last executing test programs: 6m37.133717568s ago: executing program 4 (id=2257): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 6m37.061976334s ago: executing program 4 (id=2258): r0 = socket$tipc(0x1e, 0x5, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="4274ad561520c61073343ea855b94146d57648b3ea550ce6161dbc7d21957d0a3a27445129a34cd65d69159b042705fe5d6501008e6a31aff974cd0470fe3140116a05e7938b8dcbaa84f229780558d1711bbe0aef0a8cdab9668332fbcefdfba64bd4de5e37e47a99f6a4c5698dcdeb17266d93cb9cc30755cdc54fa462c2083aa46b78674eb5e11452a5fe71255e3f8853cb5b10403c23aaeb3ceab806583208d486a9acc073", 0xa7}, {&(0x7f00000000c0)="8044de3b668ca707cb51ccf3615a45280aadab1a40b21a271d668ebb95fdc31290e08bf4d0659bab69ad49e73f52988545815acafaef9c769f8fc942e1f50dbe404fec030177bcf66e72c0b58e22cec7a08424d3dca06629dead3e10f4f9928ec0540495a2ea50e026f3bb630f5618ef31dba9ef3e8328ff32596f30affd", 0x7e}, {&(0x7f0000000140)="d1ca729a9859ca20eee493f5eb78a0b367600cee923757ec4babd5340daaa8abe561e9bc8ee465476d1246d11738b40d74b6656df6c085ca683c8e85981d9d65f0843a6ad3ed031fc4d03ce6a92e5379a62387cedd2154911070b89e6d8632c48eb30aa4abba772bfd243ac19d27af2e13559bd8762e3abf8b000fabaf1f8647072a0c04a2942eafca237789ea7697b92ed041a993ec785dea181c03870b9bc0d3e4969658fc7d858f30456ba709e1c3e60038d00ed4e81443457de0923f4db3c3a2de781252212026bf6147ae043467d9b95044f6c082df7247bf0d9c624180", 0xe0}, {&(0x7f0000000240)="7220336d8d65098788282c089ae15ec604a3d240ff0ed9dbc2cd5006cd1ed3bb6de35854753bb2f21fda8457daa77866ae0c782948d47ceee9904bb3a720b74ee44091e06b8dcdf5f662e32dbd9b33ec90ff0291bb5c8dd857444c765d632df8ab436d0838b5be49", 0x68}, {&(0x7f00000002c0)="da1b86850244a4fa315548671d12431244ef7dcd29862c432255207aa26897e15336358ce54ab516bf5ebe89b1066c221ad9a719ae6d4992ec44af958de96416a2b942d62707aaee680d0e0108f223e01b5c22bb9e2dc0b95a0b2986db245955d1ea6536a69fd1fd68f6eddde6277ffaafe0350b5f7758619f43248481a18a7d7b386bc9fb1180e7d9cacde73240502d857846141fdcebfe8bd4ab66a91952c46cee2c02e21a8d4851d31c209e854c3bbde825d62f", 0xb5}], 0x5) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x3b, 0x0, @thr={&(0x7f0000000400)="a6c6aa79de6b02e69c08890a11b858eb37cbf494ef4b6a6f8ea99dc1ef89f1a382c230d5d7e1df288477c09d2f6f337d5206526c7cd443a062a8e56d464a5a96abe5f8209b9e6f1a2039dc5d088ae4c6ac5089bcbbbd832f6e01f5aeb0133f8d39971e49742e1b5d2d70055ac93f20308e8f0c86a42ecf5d54813d1a2607027b933e7c40faf4ae0d2cdd4ae7b2207759c17faa8a7b4e154a6a7ce22548aa8b195f9e6fda52594828651b289f844f2f28c235d0e4d5a692212a43332f31c111c4836277cd9e", &(0x7f0000000500)="96a3ee45711cb7e7e6b34888bdb2c9635c75ecc86a3125ee8540d3c2993a160acee104628c458f2efea3e95ea63d0088637f33c7d6ab6ca806592a0661e0fd2b7a1ea3a1c542ed61009e6017ee709eeee259e4c897a673fad8d4d83366b423b8f7d5973126e91c918c85e1883579a922de375e52826a7f76019b26c1bf4fd429b9dc159b0548cba2343d234ca72c13c8b7ee9c28c5ee543e8be7649e6efd4d9eefbc3bf7eb119341fd286d84ae4877"}}, &(0x7f0000000600)=0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000680)={{r2, r3+60000000}, {0x0, 0x3938700}}, &(0x7f00000006c0)) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000700)={{0x2e, @remote, 0x4e20, 0x3, 'lc\x00', 0x20, 0x0, 0x58}, {@empty, 0x4e24, 0x0, 0x1, 0x6, 0x5e}}, 0x44) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000780)=0x9) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000007c0)={[0x1ff]}, 0x0, &(0x7f0000000840)={r6, r7+10000000}, 0x8) (async) r8 = creat(&(0x7f0000000880)='./file0\x00', 0x45) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000008c0)={0x0, 0x69e, 0x1, [0x40]}, &(0x7f0000000900)=0xa) (async) r9 = socket$inet(0x2, 0xa, 0x6) (async) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa506, 0x47}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x916}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) r10 = getpid() ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000a40)=0x0) kcmp(r10, r11, 0x1, r0, r5) (async) setitimer(0x1, &(0x7f0000000a80)={{}, {0x0, 0x2710}}, &(0x7f0000000ac0)) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) (async) lseek(r9, 0x82, 0x0) (async) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000b80)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000c00)={0x5, 0x0, &(0x7f0000000bc0)=[r9, r8]}, 0x2) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) timerfd_gettime(r13, &(0x7f0000000c80)) (async) getpriority(0x2, r12) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) (async) writev(r13, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="727556cf49b28b2aab1b634ca4629ffae0a4de1b7d70a8837f01604ae9ac24ab6ab420932d9ba305d7fa24c191d305b5c5104a457e789a29efce964cb76ebd732e226de3b12176fd227209b2de3b9511ef42fb14e135d45948d3e9136a17424237dd2842c2870f6a928ae1d7c82f8e3df3c4cd68684fca4f031ddbc50bef6a415f950986ee9ee1ac509b7742ed46feb0db963629da2de3008614", 0x9a}, {&(0x7f0000000e00)="bb84b0572cace602ed542bb269f958654ad46635914d47c99d3fea6cef867a355be36e28e12806b07cf2c49f14d86bf9ba8d6124ea09d835ab25fe7488fa80f50cdd80411ab5fc6583ebc32f051a1fd9800d41feb324b26f20a4c2c0e959cf2ea96de741984e7bb595ea8dcc768a9f7526989bf14e6ee389b16fb8c2061849c1a79a62b93ae739aca510edd2f9", 0x8d}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f0000000f40)={&(0x7f0000000f00)=[0x0, 0x0, 0x0], 0x3, 0x40800, 0x0, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f0000000f80)={0x87, @rand_addr=0x64010101, 0x4e21, 0x4, 'sh\x00', 0x18, 0x8, 0x48}, 0x2c) 6m36.936561766s ago: executing program 4 (id=2259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200), &(0x7f0000000240)=0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002080)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x48040) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x4c, 0x1, 0x1, "08000000ff0b57e386b7080000000d0000004d00", 0x32314142}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0x6, 0x8081}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r5, 0x2}, &(0x7f00000000c0)=0x8) 6m36.837943378s ago: executing program 4 (id=2260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m35.380018173s ago: executing program 4 (id=2270): pipe2(0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002080), 0x80000, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000001700)=ANY=[@ANYBLOB="7f454c46b9040000ff7f08000000f0ff02003e00ecffffff98030000000000004000000000000000520000000000000000000000000038000100feff020000000300000005000000ffffffffffffff7f0d20000000400000c8010000000000007f0000000000000000"], 0x78) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000140)={0x180801400, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r7, 0x0, 0x0, 0x13, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xe, 0xffe0}, {0x2, 0x1}, {0xc, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004b090}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00050000000500010004"], 0x4c}}, 0x0) 6m35.103626428s ago: executing program 4 (id=2274): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2480ff001a0001002cbd7000000000000a"], 0x24}}, 0x0) 6m34.852165932s ago: executing program 32 (id=2274): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2480ff001a0001002cbd7000000000000a"], 0x24}}, 0x0) 2m18.375118137s ago: executing program 0 (id=3469): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x3d9}, {&(0x7f0000002b40)="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", 0x1db}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x300, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) 2m18.191462173s ago: executing program 0 (id=3472): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m17.892606737s ago: executing program 0 (id=3473): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885) epoll_create1(0x80000) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000140)=0x4) read$dsp(0xffffffffffffffff, &(0x7f0000000200)=""/25, 0x8a) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) r6 = dup2(r4, r4) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r7 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, 0x0, 0x0) 2m9.053904271s ago: executing program 1 (id=3504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f0000000200)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4091, 0xffb}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0xfbfffffa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0xffffffffffffffe9) sendto$inet6(r6, 0x0, 0x0, 0x26041045, &(0x7f0000b63fe4)={0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB], 0xe8}}, 0x0) 2m5.904874299s ago: executing program 3 (id=3509): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18, 0x101d0}}, 0x10, 0x0}, 0x0) 2m5.663576312s ago: executing program 3 (id=3510): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4e, 0x0, &(0x7f0000000400)={0x0, 0x4, [0xd93, 0xc9b, 0xac0, 0x738]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sysinfo(&(0x7f00000015c0)=""/4096) r1 = io_uring_setup(0x1ca5, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$midi(0x0, 0x38, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x8, 0xe0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xa, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x3, 0x9, 0x81, {0x5, 0x25, 0x1, 0x1, "c3"}}}]}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m5.577086108s ago: executing program 1 (id=3511): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005780)=@newtaction={0x342c, 0x30, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{0x1040, 0x1, [@m_mirred={0x1c4, 0x14, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x5, 0x20000000, 0x9, 0x4}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x6, 0x1, 0xb289}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x81, 0x5, 0x1, 0x4}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x3, 0xffffffffffffffff, 0x2, 0x9}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x3, 0x2, 0x2}, 0x4, r5}}]}, {0xf7, 0x6, "2134da0be381076845e64e8f24f18edb14ef549693995517f7100810580ace55ac13536c1878e5dc74dff0833cb288905de10fca6d4967d61594ca398fa7ce499455dafb46de2dbf48c90b457ca4f847d5c8902d570e894a2e277fc676a4150ab2362bb513616c389c48bda26ce34ed9f52df2035c31b2db94c79111d1bf753f2c1f6604941662012c067289065611282e8080ff28eefe25dbc9d5f5d8a4bb1d71d783fdd731b8466c186ed46e976b99da165cad696e166cfa5c7774249f9dcaf97c91f4ae156baafc4f00e1a5238e9f59cffc878803189561579e49695c3eb4818e607006b2de09c4239b802da6e804af32d0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x174, 0x6, 0x0, 0x0, {{0x7}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xcc, 0x6, {0xfff9, 'raw\x00', 0xef, 0x2, "507bc353fc3fd135f08c28cc3c4e5ddf01fdbe674438b1066956d1ea9fa2ecdc921f5deab18b274c83eb17e74bbcc3095aec92c6e1138f3d7b210e133583e106241be48eaa71c4fc47cdd7eeac3e7901e46c4d871b901c646d92bddade32d26cf0a74525e77151e660bdf2406bf09adcae6baff776cc097367d3a014500a47ebfa88605cb1f48631e72e48b421bcaf1cd27112c260d1d4bf2bed7b26e1f0053b718b"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xaf6f}]}, {0x49, 0x6, "09683cf619558bae763d026edf49b30f3e2b5adecb639163911f537ac5b5fdb5f5680e96825080fba7dd34415deee62cd6861b21ba1e694e9fed45837aabee10b670d34593"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x13c, 0xe, 0x0, 0x0, {{0xffffff1b}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe26, 0x10000, 0x6, 0x1, 0x6}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x20000000, 0x2, 0x9}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x6, 0x3f, 0x10000}, 0x2, r5}}]}, {0xad, 0x6, "dec837f3b8f8b752582ece7751ffe87e397df66224145d8e021b991eaf321533857e5c92854e876c27af8bcb9573248836ff411b0441a15258a78898924cf1f1d398d2328389d99836220ff69a3182503ab99ee5d3c7cf8c122a3bea2e40494ba1303db871cc6c46eac7978fe2d8c161868704229e23bc391b10991509ccc6c6633ba64def8053eb40316fa00f2a718232ca4f5e560be646acb5fe8f56a65e34ce8b634248da7e2b19"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xcc, 0x1c, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x80000000, 0x3, 0x1, 0x8d2}, @empty, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3ff, 0xfffffffffffffff8, 0x9, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xe, 0x1, 0x61, 0xff}, @multicast1, @local, 0x0, 0x1}}]}, {0x2b, 0x6, "bdb0e46d87379f89f6e46c5132fb6576ef65789a2f57e6b7b56b03ec3648534ec7f1f18f25185f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x160, 0x5, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xf}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffffffff}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xde, 0x6, "26e5a5b46288a313c76160296d7e40d7bed8bf749b59b03b77cf9ca618dd7eb6c6d56dcaff095ef71ca0931bd566630caa2e02c2568ab965c79fb92d33b13af614cee895cb437958e11fb1bea699025797ef5a91de784a39263af2522308f5be37e0a4fa250da48ba3ed0f82b26a8c03efb8e939f5dc856d6b6345622374df5fd2fe4dde731cc94ae608b205f8f80c972e5fcd80aa5b7dd6fc337c2bae830bd526bb2a1af6badbf5fdeb44f2775dfce2ed7622dd31ce034666ae15cd5a8bb4d3bca1b58653cdb99ae0de74021bc679e89f6a4632b43874faff6f"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x128, 0x13, 0x0, 0x0, {{0xc}, {0x4}, {0xfb, 0x6, "c0eb3e68bc52ce9dc5034312bcd8e14c58e3a2c29d338251f3fffb334372bb79b7a522e52cd990e0d549687512b233accc3e13ebde58620d3ba036b35ca4562b24bf9e8a530d3f30fab1566d12cf648c6f8329b87cc80fd54d73ddf43c92bcf5059bb8e92d110893d1c0c780cca37663223be04c8311f916bba0037556af47970e1ee00bb8e544b533c9c9e24fddf57d36d5ca119f5f3aeebd5ebcd12cfdb9e4609836bbaa5e1c9f966c28b5416bec50bc8da7b5e399a3e225ca671757942ea0075c80a4133ac74d02c28b8a8662b79722c311c39bfcae473469a06d10e749467c3b4be4ae69b5fb5829b82820bf5f51897faddf7b2f8a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x328, 0xb, 0x0, 0x0, {{0x7}, {0x290, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xb5}, @TCA_IPT_TARG={0xda, 0x6, {0xff4f, 'security\x00', 0x6, 0x5, "38b2f39382556935742f8df9eec3017755888470a623196c0b2e630de31a6fb0037ed292db1ebf9c6d379239899eedf6b213bb6d4559683df56975cabf58d71f86ced981764322c46e8eb424cfd721a88ebacbcc35a8f6f866ef0b08698ef4f28b0316c5a410b3582e7a6e03261aaaa59c83dcd80150d483bada91c37b3ce0771187a6c11e8bd6708f14bc901bcfa8f2fac92ef18fe77669446374f40046210a6a94cff21204ad250b0452c9e77c8fcd"}}, @TCA_IPT_TARG={0x122, 0x6, {0xa269, 'raw\x00', 0x9, 0x6ae1, "277eedf1d9066d5d8f82df40aec63cbc32acee42f9164a096aa2b4c2a131e8bdf21e7da2b91f7c180c3910e7cf1365b335be82265992d83848e02ce2222cd80ca91741ca7ed578f7d795114216c088719bb16035f9a67b836cda678b2784e60830c8464840e4531cfa513171d01904d04d757d4659bf4e5ba3f9b50c93208d356949ace45eb7c88bd8e355f228fafe374d8854eab863073eaa29e589b45cf5a7c053bb05fb1ed5d78c25dd57ce919daae3739ebc9eb23e7ddb76a683ca52e8afa486f4c5bbc7bb6f8b00dbb3650c4b925a2c6f072ce9878cae6113732328c40d2bbbf180270a2a3b1ac84619125cc0e0719d5f2970d47732"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x73, 0x6, "74c292c37422f3bb676bd199ad2c9f568aadc701c5dae4b917445ed4f597447ea51b8b9fdcd0ff8cdd11fb860106272d86dc17d41cecd6ad3cfda4821cf824d450a7b8d4a62ab54b592b364caaceca6a04edae3bb8579218fe37322b0cc39def50bd44b3ea24b48c3cbae1fae49752"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x84, 0x19, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x7}}]}, {0x4f, 0x6, "4e876db778f236d816a0df6e8550ecbd7c077dd1780abe3a1b5c3e48dd25008847edba33d56c5cf57e74143e254cb257a1b289ab0c78f34ea8248c96c44c84dd569ee4897bd2f8f416ad18"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x4c8, 0x4, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xb35, 0x1, 0x9b, 0xdb, 0xd, 0xcb3, 0x5, 0x80000000, 0x65, 0x0, 0xea, 0xfffffffd, 0x9, 0x8, 0x0, 0xe, 0xf, 0x1000, 0x1, 0x3a, 0x688, 0x8, 0x8000, 0x401, 0x6c01, 0x2, 0x9, 0xb, 0x525d, 0x2, 0x5, 0xffff78ad, 0xfffffff8, 0x100, 0x85e3, 0x7, 0x9f, 0x6, 0x401, 0x0, 0xad, 0x0, 0x28e, 0xa, 0x8001, 0x6, 0xfffffff8, 0x80, 0x7, 0xf, 0x10db2000, 0x1, 0x6, 0xf45a, 0x8, 0xe834fa5e, 0x100, 0x6, 0x9, 0xa, 0x5, 0x0, 0x6, 0x9, 0x6, 0x3, 0x7, 0x10001, 0x6, 0x7, 0xd77, 0x800, 0x1, 0x1, 0x1, 0x10, 0x2, 0x0, 0x9, 0x7f, 0x101, 0x6, 0x0, 0x6, 0x6, 0xff, 0x526f, 0x80000001, 0x79a1, 0x5, 0x2, 0x1, 0xffff, 0x8, 0x2, 0x3, 0x3ff, 0x5, 0x6, 0x2, 0x3, 0x1, 0x8, 0x4, 0xa376, 0x8, 0x0, 0xffffff01, 0x10, 0x4e000000, 0x1000, 0xfff, 0xd, 0x3, 0x4, 0x4a18, 0x3, 0xffffffff, 0xfff, 0x7, 0xfffffffd, 0x7, 0x3a2, 0x4, 0x4, 0x5, 0x3, 0xc9, 0x8, 0x262f, 0x6, 0x5, 0xffff073e, 0x3ff, 0xff, 0x7f, 0x8, 0xfffffffd, 0x4, 0xffffffff, 0x4, 0x0, 0xe5df65, 0x2, 0x2, 0x80000000, 0x0, 0x44bb, 0x5, 0xc, 0xe1a6, 0xada6, 0x7, 0xfffffff7, 0x5, 0x9, 0x1ff, 0x401, 0x200, 0x7, 0x5, 0x7, 0x2, 0x80, 0xfff, 0xfffff7c3, 0xfffffffb, 0x0, 0x7, 0xa, 0x100, 0xe, 0x4, 0xc97, 0xcce, 0x5, 0x4, 0x32f, 0x5, 0x6, 0x5, 0x2, 0x58000000, 0x5, 0x5, 0x4, 0xff, 0xe0, 0x0, 0x0, 0x159, 0x0, 0x80000001, 0x10000, 0x2, 0x8, 0x5, 0x9, 0x13ea, 0x0, 0x1, 0x4, 0x7, 0x8000, 0x4, 0x4, 0xf1fe, 0x4, 0x6, 0x2, 0x6, 0x0, 0x200, 0x5eb43322, 0x5, 0x8b43, 0x7, 0x200, 0x1, 0x6, 0x401, 0x105, 0x98, 0x5, 0xfff, 0x7ff, 0x7, 0x7, 0x100, 0x9, 0x8, 0x10000, 0x6fe7, 0x1, 0x7, 0xf, 0x8, 0x7, 0x6, 0x1, 0x5, 0xf, 0xa46, 0x7, 0x3, 0x8000, 0x0, 0x1000, 0xe, 0x2558, 0x9, 0xffd, 0x5, 0x3, 0x4000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xe9b, 0x0, 0x2, {0x8, 0x0, 0x8, 0x200, 0x3, 0xd}, {0x5, 0x2, 0xf000, 0xc, 0x3ff, 0x39a343a4}, 0x4, 0x8, 0x909}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x31000}]]}, {0x4f, 0x6, "1ccd172a5c3818b2c4cbf5eb3c9b1458805b98c8db7a85509f8a3257e646ae8bb9b1d3e09fedd551b4ea8e950cb0d614b19a1e017ca8083413af2f18a260d0e069ff06ee62718ffc8dbc0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x121c, 0x1, [@m_mpls={0x1088, 0x17, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x10000000, 0x3ff, 0x7}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x6b2, 0x4, 0x4, 0x8}, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xb8, 0x19, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x10000000, 0x6, 0x9}, 0xe6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x10000000, 0x80000001, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x1, 0x3, 0xff, 0x7f}, 0xfffd}}]}, {0x32, 0x6, "e65b7594f9e778e7fff3fb3425ad0b7b2181e5cf9c94caed623b4dddab26cb92dc45b91405293d0a9fc629b46a2e"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0xd8, 0x6, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8, 0x7, 0x0, 0xffffff41}, @loopback, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x383, 0xff, 0x6, 0x3b8137fd, 0x9}, @private=0xa010101, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x60, 0x6, "e3bde8d966883b1393586ed2037a3dd42476aa27204bea72cd931beb1024bc2a125aeadbf9bda47ef10d54d76dac2fcb14d8d23df7910ad7b0ad05219c9451330c04d3b4a1ab6263a4891baec9559744aeceabb3fcca6b928662140c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x11bc, 0x1, [@m_csum={0x1084, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x101, 0x10000000, 0x4, 0x3}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0xffffffffffffffff, 0x2c23e7f5, 0x8}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7fff, 0x2, 0x7, 0x1b8f}, 0x5f}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xa0, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x0, 0x0, 0xd}, 0x64}}]}, {0x57, 0x6, "e3283575806d6260f38a76c34fe42109a834e7b762a5223e1e7539174c7a076abe0f309b245c0f4c503746b223f4b806beb8ea103d28cd8e750196e428bc19baaf6948c2aa4705a450483d0eac75ac1e1125f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x94, 0x9, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0xffffffffffffffff, 0x2, 0x1f}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x2, 0x4, 0x0, 0x74db}, 0xaf}}]}, {0x2c, 0x6, "3be4d5419b1f7eea6dadd51f63dbe0766a2017f1a5f833c2e9b6975b5edd619ad366dd02a284ffdb"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x342c}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) unshare(0x62040200) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15888804000700000008000dfb1048770008001b0008b500"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000000125bd7000f6dbdf2500000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) 2m4.926877727s ago: executing program 5 (id=3512): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0xf9ef, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m3.683902158s ago: executing program 3 (id=3515): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000011c0)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001080)="d19a6e", 0x3}], 0x2, 0x12, 0x0) 2m3.334782123s ago: executing program 3 (id=3516): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) syz_open_procfs$userns(r3, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) r4 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 2m2.742365422s ago: executing program 3 (id=3518): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xd8, 0x2c, 0x5f, 0x10, 0x5c6, 0x900c, 0x2714, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x70, 0x7b, "", [{{0x9, 0x4, 0x5, 0x9, 0x0, 0x79, 0xc1, 0x81, 0xf3}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) 2m0.970074788s ago: executing program 1 (id=3521): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa9, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m0.894903934s ago: executing program 0 (id=3482): r0 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000002100)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@mmap={0x40000401, 0x2, 0x4, 0x10, 0x4, {0x77359400}, {0x3, 0x0, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x3, 0x1, {}, 0x101}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x24040080) r2 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000001540)={0x1, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0xf4, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x82, 0x6, "0d671aefe5444670bd3a232bff7f28feb30391f8a8d0ba4160c5ee447209d6cf95f97ee14b99a44a97d4110be1a37a8ff793b97df9a0b18ececa0ad14475fcf68c4832d3063502a6b1c8bc2cd1285e822839a428f810b9969348eadd1c9a4e68f8195bab3e4268f0b33b30d7aad5a95bb09c49d33dbad99971fe2506c2fc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x9d, 0x6, "3013bbf2f60c75d7abbcd37d1b462d3fb298ff411e7c410627b12ecdc5e4c71a566d22c1595e5b14e76ece6027f9c5facf0c0732798d963f790e6b04830610c83c8fc9df3395a3acae99437055547ce353892413b6dc74df94e5fba340eb85dc0826339d516a8d6cbaacba04911a8a5d0677562b8e7fc0a6b99c0a5062c1b4ccde2ce0b40483fc336d525afc3426bf18acee75a9b362e67a76"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x250, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_DESC={0xf0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff094}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}]}, @NFTA_SET_DESC={0x90, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd37e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3486}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffcb52}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x50, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x564}}, 0x8000) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[], 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x521200, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000340)=0x208864, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) 2m0.807010674s ago: executing program 3 (id=3522): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2425) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0x3c) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000012006bab9a1fe3d86e17aa0a076b876c1d0048007ea60864160afb650400bd1d38001d009580472760bc06000000a705251e6182949a36510a84c9fa896e0a374841e1028b8f0b79c139977394e70e4509c5bb000011d600", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) syz_usb_connect$cdc_ecm(0x6, 0x121, 0x0, 0x0) io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20082f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000001a80)=ANY=[], 0x0) 1m59.811715968s ago: executing program 1 (id=3524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf250c0000000c009900040000000120000004002800"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x249c08d23cf5e791) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000a, 0x11, r3, 0xdd298000) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000100)={{r4}, 0x7, 0x8000, 0x9}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x29, 0x0, @local, @empty}}}}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080), 0x59}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bb0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c090003042402eb032402"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1m59.667222096s ago: executing program 5 (id=3525): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800835e000000000000000002009404fe00fe0400070000", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00&'], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x4048004) 1m59.516084166s ago: executing program 2 (id=3527): syz_usb_connect(0x1, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x66, 0x0, 0x33, 0x8, 0x1b80, 0xe302, 0x8c2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xfa, 0x1, 0x10, 0x66, "", [{{0x9, 0x4, 0x3b, 0xff, 0x3, 0xfd, 0x49, 0x4a, 0x5, [], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x9, 0xe, 0x7f, [@generic={0x7, 0x5, "c25ab7fd8a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x20, 0x1, 0xf9}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0x9, 0xe}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x40, r2, 0x400, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x5, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x40}}, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002000)=""/4082) syz_emit_ethernet(0x110, &(0x7f00000001c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@llc_tr={0x11, {@llc={0xe, 0xe, 'Q', "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"}}}}}, &(0x7f0000000300)={0x1, 0x3, [0xdb5, 0x866, 0xc0b, 0x982]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) 1m59.508472417s ago: executing program 5 (id=3528): r0 = io_uring_setup(0x410d, &(0x7f0000000000)={0x0, 0x60a4, 0x8, 0x2, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x28000, 0x2, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) unshare(0x28040680) r7 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r7, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], 0x0}, 0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2080) pselect6(0x40, &(0x7f0000000980)={0x0, 0x2, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0x4, 0xffff, 0x41}, 0x0, &(0x7f0000000a00)={0x8, 0x7, 0x690, 0x8846, 0x89b, 0x6, 0x436, 0xd}, &(0x7f0000000a40)={0x0, 0x989680}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/65, 0x41}, {0x0, 0xfffffe29}], &(0x7f0000000240)=[0x6, 0xfff], 0x2}, 0x20) 1m58.845752032s ago: executing program 5 (id=3529): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet(0x2, 0x3, 0x7f) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r1, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x40000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000001240)={0x0, @bt={0x48000000, 0x0, 0x0, 0x0, 0x60000000000000, 0x400, 0x4, 0x400, 0x4, 0xddc, 0x7, 0xad53, 0x3, 0xfe00, 0x0, 0x0, {0xfa, 0x7}, 0x7, 0xc4}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r3}) 1m58.047190713s ago: executing program 1 (id=3530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="15"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x28}}, 0x0) (fail_nth: 5) 1m57.663765602s ago: executing program 2 (id=3531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0x573485146423e6c7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3b5cc370465e24f6, 0x84}}}, 0xdc}}, 0x80) 1m57.624853659s ago: executing program 5 (id=3532): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa9, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m57.574781385s ago: executing program 2 (id=3533): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x1041, 0x3, 0x3}, 0x6c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x59, 0x3, r8, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000480)}) close(r2) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r10, 0x1, 0x0, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r9, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) 1m57.536724284s ago: executing program 0 (id=3534): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa9, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m57.444252846s ago: executing program 1 (id=3535): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e0000000030801020000000000000000050000003c000480080001400000000308000140000000080800014000000fff08000140000000800800014000000003080001400000000508000140ffffffff44000480080007400000000e0800024000000001000000000000000508000340000000100800034000000007080002400000000008000740000000020800014000000001440004800800034000008001080001400000000908000140000000090800064000008e2f08000640ffffffff080002400000020008000540000040030800024000000003050003002f"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_open_dev$admmidi(&(0x7f0000000000), 0x10000000004, 0x44640) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 1m56.870117635s ago: executing program 2 (id=3537): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x2000, 0x51424752, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}}) 1m56.615653495s ago: executing program 2 (id=3538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x401, @mcast2, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000004c0)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="93ea53", 0x3}], 0x1, &(0x7f0000000440)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x18, 0x40000}], 0x1, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0xfffffffb, @private0, 0x7f}}, 0x2, 0x8, 0x10001, 0x9, 0x3}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r5, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x80000000, @empty, 0x7fff}]}, &(0x7f0000000380)=0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x3, 0x3, "c4a167be"}}}}, 0x3e) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) 1m55.943983545s ago: executing program 0 (id=3539): r0 = io_uring_setup(0x410d, &(0x7f0000000000)={0x0, 0x60a4, 0x8, 0x2, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x28000, 0x2, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) unshare(0x28040680) r7 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r7, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], 0x0}, 0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2080) pselect6(0x40, &(0x7f0000000980)={0x0, 0x2, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0x4, 0xffff, 0x41}, 0x0, &(0x7f0000000a00)={0x8, 0x7, 0x690, 0x8846, 0x89b, 0x6, 0x436, 0xd}, &(0x7f0000000a40)={0x0, 0x989680}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/65, 0x41}, {0x0, 0xfffffe29}], &(0x7f0000000240)=[0x6, 0xfff], 0x2}, 0x20) 1m55.757498926s ago: executing program 5 (id=3540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000200081dc28bd70000300000002000000000000000200000008000a0004"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) 1m55.255442638s ago: executing program 2 (id=3541): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x2}, &(0x7f0000000a80)="dfbf71e2065c30000230526b1f9859ef99ae9243580bb5a2d676bd5470740c51b49f0fbf71e60707bcea134f95eae41ef2771bd5fb0bf7d26b29e9312e3ef290d6442acfce312faf6e3911766935380cf63f7f1fc209d0134098935f637e80a03c286fe69db501f0a32fe32a03db3faa6becc431", 0x74, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "7a7b0580b9890432df899b21ad2303c08e94fd478951eea4acd454bb557aa532ea5eab2fab6efbbb05e9fbc28dfcb32cf9b73b70b779d1b66f99ed14c7781fb72034abd411a3ea22b326cad54941bad638673ea64468ae55315a7a27ae7fc757b77918afef01af231a0ecb8bc23b12c1c014f869b862db7cf0426885b5f307b01ba679b609c96132a7f1c078c6941948a35dcd9141604425cae6c999db33"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x400, 0xbffffffe, 0x100, {{@in=@rand_addr=0x1000, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x9, 0x8251c, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, {0x6, 0xfffffffffffffffe, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r9, r8, 0x0) 1m25.456881242s ago: executing program 33 (id=3539): r0 = io_uring_setup(0x410d, &(0x7f0000000000)={0x0, 0x60a4, 0x8, 0x2, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x28000, 0x2, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) unshare(0x28040680) r7 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r7, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], 0x0}, 0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2080) pselect6(0x40, &(0x7f0000000980)={0x0, 0x2, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0x4, 0xffff, 0x41}, 0x0, &(0x7f0000000a00)={0x8, 0x7, 0x690, 0x8846, 0x89b, 0x6, 0x436, 0xd}, &(0x7f0000000a40)={0x0, 0x989680}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/65, 0x41}, {0x0, 0xfffffe29}], &(0x7f0000000240)=[0x6, 0xfff], 0x2}, 0x20) 56.069050811s ago: executing program 34 (id=3535): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e0000000030801020000000000000000050000003c000480080001400000000308000140000000080800014000000fff08000140000000800800014000000003080001400000000508000140ffffffff44000480080007400000000e0800024000000001000000000000000508000340000000100800034000000007080002400000000008000740000000020800014000000001440004800800034000008001080001400000000908000140000000090800064000008e2f08000640ffffffff080002400000020008000540000040030800024000000003050003002f"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_open_dev$admmidi(&(0x7f0000000000), 0x10000000004, 0x44640) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 0s ago: executing program 35 (id=3541): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x2}, &(0x7f0000000a80)="dfbf71e2065c30000230526b1f9859ef99ae9243580bb5a2d676bd5470740c51b49f0fbf71e60707bcea134f95eae41ef2771bd5fb0bf7d26b29e9312e3ef290d6442acfce312faf6e3911766935380cf63f7f1fc209d0134098935f637e80a03c286fe69db501f0a32fe32a03db3faa6becc431", 0x74, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "7a7b0580b9890432df899b21ad2303c08e94fd478951eea4acd454bb557aa532ea5eab2fab6efbbb05e9fbc28dfcb32cf9b73b70b779d1b66f99ed14c7781fb72034abd411a3ea22b326cad54941bad638673ea64468ae55315a7a27ae7fc757b77918afef01af231a0ecb8bc23b12c1c014f869b862db7cf0426885b5f307b01ba679b609c96132a7f1c078c6941948a35dcd9141604425cae6c999db33"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x400, 0xbffffffe, 0x100, {{@in=@rand_addr=0x1000, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x9, 0x8251c, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, {0x6, 0xfffffffffffffffe, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r9, r8, 0x0) kernel console output (not intermixed with test programs): : config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 751.964153][ T5708] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 751.977331][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.981233][ T10] usb 2-1: USB disconnect, device number 51 [ 751.986417][ T5708] usb 4-1: Product: syz [ 751.999695][ T5708] usb 4-1: Manufacturer: syz [ 752.004602][ T5708] usb 4-1: SerialNumber: syz [ 752.097994][T23580] usb usb3-port1: attempt power cycle [ 752.518905][T28743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.528341][T28743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.589020][T23580] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 752.603053][ T5708] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 752.613103][ T5708] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 752.679985][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 752.729560][ C0] syz_tun: tun_net_xmit 42 [ 752.939379][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 752.945275][T23580] usb 3-1: device descriptor read/8, error -71 [ 752.951342][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 752.961047][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 752.971077][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 752.982934][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.992205][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.001288][ T10] usb 2-1: Product: syz [ 753.005584][ T10] usb 2-1: Manufacturer: syz [ 753.010221][ T10] usb 2-1: SerialNumber: syz [ 753.220858][T28735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.221697][ T5708] usb 4-1: USB disconnect, device number 34 [ 753.274597][T23580] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 753.323531][T28735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.358175][ T10] cdc_ncm 2-1:1.0: bind() failure [ 753.364844][T26445] udevd[26445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.395009][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 753.409307][ T10] cdc_ncm 2-1:1.1: bind() failure [ 753.420119][T28786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.425605][ T10] usb 2-1: USB disconnect, device number 52 [ 753.454160][T28786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.496229][T28795] fuse: Unknown parameter 'use00000000000000000000' [ 753.622101][ T879] syz_tun: tun_net_xmit 90 [ 753.712758][T23580] usb 3-1: device descriptor read/8, error -71 [ 753.829917][T23580] usb usb3-port1: unable to enumerate USB device [ 753.909339][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 753.961720][T28809] ip6tnl0: Caught tx_queue_len zero misconfig [ 754.060155][ T5708] syz_tun: tun_net_xmit 90 [ 754.094003][T28735] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 754.168583][T28735] 8021q: adding VLAN 0 to HW filter on device bond7 [ 754.259870][T28735] bond7: (slave geneve2): making interface the new active one [ 754.273882][T28735] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 754.303781][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 754.318484][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 754.335013][ T10] usb 2-1: can't read configurations, error -71 [ 754.345964][T28859] binder: 28854:28859 ioctl 40044591 0 returned -22 [ 754.408350][T28862] binder: 28854:28862 ioctl c0306201 0 returned -14 [ 755.085271][T28884] syz_tun: tun_net_xmit 42 [ 755.103859][T28890] fuse: Unknown parameter 'use00000000000000000000' [ 755.396174][T28930] FAULT_INJECTION: forcing a failure. [ 755.396174][T28930] name failslab, interval 1, probability 0, space 0, times 0 [ 755.409102][T28930] CPU: 0 UID: 0 PID: 28930 Comm: syz.2.3157 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.409118][T28930] Tainted: [L]=SOFTLOCKUP [ 755.409122][T28930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.409128][T28930] Call Trace: [ 755.409133][T28930] [ 755.409138][T28930] dump_stack_lvl+0xe8/0x150 [ 755.409154][T28930] should_fail_ex+0x412/0x560 [ 755.409170][T28930] should_failslab+0xa8/0x100 [ 755.409185][T28930] ? skb_clone+0x212/0x3a0 [ 755.409198][T28930] kmem_cache_alloc_noprof+0x87/0x650 [ 755.409211][T28930] ? __netlink_lookup+0xc6/0x8b0 [ 755.409232][T28930] skb_clone+0x212/0x3a0 [ 755.409246][T28930] __netlink_deliver_tap+0x404/0x850 [ 755.409264][T28930] ? netlink_deliver_tap+0x2e/0x1b0 [ 755.409276][T28930] netlink_deliver_tap+0x19c/0x1b0 [ 755.409289][T28930] netlink_unicast+0x730/0x8e0 [ 755.409305][T28930] netlink_sendmsg+0x813/0xb40 [ 755.409321][T28930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.409335][T28930] ? aa_sock_msg_perm+0xf1/0x1b0 [ 755.409348][T28930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 755.409363][T28930] ____sys_sendmsg+0x972/0x9f0 [ 755.409376][T28930] ? __might_fault+0xaf/0x130 [ 755.409391][T28930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 755.409408][T28930] ? import_iovec+0x73/0xa0 [ 755.409423][T28930] ___sys_sendmsg+0x2a5/0x360 [ 755.409434][T28930] ? __lock_acquire+0x6b5/0x2cf0 [ 755.409446][T28930] ? __pfx____sys_sendmsg+0x10/0x10 [ 755.409478][T28930] ? __fget_files+0x2a/0x420 [ 755.409489][T28930] ? __fget_files+0x3a0/0x420 [ 755.409504][T28930] __x64_sys_sendmsg+0x1bd/0x2a0 [ 755.409518][T28930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 755.409535][T28930] ? __pfx_ksys_write+0x10/0x10 [ 755.409552][T28930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.409562][T28930] do_syscall_64+0x15f/0xf80 [ 755.409574][T28930] ? trace_irq_disable+0x3b/0x140 [ 755.409588][T28930] ? clear_bhb_loop+0x40/0x90 [ 755.409599][T28930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.409608][T28930] RIP: 0033:0x7fcdc039cdd9 [ 755.409618][T28930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.409627][T28930] RSP: 002b:00007fcdc1213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.409638][T28930] RAX: ffffffffffffffda RBX: 00007fcdc0615fa0 RCX: 00007fcdc039cdd9 [ 755.409645][T28930] RDX: 0000000004000890 RSI: 0000200000000080 RDI: 0000000000000003 [ 755.409652][T28930] RBP: 00007fcdc1213090 R08: 0000000000000000 R09: 0000000000000000 [ 755.409658][T28930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.409663][T28930] R13: 00007fcdc0616038 R14: 00007fcdc0615fa0 R15: 00007fcdc073fa48 [ 755.409678][T28930] [ 755.409706][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'. [ 755.704871][T28930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3157'. [ 755.769044][T28931] netlink: 'syz.3.3154': attribute type 1 has an invalid length. [ 755.787073][T28931] netlink: 'syz.3.3154': attribute type 2 has an invalid length. [ 755.866979][T28931] netlink: 'syz.3.3154': attribute type 1 has an invalid length. [ 755.883289][T28931] netlink: 'syz.3.3154': attribute type 2 has an invalid length. [ 756.079456][ C0] syz_tun: tun_net_xmit 42 [ 756.089907][T28938] IPVS: Scheduler module ip_vs_ not found [ 756.131178][ T5708] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 756.233036][ T879] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 756.250617][T28951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3161'. [ 756.530484][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 756.540786][T20331] syz_tun: tun_net_xmit 90 [ 756.552137][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 756.576150][ T5708] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 756.593858][ T5708] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 756.617019][ T879] usb 3-1: Using ep0 maxpacket: 8 [ 756.704624][T28958] syz_tun: tun_net_xmit 42 [ 756.846037][ T5708] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 756.862162][ T879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 756.872322][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.883096][ T879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 756.901686][ T5708] usb 2-1: Product: syz [ 756.916268][ T5708] usb 2-1: Manufacturer: syz [ 756.922818][ T879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 756.937700][ T5708] usb 2-1: SerialNumber: syz [ 756.956678][ T879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 756.972994][ T9] syz_tun: tun_net_xmit 90 [ 756.996485][ T879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.024900][ T879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 757.091100][ T879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.114225][T28965] FAULT_INJECTION: forcing a failure. [ 757.114225][T28965] name failslab, interval 1, probability 0, space 0, times 0 [ 757.128571][T28965] CPU: 0 UID: 0 PID: 28965 Comm: syz.5.3164 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.128588][T28965] Tainted: [L]=SOFTLOCKUP [ 757.128592][T28965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.128599][T28965] Call Trace: [ 757.128605][T28965] [ 757.128610][T28965] dump_stack_lvl+0xe8/0x150 [ 757.128627][T28965] should_fail_ex+0x412/0x560 [ 757.128643][T28965] should_failslab+0xa8/0x100 [ 757.128662][T28965] __kmalloc_cache_noprof+0x88/0x660 [ 757.128676][T28965] ? batadv_dat_entry_add+0x16a/0xa10 [ 757.128688][T28965] batadv_dat_entry_add+0x16a/0xa10 [ 757.128701][T28965] batadv_dat_snoop_outgoing_arp_reply+0x137/0x210 [ 757.128714][T28965] batadv_interface_tx+0xb27/0x1630 [ 757.128732][T28965] ? __pfx_batadv_interface_tx+0x10/0x10 [ 757.128744][T28965] ? dev_queue_xmit_nit+0x2d/0xad0 [ 757.128761][T28965] dev_hard_start_xmit+0x2cd/0x830 [ 757.128781][T28965] __dev_queue_xmit+0x14d9/0x3950 [ 757.128798][T28965] ? __dev_queue_xmit+0x2b6/0x3950 [ 757.128815][T28965] ? _copy_from_iter+0x21b/0x1670 [ 757.128828][T28965] ? __pfx___dev_queue_xmit+0x10/0x10 [ 757.128840][T28965] ? sock_alloc_send_pskb+0x896/0x990 [ 757.128856][T28965] ? __pfx__copy_from_iter+0x10/0x10 [ 757.128874][T28965] ? __pfx_packet_parse_headers+0x10/0x10 [ 757.128888][T28965] ? packet_xmit+0x68/0x320 [ 757.128901][T28965] packet_sendmsg+0x3c81/0x4fb0 [ 757.128916][T28965] ? __lock_acquire+0x6b5/0x2cf0 [ 757.128932][T28965] ? __lock_acquire+0x6b5/0x2cf0 [ 757.128951][T28965] ? __pfx_packet_sendmsg+0x10/0x10 [ 757.128960][T28965] ? aa_sk_perm+0x6d5/0x900 [ 757.128975][T28965] ? __pfx_aa_sk_perm+0x10/0x10 [ 757.128985][T28965] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 757.129001][T28965] ? aa_sock_msg_perm+0xf1/0x1b0 [ 757.129013][T28965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 757.129026][T28965] ? __pfx_packet_sendmsg+0x10/0x10 [ 757.129037][T28965] __sys_sendto+0x672/0x710 [ 757.129049][T28965] ? __pfx___sys_sendto+0x10/0x10 [ 757.129059][T28965] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 757.129077][T28965] ? __fget_files+0x3a0/0x420 [ 757.129093][T28965] ? ksys_write+0x242/0x270 [ 757.129107][T28965] ? __pfx_ksys_write+0x10/0x10 [ 757.129122][T28965] __x64_sys_sendto+0xde/0x100 [ 757.129133][T28965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.129143][T28965] do_syscall_64+0x15f/0xf80 [ 757.129155][T28965] ? trace_irq_disable+0x3b/0x140 [ 757.129169][T28965] ? clear_bhb_loop+0x40/0x90 [ 757.129180][T28965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.129190][T28965] RIP: 0033:0x7fa6e9b9cdd9 [ 757.129201][T28965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.129210][T28965] RSP: 002b:00007fa6ea9d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 757.129221][T28965] RAX: ffffffffffffffda RBX: 00007fa6e9e15fa0 RCX: 00007fa6e9b9cdd9 [ 757.129228][T28965] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 757.129234][T28965] RBP: 00007fa6ea9d3090 R08: 0000200000000200 R09: 0000000000000014 [ 757.129241][T28965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.129247][T28965] R13: 00007fa6e9e16038 R14: 00007fa6e9e15fa0 R15: 00007fa6e9f3fa48 [ 757.129261][T28965] [ 757.446869][ C0] syz_tun: tun_net_xmit 42 [ 757.582451][T28934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.595698][T28934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.758704][ C1] syz_tun: tun_net_xmit 42 [ 757.871784][ T5708] cdc_ncm 2-1:1.0: bind() failure [ 757.899995][ T5708] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 757.918768][ T5708] cdc_ncm 2-1:1.1: bind() failure [ 757.931841][T28966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.948393][ T5708] usb 2-1: USB disconnect, device number 55 [ 757.956522][T28966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.968640][ T879] usb 3-1: GET_CAPABILITIES returned 0 [ 757.975848][ T879] usbtmc 3-1:16.0: can't read capabilities [ 757.975880][T28986] binder: 28977:28986 ioctl 40044591 0 returned -22 [ 758.060063][T28996] binder: 28977:28996 ioctl c0306201 0 returned -14 [ 758.062144][T28966] batman_adv: batadv0: Interface deactivated: macsec1 [ 758.093981][T28966] batman_adv: batadv0: Removing interface: macsec1 [ 758.196197][T28940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3159'. [ 758.226875][T28940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.236425][T28940] IPv6: NLM_F_CREATE should be set when creating new route [ 758.282862][T20331] usb 3-1: USB disconnect, device number 34 [ 758.350246][ T5708] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 758.537040][T28934] netlink: 'syz.1.3158': attribute type 1 has an invalid length. [ 758.665747][T28934] 8021q: adding VLAN 0 to HW filter on device bond8 [ 758.748440][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 758.778070][ T5708] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 758.789439][ C1] syz_tun: tun_net_xmit 42 [ 758.804188][ T5708] usb 2-1: can't read configurations, error -71 [ 759.133576][T29054] fuse: Unknown parameter 'user_i00000000000000000000' [ 759.640426][T20331] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 759.779650][T20331] usb 4-1: device descriptor read/64, error -71 [ 760.043898][T20331] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 760.179179][T20331] usb 4-1: device descriptor read/64, error -71 [ 760.289285][ T5701] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 760.289891][T20331] usb usb4-port1: attempt power cycle [ 760.520003][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 760.666191][ T5701] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 760.680022][ T5701] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 760.684164][T20331] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 760.700047][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 760.720463][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.744872][ T5701] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 760.760239][T20331] usb 4-1: device descriptor read/8, error -71 [ 760.778315][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.804514][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 760.830697][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.844135][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 760.866903][T29080] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 760.882944][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.904942][ T5701] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 760.916171][T29095] binder: 29091:29095 ioctl 40044591 0 returned -22 [ 760.932949][ T10] usb 2-1: config 0 descriptor?? [ 761.009297][T20331] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 761.031374][T20331] usb 4-1: device descriptor read/8, error -71 [ 761.149800][T20331] usb usb4-port1: unable to enumerate USB device [ 761.281848][ T5701] usb 3-1: USB disconnect, device number 35 [ 761.355924][ T10] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 761.394335][ T10] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 761.420457][ T10] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 761.443834][ T10] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 761.469148][ T10] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 761.511490][ T10] appleir 0003:05AC:8241.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 761.546529][T29143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3180'. [ 761.595836][T29143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3180'. [ 761.793180][T29162] FAULT_INJECTION: forcing a failure. [ 761.793180][T29162] name failslab, interval 1, probability 0, space 0, times 0 [ 761.847041][T29162] CPU: 0 UID: 0 PID: 29162 Comm: syz.0.3181 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.847069][T29162] Tainted: [L]=SOFTLOCKUP [ 761.847076][T29162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 761.847085][T29162] Call Trace: [ 761.847093][T29162] [ 761.847100][T29162] dump_stack_lvl+0xe8/0x150 [ 761.847126][T29162] should_fail_ex+0x412/0x560 [ 761.847151][T29162] should_failslab+0xa8/0x100 [ 761.847177][T29162] __kmalloc_cache_noprof+0x88/0x660 [ 761.847198][T29162] ? netlink_lookup+0x30/0x200 [ 761.847217][T29162] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 761.847234][T29162] ? genl_start+0x1c9/0x6c0 [ 761.847254][T29162] genl_start+0x1c9/0x6c0 [ 761.847269][T29162] ? netlink_lookup+0x30/0x200 [ 761.847295][T29162] __netlink_dump_start+0x469/0x7e0 [ 761.847324][T29162] genl_family_rcv_msg_dumpit+0x213/0x310 [ 761.847344][T29162] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 761.847360][T29162] ? genl_get_cmd+0x82e/0x960 [ 761.847388][T29162] ? __pfx_genl_start+0x10/0x10 [ 761.847402][T29162] ? __pfx_genl_dumpit+0x10/0x10 [ 761.847416][T29162] ? __pfx_genl_done+0x10/0x10 [ 761.847445][T29162] genl_rcv_msg+0x5e8/0x7a0 [ 761.847468][T29162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.847484][T29162] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 761.847507][T29162] ? __pfx_ref_tracker_free+0x10/0x10 [ 761.847538][T29162] netlink_rcv_skb+0x232/0x4b0 [ 761.847559][T29162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.847578][T29162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.847614][T29162] ? down_read+0x270/0x2e0 [ 761.847634][T29162] ? genl_rcv+0xd/0x40 [ 761.847651][T29162] genl_rcv+0x28/0x40 [ 761.847665][T29162] netlink_unicast+0x75c/0x8e0 [ 761.847694][T29162] netlink_sendmsg+0x813/0xb40 [ 761.847724][T29162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.847748][T29162] ? aa_sock_msg_perm+0xf1/0x1b0 [ 761.847772][T29162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 761.847796][T29162] ____sys_sendmsg+0x972/0x9f0 [ 761.847818][T29162] ? __might_fault+0xaf/0x130 [ 761.847844][T29162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.847877][T29162] ? import_iovec+0x73/0xa0 [ 761.847903][T29162] ___sys_sendmsg+0x2a5/0x360 [ 761.847923][T29162] ? __lock_acquire+0x6b5/0x2cf0 [ 761.847950][T29162] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.848006][T29162] ? __fget_files+0x2a/0x420 [ 761.848024][T29162] ? __fget_files+0x3a0/0x420 [ 761.848053][T29162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 761.848078][T29162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 761.848109][T29162] ? __pfx_ksys_write+0x10/0x10 [ 761.848139][T29162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.848156][T29162] do_syscall_64+0x15f/0xf80 [ 761.848175][T29162] ? trace_irq_disable+0x3b/0x140 [ 761.848197][T29162] ? clear_bhb_loop+0x40/0x90 [ 761.848217][T29162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.848233][T29162] RIP: 0033:0x7f8ae4f9cdd9 [ 761.848248][T29162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.848262][T29162] RSP: 002b:00007f8ae5dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.848279][T29162] RAX: ffffffffffffffda RBX: 00007f8ae5215fa0 RCX: 00007f8ae4f9cdd9 [ 761.848291][T29162] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 761.848302][T29162] RBP: 00007f8ae5dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 761.848312][T29162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.848322][T29162] R13: 00007f8ae5216038 R14: 00007f8ae5215fa0 R15: 00007f8ae533fa48 [ 761.848350][T29162] [ 762.494654][T29181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.505971][T29175] netlink: 'syz.2.3184': attribute type 1 has an invalid length. [ 762.510010][T29181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.571161][T29175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3184'. [ 762.586451][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3184'. [ 762.694959][ T9] usb 2-1: reset high-speed USB device number 58 using dummy_hcd [ 762.836180][T29195] fuse: Unknown parameter 'user_i00000000000000000000' [ 763.333679][T29213] netlink: 'syz.1.3188': attribute type 34 has an invalid length. [ 763.722834][T29223] veth0_macvtap: Caught tx_queue_len zero misconfig [ 764.075873][T29221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.080734][ T10] usb 2-1: USB disconnect, device number 58 [ 764.087383][T29221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.241884][ T879] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 764.496005][ T5701] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 764.520846][ T879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.533512][ T879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.758632][ T879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.778820][ T5701] usb 3-1: Using ep0 maxpacket: 8 [ 764.789538][ T879] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 764.791900][T29284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3198'. [ 764.810715][ T879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.822511][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 764.834095][ T879] usb 4-1: config 0 descriptor?? [ 764.948145][ T5701] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 764.968096][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.985963][ T5701] usb 3-1: Product: syz [ 764.993724][ T5701] usb 3-1: Manufacturer: syz [ 765.009823][ T5701] usb 3-1: SerialNumber: syz [ 765.157141][T29228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.175863][T29228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.189238][ T10] usb 4-1: USB disconnect, device number 39 [ 765.258456][ T5701] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.475202][ T5701] usb 3-1: USB disconnect, device number 36 [ 765.559882][T10096] udevd[10096]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.829202][T29346] fuse: Unknown parameter 'user_i00000000000000000000' [ 765.925656][T29347] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3202'. [ 766.013382][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 766.299470][T20331] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 766.454767][T20331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 766.465409][T20331] usb 2-1: not running at top speed; connect to a high speed hub [ 766.475097][T20331] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 766.483927][T20331] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 766.497199][T20331] usb 2-1: config 5 has no interface number 0 [ 766.503455][T20331] usb 2-1: config 5 interface 246 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 766.515261][T20331] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.529376][T20331] usb 2-1: config 5 interface 246 has no altsetting 0 [ 766.538558][T20331] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 766.548201][T20331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.556292][T20331] usb 2-1: Product: syz [ 766.560682][T20331] usb 2-1: Manufacturer: syz [ 766.565317][T20331] usb 2-1: SerialNumber: syz [ 766.838525][T20331] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 766.858906][ T155] usb 2-1: Failed to submit usb control message: -71 [ 766.880227][T20331] usb 2-1: USB disconnect, device number 59 [ 766.887242][ T155] usb 2-1: unable to send the bmi data to the device: -71 [ 766.901206][ T155] usb 2-1: unable to get target info from device [ 766.911660][ T155] usb 2-1: could not get target info (-71) [ 766.918781][ T155] usb 2-1: could not probe fw (-71) [ 767.055709][T29389] vivid-000: disconnect [ 767.544015][T29390] block device autoloading is deprecated and will be removed. [ 767.845820][T29396] CUSE: info not properly terminated [ 767.886488][T29388] vivid-000: reconnect [ 768.092426][T29424] fuse: Unknown parameter 'user_id00000000000000000000' [ 768.109020][T29425] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3218'. [ 768.529564][T20331] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 768.701688][T20331] usb 4-1: Using ep0 maxpacket: 16 [ 768.717437][T20331] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.732592][T20331] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.759430][T20331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 768.768182][T20331] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 768.786661][T20331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.818536][T20331] usb 4-1: config 0 descriptor?? [ 769.066496][T29456] syzkaller0: entered promiscuous mode [ 769.078901][T29456] syzkaller0: entered allmulticast mode [ 769.086008][T29433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.125123][T29433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.364276][T29433] Option ' Éʹûb×ÞÚ’†>¸— &’Óò9¾€¿…' to dns_resolver key: bad/missing value [ 769.634174][T20331] usbhid 4-1:0.0: can't add hid device: -71 [ 769.644041][T20331] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 769.665427][T20331] usb 4-1: USB disconnect, device number 40 [ 770.038426][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 770.135903][T29494] CUSE: info not properly terminated [ 770.409686][T29506] fuse: Unknown parameter 'user_id00000000000000000000' [ 770.746930][T29521] syz_tun: tun_net_xmit 86 [ 771.012497][T20331] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 771.115381][T20331] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 771.458096][T29537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.500514][T29537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.574111][T29550] FAULT_INJECTION: forcing a failure. [ 771.574111][T29550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.589128][T29550] CPU: 1 UID: 0 PID: 29550 Comm: syz.3.3248 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.589154][T29550] Tainted: [L]=SOFTLOCKUP [ 771.589160][T29550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.589170][T29550] Call Trace: [ 771.589177][T29550] [ 771.589183][T29550] dump_stack_lvl+0xe8/0x150 [ 771.589206][T29550] should_fail_ex+0x412/0x560 [ 771.589230][T29550] _copy_from_user+0x2d/0xb0 [ 771.589252][T29550] ___sys_sendmsg+0x1c6/0x360 [ 771.589272][T29550] ? __lock_acquire+0x6b5/0x2cf0 [ 771.589290][T29550] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.589310][T29550] ? kstrtouint+0x6e/0xe0 [ 771.589340][T29550] ? __fget_files+0x2a/0x420 [ 771.589354][T29550] ? __fget_files+0x3a0/0x420 [ 771.589375][T29550] __sys_sendmmsg+0x27c/0x4e0 [ 771.589394][T29550] ? __pfx___sys_sendmmsg+0x10/0x10 [ 771.589408][T29550] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 771.589441][T29550] ? ksys_write+0x242/0x270 [ 771.589459][T29550] ? __pfx_ksys_write+0x10/0x10 [ 771.589479][T29550] __x64_sys_sendmmsg+0xa0/0xc0 [ 771.589495][T29550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.589508][T29550] do_syscall_64+0x15f/0xf80 [ 771.589523][T29550] ? clear_bhb_loop+0x40/0x90 [ 771.589538][T29550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.589550][T29550] RIP: 0033:0x7fa51d59cdd9 [ 771.589563][T29550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.589574][T29550] RSP: 002b:00007fa51b7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 771.589588][T29550] RAX: ffffffffffffffda RBX: 00007fa51d815fa0 RCX: 00007fa51d59cdd9 [ 771.589597][T29550] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 771.589605][T29550] RBP: 00007fa51b7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 771.589613][T29550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.589620][T29550] R13: 00007fa51d816038 R14: 00007fa51d815fa0 R15: 00007fa51d93fa48 [ 771.589639][T29550] [ 771.789421][ C0] syz_tun: tun_net_xmit 86 [ 771.802104][T20331] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 771.864591][T29527] netlink: 'syz.0.3245': attribute type 58 has an invalid length. [ 772.024415][T20331] usb 3-1: Using ep0 maxpacket: 16 [ 772.041457][T20331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 772.055164][T20331] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 772.084281][T20331] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 772.099683][T20331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.119138][T20331] usb 3-1: Product: syz [ 772.129514][T20331] usb 3-1: Manufacturer: syz [ 772.134669][T20331] usb 3-1: SerialNumber: syz [ 772.137058][T29568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3252'. [ 772.190767][T29571] netlink: 'syz.0.3254': attribute type 10 has an invalid length. [ 772.198658][T29571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3254'. [ 772.211044][T29571] dummy0: entered promiscuous mode [ 772.216240][T29571] dummy0: entered allmulticast mode [ 772.228371][T29571] team0: Port device dummy0 removed [ 772.234088][T29571] bridge0: port 3(dummy0) entered blocking state [ 772.242141][T29571] bridge0: port 3(dummy0) entered disabled state [ 772.369688][T20331] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 772.378767][T20331] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 772.497355][T29586] fuse: Unknown parameter 'user_id00000000000000000000' [ 772.650708][T29590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.660554][T29590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.823407][T20331] usb 3-1: USB disconnect, device number 37 [ 772.839372][ C0] syz_tun: tun_net_xmit 86 [ 772.865778][T26445] udevd[26445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.629343][ T879] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 773.829293][ T879] usb 2-1: Using ep0 maxpacket: 8 [ 773.843181][ T879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 773.863382][ T879] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 773.878975][ T879] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 773.906375][ T879] usb 2-1: Product: syz [ 773.913884][ T879] usb 2-1: Manufacturer: syz [ 773.919150][ T879] usb 2-1: SerialNumber: syz [ 774.189564][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 774.372740][ T879] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 774.384999][ T879] usb 2-1: Handspring Visor / Palm OS: port 42, is for unknown use [ 774.403780][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 774.416442][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.416486][ T879] usb 2-1: Handspring Visor / Palm OS: port 0, is for Console use [ 774.453782][ T9] usb 4-1: Product: syz [ 774.463120][ T879] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 774.480432][ T9] usb 4-1: Manufacturer: syz [ 774.489803][ T9] usb 4-1: SerialNumber: syz [ 774.517838][ T9] usb 4-1: config 0 descriptor?? [ 774.655624][T29657] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3269'. [ 774.740219][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 774.803123][ T879] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 774.814565][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 774.821546][ T879] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 774.846613][ T879] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 774.876635][ T879] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 775.006419][T29669] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3270'. [ 775.183072][T20331] usb 2-1: USB disconnect, device number 60 [ 775.195756][T20331] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 775.225880][T20331] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 775.247198][T20331] visor 2-1:1.0: device disconnected [ 775.476947][T29691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.492074][T29691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.514541][T29695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.536263][T29695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.629590][T20331] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 775.901336][T20331] usb 2-1: Using ep0 maxpacket: 8 [ 775.910653][T20331] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 775.920411][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 775.931972][T20331] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 775.944780][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 775.961164][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 775.974386][T20331] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 775.982144][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 775.993730][T20331] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 776.013239][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 776.024883][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 776.038784][T20331] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 776.054936][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 776.066321][T20331] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 776.078478][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 776.089795][T20331] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 776.105017][T20331] usb 2-1: string descriptor 0 read error: -22 [ 776.114418][T20331] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 776.127370][T20331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.162327][T20331] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 776.181106][T29717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.337905][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 776.372240][ T9] usb 4-1: USB disconnect, device number 41 [ 776.900364][T29741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.094759][T29751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.330176][T29771] vivid-000: ================= START STATUS ================= [ 777.344518][T29771] vivid-000: Radio HW Seek Mode: Bounded [ 777.361054][T29771] vivid-000: Radio Programmable HW Seek: false [ 777.368877][T29771] vivid-000: RDS Rx I/O Mode: Block I/O [ 777.377686][T29771] vivid-000: Generate RBDS Instead of RDS: false [ 777.384492][T29771] vivid-000: RDS Reception: true [ 777.389866][T29771] vivid-000: RDS Program Type: 0 inactive [ 777.396417][T29771] vivid-000: RDS PS Name: inactive [ 777.403035][T29771] vivid-000: RDS Radio Text: inactive [ 777.408575][T29771] vivid-000: RDS Traffic Announcement: false inactive [ 777.416057][T29771] vivid-000: RDS Traffic Program: false inactive [ 777.422760][T29771] vivid-000: RDS Music: false inactive [ 777.428833][T29771] vivid-000: ================== END STATUS ================== [ 777.589802][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 777.751525][T29790] netlink: 182 bytes leftover after parsing attributes in process `syz.5.3290'. [ 777.760675][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 777.768912][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 777.787165][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 777.807700][T20331] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 777.821714][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 777.836939][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.847226][ T9] usb 4-1: Product: syz [ 777.851977][ T9] usb 4-1: Manufacturer: syz [ 777.856971][ T9] usb 4-1: SerialNumber: syz [ 777.991644][T20331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 778.001355][T20331] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 778.013342][T20331] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 778.028322][T20331] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.051287][T20331] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 778.062968][T20331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.090663][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 778.102189][T20331] usb 3-1: Product: syz [ 778.109725][T20331] usb 3-1: Manufacturer: syz [ 778.114903][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 778.124432][T20331] usb 3-1: SerialNumber: syz [ 778.145748][T20331] usb 3-1: selecting invalid altsetting 1 [ 778.485314][T12346] usb 2-1: USB disconnect, device number 61 [ 778.584803][T20331] usb 3-1: unit 6 not found! [ 779.206677][T20331] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 779.231644][T20331] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 779.294314][T20331] usb 3-1: selecting invalid altsetting 1 [ 779.391202][T20331] usb 3-1: unit 6 not found! [ 779.397841][ T9] usb 4-1: USB disconnect, device number 42 [ 779.417759][T20331] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 779.707539][T20331] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 779.775724][T20331] usb 3-1: USB disconnect, device number 38 [ 779.895172][T26445] udevd[26445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 780.158251][T29877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.215857][T29877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.040836][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 781.199180][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 781.215201][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 781.236341][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 781.265711][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 781.287021][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.304347][ T9] usb 4-1: Product: syz [ 781.319865][ T9] usb 4-1: Manufacturer: syz [ 781.332744][ T9] usb 4-1: SerialNumber: syz [ 781.582649][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 781.597113][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 782.134352][ T9] usb 4-1: USB disconnect, device number 43 [ 782.313612][T26445] udevd[26445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 782.420155][T29945] fuse: Bad value for 'fd' [ 782.450782][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3306'. [ 782.686254][T29945] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3306'. [ 782.882924][T29976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.920324][T29976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.960919][T29984] fuse: Unknown parameter 'fd00000000000000000003' [ 783.551502][T29997] syzkaller0: entered promiscuous mode [ 783.556991][T29997] syzkaller0: entered allmulticast mode [ 783.680944][T30006] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 785.582592][T30057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.619759][T30057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.744979][T30066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3328'. [ 785.759464][T30066] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.767106][T30066] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.533138][T30086] vivid-004: ================= START STATUS ================= [ 786.540792][T30086] vivid-004: Radio HW Seek Mode: Bounded [ 786.546418][T30086] vivid-004: Radio Programmable HW Seek: false [ 786.552557][T30086] vivid-004: RDS Rx I/O Mode: Block I/O [ 786.558082][T30086] vivid-004: Generate RBDS Instead of RDS: false [ 786.572827][T30086] vivid-004: RDS Reception: true [ 786.578205][T30086] vivid-004: RDS Program Type: 0 inactive [ 786.586245][T30086] vivid-004: RDS PS Name: inactive [ 786.592672][T30086] vivid-004: RDS Radio Text: inactive [ 786.598210][T30086] vivid-004: RDS Traffic Announcement: false inactive [ 786.606248][T30086] vivid-004: RDS Traffic Program: false inactive [ 786.612672][T30086] vivid-004: RDS Music: false inactive [ 786.618260][T30086] vivid-004: ================== END STATUS ================== [ 786.626426][T30086] FAULT_INJECTION: forcing a failure. [ 786.626426][T30086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.640086][T30086] CPU: 0 UID: 0 PID: 30086 Comm: syz.2.3332 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.640102][T30086] Tainted: [L]=SOFTLOCKUP [ 786.640106][T30086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 786.640113][T30086] Call Trace: [ 786.640117][T30086] [ 786.640122][T30086] dump_stack_lvl+0xe8/0x150 [ 786.640139][T30086] should_fail_ex+0x412/0x560 [ 786.640153][T30086] _copy_to_user+0x31/0xb0 [ 786.640169][T30086] vivid_radio_rx_read+0x9e9/0xbc0 [ 786.640183][T30086] ? get_pid_task+0x20/0x1f0 [ 786.640203][T30086] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 786.640218][T30086] ? apparmor_file_permission+0x1f4/0x300 [ 786.640228][T30086] ? video_devdata+0x6b/0xd0 [ 786.640240][T30086] ? vivid_radio_read+0x7a/0xc0 [ 786.640255][T30086] v4l2_read+0x19c/0x2c0 [ 786.640267][T30086] ? __pfx_v4l2_read+0x10/0x10 [ 786.640279][T30086] vfs_read+0x20c/0xa70 [ 786.640297][T30086] ? __pfx_vfs_read+0x10/0x10 [ 786.640309][T30086] ? __fget_files+0x2a/0x420 [ 786.640322][T30086] ? __fget_files+0x2a/0x420 [ 786.640332][T30086] ? __fget_files+0x3a0/0x420 [ 786.640341][T30086] ? __fget_files+0x2a/0x420 [ 786.640357][T30086] ksys_read+0x150/0x270 [ 786.640370][T30086] ? __pfx_ksys_read+0x10/0x10 [ 786.640386][T30086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.640396][T30086] do_syscall_64+0x15f/0xf80 [ 786.640408][T30086] ? trace_irq_disable+0x3b/0x140 [ 786.640422][T30086] ? clear_bhb_loop+0x40/0x90 [ 786.640433][T30086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.640442][T30086] RIP: 0033:0x7fcdc039cdd9 [ 786.640452][T30086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.640461][T30086] RSP: 002b:00007fcdc1213028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 786.640472][T30086] RAX: ffffffffffffffda RBX: 00007fcdc0615fa0 RCX: 00007fcdc039cdd9 [ 786.640479][T30086] RDX: 0000000000000062 RSI: 00002000000007c0 RDI: 0000000000000003 [ 786.640485][T30086] RBP: 00007fcdc1213090 R08: 0000000000000000 R09: 0000000000000000 [ 786.640490][T30086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.640496][T30086] R13: 00007fcdc0616038 R14: 00007fcdc0615fa0 R15: 00007fcdc073fa48 [ 786.640511][T30086] [ 786.986418][T30099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 787.261220][T30105] syzkaller0: entered promiscuous mode [ 787.280155][T30105] syzkaller0: entered allmulticast mode [ 787.911616][T30149] netlink: 'syz.3.3344': attribute type 1 has an invalid length. [ 788.000359][T30149] 8021q: adding VLAN 0 to HW filter on device bond9 [ 788.015714][T30152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3346'. [ 788.068797][T30186] bond9: (slave veth5): Enslaving as an active interface with a down link [ 788.087562][T30152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3346'. [ 788.118891][T30187] FAULT_INJECTION: forcing a failure. [ 788.118891][T30187] name failslab, interval 1, probability 0, space 0, times 0 [ 788.151836][T30187] CPU: 1 UID: 0 PID: 30187 Comm: syz.2.3347 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.151864][T30187] Tainted: [L]=SOFTLOCKUP [ 788.151870][T30187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 788.151878][T30187] Call Trace: [ 788.151886][T30187] [ 788.151894][T30187] dump_stack_lvl+0xe8/0x150 [ 788.151921][T30187] should_fail_ex+0x412/0x560 [ 788.151948][T30187] should_failslab+0xa8/0x100 [ 788.151977][T30187] __kmalloc_cache_noprof+0x88/0x660 [ 788.152000][T30187] ? basic_change+0x2f9/0xfc0 [ 788.152024][T30187] basic_change+0x2f9/0xfc0 [ 788.152044][T30187] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 788.152078][T30187] ? __pfx_basic_change+0x10/0x10 [ 788.152116][T30187] tc_new_tfilter+0xff8/0x1780 [ 788.152168][T30187] ? __pfx_tc_new_tfilter+0x10/0x10 [ 788.152205][T30187] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 788.152241][T30187] ? __pfx_tc_new_tfilter+0x10/0x10 [ 788.152265][T30187] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 788.152290][T30187] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 788.152310][T30187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 788.152329][T30187] ? ref_tracker_free+0x693/0x840 [ 788.152354][T30187] ? __pfx_ref_tracker_free+0x10/0x10 [ 788.152385][T30187] netlink_rcv_skb+0x232/0x4b0 [ 788.152406][T30187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 788.152424][T30187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.152457][T30187] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.152478][T30187] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.152505][T30187] netlink_unicast+0x75c/0x8e0 [ 788.152537][T30187] netlink_sendmsg+0x813/0xb40 [ 788.152569][T30187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.152594][T30187] ? aa_sock_msg_perm+0xf1/0x1b0 [ 788.152617][T30187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.152644][T30187] ____sys_sendmsg+0x972/0x9f0 [ 788.152667][T30187] ? __might_fault+0xaf/0x130 [ 788.152696][T30187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.152736][T30187] ? import_iovec+0x73/0xa0 [ 788.152763][T30187] ___sys_sendmsg+0x2a5/0x360 [ 788.152785][T30187] ? __lock_acquire+0x6b5/0x2cf0 [ 788.152810][T30187] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.152865][T30187] ? __fget_files+0x2a/0x420 [ 788.152886][T30187] ? __fget_files+0x3a0/0x420 [ 788.152915][T30187] __x64_sys_sendmsg+0x1bd/0x2a0 [ 788.152941][T30187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.152973][T30187] ? __pfx_ksys_write+0x10/0x10 [ 788.153005][T30187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.153026][T30187] do_syscall_64+0x15f/0xf80 [ 788.153047][T30187] ? trace_irq_disable+0x3b/0x140 [ 788.153071][T30187] ? clear_bhb_loop+0x40/0x90 [ 788.153090][T30187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.153106][T30187] RIP: 0033:0x7fcdc039cdd9 [ 788.153123][T30187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.153138][T30187] RSP: 002b:00007fcdc1213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.153158][T30187] RAX: ffffffffffffffda RBX: 00007fcdc0615fa0 RCX: 00007fcdc039cdd9 [ 788.153171][T30187] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 788.153183][T30187] RBP: 00007fcdc1213090 R08: 0000000000000000 R09: 0000000000000000 [ 788.153193][T30187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.153205][T30187] R13: 00007fcdc0616038 R14: 00007fcdc0615fa0 R15: 00007fcdc073fa48 [ 788.153234][T30187] [ 789.018973][T30227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.028332][T30227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.044462][T30227] input: syz1 as /devices/virtual/input/input43 [ 789.165575][T30227] tun0: tun_chr_ioctl cmd 1074025681 [ 789.369975][T30253] FAULT_INJECTION: forcing a failure. [ 789.369975][T30253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.383796][T30253] CPU: 0 UID: 0 PID: 30253 Comm: syz.2.3354 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.383825][T30253] Tainted: [L]=SOFTLOCKUP [ 789.383832][T30253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 789.383841][T30253] Call Trace: [ 789.383849][T30253] [ 789.383856][T30253] dump_stack_lvl+0xe8/0x150 [ 789.383884][T30253] should_fail_ex+0x412/0x560 [ 789.383911][T30253] _copy_from_user+0x2d/0xb0 [ 789.383935][T30253] ___sys_sendmsg+0x1c6/0x360 [ 789.383956][T30253] ? __lock_acquire+0x6b5/0x2cf0 [ 789.383980][T30253] ? __pfx____sys_sendmsg+0x10/0x10 [ 789.384032][T30253] ? __fget_files+0x2a/0x420 [ 789.384054][T30253] ? __fget_files+0x3a0/0x420 [ 789.384080][T30253] __x64_sys_sendmsg+0x1bd/0x2a0 [ 789.384106][T30253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 789.384135][T30253] ? __pfx_ksys_write+0x10/0x10 [ 789.384166][T30253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.384184][T30253] do_syscall_64+0x15f/0xf80 [ 789.384208][T30253] ? clear_bhb_loop+0x40/0x90 [ 789.384227][T30253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.384245][T30253] RIP: 0033:0x7fcdc039cdd9 [ 789.384261][T30253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.384275][T30253] RSP: 002b:00007fcdc1213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.384294][T30253] RAX: ffffffffffffffda RBX: 00007fcdc0615fa0 RCX: 00007fcdc039cdd9 [ 789.384306][T30253] RDX: 0000000000008000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 789.384316][T30253] RBP: 00007fcdc1213090 R08: 0000000000000000 R09: 0000000000000000 [ 789.384327][T30253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.384338][T30253] R13: 00007fcdc0616038 R14: 00007fcdc0615fa0 R15: 00007fcdc073fa48 [ 789.384364][T30253] [ 789.449306][T12346] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 789.935992][T30263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.944805][T30263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.248826][T12346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 790.258563][T12346] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 790.279771][T12346] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 790.301713][T12346] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.335408][T12346] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 790.359667][T12346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.377452][T12346] usb 4-1: Product: syz [ 790.385339][T12346] usb 4-1: Manufacturer: syz [ 790.399400][T12346] usb 4-1: SerialNumber: syz [ 790.420300][T12346] usb 4-1: selecting invalid altsetting 1 [ 790.428245][T12346] usb 4-1: unit 6 not found! [ 790.655398][T30271] netlink: 'syz.5.3359': attribute type 4 has an invalid length. [ 790.691672][T30271] netlink: 'syz.5.3359': attribute type 4 has an invalid length. [ 791.007372][T30281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.021272][T30281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.382868][T12346] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 791.502575][T12346] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 791.514312][T12346] usb 4-1: selecting invalid altsetting 1 [ 791.520781][T12346] usb 4-1: unit 6 not found! [ 791.614780][T12346] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 791.905077][T12346] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 791.948862][T12346] usb 4-1: USB disconnect, device number 44 [ 792.074232][T30309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.097210][T30314] FAULT_INJECTION: forcing a failure. [ 792.097210][T30314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.111947][T30309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.129458][T30314] CPU: 1 UID: 0 PID: 30314 Comm: syz.1.3365 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.129486][T30314] Tainted: [L]=SOFTLOCKUP [ 792.129492][T30314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.129502][T30314] Call Trace: [ 792.129509][T30314] [ 792.129517][T30314] dump_stack_lvl+0xe8/0x150 [ 792.129541][T30314] should_fail_ex+0x412/0x560 [ 792.129566][T30314] _copy_from_user+0x2d/0xb0 [ 792.129588][T30314] do_sys_poll+0x2a3/0x10e0 [ 792.129613][T30314] ? __lock_acquire+0x6b5/0x2cf0 [ 792.129637][T30314] ? __pfx_do_sys_poll+0x10/0x10 [ 792.129655][T30314] ? aa_file_perm+0x192/0x15e0 [ 792.129742][T30314] ? ktime_get_ts64+0xa9/0x410 [ 792.129788][T30314] ? __pfx_timespec64_add_safe+0x10/0x10 [ 792.129817][T30314] __x64_sys_poll+0x190/0x350 [ 792.129837][T30314] ? __pfx___x64_sys_poll+0x10/0x10 [ 792.129860][T30314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.129879][T30314] do_syscall_64+0x15f/0xf80 [ 792.129897][T30314] ? trace_irq_disable+0x3b/0x140 [ 792.129918][T30314] ? clear_bhb_loop+0x40/0x90 [ 792.129936][T30314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.129952][T30314] RIP: 0033:0x7fe71419cdd9 [ 792.129968][T30314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.129983][T30314] RSP: 002b:00007fe7150ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 792.130000][T30314] RAX: ffffffffffffffda RBX: 00007fe714415fa0 RCX: 00007fe71419cdd9 [ 792.130010][T30314] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 792.130019][T30314] RBP: 00007fe7150ea090 R08: 0000000000000000 R09: 0000000000000000 [ 792.130029][T30314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.130039][T30314] R13: 00007fe714416038 R14: 00007fe714415fa0 R15: 00007fe71453fa48 [ 792.130062][T30314] [ 792.151620][T26445] udevd[26445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.450918][T30332] binder: BINDER_SET_CONTEXT_MGR already set [ 792.479463][T30332] binder: 30322:30332 ioctl 4018620d 200000000040 returned -16 [ 792.514594][T30323] binder: 30322:30323 ioctl c0306201 2000000003c0 returned -14 [ 792.844061][T12346] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 792.989818][T12346] usb 4-1: device descriptor read/64, error -71 [ 793.249644][T12346] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 793.410191][T30379] FAULT_INJECTION: forcing a failure. [ 793.410191][T30379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.430549][T12346] usb 4-1: device descriptor read/64, error -71 [ 793.434528][T30379] CPU: 0 UID: 0 PID: 30379 Comm: syz.5.3376 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.434555][T30379] Tainted: [L]=SOFTLOCKUP [ 793.434562][T30379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.434572][T30379] Call Trace: [ 793.434578][T30379] [ 793.434585][T30379] dump_stack_lvl+0xe8/0x150 [ 793.434610][T30379] should_fail_ex+0x412/0x560 [ 793.434635][T30379] _copy_from_user+0x2d/0xb0 [ 793.434657][T30379] ___sys_recvmsg+0x175/0x590 [ 793.434684][T30379] ? __pfx____sys_recvmsg+0x10/0x10 [ 793.434708][T30379] ? __fget_files+0x2a/0x420 [ 793.434752][T30379] do_recvmmsg+0x334/0x800 [ 793.434780][T30379] ? __pfx_do_recvmmsg+0x10/0x10 [ 793.434810][T30379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 793.434850][T30379] __x64_sys_recvmmsg+0x198/0x250 [ 793.434873][T30379] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 793.434901][T30379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.434918][T30379] do_syscall_64+0x15f/0xf80 [ 793.434937][T30379] ? trace_irq_disable+0x3b/0x140 [ 793.434958][T30379] ? clear_bhb_loop+0x40/0x90 [ 793.434977][T30379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.434992][T30379] RIP: 0033:0x7fa6e9b9cdd9 [ 793.435008][T30379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.435021][T30379] RSP: 002b:00007fa6ea9d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 793.435038][T30379] RAX: ffffffffffffffda RBX: 00007fa6e9e15fa0 RCX: 00007fa6e9b9cdd9 [ 793.435050][T30379] RDX: 0000000000000004 RSI: 0000200000006900 RDI: 0000000000000003 [ 793.435060][T30379] RBP: 00007fa6ea9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 793.435070][T30379] R10: 0000000040012032 R11: 0000000000000246 R12: 0000000000000001 [ 793.435084][T30379] R13: 00007fa6e9e16038 R14: 00007fa6e9e15fa0 R15: 00007fa6e9f3fa48 [ 793.435110][T30379] [ 793.512100][T30383] FAULT_INJECTION: forcing a failure. [ 793.512100][T30383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.659918][T12346] usb usb4-port1: attempt power cycle [ 793.679553][T30383] CPU: 1 UID: 0 PID: 30383 Comm: syz.5.3377 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.679584][T30383] Tainted: [L]=SOFTLOCKUP [ 793.679591][T30383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.679600][T30383] Call Trace: [ 793.679608][T30383] [ 793.679615][T30383] dump_stack_lvl+0xe8/0x150 [ 793.679640][T30383] should_fail_ex+0x412/0x560 [ 793.679665][T30383] _copy_from_user+0x2d/0xb0 [ 793.679688][T30383] do_sock_getsockopt+0x200/0x7e0 [ 793.679714][T30383] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 793.679750][T30383] ? __fget_files+0x3a0/0x420 [ 793.679768][T30383] ? __fget_files+0x2a/0x420 [ 793.679793][T30383] __x64_sys_getsockopt+0x1a4/0x240 [ 793.679820][T30383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.679838][T30383] do_syscall_64+0x15f/0xf80 [ 793.679857][T30383] ? trace_irq_disable+0x3b/0x140 [ 793.679880][T30383] ? clear_bhb_loop+0x40/0x90 [ 793.679900][T30383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.679916][T30383] RIP: 0033:0x7fa6e9b9cdd9 [ 793.679931][T30383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.679945][T30383] RSP: 002b:00007fa6ea9d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 793.679962][T30383] RAX: ffffffffffffffda RBX: 00007fa6e9e15fa0 RCX: 00007fa6e9b9cdd9 [ 793.679974][T30383] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 793.679985][T30383] RBP: 00007fa6ea9d3090 R08: 0000200000000100 R09: 0000000000000000 [ 793.679996][T30383] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 793.680006][T30383] R13: 00007fa6e9e16038 R14: 00007fa6e9e15fa0 R15: 00007fa6e9f3fa48 [ 793.680034][T30383] [ 794.109200][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 794.159486][T12346] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 794.180074][T12346] usb 4-1: device descriptor read/8, error -71 [ 794.261341][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 794.271779][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.282313][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 794.291379][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 794.304444][ T9] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 794.316525][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.324774][ T9] usb 3-1: Product: syz [ 794.329055][ T9] usb 3-1: Manufacturer: syz [ 794.333790][ T9] usb 3-1: SerialNumber: syz [ 794.431309][T12346] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 794.479144][T12346] usb 4-1: device descriptor read/8, error -71 [ 794.610160][T12346] usb usb4-port1: unable to enumerate USB device [ 794.877741][T30416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.888282][T30416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.959935][T30392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.970224][T30392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.739890][T30442] netlink: 'syz.5.3387': attribute type 1 has an invalid length. [ 795.791656][T30444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3387'. [ 795.947027][T30473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.026444][T30473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.033345][T30461] macvlan2: entered promiscuous mode [ 796.040216][T30461] macvlan2: entered allmulticast mode [ 796.072305][T30461] bond9: entered promiscuous mode [ 796.098422][T30461] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 796.119021][T30461] bond9: left promiscuous mode [ 796.906386][T30489] FAULT_INJECTION: forcing a failure. [ 796.906386][T30489] name failslab, interval 1, probability 0, space 0, times 0 [ 796.973429][T30489] CPU: 1 UID: 0 PID: 30489 Comm: syz.1.3388 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.973460][T30489] Tainted: [L]=SOFTLOCKUP [ 796.973467][T30489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.973477][T30489] Call Trace: [ 796.973484][T30489] [ 796.973491][T30489] dump_stack_lvl+0xe8/0x150 [ 796.973516][T30489] should_fail_ex+0x412/0x560 [ 796.973540][T30489] should_failslab+0xa8/0x100 [ 796.973565][T30489] __kmalloc_noprof+0xe8/0x760 [ 796.973587][T30489] ? io_cache_alloc_new+0x40/0x100 [ 796.973605][T30489] ? __fget_files+0x2a/0x420 [ 796.973628][T30489] io_cache_alloc_new+0x40/0x100 [ 796.973649][T30489] io_arm_apoll+0x48c/0x930 [ 796.973677][T30489] ? __pfx_io_arm_apoll+0x10/0x10 [ 796.973701][T30489] ? __io_issue_sqe+0x1f7/0x4b0 [ 796.973721][T30489] ? io_file_get_normal+0xe9/0x2e0 [ 796.973742][T30489] ? io_arm_poll_handler+0x205/0x290 [ 796.973777][T30489] io_queue_async+0x175/0x2d0 [ 796.973802][T30489] io_submit_sqes+0x10bf/0x2240 [ 796.973850][T30489] __se_sys_io_uring_enter+0x341/0x1c40 [ 796.973875][T30489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 796.973901][T30489] ? __fget_files+0x3a0/0x420 [ 796.973923][T30489] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 796.973944][T30489] ? fput+0xa0/0xd0 [ 796.973963][T30489] ? ksys_write+0x242/0x270 [ 796.973986][T30489] ? __pfx_ksys_write+0x10/0x10 [ 796.974011][T30489] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 796.974032][T30489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.974049][T30489] do_syscall_64+0x15f/0xf80 [ 796.974071][T30489] ? clear_bhb_loop+0x40/0x90 [ 796.974090][T30489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.974106][T30489] RIP: 0033:0x7fe71419cdd9 [ 796.974123][T30489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.974136][T30489] RSP: 002b:00007fe7150ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 796.974154][T30489] RAX: ffffffffffffffda RBX: 00007fe714415fa0 RCX: 00007fe71419cdd9 [ 796.974166][T30489] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 796.974176][T30489] RBP: 00007fe7150ea090 R08: 0000000000000000 R09: 0000000000000000 [ 796.974186][T30489] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 796.974196][T30489] R13: 00007fe714416038 R14: 00007fe714415fa0 R15: 00007fe71453fa48 [ 796.974223][T30489] [ 797.320748][T30498] FAULT_INJECTION: forcing a failure. [ 797.320748][T30498] name failslab, interval 1, probability 0, space 0, times 0 [ 797.334844][T30498] CPU: 0 UID: 0 PID: 30498 Comm: syz.3.3390 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.334872][T30498] Tainted: [L]=SOFTLOCKUP [ 797.334878][T30498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 797.334888][T30498] Call Trace: [ 797.334896][T30498] [ 797.334904][T30498] dump_stack_lvl+0xe8/0x150 [ 797.334929][T30498] should_fail_ex+0x412/0x560 [ 797.334959][T30498] should_failslab+0xa8/0x100 [ 797.334982][T30498] ? skb_clone+0x212/0x3a0 [ 797.335009][T30498] kmem_cache_alloc_noprof+0x87/0x650 [ 797.335039][T30498] skb_clone+0x212/0x3a0 [ 797.335065][T30498] __netlink_deliver_tap+0x404/0x850 [ 797.335099][T30498] ? netlink_deliver_tap+0x2e/0x1b0 [ 797.335122][T30498] netlink_deliver_tap+0x19c/0x1b0 [ 797.335144][T30498] netlink_sendskb+0x68/0x140 [ 797.335165][T30498] netlink_rcv_skb+0x2b6/0x4b0 [ 797.335187][T30498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 797.335206][T30498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 797.335242][T30498] ? down_read+0x270/0x2e0 [ 797.335262][T30498] ? genl_rcv+0xd/0x40 [ 797.335280][T30498] genl_rcv+0x28/0x40 [ 797.335294][T30498] netlink_unicast+0x75c/0x8e0 [ 797.335324][T30498] netlink_sendmsg+0x813/0xb40 [ 797.335354][T30498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.335379][T30498] ? aa_sock_msg_perm+0xf1/0x1b0 [ 797.335401][T30498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 797.335426][T30498] ____sys_sendmsg+0x972/0x9f0 [ 797.335448][T30498] ? __might_fault+0xaf/0x130 [ 797.335474][T30498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.335506][T30498] ? import_iovec+0x73/0xa0 [ 797.335531][T30498] ___sys_sendmsg+0x2a5/0x360 [ 797.335552][T30498] ? __lock_acquire+0x6b5/0x2cf0 [ 797.335574][T30498] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.335632][T30498] ? __fget_files+0x2a/0x420 [ 797.335650][T30498] ? __fget_files+0x3a0/0x420 [ 797.335680][T30498] __x64_sys_sendmsg+0x1bd/0x2a0 [ 797.335704][T30498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 797.335735][T30498] ? __pfx_ksys_write+0x10/0x10 [ 797.335767][T30498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.335785][T30498] do_syscall_64+0x15f/0xf80 [ 797.335806][T30498] ? clear_bhb_loop+0x40/0x90 [ 797.335826][T30498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.335843][T30498] RIP: 0033:0x7fa51d59cdd9 [ 797.335859][T30498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.335873][T30498] RSP: 002b:00007fa51b7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.335891][T30498] RAX: ffffffffffffffda RBX: 00007fa51d815fa0 RCX: 00007fa51d59cdd9 [ 797.335903][T30498] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 797.335914][T30498] RBP: 00007fa51b7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 797.335924][T30498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.335934][T30498] R13: 00007fa51d816038 R14: 00007fa51d815fa0 R15: 00007fa51d93fa48 [ 797.335964][T30498] [ 797.687410][T30491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.696272][T30491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.849170][T30520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 798.207497][ T9] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 798.375106][ T9] usb 3-1: USB disconnect, device number 39 [ 798.579899][ T9575] udevd[9575]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.650487][T30566] netlink: 'syz.1.3398': attribute type 21 has an invalid length. [ 798.810604][ T9] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 798.824540][T30569] netlink: 'syz.5.3399': attribute type 1 has an invalid length. [ 798.894003][T30581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3399'. [ 799.037018][T30595] macvlan2: entered promiscuous mode [ 799.046288][T30595] macvlan2: entered allmulticast mode [ 799.056930][T30569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.093855][T30569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.110220][T30595] bond10: entered promiscuous mode [ 799.116326][T30595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 799.128706][T30595] bond10: left promiscuous mode [ 799.404691][T30636] FAULT_INJECTION: forcing a failure. [ 799.404691][T30636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.417780][T30636] CPU: 1 UID: 0 PID: 30636 Comm: syz.1.3407 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.417807][T30636] Tainted: [L]=SOFTLOCKUP [ 799.417813][T30636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.417823][T30636] Call Trace: [ 799.417831][T30636] [ 799.417838][T30636] dump_stack_lvl+0xe8/0x150 [ 799.417863][T30636] should_fail_ex+0x412/0x560 [ 799.417888][T30636] _copy_from_user+0x2d/0xb0 [ 799.417912][T30636] video_usercopy+0x36f/0x1450 [ 799.417938][T30636] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 799.417961][T30636] ? __pfx___video_do_ioctl+0x10/0x10 [ 799.417984][T30636] ? __pfx_video_usercopy+0x10/0x10 [ 799.418016][T30636] ? __fget_files+0x2a/0x420 [ 799.418037][T30636] ? __fget_files+0x2a/0x420 [ 799.418054][T30636] ? __fget_files+0x3a0/0x420 [ 799.418076][T30636] v4l2_ioctl+0x18d/0x1e0 [ 799.418098][T30636] ? __pfx_v4l2_ioctl+0x10/0x10 [ 799.418117][T30636] __se_sys_ioctl+0xfc/0x170 [ 799.418141][T30636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.418158][T30636] do_syscall_64+0x15f/0xf80 [ 799.418176][T30636] ? trace_irq_disable+0x3b/0x140 [ 799.418199][T30636] ? clear_bhb_loop+0x40/0x90 [ 799.418219][T30636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.418236][T30636] RIP: 0033:0x7fe71419cdd9 [ 799.418252][T30636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.418266][T30636] RSP: 002b:00007fe7150ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.418283][T30636] RAX: ffffffffffffffda RBX: 00007fe714415fa0 RCX: 00007fe71419cdd9 [ 799.418295][T30636] RDX: 0000200000000cc0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 799.418306][T30636] RBP: 00007fe7150ea090 R08: 0000000000000000 R09: 0000000000000000 [ 799.418316][T30636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.418326][T30636] R13: 00007fe714416038 R14: 00007fe714415fa0 R15: 00007fe71453fa48 [ 799.418353][T30636] [ 799.831907][T30653] vivid-001: ================= START STATUS ================= [ 799.840949][T30653] vivid-001: Radio HW Seek Mode: Bounded [ 799.846613][T30653] vivid-001: Radio Programmable HW Seek: false [ 799.856020][T30653] vivid-001: RDS Rx I/O Mode: Block I/O [ 799.862739][T30653] vivid-001: Generate RBDS Instead of RDS: false [ 799.871615][T30653] vivid-001: RDS Reception: true [ 799.876609][T30653] vivid-001: RDS Program Type: 0 inactive [ 799.882454][T30653] vivid-001: RDS PS Name: inactive [ 799.887793][T30653] vivid-001: RDS Radio Text: inactive [ 799.893291][T30653] vivid-001: RDS Traffic Announcement: false inactive [ 799.900185][T30653] vivid-001: RDS Traffic Program: false inactive [ 799.906569][T30653] vivid-001: RDS Music: false inactive [ 799.912068][T30653] vivid-001: ================== END STATUS ================== [ 800.126416][T30662] FAULT_INJECTION: forcing a failure. [ 800.126416][T30662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.193978][T30662] CPU: 0 UID: 0 PID: 30662 Comm: syz.3.3413 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.194010][T30662] Tainted: [L]=SOFTLOCKUP [ 800.194016][T30662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 800.194024][T30662] Call Trace: [ 800.194031][T30662] [ 800.194037][T30662] dump_stack_lvl+0xe8/0x150 [ 800.194062][T30662] should_fail_ex+0x412/0x560 [ 800.194083][T30662] _copy_from_user+0x2d/0xb0 [ 800.194104][T30662] snd_seq_oss_write+0x5b1/0x8f0 [ 800.194120][T30662] ? get_pid_task+0x20/0x1f0 [ 800.194148][T30662] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 800.194165][T30662] ? apparmor_file_permission+0x1f4/0x300 [ 800.194184][T30662] ? security_file_permission+0x75/0x260 [ 800.194202][T30662] odev_write+0x5a/0x80 [ 800.194214][T30662] ? __pfx_odev_write+0x10/0x10 [ 800.194229][T30662] vfs_write+0x29a/0xb90 [ 800.194255][T30662] ? __pfx_vfs_write+0x10/0x10 [ 800.194278][T30662] ? __fget_files+0x2a/0x420 [ 800.194296][T30662] ? __fget_files+0x2a/0x420 [ 800.194311][T30662] ? __fget_files+0x3a0/0x420 [ 800.194327][T30662] ? __fget_files+0x2a/0x420 [ 800.194350][T30662] ksys_write+0x150/0x270 [ 800.194374][T30662] ? __pfx_ksys_write+0x10/0x10 [ 800.194399][T30662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.194416][T30662] do_syscall_64+0x15f/0xf80 [ 800.194436][T30662] ? trace_irq_disable+0x3b/0x140 [ 800.194458][T30662] ? clear_bhb_loop+0x40/0x90 [ 800.194478][T30662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.194492][T30662] RIP: 0033:0x7fa51d59cdd9 [ 800.194508][T30662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.194521][T30662] RSP: 002b:00007fa51b7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.194539][T30662] RAX: ffffffffffffffda RBX: 00007fa51d815fa0 RCX: 00007fa51d59cdd9 [ 800.194551][T30662] RDX: 0000000000000078 RSI: 0000200000000100 RDI: 0000000000000003 [ 800.194562][T30662] RBP: 00007fa51b7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 800.194572][T30662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.194581][T30662] R13: 00007fa51d816038 R14: 00007fa51d815fa0 R15: 00007fa51d93fa48 [ 800.194609][T30662] [ 801.645648][T30704] syz_tun: entered promiscuous mode [ 801.674109][T30704] macvtap1: entered promiscuous mode [ 801.710297][T30704] syz_tun: left promiscuous mode [ 801.719516][ T879] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 801.889428][ T879] usb 4-1: Using ep0 maxpacket: 32 [ 801.901448][ T879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.924004][ T879] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.941696][ T879] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 801.953296][ T879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.962647][ T879] usb 4-1: Product: syz [ 801.962757][T30719] netlink: 'syz.5.3426': attribute type 1 has an invalid length. [ 801.967393][ T879] usb 4-1: Manufacturer: syz [ 801.985519][ T879] usb 4-1: SerialNumber: syz [ 802.017786][ T879] usb 4-1: config 0 descriptor?? [ 802.025358][T30720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3426'. [ 802.042135][T30720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.071500][T30720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.794412][ T5701] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 803.095583][T30812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.259304][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 803.268842][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 803.294030][ T5701] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 803.308750][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.319706][ T5701] usb 2-1: Product: syz [ 803.331066][ T5701] usb 2-1: Manufacturer: syz [ 803.343025][ T5701] usb 2-1: SerialNumber: syz [ 803.399276][T20331] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 803.559320][T20331] usb 3-1: Using ep0 maxpacket: 8 [ 803.578701][T20331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 803.602882][T20331] usb 3-1: config 4 interface 0 has no altsetting 0 [ 803.623107][ T5701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.631269][ T5701] usb 2-1: MIDIStreaming interface descriptor not found [ 803.646252][T20331] usb 3-1: string descriptor 0 read error: -22 [ 803.653298][T20331] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 803.681629][T20331] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 803.725764][ T5701] usb 2-1: USB disconnect, device number 62 [ 803.763957][T20331] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 803.821251][T20331] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 803.868428][T20331] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 803.892454][T20331] usb 3-1: media controller created [ 803.926197][T10096] udevd[10096]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.953263][T30812] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 803.984358][T20331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.999625][T30812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3441'. [ 804.076418][T20331] zl10353_read_register: readreg error (reg=127, ret==0) [ 804.188882][T20331] usb 3-1: USB disconnect, device number 41 [ 804.468015][T30873] unsupported nlmsg_type 40 [ 804.498257][T30873] team0: Caught tx_queue_len zero misconfig [ 804.523470][T20331] usb 4-1: USB disconnect, device number 49 [ 805.143561][T30900] FAULT_INJECTION: forcing a failure. [ 805.143561][T30900] name failslab, interval 1, probability 0, space 0, times 0 [ 805.206012][T30900] CPU: 0 UID: 0 PID: 30900 Comm: syz.0.3447 Tainted: G L syzkaller #0 PREEMPT(full) [ 805.206040][T30900] Tainted: [L]=SOFTLOCKUP [ 805.206054][T30900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 805.206065][T30900] Call Trace: [ 805.206072][T30900] [ 805.206080][T30900] dump_stack_lvl+0xe8/0x150 [ 805.206106][T30900] should_fail_ex+0x412/0x560 [ 805.206133][T30900] should_failslab+0xa8/0x100 [ 805.206157][T30900] ? skb_clone+0x212/0x3a0 [ 805.206179][T30900] kmem_cache_alloc_noprof+0x87/0x650 [ 805.206209][T30900] skb_clone+0x212/0x3a0 [ 805.206235][T30900] __netlink_deliver_tap+0x404/0x850 [ 805.206268][T30900] ? netlink_deliver_tap+0x2e/0x1b0 [ 805.206291][T30900] netlink_deliver_tap+0x19c/0x1b0 [ 805.206313][T30900] netlink_sendskb+0x68/0x140 [ 805.206333][T30900] netlink_rcv_skb+0x2b6/0x4b0 [ 805.206355][T30900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.206373][T30900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.206409][T30900] ? down_read+0x270/0x2e0 [ 805.206430][T30900] ? genl_rcv+0xd/0x40 [ 805.206448][T30900] genl_rcv+0x28/0x40 [ 805.206463][T30900] netlink_unicast+0x75c/0x8e0 [ 805.206493][T30900] netlink_sendmsg+0x813/0xb40 [ 805.206523][T30900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.206546][T30900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 805.206568][T30900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.206592][T30900] ____sys_sendmsg+0x972/0x9f0 [ 805.206616][T30900] ? __might_fault+0xaf/0x130 [ 805.206642][T30900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.206674][T30900] ? import_iovec+0x73/0xa0 [ 805.206701][T30900] ___sys_sendmsg+0x2a5/0x360 [ 805.206721][T30900] ? __lock_acquire+0x6b5/0x2cf0 [ 805.206744][T30900] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.206802][T30900] ? __fget_files+0x2a/0x420 [ 805.206820][T30900] ? __fget_files+0x3a0/0x420 [ 805.206849][T30900] __x64_sys_sendmsg+0x1bd/0x2a0 [ 805.206873][T30900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 805.206905][T30900] ? __pfx_ksys_write+0x10/0x10 [ 805.206934][T30900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.206953][T30900] do_syscall_64+0x15f/0xf80 [ 805.206971][T30900] ? trace_irq_disable+0x3b/0x140 [ 805.206995][T30900] ? clear_bhb_loop+0x40/0x90 [ 805.207015][T30900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.207031][T30900] RIP: 0033:0x7f8ae4f9cdd9 [ 805.207069][T30900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.207084][T30900] RSP: 002b:00007f8ae5dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.207102][T30900] RAX: ffffffffffffffda RBX: 00007f8ae5215fa0 RCX: 00007f8ae4f9cdd9 [ 805.207114][T30900] RDX: 0000000020044010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 805.207125][T30900] RBP: 00007f8ae5dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 805.207135][T30900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.207145][T30900] R13: 00007f8ae5216038 R14: 00007f8ae5215fa0 R15: 00007f8ae533fa48 [ 805.207175][T30900] [ 805.620017][T30904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.628631][T30904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.740372][T30904] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3448'. [ 805.783412][T30912] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 805.886323][T30924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3450'. [ 805.991194][ T5701] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 806.125845][T30937] macvlan2: entered promiscuous mode [ 806.132327][T30937] macvlan2: entered allmulticast mode [ 806.145310][T30937] bond6: entered promiscuous mode [ 806.153825][T30937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 806.169843][T30937] bond6: left promiscuous mode [ 806.180762][ T5701] usb 2-1: Using ep0 maxpacket: 16 [ 806.227102][ T5701] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 806.246882][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.270905][ T5701] usb 2-1: config 0 descriptor?? [ 806.318942][ T5701] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 806.851904][ T5701] gspca_sonixj: reg_w1 err -110 [ 806.861768][ T5701] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 807.037273][T20331] usb 2-1: USB disconnect, device number 63 [ 807.049186][ T809] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 807.213552][T30991] syz_tun: entered allmulticast mode [ 807.224291][T30991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3458'. [ 807.235335][ T809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 807.244366][ T809] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 807.254956][ T809] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 807.264388][ T809] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.264915][T30991] syz_tun (unregistering): left allmulticast mode [ 807.281199][ T809] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 807.292898][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.301815][ T809] usb 3-1: Product: syz [ 807.305981][ T809] usb 3-1: Manufacturer: syz [ 807.311557][ T809] usb 3-1: SerialNumber: syz [ 807.330403][ T809] usb 3-1: selecting invalid altsetting 1 [ 807.336531][ T809] usb 3-1: unit 6 not found! [ 807.430144][T20331] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 807.482864][T31015] FAULT_INJECTION: forcing a failure. [ 807.482864][T31015] name failslab, interval 1, probability 0, space 0, times 0 [ 807.495827][T31015] CPU: 0 UID: 0 PID: 31015 Comm: syz.3.3460 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.495852][T31015] Tainted: [L]=SOFTLOCKUP [ 807.495856][T31015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 807.495862][T31015] Call Trace: [ 807.495867][T31015] [ 807.495872][T31015] dump_stack_lvl+0xe8/0x150 [ 807.495888][T31015] should_fail_ex+0x412/0x560 [ 807.495904][T31015] should_failslab+0xa8/0x100 [ 807.495920][T31015] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 807.495938][T31015] ? __alloc_skb+0x1d0/0x7d0 [ 807.495950][T31015] ? __local_bh_enable_ip+0xd0/0x130 [ 807.495963][T31015] __alloc_skb+0x1d0/0x7d0 [ 807.495974][T31015] ? netlink_ack_tlv_len+0x6c/0x210 [ 807.495989][T31015] netlink_ack+0x146/0xa50 [ 807.495999][T31015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.496008][T31015] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 807.496019][T31015] ? __pfx_nl80211_post_doit+0x10/0x10 [ 807.496030][T31015] ? __pfx_ref_tracker_free+0x10/0x10 [ 807.496048][T31015] netlink_rcv_skb+0x2b6/0x4b0 [ 807.496060][T31015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.496070][T31015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.496089][T31015] ? down_read+0x270/0x2e0 [ 807.496109][T31015] ? genl_rcv+0xd/0x40 [ 807.496119][T31015] genl_rcv+0x28/0x40 [ 807.496127][T31015] netlink_unicast+0x75c/0x8e0 [ 807.496143][T31015] netlink_sendmsg+0x813/0xb40 [ 807.496160][T31015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.496174][T31015] ? aa_sock_msg_perm+0xf1/0x1b0 [ 807.496187][T31015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.496202][T31015] ____sys_sendmsg+0x972/0x9f0 [ 807.496214][T31015] ? __might_fault+0xaf/0x130 [ 807.496229][T31015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.496246][T31015] ? import_iovec+0x73/0xa0 [ 807.496261][T31015] ___sys_sendmsg+0x2a5/0x360 [ 807.496273][T31015] ? __lock_acquire+0x6b5/0x2cf0 [ 807.496285][T31015] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.496314][T31015] ? __fget_files+0x2a/0x420 [ 807.496326][T31015] ? __fget_files+0x3a0/0x420 [ 807.496342][T31015] __x64_sys_sendmsg+0x1bd/0x2a0 [ 807.496355][T31015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.496372][T31015] ? __pfx_ksys_write+0x10/0x10 [ 807.496390][T31015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.496401][T31015] do_syscall_64+0x15f/0xf80 [ 807.496412][T31015] ? trace_irq_disable+0x3b/0x140 [ 807.496426][T31015] ? clear_bhb_loop+0x40/0x90 [ 807.496437][T31015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.496447][T31015] RIP: 0033:0x7fa51d59cdd9 [ 807.496457][T31015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.496466][T31015] RSP: 002b:00007fa51b7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.496477][T31015] RAX: ffffffffffffffda RBX: 00007fa51d815fa0 RCX: 00007fa51d59cdd9 [ 807.496484][T31015] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004 [ 807.496490][T31015] RBP: 00007fa51b7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 807.496496][T31015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.496502][T31015] R13: 00007fa51d816038 R14: 00007fa51d815fa0 R15: 00007fa51d93fa48 [ 807.496517][T31015] [ 807.902731][T20331] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 807.911940][T20331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.920255][T20331] usb 2-1: Product: syz [ 807.924440][T20331] usb 2-1: Manufacturer: syz [ 807.929016][T20331] usb 2-1: SerialNumber: syz [ 807.935895][T20331] usb 2-1: config 0 descriptor?? [ 807.943544][T20331] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 807.952370][T20331] usb 2-1: Detected FT232HP [ 808.089361][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 808.181792][T20331] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 808.196598][T20331] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 808.229522][ T9] usb 4-1: device descriptor read/64, error -71 [ 808.427002][T31037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.438105][T31037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.469287][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 808.562177][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.569459][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.582877][ T809] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 808.592411][ T809] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 808.608108][ T809] usb 3-1: selecting invalid altsetting 1 [ 808.615563][ T9] usb 4-1: device descriptor read/64, error -71 [ 808.623817][ T809] usb 3-1: unit 6 not found! [ 808.630757][ T809] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 808.705067][ T809] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 808.722223][ T809] usb 3-1: USB disconnect, device number 42 [ 808.731112][ T9] usb usb4-port1: attempt power cycle [ 808.773431][T26445] udevd[26445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.865104][T31064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3465'. [ 808.895214][T31064] syzkaller1: entered promiscuous mode [ 808.901245][T31064] syzkaller1: entered allmulticast mode [ 808.942010][ T809] usb 2-1: USB disconnect, device number 64 [ 808.965164][ T809] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 808.993355][ T809] ftdi_sio 2-1:0.0: device disconnected [ 809.071048][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 809.100003][ T9] usb 4-1: device descriptor read/8, error -71 [ 809.349305][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 809.390413][ T9] usb 4-1: device descriptor read/8, error -71 [ 809.421500][ T809] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 809.438994][T31097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.453433][T31097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.498888][T31101] xt_hashlimit: size too large, truncated to 1048576 [ 809.510917][ T9] usb usb4-port1: unable to enumerate USB device [ 809.554097][T31103] vivid-000: ================= START STATUS ================= [ 809.562883][T31103] vivid-000: Radio HW Seek Mode: Bounded [ 809.570882][T31103] vivid-000: Radio Programmable HW Seek: false [ 809.578013][T31103] vivid-000: RDS Rx I/O Mode: Block I/O [ 809.579697][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 809.585726][T31103] vivid-000: Generate RBDS Instead of RDS: false [ 809.595207][ T809] usb 2-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 809.597059][T31103] vivid-000: RDS Reception: true [ 809.615245][T31103] vivid-000: RDS Program Type: 0 inactive [ 809.622358][T31103] vivid-000: RDS PS Name: inactive [ 809.626860][ T809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 809.627597][T31103] vivid-000: RDS Radio Text: inactive [ 809.627629][T31103] vivid-000: RDS Traffic Announcement: false inactive [ 809.627655][T31103] vivid-000: RDS Traffic Program: false inactive [ 809.627680][T31103] vivid-000: RDS Music: false inactive [ 809.627703][T31103] vivid-000: ================== END STATUS ================== [ 809.670387][ T809] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 809.682266][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.694112][ T809] usb 2-1: config 0 descriptor?? [ 809.703786][ T809] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 810.335499][T31119] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 810.396615][T31143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3475'. [ 810.476673][T31119] macvlan2: entered promiscuous mode [ 810.482314][T31119] macvlan2: entered allmulticast mode [ 810.489851][T31119] bond4: entered promiscuous mode [ 810.504271][T31119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 810.528785][T31119] bond4: left promiscuous mode [ 810.769275][ T879] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 810.921906][ T879] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 810.961535][ T879] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 810.984453][ T879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.148338][T31177] gtp1: entered promiscuous mode [ 811.153660][T31177] gtp1: entered allmulticast mode [ 811.219875][ T879] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 812.100399][T20331] usb 2-1: USB disconnect, device number 65 [ 812.192341][T31192] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.3479'. [ 812.204013][T31192] tipc: Started in network mode [ 812.208918][T31192] tipc: Node identity 3ab4878062e8, cluster identity 4711 [ 812.218153][T31192] tipc: Enabled bearer , priority 0 [ 812.234499][T31192] syzkaller0: entered promiscuous mode [ 812.241387][T31192] syzkaller0: entered allmulticast mode [ 812.277339][T31192] tipc: Resetting bearer [ 812.435943][ T879] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 812.459996][ T879] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 812.482763][ T879] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 812.502026][ T879] usb 3-1: USB disconnect, device number 43 [ 812.579306][T20331] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 812.718279][T31208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.731097][T20331] usb 2-1: config 27 interface 0 altsetting 17 has an endpoint descriptor with address 0x6C, changing to 0xC [ 812.743558][T31208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.752663][T20331] usb 2-1: config 27 interface 0 altsetting 17 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 812.764372][T20331] usb 2-1: config 27 interface 0 altsetting 17 endpoint 0xB has invalid wMaxPacketSize 0 [ 812.776385][T20331] usb 2-1: config 27 interface 0 altsetting 17 bulk endpoint 0xB has invalid maxpacket 0 [ 812.790513][T20331] usb 2-1: config 27 interface 0 has no altsetting 0 [ 812.797873][T20331] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.808350][T20331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.856549][T20331] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.901294][T20331] usb 2-1: invalid MIDI in EP 0 [ 813.073995][T31190] tipc: Resetting bearer [ 813.222782][T20331] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 813.259522][T31190] tipc: Disabling bearer [ 813.285276][T20331] usb 2-1: USB disconnect, device number 66 [ 813.404133][ T9] tipc: Node number set to 1482459008 [ 813.612739][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 813.632105][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 813.643074][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 813.653310][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 813.675690][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 814.119110][T31307] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3487'. [ 814.273292][T31335] netlink: 'syz.3.3490': attribute type 29 has an invalid length. [ 814.282133][T31335] netlink: 'syz.3.3490': attribute type 29 has an invalid length. [ 814.467477][ T5701] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 814.493795][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.508141][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.529812][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 814.572024][T31264] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.581510][T31264] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.588816][T31264] bridge_slave_0: entered allmulticast mode [ 814.596789][T31264] bridge_slave_0: entered promiscuous mode [ 814.607262][T31264] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.616689][T31264] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.624207][T31264] bridge_slave_1: entered allmulticast mode [ 814.631496][T31264] bridge_slave_1: entered promiscuous mode [ 814.661265][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.669696][ T10] usb 4-1: device descriptor read/64, error -71 [ 814.671537][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.718173][T31264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.720313][ T5701] usb 2-1: device descriptor read/64, error -71 [ 814.730696][T31264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.765805][T31264] team0: Port device team_slave_0 added [ 814.773355][T31264] team0: Port device team_slave_1 added [ 814.802676][T31264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.809650][T31264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.863032][T31264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.914152][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 814.944576][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.955049][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.973356][T31264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.980406][T31264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.006609][T31264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.049202][ T10] usb 4-1: device descriptor read/64, error -71 [ 815.053564][ T5701] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 815.080504][T31465] netlink: 'syz.2.3492': attribute type 1 has an invalid length. [ 815.118132][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.128423][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.150538][T31264] hsr_slave_0: entered promiscuous mode [ 815.159760][T31479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3492'. [ 815.169906][ T10] usb usb4-port1: attempt power cycle [ 815.188405][T31264] hsr_slave_1: entered promiscuous mode [ 815.198162][T31264] debugfs: 'hsr0' already exists in 'hsr' [ 815.205372][T31264] Cannot create hsr debugfs directory [ 815.237016][T31474] syzkaller0: entered promiscuous mode [ 815.247249][T31474] syzkaller0: entered allmulticast mode [ 815.425969][ T5701] usb 2-1: device descriptor read/64, error -71 [ 815.479557][ T809] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 815.519894][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 815.551470][ T10] usb 4-1: device descriptor read/8, error -71 [ 815.559602][ T48] bridge0: port 3(dummy0) entered disabled state [ 815.572632][ T48] bridge_slave_1: left allmulticast mode [ 815.578311][ T48] bridge_slave_1: left promiscuous mode [ 815.591581][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.601651][ T48] bridge_slave_0: left allmulticast mode [ 815.607352][ T48] bridge_slave_0: left promiscuous mode [ 815.613229][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.648056][ T5701] usb usb2-port1: attempt power cycle [ 815.657811][ T809] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 815.671906][ T809] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 815.681507][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.717175][ T809] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 815.751222][ T5638] Bluetooth: hci3: command tx timeout [ 815.805664][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 815.849910][ T10] usb 4-1: device descriptor read/8, error -71 [ 815.959852][ T10] usb usb4-port1: unable to enumerate USB device [ 816.098299][ T5701] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 816.101473][ T48] bond1 (unregistering): Released all slaves [ 816.115258][ T48] bond0 (unregistering): Released all slaves [ 816.130115][ T5701] usb 2-1: device descriptor read/8, error -71 [ 816.142323][ T48] bond2 (unregistering): Released all slaves [ 816.167786][ T48] bond3 (unregistering): Released all slaves [ 816.197781][ T48] bond4 (unregistering): Released all slaves [ 816.224374][ T48] bond5 (unregistering): Released all slaves [ 816.255831][ T48] bond6 (unregistering): Released all slaves [ 816.315764][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 816.397553][ T5701] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 816.458976][ T48] tipc: Left network mode [ 816.861868][ T5701] usb 2-1: device descriptor read/8, error -71 [ 817.008918][ T809] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 817.035805][ T809] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 817.044849][ T809] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 817.060954][ T809] usb 3-1: USB disconnect, device number 44 [ 817.076640][ T5701] usb usb2-port1: unable to enumerate USB device [ 817.733337][ T48] hsr_slave_0: left promiscuous mode [ 817.782587][ T48] hsr_slave_1: left promiscuous mode [ 817.788475][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.801864][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.822618][ T48] veth1_macvtap: left promiscuous mode [ 817.830457][ T5638] Bluetooth: hci3: command tx timeout [ 817.836831][ T48] veth0_macvtap: left promiscuous mode [ 817.877547][T31686] binder: 31683:31686 ioctl 4048587b 2000000009c0 returned -22 [ 817.901811][ T48] veth1_vlan: left promiscuous mode [ 818.156467][ T48] team0 (unregistering): Port device batadv1 removed [ 818.318056][T31686] binder: 31683:31686 ioctl c0306201 200000000080 returned -14 [ 818.352063][T31686] binder: 31683:31686 ioctl c0306201 2000000003c0 returned -14 [ 818.429238][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 818.599550][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 818.601151][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 818.601175][ T9] usb 3-1: config 1 has no interface number 0 [ 818.601198][ T9] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 43328, setting to 1024 [ 818.601212][ T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 818.601224][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 818.603103][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 818.603127][ T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 818.603145][ T9] usb 3-1: Product: syz [ 818.603159][ T9] usb 3-1: Manufacturer: syz [ 818.603173][ T9] usb 3-1: SerialNumber: syz [ 818.618275][T31693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 818.972358][ T9] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 819.168830][T31693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.186760][T31693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.192024][T23580] usb 3-1: USB disconnect, device number 45 [ 819.409204][ T809] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 819.572512][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 819.590395][ T809] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 819.616315][ T48] team0 (unregistering): Port device team_slave_1 removed [ 819.618514][ T809] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 819.651165][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.678612][ T809] usb 4-1: Product: syz [ 819.694833][ T809] usb 4-1: Manufacturer: syz [ 819.710765][ T809] usb 4-1: SerialNumber: syz [ 819.722740][ T48] team0 (unregistering): Port device team_slave_0 removed [ 819.910031][ T5638] Bluetooth: hci3: command tx timeout [ 820.540131][ T5701] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 820.699365][ T5701] usb 3-1: device descriptor read/64, error -71 [ 820.756620][T31726] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3504'. [ 820.775817][T31735] netlink: 'syz.2.3506': attribute type 29 has an invalid length. [ 820.851635][T31736] netlink: 'syz.2.3506': attribute type 29 has an invalid length. [ 820.871098][T31752] syzkaller0: entered promiscuous mode [ 820.878255][T31752] syzkaller0: entered allmulticast mode [ 821.016755][ T5701] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 821.180738][ T5701] usb 3-1: device descriptor read/64, error -71 [ 821.416046][ T5701] usb usb3-port1: attempt power cycle [ 821.501593][T31264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 821.577510][T31264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.618859][T31264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 821.655890][T31264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.697901][T31264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 821.715550][ T809] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 821.759021][ T809] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 821.770631][T31264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.795550][T31264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 821.809581][ T5701] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 821.810431][ T48] IPVS: stop unused estimator thread 0... [ 821.883042][ T5701] usb 3-1: device descriptor read/8, error -71 [ 821.911381][T31264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.947954][T31794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.990574][ T5638] Bluetooth: hci3: command tx timeout [ 822.028037][T31794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.045506][ T809] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 822.076096][ T809] usb 4-1: USB disconnect, device number 58 [ 822.175444][ T5701] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 822.202444][T26445] udevd[26445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 822.370221][T31264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.393230][T31264] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.415992][T21819] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.423180][T21819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.486180][T31828] lo: Caught tx_queue_len zero misconfig [ 822.514346][T21819] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.521513][T21819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.589557][ T809] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 822.660149][ T5701] usb 3-1: device descriptor read/8, error -71 [ 822.723317][T31264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.753813][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 822.802551][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 822.836269][ T809] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 822.854013][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.876478][ T5701] usb usb3-port1: unable to enumerate USB device [ 822.894670][ T809] usb 4-1: Product: syz [ 822.907879][ T809] usb 4-1: Manufacturer: syz [ 822.927597][ T809] usb 4-1: SerialNumber: syz [ 823.185970][T31264] veth0_vlan: entered promiscuous mode [ 823.193208][ T809] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 823.193264][ T809] usb 4-1: MIDIStreaming interface descriptor not found [ 823.367743][T31264] veth1_vlan: entered promiscuous mode [ 823.439624][ T809] usb 4-1: USB disconnect, device number 59 [ 823.875429][T31906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'. [ 824.308056][T31264] veth0_macvtap: entered promiscuous mode [ 824.401325][T31264] veth1_macvtap: entered promiscuous mode [ 824.616657][T31919] netlink: 'syz.3.3516': attribute type 10 has an invalid length. [ 824.633546][T31264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.686012][T31919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.708492][T31919] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 824.734383][T31919] team0: Failed to send options change via netlink (err -105) [ 824.776233][T31919] team0: Port device netdevsim1 added [ 825.064709][T31264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.312290][T31924] syzkaller0: entered promiscuous mode [ 825.327247][T31924] syzkaller0: entered allmulticast mode [ 825.333288][T20331] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 825.433370][T21328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.468983][T21328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.518519][T20331] usb 4-1: Using ep0 maxpacket: 16 [ 825.533867][T20331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.565270][T20331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.612876][T20331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.634203][T21328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.646846][T20331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.661564][T21328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.688902][T20331] usb 4-1: Product: syz [ 825.711167][T20331] usb 4-1: Manufacturer: syz [ 825.765804][T20331] usb 4-1: SerialNumber: syz [ 826.022226][T20331] usb 4-1: 0:2 : does not exist [ 826.256741][T20331] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 826.450616][T21328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.472717][T20331] usb 4-1: USB disconnect, device number 60 [ 826.496064][T21328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.585182][T26445] udevd[26445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.638127][T21328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.681470][T21328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.901548][T31985] netlink: 'syz.3.3522': attribute type 29 has an invalid length. [ 826.914827][T31985] netlink: 'syz.3.3522': attribute type 29 has an invalid length. [ 826.945321][T31986] syzkaller0: entered promiscuous mode [ 826.953392][T31986] syzkaller0: entered allmulticast mode [ 827.333118][ T5701] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 827.776559][ T5701] usb 4-1: device descriptor read/64, error -71 [ 827.925486][T31842] Set syz1 is full, maxelem 65536 reached [ 827.986547][T32003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3525'. [ 828.139246][ T809] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 828.213027][T32012] syzkaller0: entered promiscuous mode [ 828.218732][T32012] syzkaller0: entered allmulticast mode [ 828.305186][ T809] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 828.317689][ T809] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 828.331521][ T809] usb 2-1: config 220 has no interface number 2 [ 828.337895][ T809] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 828.352880][ T809] usb 2-1: config 220 interface 0 has no altsetting 0 [ 828.360088][ T809] usb 2-1: config 220 interface 76 has no altsetting 0 [ 828.368225][ T809] usb 2-1: config 220 interface 1 has no altsetting 0 [ 828.378963][ T809] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 828.388318][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.397555][ T809] usb 2-1: Product: syz [ 828.417595][ T9] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 828.425751][ T809] usb 2-1: Manufacturer: syz [ 828.431027][ T809] usb 2-1: SerialNumber: syz [ 828.581581][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 828.591224][ T9] usb 3-1: config 250 has an invalid interface number: 59 but max is 0 [ 828.600603][ T9] usb 3-1: config 250 has no interface number 0 [ 828.606942][ T9] usb 3-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 828.621922][ T9] usb 3-1: config 250 interface 59 altsetting 255 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 828.635019][ T9] usb 3-1: config 250 interface 59 altsetting 255 endpoint 0x82 is Bulk; changing to Interrupt [ 828.655075][ T5701] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 828.661133][ T809] usb 2-1: selecting invalid altsetting 0 [ 828.681623][ T9] usb 3-1: config 250 interface 59 altsetting 255 endpoint 0x8 has invalid maxpacket 512, setting to 8 [ 828.705231][ T809] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 828.734968][ T9] usb 3-1: config 250 interface 59 altsetting 255 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.749658][ T809] uvcvideo 2-1:220.0: No valid video chain found. [ 828.758093][ T9] usb 3-1: config 250 interface 59 has no altsetting 0 [ 828.773219][ T9] usb 3-1: string descriptor 0 read error: -22 [ 828.796783][ T809] usb 2-1: selecting invalid altsetting 0 [ 828.807092][ T9] usb 3-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 828.825917][ T809] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 828.835955][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.849767][ T809] usb 2-1: USB disconnect, device number 71 [ 828.873697][T32007] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 828.970907][ T9] em28xx 3-1:250.59: New device @ 1.5 Mbps (1b80:e302, interface 59, class 59) [ 828.991701][ T9] em28xx 3-1:250.59: Device initialization failed. [ 829.022607][ T9] em28xx 3-1:250.59: Device must be connected to a high-speed USB 2.0 port. [ 829.184811][ T9] usb 3-1: USB disconnect, device number 50 [ 829.205212][ T5701] usb 4-1: device descriptor read/64, error -71 [ 829.581156][T32045] FAULT_INJECTION: forcing a failure. [ 829.581156][T32045] name failslab, interval 1, probability 0, space 0, times 0 [ 829.598057][T32045] CPU: 0 UID: 0 PID: 32045 Comm: syz.1.3530 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.598086][T32045] Tainted: [L]=SOFTLOCKUP [ 829.598093][T32045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.598103][T32045] Call Trace: [ 829.598110][T32045] [ 829.598118][T32045] dump_stack_lvl+0xe8/0x150 [ 829.598143][T32045] should_fail_ex+0x412/0x560 [ 829.598169][T32045] should_failslab+0xa8/0x100 [ 829.598192][T32045] ? skb_clone+0x212/0x3a0 [ 829.598214][T32045] kmem_cache_alloc_noprof+0x87/0x650 [ 829.598236][T32045] ? __netlink_lookup+0xc6/0x8b0 [ 829.598269][T32045] skb_clone+0x212/0x3a0 [ 829.598294][T32045] __netlink_deliver_tap+0x404/0x850 [ 829.598325][T32045] ? netlink_deliver_tap+0x2e/0x1b0 [ 829.598347][T32045] netlink_deliver_tap+0x19c/0x1b0 [ 829.598369][T32045] netlink_unicast+0x730/0x8e0 [ 829.598397][T32045] netlink_sendmsg+0x813/0xb40 [ 829.598427][T32045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.598451][T32045] ? aa_sock_msg_perm+0xf1/0x1b0 [ 829.598473][T32045] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 829.598498][T32045] ____sys_sendmsg+0x972/0x9f0 [ 829.598519][T32045] ? __might_fault+0xaf/0x130 [ 829.598545][T32045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.598575][T32045] ? import_iovec+0x73/0xa0 [ 829.598601][T32045] ___sys_sendmsg+0x2a5/0x360 [ 829.598620][T32045] ? __lock_acquire+0x6b5/0x2cf0 [ 829.598642][T32045] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.598697][T32045] ? __fget_files+0x2a/0x420 [ 829.598715][T32045] ? __fget_files+0x3a0/0x420 [ 829.598743][T32045] __x64_sys_sendmsg+0x1bd/0x2a0 [ 829.598768][T32045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 829.598797][T32045] ? __pfx_ksys_write+0x10/0x10 [ 829.598827][T32045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.598844][T32045] do_syscall_64+0x15f/0xf80 [ 829.598864][T32045] ? trace_irq_disable+0x3b/0x140 [ 829.598886][T32045] ? clear_bhb_loop+0x40/0x90 [ 829.598906][T32045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.598922][T32045] RIP: 0033:0x7fe71419cdd9 [ 829.598939][T32045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.598951][T32045] RSP: 002b:00007fe7150ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.598969][T32045] RAX: ffffffffffffffda RBX: 00007fe714415fa0 RCX: 00007fe71419cdd9 [ 829.598980][T32045] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 829.598991][T32045] RBP: 00007fe7150ea090 R08: 0000000000000000 R09: 0000000000000000 [ 829.599001][T32045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.599009][T32045] R13: 00007fe714416038 R14: 00007fe714415fa0 R15: 00007fe71453fa48 [ 829.599037][T32045] [ 830.278478][T32058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.327988][T32065] syzkaller0: entered promiscuous mode [ 830.364510][T32065] syzkaller0: entered allmulticast mode [ 830.451414][T32058] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 830.507979][T32076] syzkaller0: entered promiscuous mode [ 830.547862][T32076] syzkaller0: entered allmulticast mode [ 830.600259][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 830.766007][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.801196][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 830.879000][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.895188][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.932014][ T9] usb 2-1: Product: syz [ 830.958400][ T9] usb 2-1: Manufacturer: syz [ 830.994247][ T9] usb 2-1: SerialNumber: syz [ 831.138795][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 831.153126][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 831.165616][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 831.179943][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 831.188149][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 831.247579][T32068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.299846][T32068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.383300][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 831.416285][T32104] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3538'. [ 831.430804][ T9] usb 2-1: USB disconnect, device number 72 [ 831.788370][T32109] syzkaller1: entered promiscuous mode [ 831.795064][T32109] syzkaller1: entered allmulticast mode [ 831.889589][ T9] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 831.922191][T21383] syz_tun (unregistering): left allmulticast mode [ 832.061550][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 832.093778][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 832.121898][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 832.160126][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 832.187174][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 832.199363][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 832.212345][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.443963][ T9] usb 2-1: usb_control_msg returned -71 [ 832.454917][ T9] usbtmc 2-1:16.0: can't read capabilities [ 832.519784][ T9] usb 2-1: USB disconnect, device number 73 [ 833.269396][ T50] Bluetooth: hci1: command tx timeout [ 834.203804][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 838.149513][ T50] Bluetooth: hci1: command tx timeout [ 839.169122][ C1] sched: DL replenish lagged too much [ 840.229254][ T50] Bluetooth: hci1: command tx timeout [ 842.309255][ T50] Bluetooth: hci1: command tx timeout [ 855.043311][ T5701] usb usb4-port1: attempt power cycle [ 870.009699][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.209241][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 891.286450][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.020784][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.027167][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 946.074355][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 964.793067][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 983.909412][ T31] INFO: task syz.0.3539:32124 blocked for more than 143 seconds. [ 988.470131][ T31] Tainted: G L syzkaller #0 [ 988.640725][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 988.754831][ T31] task:syz.0.3539 state:D stack:27080 pid:32124 tgid:32120 ppid:31264 task_flags:0x400140 flags:0x00080002 [ 988.919606][ T31] Call Trace: [ 988.969323][ T31] [ 989.007829][ T31] __schedule+0x17b4/0x5680 [ 989.090116][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 989.159511][ T31] ? kasan_save_track+0x4f/0x80 [ 989.192729][ T31] ? __kasan_slab_free+0x5c/0x80 [ 989.245612][ T31] ? tomoyo_path_number_perm+0x501/0x630 [ 989.300338][ T31] ? __pfx___schedule+0x10/0x10 [ 989.348252][ T31] ? schedule+0x90/0x360 [ 989.385923][ T31] schedule+0x164/0x360 [ 989.421540][ T31] schedule_preempt_disabled+0x13/0x30 [ 989.478967][ T31] __mutex_lock+0x7f7/0x1550 [ 989.553483][ T31] ? __mutex_lock+0x608/0x1550 [ 989.588942][ T31] ? dev_ioctl+0x7a4/0x1150 [ 989.617143][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 989.683495][ T31] ? dev_load+0x21/0x1f0 [ 989.725952][ T31] ? dev_load+0x21/0x1f0 [ 989.773383][ T31] dev_ioctl+0x7a4/0x1150 [ 989.826364][ T31] sock_do_ioctl+0x23e/0x320 [ 989.878312][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 989.951749][ T31] ? do_futex+0x333/0x420 [ 990.003279][ T31] sock_ioctl+0x5c6/0x7f0 [ 990.075683][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 990.136168][ T31] ? __fget_files+0x2a/0x420 [ 990.226616][ T31] ? __fget_files+0x3a0/0x420 [ 990.283253][ T31] ? __fget_files+0x2a/0x420 [ 990.361972][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 990.421891][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 990.496770][ T31] __se_sys_ioctl+0xfc/0x170 [ 990.540143][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.625546][ T31] do_syscall_64+0x15f/0xf80 [ 990.687271][ T31] ? trace_irq_disable+0x3b/0x140 [ 990.755309][ T31] ? clear_bhb_loop+0x40/0x90 [ 990.827376][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.906976][ T31] RIP: 0033:0x7f650f59cdd9 [ 990.968459][ T31] RSP: 002b:00007f6510425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.082055][ T31] RAX: ffffffffffffffda RBX: 00007f650f815fa0 RCX: 00007f650f59cdd9 [ 991.195992][ T31] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 991.204692][T32160] usb 6-1: USB disconnect, device number 15 [ 991.310020][ T31] RBP: 00007f650f632d69 R08: 0000000000000000 R09: 0000000000000000 [ 991.417982][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.437708][T32124] syzkaller0: entered promiscuous mode [ 991.517901][T32124] syzkaller0: entered allmulticast mode [ 991.534450][ T31] R13: 00007f650f816038 R14: 00007f650f815fa0 R15: 00007f650f93fa48 [ 991.614665][ T31] [ 991.640535][ T31] [ 991.640535][ T31] Showing all locks held in the system: [ 991.704214][ T31] 3 locks held by kworker/1:0/24: [ 991.738962][ T31] 4 locks held by kworker/1:1/29: [ 991.783394][ T31] 1 lock held by khungtaskd/31: [ 991.827878][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 991.902435][ T31] 3 locks held by kworker/u8:3/48: [ 991.957475][ T31] #0: ffff88801bff1940 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 991.993795][T32193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 992.019985][T32193] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 992.030137][T32193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 992.045088][T32193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 992.058028][T32193] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 992.143814][ T31] #1: ffffc90000b87c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 992.241551][ T31] #2: ffffffff8fdcf640 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd6/0x660 [ 992.316611][T19659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 992.342035][T19659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 992.349067][ T31] 4 locks held by kworker/u9:0/50: [ 992.357237][T19659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 992.365479][T19659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 992.375575][T19659] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 992.446161][T32201] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 992.470467][T32201] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 992.480367][T32201] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 992.490020][T32201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 992.510610][ T31] #0: ffff888060124140 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 992.528615][T32201] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 992.621922][ T31] #1: ffffc90000ba7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 992.676811][ T31] #2: ffff8880289580b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 992.719231][ T31] #3: ffffffff8ff52880 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 992.746804][ T31] 6 locks held by kworker/u8:8/155: [ 992.778241][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 992.819495][ T31] #1: ffffc90002f37c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 992.889218][ T31] #2: ffffffff8fdc0968 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 992.933257][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.939945][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.948353][ T31] #3: ffff88802ab9c128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 993.010145][ T31] #4: ffff888056c51258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 993.097132][ T31] #5: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 993.177725][ T31] 4 locks held by kworker/0:2/809: [ 993.208162][ T31] #0: ffff888077eab140 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 993.278667][ T31] #1: ffffc90004967c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 993.468620][ T31] #2: ffff888077f113c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a1/0x9a0 [ 993.526697][ T31] #3: ffff88802a025c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x58b/0x9a0 [ 993.578454][ T31] 4 locks held by kworker/1:2/879: [ 993.607329][ T31] 3 locks held by kworker/R-ipv6_/3194: [ 993.640094][ T31] #0: ffff888031904940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 993.669488][ T31] #1: ffffc9000d57fc00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 993.702797][ T31] #2: ffffffff8fdcf640 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 993.720177][ T31] 3 locks held by kworker/1:3/5358: [ 993.730900][ T31] 2 locks held by getty/5379: [ 993.740949][ T31] #0: ffff8880366a70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 993.779327][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 993.799327][ T31] 5 locks held by kworker/u9:8/5638: [ 993.814040][ T31] #0: ffff88807adf0940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 993.835334][ T31] #1: ffffc900043f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 993.850393][ T31] #2: ffff888040e28ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 993.860723][ T31] #3: ffff888040e280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 993.875379][ T31] #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 993.886997][ T31] 4 locks held by kworker/0:4/5687: [ 993.892587][ T31] #0: ffff888033166540 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860