnect, device number 115 [ 547.324171][T12606] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1955'. [ 547.399231][T12608] vti0: entered promiscuous mode [ 547.424879][T12608] vti0: entered allmulticast mode [ 547.520377][T12608] netlink: 'syz.2.1956': attribute type 4 has an invalid length. [ 547.544792][T12608] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1956'. [ 547.600291][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 547.609999][T12608] .`: renamed from bond0 (while UP) [ 547.643239][T12619] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 547.728268][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1960'. [ 547.811878][ T5714] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 548.022979][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 548.033621][ T5714] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 548.048425][ T5714] usb 3-1: can't read configurations, error -71 [ 548.082981][T12638] syzkaller0: entered promiscuous mode [ 548.094471][T12638] syzkaller0: entered allmulticast mode [ 548.237977][T12640] FAULT_INJECTION: forcing a failure. [ 548.237977][T12640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.252671][T12640] CPU: 1 UID: 0 PID: 12640 Comm: syz.3.1966 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.252712][T12640] Tainted: [L]=SOFTLOCKUP [ 548.252727][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.252754][T12640] Call Trace: [ 548.252768][T12640] [ 548.252781][T12640] dump_stack_lvl+0xe8/0x150 [ 548.252824][T12640] should_fail_ex+0x40c/0x560 [ 548.252874][T12640] prepare_alloc_pages+0x230/0x650 [ 548.252918][T12640] __alloc_frozen_pages_noprof+0x12f/0x380 [ 548.252960][T12640] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.252999][T12640] ? __pfx_policy_nodemask+0x10/0x10 [ 548.253040][T12640] ? __lock_acquire+0x683/0x2cf0 [ 548.253078][T12640] alloc_pages_mpol+0x212/0x380 [ 548.253120][T12640] folio_alloc_mpol_noprof+0x39/0x160 [ 548.253159][T12640] vma_alloc_folio_noprof+0xe1/0x1e0 [ 548.253202][T12640] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 548.253238][T12640] ? __pte_offset_map+0x29/0x240 [ 548.253278][T12640] ? __pte_offset_map+0x29/0x240 [ 548.253322][T12640] do_pte_missing+0x173a/0x34b0 [ 548.253393][T12640] handle_mm_fault+0x1b36/0x3080 [ 548.253451][T12640] ? handle_mm_fault+0xec/0x3080 [ 548.253501][T12640] ? __pfx_handle_mm_fault+0x10/0x10 [ 548.253543][T12640] ? follow_page_pte+0x6ce/0xe70 [ 548.253593][T12640] ? __pfx_follow_page_pte+0x10/0x10 [ 548.253649][T12640] __get_user_pages+0x1678/0x2720 [ 548.253729][T12640] populate_vma_page_range+0x2be/0x3c0 [ 548.253778][T12640] ? __pfx_populate_vma_page_range+0x10/0x10 [ 548.253822][T12640] ? down_read+0x2be/0x330 [ 548.253861][T12640] __mm_populate+0x25f/0x390 [ 548.253902][T12640] ? __pfx___mm_populate+0x10/0x10 [ 548.253952][T12640] do_mlock+0x615/0x720 [ 548.253988][T12640] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.254028][T12640] ? __pfx_do_mlock+0x10/0x10 [ 548.254065][T12640] ? fput+0xa0/0xd0 [ 548.254106][T12640] ? ksys_write+0x242/0x270 [ 548.254147][T12640] ? __pfx_ksys_write+0x10/0x10 [ 548.254183][T12640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.254208][T12640] __x64_sys_mlock+0x60/0x70 [ 548.254234][T12640] do_syscall_64+0x174/0x580 [ 548.254257][T12640] ? trace_irq_disable+0x3b/0x140 [ 548.254279][T12640] ? clear_bhb_loop+0x40/0x90 [ 548.254307][T12640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.254331][T12640] RIP: 0033:0x7f9a5119ce59 [ 548.254352][T12640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.254372][T12640] RSP: 002b:00007f9a51f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 548.254396][T12640] RAX: ffffffffffffffda RBX: 00007f9a51415fa0 RCX: 00007f9a5119ce59 [ 548.254412][T12640] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 548.254428][T12640] RBP: 00007f9a51f91090 R08: 0000000000000000 R09: 0000000000000000 [ 548.254443][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.254457][T12640] R13: 00007f9a51416038 R14: 00007f9a51415fa0 R15: 00007f9a5153fa48 [ 548.254492][T12640] [ 549.028166][T12649] 8021q: adding VLAN 0 to HW filter on device .` [ 549.103802][T12653] loop4: detected capacity change from 0 to 7 [ 549.129176][T12653] Dev loop4: unable to read RDB block 7 [ 549.149143][T12653] loop4: unable to read partition table [ 549.168241][T12653] loop4: partition table beyond EOD, truncated [ 549.189887][T12653] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 549.257231][T12655] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1971'. [ 549.296787][T12649] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 549.449879][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.457181][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.466174][T12657] loop5: detected capacity change from 0 to 7 [ 549.488405][T12657] Dev loop5: unable to read RDB block 7 [ 549.504374][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1973'. [ 549.518659][T12657] loop5: AHDI p2 [ 549.522408][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 549.536233][T12657] loop5: partition table partially beyond EOD, truncated [ 549.647670][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 549.777731][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 549.810706][T12664] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1974'. [ 550.008305][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 550.097580][ T5714] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 550.157501][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 550.205936][T12675] FAULT_INJECTION: forcing a failure. [ 550.205936][T12675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 550.239076][T12675] CPU: 1 UID: 0 PID: 12675 Comm: syz.4.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.239113][T12675] Tainted: [L]=SOFTLOCKUP [ 550.239121][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.239134][T12675] Call Trace: [ 550.239144][T12675] [ 550.239153][T12675] dump_stack_lvl+0xe8/0x150 [ 550.239186][T12675] should_fail_ex+0x40c/0x560 [ 550.239224][T12675] prepare_alloc_pages+0x230/0x650 [ 550.239255][T12675] __alloc_frozen_pages_noprof+0x12f/0x380 [ 550.239284][T12675] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 550.239312][T12675] ? __pfx_policy_nodemask+0x10/0x10 [ 550.239342][T12675] ? __lock_acquire+0x683/0x2cf0 [ 550.239368][T12675] alloc_pages_mpol+0x212/0x380 [ 550.239400][T12675] folio_alloc_mpol_noprof+0x39/0x160 [ 550.239428][T12675] vma_alloc_folio_noprof+0xe1/0x1e0 [ 550.239458][T12675] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 550.239494][T12675] ? __pte_offset_map+0x29/0x240 [ 550.239526][T12675] ? __pte_offset_map+0x29/0x240 [ 550.239558][T12675] do_pte_missing+0x173a/0x34b0 [ 550.239611][T12675] handle_mm_fault+0x1b36/0x3080 [ 550.239655][T12675] ? handle_mm_fault+0xec/0x3080 [ 550.239694][T12675] ? __pfx_handle_mm_fault+0x10/0x10 [ 550.239724][T12675] ? follow_page_pte+0x6ce/0xe70 [ 550.239762][T12675] ? __pfx_follow_page_pte+0x10/0x10 [ 550.239804][T12675] __get_user_pages+0x1678/0x2720 [ 550.239866][T12675] populate_vma_page_range+0x2be/0x3c0 [ 550.239898][T12675] ? __pfx_populate_vma_page_range+0x10/0x10 [ 550.239929][T12675] ? down_read+0x2be/0x330 [ 550.239958][T12675] __mm_populate+0x25f/0x390 [ 550.239988][T12675] ? __pfx___mm_populate+0x10/0x10 [ 550.240026][T12675] do_mlock+0x615/0x720 [ 550.240050][T12675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.240080][T12675] ? __pfx_do_mlock+0x10/0x10 [ 550.240105][T12675] ? fput+0xa0/0xd0 [ 550.240142][T12675] ? ksys_write+0x242/0x270 [ 550.240184][T12675] ? __pfx_ksys_write+0x10/0x10 [ 550.240216][T12675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.240241][T12675] __x64_sys_mlock+0x60/0x70 [ 550.240265][T12675] do_syscall_64+0x174/0x580 [ 550.240286][T12675] ? trace_irq_disable+0x3b/0x140 [ 550.240307][T12675] ? clear_bhb_loop+0x40/0x90 [ 550.240333][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.240354][T12675] RIP: 0033:0x7fd7e2d9ce59 [ 550.240374][T12675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.240392][T12675] RSP: 002b:00007fd7e3b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 550.240415][T12675] RAX: ffffffffffffffda RBX: 00007fd7e3015fa0 RCX: 00007fd7e2d9ce59 [ 550.240431][T12675] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 550.240444][T12675] RBP: 00007fd7e3b86090 R08: 0000000000000000 R09: 0000000000000000 [ 550.240457][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.240470][T12675] R13: 00007fd7e3016038 R14: 00007fd7e3015fa0 R15: 00007fd7e313fa48 [ 550.240512][T12675] [ 550.641948][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 550.650742][ T8220] bond3: (slave dummy0): failed to get link speed/duplex [ 550.668055][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.679754][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 550.691570][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.702988][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.721904][ T5714] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 550.732636][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.741359][ T5714] usb 3-1: Product: syz [ 550.745712][ T5714] usb 3-1: Manufacturer: syz [ 550.750790][ T5714] usb 3-1: SerialNumber: syz [ 550.762469][ T5714] usb 3-1: config 0 descriptor?? [ 550.772772][ T5714] appledisplay 3-1:0.0: Submitting URB failed [ 550.779550][ T5714] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 550.790414][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 550.917156][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 551.043525][ T5714] usb 3-1: USB disconnect, device number 118 [ 551.124346][T12684] binder: 12683:12684 ioctl c0306201 200000000740 returned -14 [ 551.157414][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 551.387126][ T9] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 551.537346][ T9] usb 6-1: device descriptor read/64, error -71 [ 551.774107][T12689] loop4: detected capacity change from 0 to 7 [ 551.787531][ T9] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 551.801244][T12689] Dev loop4: unable to read RDB block 7 [ 551.813202][T12689] loop4: unable to read partition table [ 551.819652][T12689] loop4: partition table beyond EOD, truncated [ 551.831879][T12689] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 551.868096][T12692] syzkaller0: entered promiscuous mode [ 551.883906][T12692] syzkaller0: entered allmulticast mode [ 551.922550][T12692] tipc: Enabled bearer , priority 0 [ 551.939766][T12690] tipc: Resetting bearer [ 551.948571][ T9] usb 6-1: device descriptor read/64, error -71 [ 552.009303][T12690] tipc: Disabling bearer [ 552.078320][ T9] usb usb6-port1: attempt power cycle [ 552.170646][T12704] ALSA: mixer_oss: invalid OSS volume '' [ 552.257516][ T5716] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 552.358478][T12710] loop3: detected capacity change from 0 to 1 [ 552.371916][T12710] Dev loop3: unable to read RDB block 1 [ 552.381785][T12710] loop3: unable to read partition table [ 552.387897][T12710] loop3: partition table beyond EOD, truncated [ 552.394438][T12710] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 552.417301][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 552.426135][ T5716] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 552.435184][ T5716] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 552.444102][ T9] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 552.453285][ T5716] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 552.468190][ T5716] usb 4-1: config 1 has no interface number 0 [ 552.474723][ T9] usb 6-1: device descriptor read/8, error -71 [ 552.481768][ T5716] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.493098][ T5716] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 552.509412][ T5716] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 552.525269][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.563318][ T5716] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 552.740410][ T9] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 552.759273][ T5716] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 552.789214][ T9] usb 6-1: device descriptor read/8, error -71 [ 552.917444][ T9] usb usb6-port1: unable to enumerate USB device [ 553.209903][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.248542][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.295653][ T5692] usb 4-1: USB disconnect, device number 100 [ 553.325330][ T5692] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 553.757449][ T5714] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 553.917461][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 553.943040][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.970294][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 554.013052][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1997'. [ 554.040419][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.086403][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.129788][ T5714] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 554.162968][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.200997][ T5714] usb 2-1: Product: syz [ 554.213665][ T5714] usb 2-1: Manufacturer: syz [ 554.219294][ T5714] usb 2-1: SerialNumber: syz [ 554.235528][ T5714] usb 2-1: config 0 descriptor?? [ 554.250930][ T5714] appledisplay 2-1:0.0: Submitting URB failed [ 554.267391][ T5714] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 554.283243][T12734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.537540][ T5635] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 554.607698][T12736] syzkaller0: entered promiscuous mode [ 554.618738][T12736] syzkaller0: entered allmulticast mode [ 554.675304][T12736] tipc: Enabled bearer , priority 0 [ 554.687240][ T12] net_ratelimit: 26 callbacks suppressed [ 554.687282][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 554.703229][ T5635] usb 4-1: Using ep0 maxpacket: 8 [ 554.712525][ T5635] usb 4-1: unable to get BOS descriptor or descriptor too short [ 554.723337][T12735] tipc: Resetting bearer [ 554.729110][ T5635] usb 4-1: config 12 interface 0 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 554.729141][ T5635] usb 4-1: config 12 interface 0 has no altsetting 0 [ 554.780986][ T5635] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 554.784302][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 554.784415][ T30] audit: type=1326 audit(1782533505.831:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.4.1998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7e2d9ce59 code=0x0 [ 554.790207][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.829352][ T5635] usb 4-1: Product: syz [ 554.833630][ T5635] usb 4-1: Manufacturer: syz [ 554.875954][ T5635] usb 4-1: SerialNumber: syz [ 554.893981][T12735] tipc: Disabling bearer [ 554.967111][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 555.077700][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 555.197413][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 555.236574][ T5635] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.244151][ T5635] usb 4-1: selecting invalid altsetting 0 [ 555.258133][T12741] ALSA: mixer_oss: invalid OSS volume '' [ 555.328061][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 555.447119][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 555.522353][ T5635] usb 4-1: USB disconnect, device number 101 [ 555.567110][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 555.660547][ T7078] udevd[7078]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.817814][ T82] bond3: (slave dummy0): failed to get link speed/duplex [ 556.041873][T12759] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2007'. [ 556.131183][ T5714] usb 2-1: USB disconnect, device number 113 [ 556.179509][ T1017] bond3: (slave dummy0): failed to get link speed/duplex [ 556.327120][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 556.393484][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 556.784835][T12773] syzkaller0: entered promiscuous mode [ 556.808766][T12773] syzkaller0: entered allmulticast mode [ 556.937777][T12780] ALSA: mixer_oss: invalid OSS volume '' [ 557.091018][T12782] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2016'. [ 557.112646][T12782] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2016'. [ 557.387101][ T5716] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 557.558033][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 557.585152][ T5716] usb 5-1: unable to get BOS descriptor or descriptor too short [ 557.609784][ T5716] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 557.634850][ T5716] usb 5-1: config 140 has an invalid descriptor of length 147, skipping remainder of the config [ 557.690912][ T5716] usb 5-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 557.724775][ T5716] usb 5-1: config 140 has no interface number 0 [ 557.743560][ T5716] usb 5-1: too many endpoints for config 140 interface 182 altsetting 22: 49, using maximum allowed: 30 [ 557.775400][ T5716] usb 5-1: config 140 interface 182 altsetting 22 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 557.835618][ T5716] usb 5-1: config 140 interface 182 has no altsetting 0 [ 557.861433][ T5716] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 557.889337][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.923947][ T5716] usb 5-1: Product: syz [ 557.936653][ T5716] usb 5-1: Manufacturer: syz [ 557.951968][ T5716] usb 5-1: SerialNumber: syz [ 558.706463][ T5716] usb 5-1: reset high-speed USB device number 110 using dummy_hcd [ 559.130370][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 559.197612][ T5635] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 559.383983][ T5635] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.393957][ T5635] usb 4-1: config 0 interface 0 has no altsetting 0 [ 559.406592][ T5635] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 559.416093][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 559.439552][ T5635] usb 4-1: Product: syz [ 559.443885][ T5635] usb 4-1: Manufacturer: syz [ 559.448950][ T5635] usb 4-1: SerialNumber: syz [ 559.466707][ T5635] usb 4-1: config 0 descriptor?? [ 559.478140][ T5635] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 559.495371][ T5716] usb 5-1: unable to get BOS descriptor or descriptor too short [ 559.503586][ T5635] pctv452e: pctv452e_power_ctrl: 1 [ 559.503586][ T5635] [ 559.621893][ T5716] usb 5-1: device firmware changed [ 559.644280][ T5716] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 559.655753][ T5716] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 559.676106][ T5635] dvb-usb: bulk message failed: -22 (5/0) [ 559.715935][ T9] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 559.734003][ T5716] usb 5-1: USB disconnect, device number 110 [ 559.742113][ T5635] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 559.766089][ T9] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 559.777528][ T12] net_ratelimit: 26 callbacks suppressed [ 559.777548][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 559.840438][ T9] ------------[ cut here ]------------ [ 559.847502][ T9] !atomic_read(&kn->count) [ 559.847530][ T9] WARNING: fs/kernfs/dir.c:560 at kernfs_get+0x72/0x90, CPU#0: kworker/0:0/9 [ 559.861013][ T9] Modules linked in: [ 559.866459][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.877356][ T9] Tainted: [L]=SOFTLOCKUP [ 559.881752][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.892239][ T9] Workqueue: events request_firmware_work_func [ 559.898630][ T9] RIP: 0010:kernfs_get+0x72/0x90 [ 559.903590][ T9] Code: e8 03 9f 52 ff 48 89 df be 04 00 00 00 e8 36 26 c0 ff f0 ff 03 eb 05 e8 ec 9e 52 ff 5b 5d e9 c5 42 43 09 cc e8 df 9e 52 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35 [ 559.923418][ T9] RSP: 0018:ffffc900000e76b0 EFLAGS: 00010293 [ 559.929875][ T9] RAX: ffffffff8273d2a1 RBX: ffff88802a3e5780 RCX: ffff88801daadd00 [ 559.938022][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.946046][ T9] RBP: 0000000000000000 R08: ffff88802a3e5783 R09: 1ffff1100547caf0 [ 559.954164][ T9] R10: dffffc0000000000 R11: ffffed100547caf1 R12: 1ffff110054bd955 [ 559.958959][T12823] ALSA: mixer_oss: invalid OSS volume '' [ 559.962203][ T9] R13: 1ffff110054bd956 R14: ffff88802a5ecab0 R15: ffff88802a5ecaa8 [ 559.975935][ T9] FS: 0000000000000000(0000) GS:ffff888125223000(0000) knlGS:0000000000000000 [ 559.984968][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.991643][ T9] CR2: 0000001b34a23ffc CR3: 00000000668cc000 CR4: 00000000003526f0 [ 559.999751][ T9] Call Trace: [ 560.003196][ T9] [ 560.006168][ T9] kobject_add_internal+0x6b9/0xcd0 [ 560.011651][ T9] kobject_add+0x163/0x240 [ 560.016139][ T9] ? rcu_is_watching+0x15/0xb0 [ 560.021253][ T9] ? __pfx_kobject_add+0x10/0x10 [ 560.026246][ T9] ? __kmalloc_cache_noprof+0x150/0x660 [ 560.032010][ T9] ? kobject_init+0x7f/0x1e0 [ 560.036654][ T9] get_device_parent+0x316/0x3a0 [ 560.041823][ T9] device_add+0x2d4/0xb80 [ 560.046294][ T9] firmware_fallback_sysfs+0x2dd/0xa40 [ 560.051858][ T9] ? kfree+0x1c5/0x640 [ 560.055998][ T9] _request_firmware+0x1049/0x1780 [ 560.061236][ T9] ? __pfx__request_firmware+0x10/0x10 [ 560.066744][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 560.072596][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 560.078407][ T9] request_firmware_work_func+0xac/0x2d0 [ 560.084253][ T9] ? rcu_is_watching+0x15/0xb0 [ 560.089188][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 560.094981][ T9] process_scheduled_works+0xa8e/0x14e0 [ 560.100790][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.106836][ T9] ? assign_work+0x3cf/0x5d0 [ 560.111554][ T9] worker_thread+0xa47/0xfb0 [ 560.116220][ T9] kthread+0x388/0x470 [ 560.120377][ T9] ? __pfx_worker_thread+0x10/0x10 [ 560.125537][ T9] ? __pfx_kthread+0x10/0x10 [ 560.130228][ T9] ret_from_fork+0x514/0xb70 [ 560.134903][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 560.140095][ T9] ? __switch_to+0xc89/0x1420 [ 560.144893][ T9] ? __pfx_kthread+0x10/0x10 [ 560.149692][ T9] ret_from_fork_asm+0x1a/0x30 [ 560.154683][ T9] [ 560.158032][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 560.165342][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.176044][ T9] Tainted: [L]=SOFTLOCKUP [ 560.180398][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 560.190574][ T9] Workqueue: events request_firmware_work_func [ 560.196786][ T9] Call Trace: [ 560.200098][ T9] [ 560.203063][ T9] vpanic+0x56c/0xa60 [ 560.207121][ T9] ? __pfx__printk+0x10/0x10 [ 560.211771][ T9] ? __pfx_vpanic+0x10/0x10 [ 560.216312][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 560.221654][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 560.226899][ T9] panic+0xc5/0xd0 [ 560.230657][ T9] ? __pfx_panic+0x10/0x10 [ 560.235298][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 560.240286][ T9] __warn+0x315/0x4c0 [ 560.244301][ T9] ? kernfs_get+0x72/0x90 [ 560.248659][ T9] ? kernfs_get+0x72/0x90 [ 560.253019][ T9] __report_bug+0x331/0x530 [ 560.257629][ T9] ? kernfs_get+0x72/0x90 [ 560.262005][ T9] ? __pfx___report_bug+0x10/0x10 [ 560.267079][ T9] ? up_write+0x1d5/0x4a0 [ 560.271468][ T9] ? kernfs_add_one+0x480/0x5e0 [ 560.276361][ T9] ? kernfs_get+0x72/0x90 [ 560.280727][ T9] report_bug+0x16a/0x220 [ 560.285120][ T9] ? kernfs_get+0x72/0x90 [ 560.289483][ T9] ? kernfs_get+0x74/0x90 [ 560.293846][ T9] handle_bug+0x9c/0x200 [ 560.298126][ T9] exc_invalid_op+0x1a/0x50 [ 560.302668][ T9] asm_exc_invalid_op+0x1a/0x20 [ 560.307556][ T9] RIP: 0010:kernfs_get+0x72/0x90 [ 560.312526][ T9] Code: e8 03 9f 52 ff 48 89 df be 04 00 00 00 e8 36 26 c0 ff f0 ff 03 eb 05 e8 ec 9e 52 ff 5b 5d e9 c5 42 43 09 cc e8 df 9e 52 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35 [ 560.332165][ T9] RSP: 0018:ffffc900000e76b0 EFLAGS: 00010293 [ 560.338274][ T9] RAX: ffffffff8273d2a1 RBX: ffff88802a3e5780 RCX: ffff88801daadd00 [ 560.346280][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.354367][ T9] RBP: 0000000000000000 R08: ffff88802a3e5783 R09: 1ffff1100547caf0 [ 560.362369][ T9] R10: dffffc0000000000 R11: ffffed100547caf1 R12: 1ffff110054bd955 [ 560.370396][ T9] R13: 1ffff110054bd956 R14: ffff88802a5ecab0 R15: ffff88802a5ecaa8 [ 560.378407][ T9] ? kernfs_get+0x71/0x90 [ 560.382782][ T9] kobject_add_internal+0x6b9/0xcd0 [ 560.388029][ T9] kobject_add+0x163/0x240 [ 560.392481][ T9] ? rcu_is_watching+0x15/0xb0 [ 560.397291][ T9] ? __pfx_kobject_add+0x10/0x10 [ 560.402277][ T9] ? __kmalloc_cache_noprof+0x150/0x660 [ 560.407960][ T9] ? kobject_init+0x7f/0x1e0 [ 560.412604][ T9] get_device_parent+0x316/0x3a0 [ 560.417591][ T9] device_add+0x2d4/0xb80 [ 560.421974][ T9] firmware_fallback_sysfs+0x2dd/0xa40 [ 560.427467][ T9] ? kfree+0x1c5/0x640 [ 560.431583][ T9] _request_firmware+0x1049/0x1780 [ 560.436765][ T9] ? __pfx__request_firmware+0x10/0x10 [ 560.442263][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 560.448023][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 560.453814][ T9] request_firmware_work_func+0xac/0x2d0 [ 560.459483][ T9] ? rcu_is_watching+0x15/0xb0 [ 560.464291][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 560.470055][ T9] process_scheduled_works+0xa8e/0x14e0 [ 560.475673][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.481711][ T9] ? assign_work+0x3cf/0x5d0 [ 560.486348][ T9] worker_thread+0xa47/0xfb0 [ 560.491003][ T9] kthread+0x388/0x470 [ 560.495106][ T9] ? __pfx_worker_thread+0x10/0x10 [ 560.500255][ T9] ? __pfx_kthread+0x10/0x10 [ 560.504879][ T9] ret_from_fork+0x514/0xb70 [ 560.509510][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 560.514657][ T9] ? __switch_to+0xc89/0x1420 [ 560.519466][ T9] ? __pfx_kthread+0x10/0x10 [ 560.524090][ T9] ret_from_fork_asm+0x1a/0x30 [ 560.528905][ T9] [ 560.532128][ T9] Kernel Offset: disabled [ 560.536473][ T9] Rebooting in 86400 seconds..