last executing test programs: 32.080940929s ago: executing program 2 (id=3148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/57, 0x39}, {&(0x7f0000001200)=""/4, 0x4}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/201, 0xc9}], 0x7, 0x6, 0x8) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000023c0), 0x10) sendmsg$nl_route(r0, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)=@ipv4_delroute={0x34, 0x19, 0x100, 0x70bd25, 0x25dfdbfd, {0x2, 0x24, 0x0, 0x8, 0x0, 0x3, 0xfd, 0x1, 0x400}, [@RTA_SRC={0x8, 0x2, @private=0xa010100}, @RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002540)={0x8, &(0x7f0000002500)=[{0xffff, 0x3, 0x9, 0x2}, {0x5, 0x3, 0x68, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x81, 0xc, 0x9c, 0x6}, {0xa6b, 0x8, 0x6, 0x7f}, {0x0, 0x4, 0x2}, {0x1, 0x0, 0x6, 0x1}, {0x10, 0x6, 0xe, 0x19b7}]}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002580)='net/ip6_flowlabel\x00') ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000025c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$getown(r4, 0x9) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000002600)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000002640)) fstat(r2, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0), &(0x7f0000002780)=@v3={0x3000000, [{0x8, 0x496800}, {0x0, 0x80}], r6}, 0x18, 0x4) r7 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x71, 0xffffffffffffff88, &(0x7f00000027c0)=0x1) r8 = dup(r1) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002840)=@generic={&(0x7f0000002800)='./file0\x00', 0x0, 0x10}, 0x18) pread64(r0, &(0x7f0000002880)=""/4096, 0x1000, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x20010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6d40, &(0x7f0000003880)={0x0, 0x31c6, 0x100, 0x2, 0x293, 0x0, r7}, &(0x7f0000003900), &(0x7f0000003940)) r10 = getpgid(r5) rt_tgsigqueueinfo(r5, r10, 0x30, &(0x7f0000003980)={0xa, 0x1, 0xb93}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000003a40)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), r11) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r6, 0x0) io_setup(0x7fffffff, &(0x7f0000003a80)=0x0) io_submit(r12, 0x3, &(0x7f0000004cc0)=[&(0x7f0000003b40)={0x0, 0x0, 0x0, 0x8, 0x8, r9, &(0x7f0000003ac0)="10cbe737aab22317e91f382f06763ed8b714ae21caef13abddde24c4638ef7cd2c77011221a173796acf6c4bd8d4dd74a54357a9e475e3b00ab469626c7356a106a94562c53c07a1d4dda237b88a53bf86c63d1d911b539a8b90d78a7cca3d84db3484755cd026b2683b5ef7b253d9bed3fc967f54ae01d2be", 0x79, 0x2, 0x0, 0x2, r7}, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x5, 0xa0, r4, &(0x7f0000003b80)="39d68e22a088e8482c6d82210e00d59097d167f58e8eaaf00fc206ff1e3c1cc7c12febdf4772be72cf3fddad574f628911b9d75b43213974e0a4f87a8590eac19a40c1aa6372644a6a2b5aadb02be84d39130d537f794ecff834f278b01d96e9f2c037fc0e", 0x65, 0x4, 0x0, 0x3}, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000003c80)="5a8bc11127d14d238eb67c399ae34dee92d73a4270e392895f13540b0f3481b431770388d9f161d29fa9de6c66abadbe0b077d2f48c16c070ead1807060b95a1357e13fbf19ab4df1f4f73df74760d24b4bed128847a7b7cd52c04d5432762407242dd1ae9e15951176a9f59ce31b464f235ec2a17a9dcbc1e0278247677c1c7d4ab4a5ec99f9b55d43976f73d71462c05451f03cb4fd931d972da7df70ed29febb0ccd7a0e2cccce4bdc88bc0484ba6d03bf9a8efc0c30e5136d4ab768934d7632b19ca4b42325c3bb33107a64cb2fbf165c8c519be22f9d51dc910e9187c797592603b560bb0dee6029207100922aade042c532895481fa52e172e6502e47aae05edb5bdc80af9d8c650e1124a13c198b5555a175ef3cc37aa1ddb75f118c7ff5dbe71ec2306a9727e4b83118673596b45262452c8050caf7dcda3cff5a27beb83088f51e935e671dd1a63e0dae8094678d5bcdf667e64ead4b8d64ce8cdae2b5e0334edc1811d50b2cf3c8dcd7b22c63880fbac0535f3dda74129d5986f384026b96286e8cf8e245a6170d6c950809bd041c9b278a06d132bb526d4c38d684f95a68ef80f129ba4aa9fa7fc91f945e024549cb53b669bf49535ba4684c9ac34072123c4b91b17748a0c62ce16111c2090999bec594208ecd28499fd35da5deb0028cec437fa3fc1964db4ef308a3beb44d23ee9ae5a1367f7bb6962532a5b1fbea824cdad2632e03f6ed9d9c97448c5183047626df4f24611da5d3592c3629091ea47d2c77b89b52a6a55d7834c5b79890eb0b9e9baf5b8297b85fb9dd33c61eff723793bd88491dbae6ecab0bd5dd7d4d647ffe22531bd87cb43b7bb2f4395088afd8e2c890c1b660d53b99ad75f8565a074177f4ae030a5bedf710f82ad9acac059ec0dd8d49dbb13a8d583577a3fbe560124f3efde3c3c61677b6b6a86ffaecc33646758c0bd870b2a9de2e8422621bd2b08748ce8c8a87fe2ce5fd26b87be3f3e7e0e8d7d0694ee04ebfae9bbe2213139cca1763a1aecae82d98fdee5c86bee623b88af174163c9c20a4361dfa30a04f41d9e69d3b19c1445c2c1cf75ecb71c7320b57a3fd02f837bb2aefafa96196798e590bc7768b4eae5620da0d774dfe37c8995c930a6781980a9e78eb5c858560406f5c150a67e3a546d54fdc1edd9c565bc6ac7a0f74a308b8e1e48b1408d431fb9c25b7db3a80a1370ae2b6b62c489941009dbfef80d68dd8dcb7dc7f9eb62a15b81f9c1b738428244d261d6bc44d78d971e29bd5e7c29cf65e469edf3c0ef1322f21a88526a5ee39e77fe42fe484da7eb59da60bc57a041426475b0fed46bab99e3cc4294755d58126a9113a12955aaec8991dd9b97e50db04a8199a407b9eb43b3026a2447bec49c5b332ae29b83b8219b2f9b947c5d854b291079b60a35a1dbdbf6c242f7899e8698acb1744a99fd0430390d7d514311d7bb07b0994054d2af86516fd406e9c9007b5a2f01b83c2b5200a830027517b8fc732ac1680d7bd0d5cc9eb6032a1117b683457ab5f1271b3c003483e7f4332a84f890e806c018ae13167d2f98b2b492dfb87a6770e8b210cddff43bbc2281e3dde4f7f083930cec0105fc2210d26b9d70512e0e59e3323569d70baeec228e1a06912dda60cbf591765113e1e6d902256d3820caddeae4694efa77ac6300d928935bd5d617d5904d89108b97e8879a58fd71a70ab989d2fad823f0e7a9a1c916f2e9c91779419d6c293669c2825977561d33f81c646461a6f81c879f2638f09347f4d573e8389ca8ac107a6cd8f6e4d9f1b5af0f28823d9a08339cb3494e2126816fdad3d23175a171901802b6fd331270aa278e6ed87ed3e13d035704c30ad5c4ea373d5033f208ccc83bc21db0f7f048da59f22c5670b65885e3df19cded1c5b1863e885bae644b9a5d4e61ffc39f6ec546d7ca0233338648d554d5e1b2e6640d9b21081d88197a08a575df0a707e4f17dbc6bcf670f9682cb35a29a2a531585ff06f666b0e7392a2a28b12d2676fc6f03531bb42630b1fb3ef10a2c17659043b6ea6058200a9d2ba9782a556e1449d6bfc6389ba069a157650f83a5516527247b39a0f51c2a2d7cd1e4a720ec230ee953bf865b50cf348b52f4c83fac29dc3b8620ebdc5378849913a4d90a841c8e0b4637d4bb36e08701867136c37838263d6666aee4942ed67dd4763029a6a6339012827bfc28dc622b036db49a9b0be45df244cb9628c4c286e3a7289fc288a730f7151ad8d4ec13a4fc64d03f7a36431a595410fc62f74b914e4726d7a36b74b408c9d8321eb7ea75f3b25237630d11b2f30507bcf5f5e3bfb5fd2a5448e52ee29b08b4c9bd04d49849bb5ad3086003571b3f24784b37e562208238cdab410999ca79bce88dcb23395fad10a66051fbf4ffeb59dbccd443c8786d89bde0a94449bd1d5b490a30d87d20e5354cd751f12ecdaf4acba78d6ba65387205511efd6785289938428519405877fd0c9ae072a9f162e205251e145869e34dba241d197155c51fdd5c1bcc77e10bf08dae3acb0eae01c4ea94c8369988d1e5abe5dd13698e5712037b68e06f96dbb1fd2f2bd991c5a29fbbd9a95059895c6f00e11f22817550ea830f7cfbdde0e82ce608f55cf9b066afe53757c98241e683cc6235327f9ca687d9339fc007e2e019074f8c9ede38fdb9c0aa8bf297a8df569506b767dbbd98274e03bc8d620c20c01ee5e1ea9191ad859e7bbc6d09dd30bd80bcbf8a9deb10d6c7be8018f6a45009b05bbc79d21fdb2fe76ced285c90e45cd0ce0563e4f617b8c7d0f0538d11ec6cca4eb47ea1efcce9f33cba1d162d57ed6dd54bb436feb397fb1db3d0f37dbf6224aa82774d57e49ef436c617cbe2d39acf740aa762df231e3468202dd8477a960f207d2144d00bdaa1de05ee770f73a1476ee2c836fb118b7ef13eddacfa810c4ab2384f5b1d285673c62e40bd7de15dc0cf601a6ecdce0854c8ccf20588d5d059c37ed2eae3840ebfba87c68d082e88c527d1e6116d3db263433fd7e1f95542bb4fe49918e60784d11c11079d4f55e2b371b2c5aff650bd7c4e60aea2ce8428f045b50d36fffa4189ca4fd4fbac8ebacc376054fa12e34b12dd4cf6acd01a34a53410e130232c209ce733493deb26cd73f712f7ca5ebd5e51d2eb947797c607d3119f108315569388172f2c4eece481a148a1a2a8626b0975d379f3a1a1d2f51de3e57135eae10b2cae9c1a02fb914c3cd8cb2c03f4e3b317d0f909bdc6c3ddf0d493b9e75194c0caf1bc6ca55f20166419c4b1bd16b5c07b44eb8dc08562c87ebc8e05a511efbe45f7c7e932e56c866d59af9fd483a650a908df6ea9257aedf8a1320a1bd1bfd32d62ed255be8d68ff476dce038a003516acb86ffa79908bc36fff2d084132218472b89d950b3df012898635e2760080b003a0c809e69015301ef5b449b52861c8725aeca27ff2d950a0f78367287ea8d5106c61dc5e3c964c3c1946a1550c2c8826aa6cf388363d6a6ea76908dd6baf5543ca73b2c1e043e0d0095e120b8087df8ddd5734d56ee5b0e8a797ade2b3c94a7449491287fbcf3679323333445f80985323083c0d26f63a1cd7e735c46b1b8b9acc792ce52f551a7f952ad3bdf24db100509459aa213a4abf64878b00f1a5c91bb45498e91cbea55289866a189f0a8fd2561f1ab2862d09dba70b4f468b9eadc09c8cb56f2578130ffc0fce7c922aa976f20ab517cb04a61f35894e94eefe43b5d90b57cd67ed5a0719821b0347aa53f60ba0e0f2b4a501b19c839cb95aea119860936c3e1b029b360d7be6b5fc68bc13e8ab9fe8fb6c21261f9ca12696adad55417a4430ddf875878e25329f6969a37d8cd5325f46c9e8c95a7a5c74303260bb23288c89dd61f269b738f76856b8c117534348a7200b7afcfd635d7816584cc597c8841c17fee90c387a07ac87cc65ee719903da72a793ac7f81d4627910ae6c228dd63db1714a7c2beaea688775e9fece5f57de5107948bae12cfbe93d76bdfb9970dd50b9e6b64b16cb8e06a2a273c0e7942673137d3306cb40c91c93767c772903938e1d80b4733ba6afe563d6997813cbc6f84e8469fc1bd4e1db7c3a8b8068ee62255ab11ef5ad4ff67e0fbae5e7ca46049cece2ff6533553865f4e5fa1afe7a8371e3b91ca92f7d5bbb53f498e16f3c2c30682d7352f0bc4211b06f84a0ad23ef797daf73447c059bd23c984dc289739d198dd3fe35692af33d57f155ced874ec3ea0a38e8f663bc8f96b5a51959b934ca79f0ea789e9aaff8e907bc62df5c2ad8bc502970b1461986d9dfcaa6b13a4876f5689fe18fa0a385555cddd2504ef74070bee3acf221d7e08e023659d916160c7b1bdff1e533c75518dcb8b3728120372132d79deac11d504672654837ed6d7cbabb8713fb5e4f6ca9b49e708620003e3668b00563a0f86c11628b8ad0af9e5f2f1cf5e32f697fd519e2d73510ad22ecc49e67dcc9947b406b69c4f84c6038085c9f6b7576e5d5f10daa1763b3158d7c077420b87dbd4ef391ef21b6c1c99a2f64281738d5e13d605963ffe61acc63e73c1a91d444fe87564bc47dea55c0ea0afb3dfa2dbe955447bc667e5de78064a1bff2e459657295f7dd297620fcce790268ecbbd46b921d1779a74e05acc6f850cc1527f8f48450ac60a51aa50d7f452645de77490c536caf3487350c21f66a256f6bf02e06c2400ceef8da6aa783ad3d0959873e274f950813efbd5a8165a0f46e6d85972add9c1d0edaf30bf6ba2941439c2fd401483934a89337fc11bb09857ba4c8bf8d020bd6390fa3100989fa72e5c91530873802727cbfcfae18a7ed50d0799820cd19d1064b02e1a695678b74f3592a16ee99530e18d6497d905a3543a7c8041ce22fc6401b34e725dcf57cbeb3daa48d6c8a4e172bf8b79447fb027b0770704af23fe0939dc2fa8023d63be7d083b95291931c3f1af37d84783be23fb50d2c5402bdfc35436ac5fb0147c9326feee9388fb9f8f5463dcb2508a505983ef9b64ecb414dd356c33664f96e89fed2a34a5604b8a66bb258f025774c76dc013d12bf0965108f78b8635ea35ac80303af4e46c0b5f5158b0455c7f2f546984742417ea1e3de2cbeb9081714b62f19e559e62331dad58525cb3cd3682193e6916c0ce01b1acf13147339e9375932ffed1a85575f3088603217e1f35e00ca6b31c97608515f199174b319a8c42fb3686bb06b7e54956feae203b65328b59fada7cbf614d70ce99a807d1f806afdd7f0ff2edbff7b329c6ff4baa56d45dc33b32764e0082e65f66079b6838844e55b3198fd539fb47115f97575f80b2e46c20086385f83e70cd388a9deecc9e4b1433edf2183a33ad7af0ae05ace78108ec4d1a690a766f6ddad8ae468f38cefa2d469c055328c3009a1a73655a951315c56c61863778f558c0ff130304345e561567119fb6ad1545eacccf6f7164bde08fb88f6e808b4b856add33f022451956bf8ae840317ad11befa58d40cbeb5dd0c06fb2e0c51daa88286362b40704a52ad47d8c409b6183387ca039b4a805be0a17fa16bdd498c1aa03c77590c8188770c3ed3c4b9079d57e7682c80320e9b0e642422d6f147965bf0b37ec4d60fad0e51f6e349d6a0f85d1141922db87a303b74825395c7ee68028608d57e97caaef7404f197c3c94684031d8722048649c2f32362cab311d21b9857761fc561c8d73babab659b04e4e1c3a1aec5ff25c7c241af4ea06e33d66d20017ca3ec77faa6e8d4d78ac4b1e14f044f4d8829cfc", 0x1000, 0x8, 0x0, 0x1, r7}]) 29.495539684s ago: executing program 2 (id=3156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 29.065943569s ago: executing program 2 (id=3157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) r3 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000030603000000000000000000050037f5670421a6967993000000190a32abb5a01593fd0000000500e93f07"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8051) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000005860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000}) close_range(r3, r4, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) 26.094670248s ago: executing program 2 (id=3165): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805510, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000100224e0000", 0x58}], 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110bf00000000009c000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 24.607508737s ago: executing program 2 (id=3167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000002c0)) recvfrom$inet(r4, 0x0, 0x0, 0x40010183, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x20) write$binfmt_script(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {0xe, 0x7}, {0x2, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xc0, 0xa}}, @qdisc_kind_options=@q_drr={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20040050) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 24.029735534s ago: executing program 2 (id=3170): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000980)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000a80)) memfd_secret(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x8d, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x9, 0x60, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x6, 0x3, 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0xc, "b3dbd9e133"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x2, 0x10}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x1, 0xfb, {0x7, 0x25, 0x1, 0x83, 0x80, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x4, 0x5, {0x7, 0x25, 0x1, 0x0, 0xdb, 0xffff}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x72, &(0x7f0000000240)={0x5, 0xf, 0x72, 0x4, [@generic={0x40, 0x10, 0x2, "09a99626a71a111232756a2554ef12d05b7008d029564dd4adc9177fefceb80b008124dded2f162bb41af23d33a37239025544abd6053c23c7eb7b1bf8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x8, 0x1, 0x80, 0xa3}, @ssp_cap={0x18, 0x10, 0xa, 0xc, 0x3, 0x3, 0xf000, 0x9, [0x30, 0xc000, 0xff3ff0]}]}, 0x4, [{0xdb, &(0x7f0000000380)=@string={0xdb, 0x3, "0ecfa7151b57c5da6113978637d69df9a78a3d77e4e9582d8cbca7333446f4111178d45d48db9636e3a90c1ac830eb9bbd01a7691cedd00b636b7ed815e305d539841523113ca8962f96a2cac6762360f272fd8675d5b7fe868b0f0f743c4f7a1acd9c1591610dfbab885c815909dac14a6ca3e75880177af731b513b6df2e10fa11f9cbded11d74214e897753059c270fcb9a87d858a3fae82207ebd53c5c4837c57f285d625b2c1154a0e23d547174a0891cfa93afa1bd35e15348af50c6a0d3ca18bb99cc20b84b1afeda5b9d239d6de40456bfa37d340d"}}, {0x44, &(0x7f0000000480)=@string={0x44, 0x3, "a1ded227c2989ec0297a7d9234e7b55de8be3aa7cb83a45ae0044426944848b150121da01d7d07e027fc0595ffbe49fd01e3824f0307887c0d25e68a18dbd87b870f"}}, {0x38, &(0x7f0000000500)=@string={0x38, 0x3, "286f06819027d177b6a52827d50f8c26580b3989e8b2b763c5078277b27ae55ce60a30e8fa61c606b351475809b7cd1c4059fbe750a2"}}, {0x4, &(0x7f0000000540)=@string={0x4, 0x3, "71a3"}}]}) semop(0x0, &(0x7f0000000100)=[{0x1, 0x8001, 0xe8558e09216a5e11}], 0x1) unshare(0x20040400) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 10.858729384s ago: executing program 4 (id=3212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) r3 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000030603000000000000000000050037f5670421a6967993000000190a32abb5a01593fd0000000500e93f07"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8051) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000106860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000}) close_range(r3, r4, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) 8.649462486s ago: executing program 4 (id=3217): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64], 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="640f2356440f20c03507000000440f22c0c4c3414146852066b8cc000f00d8802c1dd214e49eb12e0f01c9b8000000000f23c80f21f835080040000f23f80f017c27003e660f3a224b000eb9fa0900000f32", 0x52}], 0x1, 0x11, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.444050934s ago: executing program 4 (id=3218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="bc0000001000010400400000000000030000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000004008800128009000100766c616e0000000078000280700003800c00010005000000ffff00000c000100fbffffff001000000c00010001000000060000000c00010002000000000800000c00010002000000020000000c0001000a000000ff0300000c00010008000000e47affff0c0001007f000000070000000c00010080ffffff080000000400048014000300766c616e30"], 0xbc}}, 0x0) 8.011631217s ago: executing program 0 (id=3219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4000000000010102000000000000002002004007240001801400018008000100e000000108000200e00000010c00028005000100"], 0x40}}, 0x20000080) 7.873847812s ago: executing program 0 (id=3222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) unshare(0x40000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 7.807768129s ago: executing program 4 (id=3223): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r7, 0x1}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 6.138852305s ago: executing program 3 (id=3226): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988fe0f00002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 5.975872034s ago: executing program 0 (id=3227): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300001600000000000000000000000400030000000000fdffffffffffffff07000000000000090000000000000000050006006c0000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a"], 0xb0}}, 0x0) 5.640355851s ago: executing program 0 (id=3229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x11e41e7a, 0x4, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x855}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x5e3f9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900011173797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xf0}}, 0x0) 5.437223773s ago: executing program 3 (id=3231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000ff80fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 5.091768174s ago: executing program 1 (id=3232): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@flushpolicy={0x94, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb, "", [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3501, 0x2, 0x1, 0x4, 0x6, 0x1ff, 0xff}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0xe823}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000040)={0x80, 0x3}, &(0x7f0000000080)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000010140)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x10, 0x0, 'syz0\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x5, 0x3fb, 0xfffffffc, 'snmp\x00', 'syz1\x00', {0x400}}}}, {{@uncond, 0x0, 0x208, 0x270, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @ipv6=@empty, @ipv6=@loopback}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x76030000}}, {0x28}}}}, 0x5a8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/733], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0088ca"], 0xfdef) 5.049128158s ago: executing program 3 (id=3233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x28, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x4000}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.881229396s ago: executing program 1 (id=3234): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x1020402) keyctl$read(0xb, r1, 0x0, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f00000000c0)="8b7b0aec79948004bb372b0227fdbd55f6f2402b396957fcdf7791e956bea518d131d3b4f5b2ad5202cecaa6dd14a7055be801b28dc3667777fae21bc49b48e9e7", 0x41}, {0x0}], 0x2, 0x0, 0x9) (async) pwritev(r0, &(0x7f0000000780)=[{&(0x7f00000000c0)="8b7b0aec79948004bb372b0227fdbd55f6f2402b396957fcdf7791e956bea518d131d3b4f5b2ad5202cecaa6dd14a7055be801b28dc3667777fae21bc49b48e9e7", 0x41}, {0x0}], 0x2, 0x0, 0x9) 4.751918307s ago: executing program 3 (id=3235): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc804) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000500)={0x800000, 0x10000, 0x2, 0xf55, 0x2, 0x55a}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="c40e4cf5542fb8f7d330454d707cb7ff1bb534b9460da99e5955cfa57d49221305e8a0061a3d603177f0fad62b94df464f57d0608138d31e1a06c91d660874fa9585cdf7a3be5001bbbf8b6cbeaf84d1c98a62d95624876cec72b843ca164f1c6fcf87ef10add027bad812bc9064d2997bb5b4fdbc8881cfc5ea70a94dc970882da6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000001c0)={0x1, 0x8, 0x0, 0xae, 0x3, 0x0, [{0xb72, 0x0, 0x6, '\x00', 0x200}, {0x951, 0x8000}, {0x528, 0x10001, 0x6, '\x00', 0x80b}]}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0xfe, 0x1) getdents64(r8, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.599250245s ago: executing program 1 (id=3236): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 4.532713889s ago: executing program 4 (id=3237): syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 4.309977537s ago: executing program 1 (id=3238): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_RMID(r4, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0x140, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x8000000}}, {0x28}}}}, 0x410) r5 = socket(0x22, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x80044942, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r9, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 1.947727409s ago: executing program 4 (id=3239): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) r8 = socket(0x40000000015, 0x5, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x4041040}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0xa1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r7, 0x1}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) 1.14132032s ago: executing program 1 (id=3240): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0xdb}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 1.093034708s ago: executing program 3 (id=3241): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000041000004"], 0x1c}], 0x1}, 0x0) 1.015787588s ago: executing program 0 (id=3242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="bc0000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000004008800128009000100766c616e0000000078000280700003800c00010005000000ffff00000c000100fbffffff001000000c00010001000000060000000c00010002000000000800000c00010002000000020000000c0001000a000000ff0300000c00010008000000e47affff0c0001007f000000070000000c00010080ffffff080000000400048014000300766c616e30"], 0xbc}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200004, 0x200004, 0x4, 0x0, 0x0, 0x5}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) capget(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x57, 0x1, 0x4, 0x4, 0x10000, 0x3}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x100010, r3, 0x7f000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0x10, r0, 0x3677e000) 208.816677ms ago: executing program 0 (id=3243): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/dev/sequencer2\x00', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x46, 0x4f]}, 0x3a) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000180)=0x20000000, 0x0, 0x4) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xff}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, 0x20311}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0xba01}, 0x810) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x4020aeb2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0xfffffffffffffcf2, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x80000000}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}]}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) 135.033688ms ago: executing program 1 (id=3244): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1, 0xfffffffb, 0xbf6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x2, 0x400000000000003, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80ff}, 0x0) 0s ago: executing program 3 (id=3245): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d000208"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x99) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_GET(r2, 0x0, 0x10) pread64(r2, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getrusage(0x1, &(0x7f0000000680)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x0, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast2, 0xff, 0xffffff00, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = syz_open_dev$media(&(0x7f00000006c0), 0xb, 0xc0382) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) mknod(&(0x7f00000000c0)='./file0\x00', 0x804, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={'sha512-arm\x00'}}) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x1000002c, 0xb, 0x8, 0x3, 0x3, 0x3, 0x9, 0x6}, 0x0) kernel console output (not intermixed with test programs): e found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 716.293825][T13180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.386730][T13180] usb 2-1: Product: syz [ 716.485373][T13180] usb 2-1: Manufacturer: syz [ 716.517434][T13180] usb 2-1: SerialNumber: syz [ 716.557195][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 716.606361][T13180] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 716.664375][T13171] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 716.740174][T15390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2846'. [ 716.934104][T15386] ipvlan2: entered allmulticast mode [ 716.980716][T15386] dummy0: entered allmulticast mode [ 717.171843][T13180] usb 2-1: USB disconnect, device number 105 [ 717.291904][ T5199] Dev loop2: unable to read RDB block 7 [ 717.299573][ T5199] loop2: AHDI p2 p3 [ 717.303598][ T5199] loop2: partition table partially beyond EOD, truncated [ 717.316758][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 717.514238][T15392] xt_hashlimit: size too large, truncated to 1048576 [ 717.848750][T13171] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 717.856009][T13171] ath9k_htc: Failed to initialize the device [ 717.894566][T13180] usb 2-1: ath9k_htc: USB layer deinitialized [ 718.034684][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'. [ 718.076584][T15397] vlan0: entered promiscuous mode [ 718.161249][T15400] FAULT_INJECTION: forcing a failure. [ 718.161249][T15400] name failslab, interval 1, probability 0, space 0, times 0 [ 718.182856][ T5199] Dev loop2: unable to read RDB block 7 [ 718.189270][ T30] audit: type=1326 audit(1747374451.861:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.3.2852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07e418e969 code=0x0 [ 718.192856][ T5199] loop2: AHDI p2 p3 [ 718.212417][T15400] CPU: 1 UID: 0 PID: 15400 Comm: syz.4.2850 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 718.212451][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.212465][T15400] Call Trace: [ 718.212475][T15400] [ 718.212485][T15400] dump_stack_lvl+0x189/0x250 [ 718.212529][T15400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.212575][T15400] ? __pfx__printk+0x10/0x10 [ 718.212600][T15400] ? __pfx___might_resched+0x10/0x10 [ 718.212624][T15400] ? fs_reclaim_acquire+0x7d/0x100 [ 718.212666][T15400] should_fail_ex+0x414/0x560 [ 718.212697][T15400] should_failslab+0xa8/0x100 [ 718.212730][T15400] __kmalloc_cache_noprof+0x70/0x3d0 [ 718.212761][T15400] ? vlan_dev_set_egress_priority+0x123/0x380 [ 718.212791][T15400] vlan_dev_set_egress_priority+0x123/0x380 [ 718.212821][T15400] vlan_changelink+0x3c8/0x560 [ 718.212879][T15400] rtnl_newlink+0x1666/0x1c70 [ 718.212919][T15400] ? kasan_save_track+0x3e/0x80 [ 718.212959][T15400] ? __pfx_rtnl_newlink+0x10/0x10 [ 718.213021][T15400] ? kasan_quarantine_put+0xdd/0x220 [ 718.213049][T15400] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.213086][T15400] ? nlmon_xmit+0xb0/0x100 [ 718.213119][T15400] ? kmem_cache_free+0x192/0x3f0 [ 718.213175][T15400] ? __local_bh_enable_ip+0x12d/0x1c0 [ 718.213199][T15400] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.213231][T15400] ? __local_bh_enable_ip+0x12d/0x1c0 [ 718.213253][T15400] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 718.213287][T15400] ? aa_get_newest_label+0xf7/0x5d0 [ 718.213319][T15400] ? __lock_acquire+0xaac/0xd20 [ 718.213381][T15400] ? __pfx_rtnl_newlink+0x10/0x10 [ 718.213408][T15400] rtnetlink_rcv_msg+0x7cf/0xb70 [ 718.213441][T15400] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 718.213473][T15400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 718.213505][T15400] ? ref_tracker_free+0x63a/0x7d0 [ 718.213530][T15400] ? __copy_skb_header+0xa7/0x550 [ 718.213584][T15400] netlink_rcv_skb+0x219/0x490 [ 718.213615][T15400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 718.213646][T15400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 718.213698][T15400] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.213726][T15400] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.213761][T15400] netlink_unicast+0x75b/0x8d0 [ 718.213800][T15400] netlink_sendmsg+0x805/0xb30 [ 718.213840][T15400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.213874][T15400] ? aa_sock_msg_perm+0x94/0x160 [ 718.213903][T15400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 718.213930][T15400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.213961][T15400] __sock_sendmsg+0x219/0x270 [ 718.213991][T15400] ____sys_sendmsg+0x505/0x830 [ 718.214032][T15400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.214077][T15400] ? import_iovec+0x74/0xa0 [ 718.214117][T15400] ___sys_sendmsg+0x21f/0x2a0 [ 718.214153][T15400] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.214230][T15400] ? __fget_files+0x2a/0x420 [ 718.214262][T15400] ? __fget_files+0x3a0/0x420 [ 718.214307][T15400] __x64_sys_sendmsg+0x19b/0x260 [ 718.214345][T15400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.214400][T15400] ? do_syscall_64+0xba/0x210 [ 718.214446][T15400] do_syscall_64+0xf6/0x210 [ 718.214491][T15400] ? clear_bhb_loop+0x60/0xb0 [ 718.214521][T15400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.214550][T15400] RIP: 0033:0x7fd119f8e969 [ 718.214573][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.214594][T15400] RSP: 002b:00007fd117df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.214620][T15400] RAX: ffffffffffffffda RBX: 00007fd11a1b5fa0 RCX: 00007fd119f8e969 [ 718.214637][T15400] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 718.214652][T15400] RBP: 00007fd117df6090 R08: 0000000000000000 R09: 0000000000000000 [ 718.214667][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.214682][T15400] R13: 0000000000000000 R14: 00007fd11a1b5fa0 R15: 00007fd11a2dfa28 [ 718.214719][T15400] [ 718.388710][T12753] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 718.394215][ T5199] loop2: partition table partially beyond EOD, truncated [ 718.670395][T12753] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 718.674295][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 718.710258][T12753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.718960][T12753] usb 3-1: Product: syz [ 718.723173][T12753] usb 3-1: Manufacturer: syz [ 718.758583][T12753] usb 3-1: SerialNumber: syz [ 718.773198][T12753] usb 3-1: config 0 descriptor?? [ 718.888601][T12763] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 719.013537][T13180] usb 3-1: USB disconnect, device number 117 [ 719.078701][T12763] usb 5-1: Using ep0 maxpacket: 8 [ 719.175462][T12763] usb 5-1: unable to get BOS descriptor or descriptor too short [ 719.224467][T12763] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 719.276842][T12763] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 719.388259][T12763] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 719.493071][T12763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.524205][T12763] usb 5-1: Product: syz [ 719.560076][T12763] usb 5-1: Manufacturer: syz [ 719.608911][T12763] usb 5-1: SerialNumber: syz [ 719.659413][ T5199] Dev loop2: unable to read RDB block 7 [ 719.700943][ T5199] loop2: AHDI p2 p3 [ 719.705347][ T5199] loop2: partition table partially beyond EOD, truncated [ 719.713154][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 719.856279][T14952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 719.875442][T14952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 719.887176][T14952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 719.908290][T15414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.918605][T15414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.936051][T14952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 719.944658][T14952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 719.975149][T15414] No buffer was provided with the request [ 720.718355][T15414] could not allocate digest TFM handle sha512-arm [ 720.857398][T15430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.976674][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.018719][T12763] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 721.151686][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.245140][T12763] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 721.253339][T12763] usb 2-1: config 0 has no interface number 0 [ 721.283707][T12763] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 721.308951][T12763] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 721.357765][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.417641][T12763] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 721.478060][T12763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.558835][T12763] usb 2-1: config 0 descriptor?? [ 721.587907][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.599291][T15435] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 721.607615][ T5199] Dev loop2: unable to read RDB block 7 [ 721.616738][ T5199] loop2: AHDI p2 p3 [ 721.625663][ T5199] loop2: partition table partially beyond EOD, truncated [ 721.634558][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 721.636586][T12763] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 721.784426][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 721.838178][ T5883] usb 2-1: USB disconnect, device number 106 [ 722.008975][T15328] Bluetooth: hci5: command tx timeout [ 722.211715][T15445] tipc: Enabling of bearer rejected, failed to enable media [ 722.248570][ T5883] usb 5-1: USB disconnect, device number 81 [ 722.356378][ T5199] Dev loop2: unable to read RDB block 7 [ 722.365286][T15428] chnl_net:caif_netlink_parms(): no params data found [ 722.378031][T15452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2863'. [ 722.383667][ T5199] loop2: AHDI p2 p3 [ 722.435446][ T5199] loop2: partition table partially beyond EOD, truncated [ 722.454943][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 722.469343][T15456] ucma_write: process 1617 (syz.2.2864) changed security contexts after opening file descriptor, this is not allowed. [ 722.667313][ T5199] Dev loop2: unable to read RDB block 7 [ 722.699541][ T5199] loop2: AHDI p2 p3 [ 722.704902][ T5199] loop2: partition table partially beyond EOD, truncated [ 722.728926][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 722.981562][ T30] audit: type=1326 audit(1747374456.641:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.2868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd119f8e969 code=0x0 [ 723.016379][T15473] loop6: detected capacity change from 0 to 7 [ 723.023681][T15473] Dev loop6: unable to read RDB block 7 [ 723.029668][T15473] loop6: unable to read partition table [ 723.059586][T15473] loop6: partition table beyond EOD, truncated [ 723.068567][T15473] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– Uª¨â·û) failed (rc=-5) [ 723.672020][ T54]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.680916][ T54] bond_slave_0: left promiscuous mode [ 723.695401][ T54]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.704667][ T54] bond_slave_1: left promiscuous mode [ 723.712886][ T54]  (unregistering): (slave macvlan3): Releasing backup interface [ 723.722510][ T54] macvlan3: left promiscuous mode [ 723.728399][ T54] batadv0: left promiscuous mode [ 723.734845][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 723.750373][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 723.772770][ T54]  (unregistering): Released all slaves [ 723.790600][ T54] bond0 (unregistering): Released all slaves [ 723.894350][ T5199] Dev loop2: unable to read RDB block 7 [ 723.903355][ T5199] loop2: AHDI p2 p3 [ 723.907808][ T5199] loop2: partition table partially beyond EOD, truncated [ 723.915845][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 724.099355][ T54] tipc: Left network mode [ 724.100417][T15328] Bluetooth: hci5: command tx timeout [ 724.125821][T15492] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:53:62 [ 724.192688][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.203227][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.210442][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2871'. [ 724.220388][T15428] bridge_slave_0: entered allmulticast mode [ 724.228898][T15428] bridge_slave_0: entered promiscuous mode [ 724.253704][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.261449][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.307722][T15428] bridge_slave_1: entered allmulticast mode [ 724.336031][T15428] bridge_slave_1: entered promiscuous mode [ 724.439460][ T5883] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 724.595702][ T5199] Dev loop2: unable to read RDB block 7 [ 724.616473][ T5199] loop2: AHDI p2 p3 [ 724.634786][ T5199] loop2: partition table partially beyond EOD, truncated [ 724.655118][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 724.668878][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 724.707406][T15500] xt_bpf: check failed: parse error [ 724.733095][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 724.751741][ T5883] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 724.762415][ T5883] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 724.793380][ T5883] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 724.803798][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.812699][ T5883] usb 2-1: Product: syz [ 724.817111][ T5883] usb 2-1: Manufacturer: syz [ 724.826389][ T5883] usb 2-1: SerialNumber: syz [ 724.910496][T15428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.943627][ T5199] Dev loop2: unable to read RDB block 7 [ 724.955122][ T5199] loop2: AHDI p2 p3 [ 724.966156][ T5199] loop2: partition table partially beyond EOD, truncated [ 724.986163][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 725.070461][T15496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.080582][T15496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.095340][T15496] No buffer was provided with the request [ 725.159514][T15508] fuse: Unknown parameter '0x0000000000000003' [ 725.169482][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'. [ 725.178768][T15508] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 725.186392][T15508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.234140][T15428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.550375][T15428] team0: Port device team_slave_0 added [ 725.590383][T15496] could not allocate digest TFM handle sha512-arm [ 725.656201][T15428] team0: Port device team_slave_1 added [ 725.805269][T15428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.823091][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.872448][T15428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.040167][T15428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.047460][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.157740][T15428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.208667][T15328] Bluetooth: hci5: command tx timeout [ 726.473795][T15428] hsr_slave_0: entered promiscuous mode [ 726.511887][T15428] hsr_slave_1: entered promiscuous mode [ 726.532673][T15428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.560425][T15428] Cannot create hsr debugfs directory [ 727.184467][T15540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 727.508630][ T5883] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 727.751185][ T5883] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 727.828972][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 727.863555][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.914347][ T5883] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 727.968970][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.050385][ T5199] Dev loop2: unable to read RDB block 7 [ 728.064994][ T5883] hub 5-1:1.0: bad descriptor, ignoring hub [ 728.094536][ T5199] loop2: AHDI p2 p3 [ 728.118647][ T5883] hub 5-1:1.0: probe with driver hub failed with error -5 [ 728.126177][ T5199] loop2: partition table partially beyond EOD, truncated [ 728.143235][ T5883] cdc_wdm 5-1:1.0: skipping garbage [ 728.149187][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 728.156292][ T5883] cdc_wdm 5-1:1.0: skipping garbage [ 728.192480][ T5883] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 728.219357][T13180] usb 2-1: USB disconnect, device number 107 [ 728.225881][ T54] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 728.248676][T15328] Bluetooth: hci5: command tx timeout [ 728.415926][T15547] "syz.4.2881" (15547) uses obsolete ecb(arc4) skcipher [ 728.815558][ T5199] Dev loop2: unable to read RDB block 7 [ 728.832139][ T30] audit: type=1326 audit(1747374462.491:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0b018e969 code=0x0 [ 728.876307][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 728.899560][ T5199] loop2: AHDI p2 p3 [ 728.946386][ T5199] loop2: partition table partially beyond EOD, truncated [ 728.988862][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 729.022587][ T54] hsr_slave_0: left promiscuous mode [ 729.057800][ T54] hsr_slave_1: left promiscuous mode [ 729.072269][ T54] batman_adv: batadv0: Interface deactivated: dummy0 [ 729.083338][T15558] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2886'. [ 729.095009][ T54] batman_adv: batadv0: Removing interface: dummy0 [ 729.103924][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.132930][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.164243][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.184327][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.254484][ T54] veth0_macvtap: left promiscuous mode [ 729.267279][ T54] veth1_vlan: left promiscuous mode [ 729.281701][ T54] veth0_vlan: left promiscuous mode [ 729.289545][T13180] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 729.468375][T13180] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 729.484961][T13180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.505801][T13180] usb 3-1: Product: syz [ 729.534006][T13180] usb 3-1: Manufacturer: syz [ 729.544134][T13180] usb 3-1: SerialNumber: syz [ 729.602732][T13180] usb 3-1: config 0 descriptor?? [ 729.868372][T13180] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 729.943232][ T54] pim6reg (unregistering): left allmulticast mode [ 730.499279][ T54] batadv2 (unregistering): left promiscuous mode [ 730.553290][ T54] team0 (unregistering): Port device batadv2 removed [ 730.595126][ T54] batadv1 (unregistering): left promiscuous mode [ 730.620509][ T5883] usb 5-1: USB disconnect, device number 82 [ 730.642382][ T54] team0 (unregistering): Port device batadv1 removed [ 730.838837][T12746] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 730.881035][T15556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.906701][T15556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.927117][T15556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.941887][T15556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.973600][T15581] random: crng reseeded on system resumption [ 731.020617][T12746] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.050361][T12746] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.086736][T12746] usb 2-1: config 0 interface 0 has no altsetting 0 [ 731.096285][T12746] usb 2-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.00 [ 731.130737][T12746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.160638][T12746] usb 2-1: config 0 descriptor?? [ 731.784535][T13180] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 731.871337][T13180] usb 3-1: USB disconnect, device number 118 [ 731.881349][ T5199] Dev loop2: unable to read RDB block 7 [ 731.909672][ T5199] loop2: AHDI p2 p3 [ 731.913867][ T5199] loop2: partition table partially beyond EOD, truncated [ 731.924395][T12746] usbhid 2-1:0.0: can't add hid device: -71 [ 731.931711][ T54] team_slave_1 (unregistering): left promiscuous mode [ 731.938971][T12746] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 731.961189][ T54] team0 (unregistering): Port device team_slave_1 removed [ 731.972102][T12746] usb 2-1: USB disconnect, device number 108 [ 731.989912][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 732.077867][ T54] team_slave_0 (unregistering): left promiscuous mode [ 732.117606][ T54] team0 (unregistering): Port device team_slave_0 removed [ 732.378620][T12753] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 732.549722][T12753] usb 3-1: Using ep0 maxpacket: 8 [ 732.729043][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 732.761782][T12753] usb 3-1: unable to get BOS descriptor or descriptor too short [ 732.778751][T13180] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 732.817042][T12753] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 732.843360][T12753] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 732.957128][T12753] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 732.966346][T12753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.974286][T13180] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 732.975135][T12753] usb 3-1: Product: syz [ 732.988534][T13180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.997015][T12753] usb 3-1: Manufacturer: syz [ 733.007176][T12753] usb 3-1: SerialNumber: syz [ 733.033394][T13180] usb 5-1: config 0 descriptor?? [ 733.150769][T12763] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 733.277394][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.288255][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.304304][T15588] No buffer was provided with the request [ 733.328755][T12763] usb 2-1: Using ep0 maxpacket: 8 [ 733.338371][T12763] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 733.428620][T12763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.465821][T12763] usb 2-1: Product: syz [ 733.498150][T12763] usb 2-1: Manufacturer: syz [ 733.511404][T12763] usb 2-1: SerialNumber: syz [ 733.541599][T15592] usb usb8: usbfs: process 15592 (syz.4.2894) did not claim interface 0 before use [ 733.561163][T12763] usb 2-1: config 0 descriptor?? [ 733.603023][T12763] gspca_main: se401-2.14.0 probing 047d:5003 [ 733.669078][T15588] could not allocate digest TFM handle sha512-arm [ 733.975747][T13180] [drm:udl_init] *ERROR* Selecting channel failed [ 734.010364][T12763] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 734.035470][T12763] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 734.077515][T13180] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 734.099602][T12763] usb 2-1: USB disconnect, device number 109 [ 734.118699][T13180] [drm] Initialized udl on minor 2 [ 734.172863][T13180] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 734.198136][T13180] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 734.224724][T13171] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 734.243194][T13180] usb 5-1: USB disconnect, device number 83 [ 734.280268][T13171] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 734.698920][ T5883] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 734.893832][ T5883] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 734.958778][T13180] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 734.974839][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 735.057261][T13171] usb 3-1: USB disconnect, device number 119 [ 735.066467][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.121505][ T5199] Dev loop2: unable to read RDB block 7 [ 735.127154][ T5199] loop2: AHDI p2 p3 [ 735.167986][ T5883] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 735.170291][ T5199] loop2: partition table partially beyond EOD, [ 735.177459][T13180] usb 5-1: config 0 has no interfaces? [ 735.208028][ T5199] truncated [ 735.225840][T13180] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 735.235659][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.257240][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 735.275139][T13180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.295598][T13180] usb 5-1: Product: syz [ 735.311918][T13180] usb 5-1: Manufacturer: syz [ 735.337282][T13180] usb 5-1: SerialNumber: syz [ 735.375740][ T5883] hub 4-1:1.0: bad descriptor, ignoring hub [ 735.431713][ T5883] hub 4-1:1.0: probe with driver hub failed with error -5 [ 735.443537][T13180] usb 5-1: config 0 descriptor?? [ 735.489994][ T5883] cdc_wdm 4-1:1.0: skipping garbage [ 735.518118][ T5883] cdc_wdm 4-1:1.0: skipping garbage [ 735.543067][ T5883] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 735.783531][T15631] "syz.3.2898" (15631) uses obsolete ecb(arc4) skcipher [ 736.107573][T15428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 736.241076][ T5199] Dev loop2: unable to read RDB block 7 [ 736.249228][T15428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 736.270919][ T5199] loop2: AHDI p2 p3 [ 736.277543][ T5199] loop2: partition table partially beyond EOD, truncated [ 736.301066][T15428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 736.324062][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 736.344460][T15428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 736.381438][T15642] tipc: Enabling of bearer rejected, failed to enable media [ 736.579382][T15645] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2905'. [ 736.632463][ T5199] Dev loop2: unable to read RDB block 7 [ 736.666558][ T5199] loop2: AHDI p2 p3 [ 736.740246][ T5199] loop2: partition table partially beyond EOD, truncated [ 736.766005][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 737.006331][T15428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.028096][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 737.078082][T15651] netlink: 'syz.1.2907': attribute type 9 has an invalid length. [ 737.147653][T15651] macvlan7: entered allmulticast mode [ 737.165976][T15651] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 737.225871][T15428] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.265588][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.272849][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.376176][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.383491][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.439930][T12765] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 737.522739][T15428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 737.534374][T15428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 737.568245][T15428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.588650][T12765] usb 3-1: device descriptor read/64, error -71 [ 737.839887][T12765] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 737.840341][ T5883] usb 5-1: USB disconnect, device number 84 [ 737.958679][T12763] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 738.009186][T12765] usb 3-1: device descriptor read/64, error -71 [ 738.085097][T15428] veth0_vlan: entered promiscuous mode [ 738.139591][T15428] veth1_vlan: entered promiscuous mode [ 738.160632][T12765] usb usb3-port1: attempt power cycle [ 738.188720][T12763] usb 2-1: Using ep0 maxpacket: 8 [ 738.277673][T15428] veth0_macvtap: entered promiscuous mode [ 738.304793][T12763] usb 2-1: unable to get BOS descriptor or descriptor too short [ 738.327642][T15428] veth1_macvtap: entered promiscuous mode [ 738.358707][ T5891] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 738.441492][T12763] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 738.469633][T15428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.498676][T15428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.525024][T15428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.554466][T15428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.583878][T15428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.583887][T12765] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 738.628696][T15428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.890642][T12763] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 738.938828][ T5883] usb 4-1: USB disconnect, device number 104 [ 738.994864][T12765] usb 3-1: device descriptor read/8, error -71 [ 739.026515][T12763] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 739.054952][T12763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.109331][T12763] usb 2-1: Product: syz [ 739.113576][T12763] usb 2-1: Manufacturer: syz [ 739.180414][ T7102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.216936][T12763] usb 2-1: SerialNumber: syz [ 739.266412][ T7102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.309095][T12765] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 739.370079][ T5883] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 739.448958][T12765] usb 3-1: device descriptor read/8, error -71 [ 739.569598][T12765] usb usb3-port1: unable to enumerate USB device [ 739.578655][ T5883] usb 4-1: device descriptor read/64, error -71 [ 739.723538][T15659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.784231][T15659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.798621][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.817090][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.846329][T15659] No buffer was provided with the request [ 739.898765][ T5883] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 740.068889][ T5883] usb 4-1: device descriptor read/64, error -71 [ 740.125745][T15659] could not allocate digest TFM handle sha512-arm [ 740.182248][ T5883] usb usb4-port1: attempt power cycle [ 740.271414][ T5199] Dev loop2: unable to read RDB block 7 [ 740.317449][ T5199] loop2: AHDI p2 p3 [ 740.355115][ T5199] loop2: partition table partially beyond EOD, truncated [ 740.408093][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 740.419474][T15696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2916'. [ 740.528686][ T5883] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 740.559271][ T5883] usb 4-1: device descriptor read/8, error -71 [ 740.683068][T15701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2918'. [ 740.838638][ T5883] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 740.933104][ T5883] usb 4-1: device descriptor read/8, error -71 [ 741.001150][T15708] loop6: detected capacity change from 0 to 7 [ 741.022890][ T5879] Dev loop6: unable to read RDB block 7 [ 741.038921][T12753] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 741.043581][ T5879] loop6: unable to read partition table [ 741.068011][ T5879] loop6: partition table beyond EOD, truncated [ 741.092565][T15708] Dev loop6: unable to read RDB block 7 [ 741.106875][T15708] loop6: unable to read partition table [ 741.115052][ T5883] usb usb4-port1: unable to enumerate USB device [ 741.117994][T15708] loop6: partition table beyond EOD, truncated [ 741.144855][T15708] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ¾Ú¨â·û) failed (rc=-5) [ 741.238343][T15714] loop6: detected capacity change from 0 to 7 [ 741.248596][T12753] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 741.250742][T10960] Dev loop6: unable to read RDB block 7 [ 741.267061][T10960] loop6: unable to read partition table [ 741.275124][T10960] loop6: partition table beyond EOD, truncated [ 741.298902][ T5891] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 741.305111][T12753] usb 1-1: config 0 has no interface number 0 [ 741.318170][T15714] Dev loop6: unable to read RDB block 7 [ 741.336314][T15714] loop6: unable to read partition table [ 741.337543][T12753] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.346630][T15714] loop6: partition table beyond EOD, truncated [ 741.375419][T15714] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 741.433324][T12753] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.468572][ T5891] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 741.498550][T12753] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 741.507758][T12753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.510011][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 741.558372][ T5891] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 741.577891][ T5891] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 741.582952][T12753] usb 1-1: config 0 descriptor?? [ 741.614798][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.706921][ T5891] hub 3-1:1.0: bad descriptor, ignoring hub [ 741.729102][T13180] usb 2-1: USB disconnect, device number 110 [ 741.758696][ T5891] hub 3-1:1.0: probe with driver hub failed with error -5 [ 741.790968][ T5891] cdc_wdm 3-1:1.0: skipping garbage [ 741.816254][ T5891] cdc_wdm 3-1:1.0: skipping garbage [ 741.826036][ T5891] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 742.000001][T15728] "syz.2.2921" (15728) uses obsolete ecb(arc4) skcipher [ 742.180905][T15730] vlan0: entered promiscuous mode [ 742.322272][T12753] usbhid 1-1:0.32: can't add hid device: -71 [ 742.342013][T12753] usbhid 1-1:0.32: probe with driver usbhid failed with error -71 [ 742.400220][T12753] usb 1-1: USB disconnect, device number 125 [ 743.235003][T15746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2929'. [ 743.378965][T15746] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 743.949576][T15765] program syz.0.2933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 744.092451][T15765] xt_TPROXY: Can be used only with -p tcp or -p udp [ 744.101151][T15765] netlink: 'syz.0.2933': attribute type 10 has an invalid length. [ 744.118068][T15765] team0: Port device dummy0 added [ 744.588578][ T5883] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 744.642348][T12753] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 744.695437][ T5199] Dev loop2: unable to read RDB block 7 [ 744.708905][T13180] usb 3-1: USB disconnect, device number 124 [ 744.736939][ T5199] loop2: AHDI p2 p3 [ 744.763009][ T5199] loop2: partition table partially beyond EOD, truncated [ 744.819614][ T5199] loop2: p2 size 150995456 extends beyond EOD, truncated [ 744.842239][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2937'. [ 744.858749][T12753] usb 2-1: Using ep0 maxpacket: 8 [ 744.880197][ T5883] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 744.902240][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.949561][T12753] usb 2-1: unable to get BOS descriptor or descriptor too short [ 744.965303][ T5883] usb 4-1: New USB device found, idVendor=0603, idProduct=0600, bcdDevice= 0.00 [ 745.001578][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.019788][T12753] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 745.058897][T12753] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 745.075874][ T5883] usb 4-1: config 0 descriptor?? [ 745.094730][T12753] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 745.113924][T12753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.118782][ T5199] Dev loop2: unable to read RDB block 7 [ 745.127586][ T5199] loop2: AHDI p2 p3 [ 745.130935][T12753] usb 2-1: Product: syz [ 745.136668][T12753] usb 2-1: Manufacturer: syz [ 745.154327][T15786] FAULT_INJECTION: forcing a failure. [ 745.154327][T15786] name failslab, interval 1, probability 0, space 0, times 0 [ 745.167755][T12753] usb 2-1: SerialNumber: syz [ 745.187896][ T5199] loop2: partition table partially beyond EOD, truncated [ 745.210314][T15786] CPU: 1 UID: 0 PID: 15786 Comm: syz.2.2940 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 745.210348][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.210362][T15786] Call Trace: [ 745.210372][T15786] [ 745.210383][T15786] dump_stack_lvl+0x189/0x250 [ 745.210423][T15786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.210456][T15786] ? __pfx__printk+0x10/0x10 [ 745.210483][T15786] ? __pfx___might_resched+0x10/0x10 [ 745.210510][T15786] should_fail_ex+0x414/0x560 [ 745.210539][T15786] should_failslab+0xa8/0x100 [ 745.210571][T15786] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 745.210600][T15786] ? __alloc_skb+0x112/0x2d0 [ 745.210633][T15786] __alloc_skb+0x112/0x2d0 [ 745.210665][T15786] netlink_sendmsg+0x5c6/0xb30 [ 745.210710][T15786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.210748][T15786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.210775][T15786] __sock_sendmsg+0x219/0x270 [ 745.210803][T15786] ____sys_sendmsg+0x505/0x830 [ 745.210839][T15786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.210880][T15786] ? import_iovec+0x74/0xa0 [ 745.210916][T15786] ___sys_sendmsg+0x21f/0x2a0 [ 745.210949][T15786] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.211019][T15786] ? __fget_files+0x2a/0x420 [ 745.211047][T15786] ? __fget_files+0x3a0/0x420 [ 745.211088][T15786] __x64_sys_sendmsg+0x19b/0x260 [ 745.211121][T15786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 745.211170][T15786] ? do_syscall_64+0xba/0x210 [ 745.211205][T15786] do_syscall_64+0xf6/0x210 [ 745.211235][T15786] ? clear_bhb_loop+0x60/0xb0 [ 745.211263][T15786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.211284][T15786] RIP: 0033:0x7f514b58e969 [ 745.211303][T15786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.211322][T15786] RSP: 002b:00007f514c41b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.211345][T15786] RAX: ffffffffffffffda RBX: 00007f514b7b5fa0 RCX: 00007f514b58e969 [ 745.211361][T15786] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 745.211375][T15786] RBP: 00007f514c41b090 R08: 0000000000000000 R09: 0000000000000000 [ 745.211389][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.211402][T15786] R13: 0000000000000000 R14: 00007f514b7b5fa0 R15: 00007f514b8dfa28 [ 745.211436][T15786] [ 745.219952][ T5199] loop2: p2 size 150995456 extends beyond EOD, [ 745.320563][ T5883] usb 4-1: string descriptor 0 read error: -71 [ 745.560272][T15773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.589393][ T5883] usbhid 4-1:0.0: can't add hid device: -71 [ 745.605075][ T5883] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 745.617745][ T5883] usb 4-1: USB disconnect, device number 109 [ 745.633433][T15773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.655518][T15773] No buffer was provided with the request [ 745.765578][ T5199] truncated [ 745.916840][T10960] udevd[10960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 746.000981][T15799] netlink: 'syz.2.2945': attribute type 4 has an invalid length. [ 746.090326][T15801] FAULT_INJECTION: forcing a failure. [ 746.090326][T15801] name failslab, interval 1, probability 0, space 0, times 0 [ 746.125844][T15801] CPU: 1 UID: 0 PID: 15801 Comm: syz.0.2944 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 746.125877][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 746.125891][T15801] Call Trace: [ 746.125901][T15801] [ 746.125910][T15801] dump_stack_lvl+0x189/0x250 [ 746.125952][T15801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.125984][T15801] ? __pfx__printk+0x10/0x10 [ 746.126014][T15801] ? __pfx___might_resched+0x10/0x10 [ 746.126035][T15801] ? fs_reclaim_acquire+0x7d/0x100 [ 746.126073][T15801] should_fail_ex+0x414/0x560 [ 746.126103][T15801] should_failslab+0xa8/0x100 [ 746.126136][T15801] __kmalloc_noprof+0xcb/0x4f0 [ 746.126163][T15801] ? copy_splice_read+0x143/0x9b0 [ 746.126189][T15801] ? rcu_is_watching+0x15/0xb0 [ 746.126213][T15801] copy_splice_read+0x143/0x9b0 [ 746.126239][T15801] ? get_pid_task+0x20/0x1f0 [ 746.126275][T15801] ? __pfx_aa_file_perm+0x10/0x10 [ 746.126301][T15801] ? splice_file_to_pipe+0x2e/0x440 [ 746.126330][T15801] ? __pfx_copy_splice_read+0x10/0x10 [ 746.126369][T15801] ? __pfx___mutex_lock+0x10/0x10 [ 746.126397][T15801] ? rcu_read_lock_any_held+0xb3/0x120 [ 746.126420][T15801] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 746.126449][T15801] ? wait_for_space+0x24d/0x2d0 [ 746.126483][T15801] ? __pfx_sock_splice_read+0x10/0x10 [ 746.126507][T15801] splice_file_to_pipe+0x270/0x440 [ 746.126540][T15801] do_sendfile+0x475/0x7d0 [ 746.126573][T15801] ? __pfx_vfs_write+0x10/0x10 [ 746.126614][T15801] ? __pfx_do_sendfile+0x10/0x10 [ 746.126648][T15801] ? do_sys_openat2+0x154/0x1c0 [ 746.126679][T15801] __se_sys_sendfile64+0x13e/0x190 [ 746.126710][T15801] ? rcu_is_watching+0x15/0xb0 [ 746.126732][T15801] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 746.126769][T15801] ? do_syscall_64+0xba/0x210 [ 746.126804][T15801] do_syscall_64+0xf6/0x210 [ 746.126836][T15801] ? clear_bhb_loop+0x60/0xb0 [ 746.126863][T15801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.126885][T15801] RIP: 0033:0x7f55c0d8e969 [ 746.126904][T15801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.126922][T15801] RSP: 002b:00007f55c1c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 746.126945][T15801] RAX: ffffffffffffffda RBX: 00007f55c0fb6080 RCX: 00007f55c0d8e969 [ 746.126961][T15801] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000c [ 746.126974][T15801] RBP: 00007f55c1c57090 R08: 0000000000000000 R09: 0000000000000000 [ 746.126988][T15801] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 746.127001][T15801] R13: 0000000000000000 R14: 00007f55c0fb6080 R15: 00007f55c10dfa28 [ 746.127034][T15801] [ 746.393729][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.873277][T10960] udevd[10960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 746.916080][T15773] could not allocate digest TFM handle sha512-arm [ 746.985112][T15809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2946'. [ 747.268245][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2949'. [ 747.373650][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.374189][T12753] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 747.380105][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.596939][T12753] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 747.623377][T12753] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 747.659824][T12753] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.789200][T14952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 747.804050][T14952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 747.818835][T14952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 747.849640][T12753] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 747.862591][T14952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 747.889044][T12753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.898549][T13180] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 747.912114][T12753] hub 4-1:1.0: bad descriptor, ignoring hub [ 747.912779][T14952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 747.918120][T12753] hub 4-1:1.0: probe with driver hub failed with error -5 [ 748.011429][T12753] cdc_wdm 4-1:1.0: skipping garbage [ 748.019816][T12753] cdc_wdm 4-1:1.0: skipping garbage [ 748.025118][T12753] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 748.101187][T13180] usb 3-1: Using ep0 maxpacket: 16 [ 748.120972][T13180] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 748.136433][T13180] usb 3-1: can't read configurations, error -61 [ 748.237645][T15829] "syz.3.2947" (15829) uses obsolete ecb(arc4) skcipher [ 748.308857][T13180] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 748.478707][T13180] usb 3-1: Using ep0 maxpacket: 16 [ 748.496339][T13180] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 748.509355][T13180] usb 3-1: can't read configurations, error -61 [ 748.536877][T13180] usb usb3-port1: attempt power cycle [ 748.724896][T12765] usb 2-1: USB disconnect, device number 111 [ 748.919504][T13180] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 749.032832][T13180] usb 3-1: Using ep0 maxpacket: 16 [ 749.040256][T13180] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 749.048038][T13180] usb 3-1: can't read configurations, error -61 [ 749.228624][T13180] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 749.376727][T13180] usb 3-1: Using ep0 maxpacket: 16 [ 749.438842][T13180] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 749.484778][T13180] usb 3-1: can't read configurations, error -61 [ 749.506269][T13180] usb usb3-port1: unable to enumerate USB device [ 749.615043][T15844] FAULT_INJECTION: forcing a failure. [ 749.615043][T15844] name failslab, interval 1, probability 0, space 0, times 0 [ 749.680732][T15844] CPU: 1 UID: 0 PID: 15844 Comm: syz.1.2952 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 749.680767][T15844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.680781][T15844] Call Trace: [ 749.680790][T15844] [ 749.680801][T15844] dump_stack_lvl+0x189/0x250 [ 749.680842][T15844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.680874][T15844] ? __pfx__printk+0x10/0x10 [ 749.680902][T15844] ? __pfx___might_resched+0x10/0x10 [ 749.680923][T15844] ? fs_reclaim_acquire+0x7d/0x100 [ 749.680961][T15844] should_fail_ex+0x414/0x560 [ 749.680990][T15844] should_failslab+0xa8/0x100 [ 749.681022][T15844] __kmalloc_noprof+0xcb/0x4f0 [ 749.681049][T15844] ? kfree+0x4d/0x440 [ 749.681080][T15844] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 749.681115][T15844] tomoyo_realpath_from_path+0xe3/0x5d0 [ 749.681146][T15844] ? tomoyo_domain+0xda/0x130 [ 749.681182][T15844] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 749.681205][T15844] tomoyo_path_number_perm+0x1e8/0x5a0 [ 749.681232][T15844] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 749.681274][T15844] ? __lock_acquire+0xaac/0xd20 [ 749.681324][T15844] ? __fget_files+0x2a/0x420 [ 749.681360][T15844] ? __fget_files+0x3a0/0x420 [ 749.681388][T15844] ? __fget_files+0x2a/0x420 [ 749.681421][T15844] security_file_ioctl+0xcb/0x2d0 [ 749.681446][T15844] __se_sys_ioctl+0x47/0x170 [ 749.681473][T15844] do_syscall_64+0xf6/0x210 [ 749.681505][T15844] ? clear_bhb_loop+0x60/0xb0 [ 749.681532][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.681553][T15844] RIP: 0033:0x7fc0b018e969 [ 749.681572][T15844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.681591][T15844] RSP: 002b:00007fc0b102d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.681615][T15844] RAX: ffffffffffffffda RBX: 00007fc0b03b5fa0 RCX: 00007fc0b018e969 [ 749.681631][T15844] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 749.681644][T15844] RBP: 00007fc0b102d090 R08: 0000000000000000 R09: 0000000000000000 [ 749.681657][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.681670][T15844] R13: 0000000000000000 R14: 00007fc0b03b5fa0 R15: 00007fc0b04dfa28 [ 749.681709][T15844] [ 749.685795][T15844] ERROR: Out of memory at tomoyo_realpath_from_path. [ 750.008890][T15328] Bluetooth: hci2: command tx timeout [ 750.165701][T15825] chnl_net:caif_netlink_parms(): no params data found [ 750.249552][T12753] usb 4-1: USB disconnect, device number 110 [ 750.657938][T15853] ======================================================= [ 750.657938][T15853] WARNING: The mand mount option has been deprecated and [ 750.657938][T15853] and is ignored by this kernel. Remove the mand [ 750.657938][T15853] option from the mount to silence this warning. [ 750.657938][T15853] ======================================================= [ 751.159410][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'. [ 751.530628][T15878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 752.102671][T15328] Bluetooth: hci2: command tx timeout [ 752.134299][ T63] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 752.419702][ T63] batman_adv: batadv0: Removing interface: ipvlan2 [ 752.528621][T12767] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 752.915756][T12767] usb 2-1: Using ep0 maxpacket: 8 [ 752.938748][T12767] usb 2-1: unable to get BOS descriptor or descriptor too short [ 752.967227][T12767] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 752.978196][T12767] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 753.013399][T12767] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 753.033251][T12767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.074000][T12767] usb 2-1: Product: syz [ 753.078295][T12767] usb 2-1: Manufacturer: syz [ 753.098799][ T5891] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 753.119376][T12767] usb 2-1: SerialNumber: syz [ 753.275693][ T5891] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 753.318863][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 753.327978][ T5891] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 753.418357][ T5891] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 753.447280][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.505824][ T5891] hub 3-1:1.0: bad descriptor, ignoring hub [ 753.520353][ T5891] hub 3-1:1.0: probe with driver hub failed with error -5 [ 753.530283][ T5891] cdc_wdm 3-1:1.0: skipping garbage [ 753.535610][ T5891] cdc_wdm 3-1:1.0: skipping garbage [ 753.567097][T15881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.578646][T15881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.599204][ T5891] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 753.615756][T15881] No buffer was provided with the request [ 753.846903][T15900] "syz.2.2962" (15900) uses obsolete ecb(arc4) skcipher [ 753.994138][T15881] could not allocate digest TFM handle sha512-arm [ 754.168685][T15328] Bluetooth: hci2: command tx timeout [ 754.300929][ T63] bond0 (unregistering): Released all slaves [ 754.403608][ T63] bond1 (unregistering): Released all slaves [ 754.520534][T15910] FAULT_INJECTION: forcing a failure. [ 754.520534][T15910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.561755][T15910] CPU: 1 UID: 0 PID: 15910 Comm: syz.0.2964 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 754.561780][T15910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.561790][T15910] Call Trace: [ 754.561797][T15910] [ 754.561804][T15910] dump_stack_lvl+0x189/0x250 [ 754.561831][T15910] ? __lock_acquire+0xaac/0xd20 [ 754.561855][T15910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.561876][T15910] ? __pfx__printk+0x10/0x10 [ 754.561891][T15910] ? __might_fault+0xb0/0x130 [ 754.561920][T15910] should_fail_ex+0x414/0x560 [ 754.561947][T15910] _copy_from_iter+0x1db/0x15a0 [ 754.561973][T15910] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 754.561992][T15910] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 754.562013][T15910] ? __pfx__copy_from_iter+0x10/0x10 [ 754.562035][T15910] ? __build_skb_around+0x257/0x3e0 [ 754.562057][T15910] ? netlink_sendmsg+0x642/0xb30 [ 754.562075][T15910] ? skb_put+0x11b/0x210 [ 754.562098][T15910] netlink_sendmsg+0x6b2/0xb30 [ 754.562124][T15910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.562145][T15910] ? aa_sock_msg_perm+0x94/0x160 [ 754.562165][T15910] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 754.562184][T15910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.562203][T15910] __sock_sendmsg+0x219/0x270 [ 754.562222][T15910] ____sys_sendmsg+0x505/0x830 [ 754.562248][T15910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.562276][T15910] ? import_iovec+0x74/0xa0 [ 754.562301][T15910] ___sys_sendmsg+0x21f/0x2a0 [ 754.562324][T15910] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.562371][T15910] ? __fget_files+0x2a/0x420 [ 754.562392][T15910] ? __fget_files+0x3a0/0x420 [ 754.562420][T15910] __x64_sys_sendmsg+0x19b/0x260 [ 754.562444][T15910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 754.562477][T15910] ? do_syscall_64+0xba/0x210 [ 754.562507][T15910] do_syscall_64+0xf6/0x210 [ 754.562528][T15910] ? clear_bhb_loop+0x60/0xb0 [ 754.562547][T15910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.562562][T15910] RIP: 0033:0x7f55c0d8e969 [ 754.562576][T15910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.562590][T15910] RSP: 002b:00007f55c1c36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.562607][T15910] RAX: ffffffffffffffda RBX: 00007f55c0fb6160 RCX: 00007f55c0d8e969 [ 754.562618][T15910] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 754.562628][T15910] RBP: 00007f55c1c36090 R08: 0000000000000000 R09: 0000000000000000 [ 754.562638][T15910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.562647][T15910] R13: 0000000000000001 R14: 00007f55c0fb6160 R15: 00007f55c10dfa28 [ 754.562670][T15910] [ 754.833111][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.188083][ T63] tipc: Left network mode [ 755.264594][T15918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2966'. [ 755.380680][T15825] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.396326][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.423626][T15825] bridge_slave_0: entered allmulticast mode [ 755.444878][T15825] bridge_slave_0: entered promiscuous mode [ 755.452991][T13180] usb 2-1: USB disconnect, device number 112 [ 755.517753][T15825] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.536583][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.564050][T15825] bridge_slave_1: entered allmulticast mode [ 755.581720][T15825] bridge_slave_1: entered promiscuous mode [ 755.876817][T15825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.964554][T15936] loop6: detected capacity change from 0 to 7 [ 755.985382][T15825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.006829][T15936] Dev loop6: unable to read RDB block 7 [ 756.027250][T15936] loop6: unable to read partition table [ 756.051638][T15936] loop6: partition table beyond EOD, truncated [ 756.101867][T15936] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 756.249052][T15328] Bluetooth: hci2: command tx timeout [ 756.402754][T15825] team0: Port device team_slave_0 added [ 756.428968][ T5883] usb 3-1: USB disconnect, device number 3 [ 756.436511][T15942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2972'. [ 756.483507][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 756.507417][T15825] team0: Port device team_slave_1 added [ 756.986689][T15949] netlink: 'syz.3.2971': attribute type 20 has an invalid length. [ 757.089272][T15825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.096279][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.382245][T15956] xt_hashlimit: size too large, truncated to 1048576 [ 757.390499][T15825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.596852][T15825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.669400][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2975'. [ 757.701614][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.770026][T15960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.808614][T15825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.128115][T15970] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2976'. [ 758.301881][T15825] hsr_slave_0: entered promiscuous mode [ 758.315535][T15825] hsr_slave_1: entered promiscuous mode [ 758.324666][T15825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.337304][T15825] Cannot create hsr debugfs directory [ 758.509187][ T63] mac80211_hwsim hwsim3 wlan0 (unregistering): left allmulticast mode [ 758.960256][T13180] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 758.987385][ T63] hsr_slave_0: left promiscuous mode [ 759.017342][T15993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2982'. [ 759.026923][ T63] hsr_slave_1: left promiscuous mode [ 759.040010][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 759.107817][ T63] pimreg (unregistering): left allmulticast mode [ 759.140856][T13180] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 759.160218][T13180] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 759.184423][T13180] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.235269][T13180] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 759.252531][T13180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.261376][ T63] pim6reg (unregistering): left allmulticast mode [ 759.289743][T13180] hub 3-1:1.0: bad descriptor, ignoring hub [ 759.300270][T13180] hub 3-1:1.0: probe with driver hub failed with error -5 [ 759.334596][T13180] cdc_wdm 3-1:1.0: skipping garbage [ 759.347577][T13180] cdc_wdm 3-1:1.0: skipping garbage [ 759.355401][T13180] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 759.615070][T16004] "syz.2.2981" (16004) uses obsolete ecb(arc4) skcipher [ 761.229537][ T63] lo (unregistering): left allmulticast mode [ 761.724831][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2986'. [ 761.851070][T16012] team_slave_0: entered promiscuous mode [ 761.856879][T16012] team_slave_1: entered promiscuous mode [ 761.863143][T16012] dummy0: entered promiscuous mode [ 761.879930][T16012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 761.916343][T16012] team_slave_0: left promiscuous mode [ 761.921951][T16012] team_slave_1: left promiscuous mode [ 761.927568][T16012] dummy0: left promiscuous mode [ 762.475484][ T5891] usb 3-1: reset low-speed USB device number 4 using dummy_hcd [ 762.714742][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 762.718667][ T5883] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 762.764007][T16037] netlink: 'syz.3.2991': attribute type 9 has an invalid length. [ 762.827530][T16037] macvlan3: entered allmulticast mode [ 762.840200][ T5891] usb 3-1: device firmware changed [ 762.875786][ T5891] usb 3-1: USB disconnect, device number 4 [ 762.910440][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 762.949927][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 762.987573][ T5883] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 763.017991][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.049582][ T5883] usb 1-1: Product: syz [ 763.057231][ T5883] usb 1-1: Manufacturer: syz [ 763.071454][ T5883] usb 1-1: SerialNumber: syz [ 763.103737][ T5883] usb 1-1: config 0 descriptor?? [ 763.144506][ T5883] ir_toy 1-1:0.0: required endpoints not found [ 763.229360][ T5891] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 763.337981][T12763] usb 1-1: USB disconnect, device number 126 [ 763.441449][ T5891] usb 3-1: No LPM exit latency info found, disabling LPM. [ 763.471845][ T5891] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 763.504365][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0 [ 763.511561][T13180] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 763.547631][ T5891] usb 3-1: string descriptor 0 read error: -22 [ 763.568712][ T5891] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 763.628543][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.665118][T16021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 763.746233][T15825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 763.778694][T13180] usb 4-1: config 0 has no interfaces? [ 763.904999][T16021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.945941][T13180] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 763.956117][T16021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.972406][T15825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 763.981555][T16021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.991290][T13180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.005381][T13180] usb 4-1: Product: syz [ 764.010354][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.020822][T13180] usb 4-1: Manufacturer: syz [ 764.032055][T13180] usb 4-1: SerialNumber: syz [ 764.067964][T16021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.082911][T13180] usb 4-1: config 0 descriptor?? [ 764.123186][T15825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 764.142597][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.289817][T15825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 764.306103][ T5891] usbhid 3-1:1.0: can't add hid device: -71 [ 764.337567][T16053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.358811][ T5891] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 764.387511][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 764.396589][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 764.509507][T16053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.510391][ T5891] usb 3-1: USB disconnect, device number 5 [ 764.590953][T12746] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 764.744697][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2995'. [ 764.858252][T15825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.961830][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 765.014447][T16066] FAULT_INJECTION: forcing a failure. [ 765.014447][T16066] name failslab, interval 1, probability 0, space 0, times 0 [ 765.150653][T16066] CPU: 0 UID: 0 PID: 16066 Comm: syz.1.2998 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 765.150686][T16066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 765.150700][T16066] Call Trace: [ 765.150709][T16066] [ 765.150720][T16066] dump_stack_lvl+0x189/0x250 [ 765.150760][T16066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.150792][T16066] ? __pfx__printk+0x10/0x10 [ 765.150821][T16066] ? __pfx___might_resched+0x10/0x10 [ 765.150854][T16066] should_fail_ex+0x414/0x560 [ 765.150883][T16066] should_failslab+0xa8/0x100 [ 765.150916][T16066] __kmalloc_cache_noprof+0x70/0x3d0 [ 765.150944][T16066] ? tcf_proto_create+0x65/0x330 [ 765.150981][T16066] tcf_proto_create+0x65/0x330 [ 765.151017][T16066] tc_new_tfilter+0x11aa/0x15b0 [ 765.151076][T16066] ? __pfx_tc_new_tfilter+0x10/0x10 [ 765.151144][T16066] ? __pfx_tc_new_tfilter+0x10/0x10 [ 765.151173][T16066] rtnetlink_rcv_msg+0x7cf/0xb70 [ 765.151198][T16066] ? kasan_save_track+0x4f/0x80 [ 765.151226][T16066] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 765.151250][T16066] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 765.151277][T16066] ? __lock_acquire+0xaac/0xd20 [ 765.151324][T16066] netlink_rcv_skb+0x219/0x490 [ 765.151352][T16066] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 765.151379][T16066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 765.151428][T16066] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.151453][T16066] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.151485][T16066] netlink_unicast+0x75b/0x8d0 [ 765.151521][T16066] netlink_sendmsg+0x805/0xb30 [ 765.151559][T16066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.151592][T16066] ? aa_sock_msg_perm+0x94/0x160 [ 765.151621][T16066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 765.151646][T16066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.151674][T16066] __sock_sendmsg+0x219/0x270 [ 765.151701][T16066] ____sys_sendmsg+0x505/0x830 [ 765.151740][T16066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.151782][T16066] ? import_iovec+0x74/0xa0 [ 765.151817][T16066] ___sys_sendmsg+0x21f/0x2a0 [ 765.151858][T16066] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.151930][T16066] ? __fget_files+0x2a/0x420 [ 765.151958][T16066] ? __fget_files+0x3a0/0x420 [ 765.151999][T16066] __x64_sys_sendmsg+0x19b/0x260 [ 765.152034][T16066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 765.152084][T16066] ? do_syscall_64+0xba/0x210 [ 765.152116][T16066] do_syscall_64+0xf6/0x210 [ 765.152146][T16066] ? clear_bhb_loop+0x60/0xb0 [ 765.152173][T16066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.152195][T16066] RIP: 0033:0x7fc0b018e969 [ 765.152214][T16066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.152234][T16066] RSP: 002b:00007fc0b102d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.152257][T16066] RAX: ffffffffffffffda RBX: 00007fc0b03b5fa0 RCX: 00007fc0b018e969 [ 765.152273][T16066] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 765.152287][T16066] RBP: 00007fc0b102d090 R08: 0000000000000000 R09: 0000000000000000 [ 765.152301][T16066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.152314][T16066] R13: 0000000000000000 R14: 00007fc0b03b5fa0 R15: 00007fc0b04dfa28 [ 765.152347][T16066] [ 765.546005][T15825] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.875703][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.883184][ T7101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.919026][T11941] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.926292][T11941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.180774][T16079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.217725][T16081] loop2: detected capacity change from 0 to 7 [ 766.232025][T10960] Dev loop2: unable to read RDB block 7 [ 766.237850][T10960] loop2: AHDI p2 p3 [ 766.242228][T10960] loop2: partition table partially beyond EOD, truncated [ 766.256564][T10960] loop2: p2 size 150995456 extends beyond EOD, truncated [ 766.261046][T15825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.945228][T16081] Dev loop2: unable to read RDB block 7 [ 766.953246][T16081] loop2: AHDI p2 p3 [ 766.957854][T16081] loop2: partition table partially beyond EOD, truncated [ 766.965773][ T5891] usb 4-1: USB disconnect, device number 111 [ 767.000839][T16081] loop2: p2 size 150995456 extends beyond EOD, truncated [ 767.238340][T10960] udevd[10960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 767.255225][T15825] veth0_vlan: entered promiscuous mode [ 767.316300][T15825] veth1_vlan: entered promiscuous mode [ 767.334401][T10960] udevd[10960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 767.472560][T15825] veth0_macvtap: entered promiscuous mode [ 767.513007][T15825] veth1_macvtap: entered promiscuous mode [ 767.548589][T12753] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 767.578119][T15825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.657710][T15825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.707507][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3007'. [ 767.720364][T15825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.758647][T12753] usb 1-1: Using ep0 maxpacket: 16 [ 767.765723][T12753] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.777802][T15825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.786511][T12753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.786548][T12753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 767.786572][T12753] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 767.786598][T12753] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.788412][T12753] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 767.878588][T15825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.899001][T15825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.901550][T12753] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 767.955149][T16102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3009'. [ 768.003816][T12753] usb 1-1: Manufacturer: syz [ 768.026018][T12753] usb 1-1: config 0 descriptor?? [ 768.284257][T11940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.328846][T11940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.448252][T11941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.468645][T12753] rc_core: IR keymap rc-hauppauge not found [ 768.493580][T12753] Registered IR keymap rc-empty [ 768.508014][T11941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.518107][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 768.558698][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 768.571288][T15328] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 768.619855][T12753] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 768.719754][T12753] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input44 [ 768.765236][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 768.818698][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 768.859608][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 768.888396][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 768.917081][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 768.977902][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 769.039110][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 769.075448][T16135] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 769.082149][T16135] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 769.109017][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 769.126370][T16135] vhci_hcd vhci_hcd.0: Device attached [ 769.146940][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 769.147112][T16138] vhci_hcd: connection closed [ 769.174051][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 769.180792][ T7101] vhci_hcd: stop threads [ 769.213574][ T7101] vhci_hcd: release socket [ 769.218124][ T7101] vhci_hcd: disconnect device [ 769.223154][T12753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 769.264466][T12753] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 769.320442][T12753] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 769.398627][T12767] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 769.424358][T16147] team_slave_0: entered promiscuous mode [ 769.430223][T16147] team_slave_1: entered promiscuous mode [ 769.489503][T16147] vlan2: entered promiscuous mode [ 769.491189][T16152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3020'. [ 769.494715][T16147] team0: entered promiscuous mode [ 769.562503][T12767] usb 3-1: config 0 has no interfaces? [ 769.575705][T12767] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 769.587283][T12767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.595979][T12767] usb 3-1: Product: syz [ 769.601186][T12767] usb 3-1: Manufacturer: syz [ 769.606166][T12767] usb 3-1: SerialNumber: syz [ 769.615707][T12767] usb 3-1: config 0 descriptor?? [ 770.090369][T12763] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 770.142443][T12767] usb 3-1: USB disconnect, device number 6 [ 770.264711][T12763] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 770.293605][T12763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.331149][T12763] usb 4-1: config 0 has no interface number 0 [ 770.337429][T12763] usb 4-1: config 0 interface 239 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 770.367590][T12746] usb 1-1: USB disconnect, device number 2 [ 770.396514][T12763] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 770.427597][T12763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.456680][T12763] usb 4-1: Product: syz [ 770.488208][T12763] usb 4-1: Manufacturer: syz [ 770.501728][T12763] usb 4-1: SerialNumber: syz [ 770.525898][T12763] usb 4-1: config 0 descriptor?? [ 770.706315][T16180] vlan0: entered promiscuous mode [ 770.778983][T12763] usb 4-1: probing VID:PID(2201:012C) [ 770.842460][T12763] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 770.897540][T12763] vub300 4-1:0.239: probe with driver vub300 failed with error -22 [ 770.974810][T12763] usb 4-1: USB disconnect, device number 112 [ 771.134248][T16188] loop6: detected capacity change from 0 to 7 [ 771.148105][T16190] netlink: 'syz.0.3031': attribute type 4 has an invalid length. [ 771.167936][T16190] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3031'. [ 771.168991][T16188] Dev loop6: unable to read RDB block 7 [ 771.204822][T16188] loop6: unable to read partition table [ 771.226457][T16188] loop6: partition table beyond EOD, truncated [ 771.258997][T16188] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 771.386659][T16193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3032'. [ 771.582983][T16199] loop2: detected capacity change from 0 to 7 [ 771.704928][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'. [ 771.710106][T16199] Dev loop2: unable to read RDB block 7 [ 771.739131][T16199] loop2: unable to read partition table [ 771.745175][T16199] loop2: partition table beyond EOD, truncated [ 771.751771][T16199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 771.793181][T16202] vlan3: entered promiscuous mode [ 771.998778][T16214] input: syz1 as /devices/virtual/input/input47 [ 772.558136][T16233] vlan0: entered promiscuous mode [ 772.566498][T16237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'. [ 772.721780][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3046'. [ 772.904958][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3050'. [ 773.003054][T16245] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3044'. [ 773.208395][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3051'. [ 774.492628][T16265] loop6: detected capacity change from 0 to 7 [ 774.523603][T16265] Dev loop6: unable to read RDB block 7 [ 774.532796][T16265] loop6: unable to read partition table [ 774.584960][T16265] loop6: partition table beyond EOD, truncated [ 774.622455][T16265] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 775.235950][T16274] FAULT_INJECTION: forcing a failure. [ 775.235950][T16274] name failslab, interval 1, probability 0, space 0, times 0 [ 775.249912][T16274] CPU: 1 UID: 0 PID: 16274 Comm: syz.4.3058 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 775.249944][T16274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.249958][T16274] Call Trace: [ 775.249967][T16274] [ 775.249977][T16274] dump_stack_lvl+0x189/0x250 [ 775.250018][T16274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.250050][T16274] ? __pfx__printk+0x10/0x10 [ 775.250079][T16274] ? __pfx___might_resched+0x10/0x10 [ 775.250108][T16274] ? fs_reclaim_acquire+0x7d/0x100 [ 775.250147][T16274] should_fail_ex+0x414/0x560 [ 775.250177][T16274] should_failslab+0xa8/0x100 [ 775.250208][T16274] __kmalloc_cache_noprof+0x70/0x3d0 [ 775.250237][T16274] ? mall_change+0x312/0x8f0 [ 775.250265][T16274] mall_change+0x312/0x8f0 [ 775.250298][T16274] ? __pfx_mall_change+0x10/0x10 [ 775.250340][T16274] tc_new_tfilter+0xdca/0x15b0 [ 775.250403][T16274] ? __pfx_tc_new_tfilter+0x10/0x10 [ 775.250471][T16274] ? __pfx_tc_new_tfilter+0x10/0x10 [ 775.250500][T16274] rtnetlink_rcv_msg+0x7cf/0xb70 [ 775.250530][T16274] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 775.250555][T16274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.250585][T16274] ? ref_tracker_free+0x63a/0x7d0 [ 775.250609][T16274] ? __copy_skb_header+0xa7/0x550 [ 775.250651][T16274] netlink_rcv_skb+0x219/0x490 [ 775.250680][T16274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.250707][T16274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 775.250756][T16274] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.250782][T16274] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.250815][T16274] netlink_unicast+0x75b/0x8d0 [ 775.250851][T16274] netlink_sendmsg+0x805/0xb30 [ 775.250888][T16274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.250920][T16274] ? aa_sock_msg_perm+0x94/0x160 [ 775.250953][T16274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 775.250978][T16274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.251006][T16274] __sock_sendmsg+0x219/0x270 [ 775.251033][T16274] ____sys_sendmsg+0x505/0x830 [ 775.251070][T16274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.251119][T16274] ? import_iovec+0x74/0xa0 [ 775.251156][T16274] ___sys_sendmsg+0x21f/0x2a0 [ 775.251190][T16274] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.251262][T16274] ? __fget_files+0x2a/0x420 [ 775.251291][T16274] ? __fget_files+0x3a0/0x420 [ 775.251332][T16274] __x64_sys_sendmsg+0x19b/0x260 [ 775.251367][T16274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 775.251418][T16274] ? do_syscall_64+0xba/0x210 [ 775.251453][T16274] do_syscall_64+0xf6/0x210 [ 775.251484][T16274] ? clear_bhb_loop+0x60/0xb0 [ 775.251511][T16274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.251532][T16274] RIP: 0033:0x7fcaf738e969 [ 775.251553][T16274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.251573][T16274] RSP: 002b:00007fcaf815f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.251596][T16274] RAX: ffffffffffffffda RBX: 00007fcaf75b5fa0 RCX: 00007fcaf738e969 [ 775.251613][T16274] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 775.251626][T16274] RBP: 00007fcaf815f090 R08: 0000000000000000 R09: 0000000000000000 [ 775.251639][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.251652][T16274] R13: 0000000000000000 R14: 00007fcaf75b5fa0 R15: 00007fcaf76dfa28 [ 775.251686][T16274] [ 775.728555][T12754] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 775.746967][T16276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3060'. [ 775.878793][T12754] usb 2-1: Using ep0 maxpacket: 8 [ 775.889750][T12754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 775.901588][T12754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 775.911541][T12754] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 775.921332][T12754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 775.932872][T12754] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 776.172870][T16280] xt_bpf: check failed: parse error [ 776.235702][T12754] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 776.256643][T12754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.318141][T12754] usb 2-1: config 0 descriptor?? [ 776.340166][T16273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 776.480039][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3062'. [ 776.580731][T16284] loop6: detected capacity change from 0 to 7 [ 776.631027][T16273] tipc: Cannot configure node identity twice [ 776.798761][T16284] Dev loop6: unable to read RDB block 7 [ 776.809661][T16284] loop6: unable to read partition table [ 776.844625][T16284] loop6: partition table beyond EOD, truncated [ 776.907858][T16284] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 777.677950][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3069'. [ 777.888637][T12754] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 777.992858][T16308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3072'. [ 778.061819][T12754] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 778.087736][T12754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.118689][T12754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.171639][T15328] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 778.177617][T12746] usb 2-1: USB disconnect, device number 113 [ 778.262818][T12754] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 778.316222][T16312] loop6: detected capacity change from 0 to 7 [ 778.338892][T16312] Dev loop6: unable to read RDB block 7 [ 778.341454][T12754] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 778.344770][T16312] loop6: unable to read partition table [ 778.376320][T16312] loop6: partition table beyond EOD, truncated [ 778.383283][T16314] vlan3: entered promiscuous mode [ 778.386749][T16312] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 778.419509][T12754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.460944][T12754] usb 1-1: config 0 descriptor?? [ 778.550819][T16316] xt_hashlimit: size too large, truncated to 1048576 [ 778.649350][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3077'. [ 778.872685][T16325] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3078'. [ 778.972393][T12754] hid-picolcd 0003:04D8:C002.0022: No report with id 0x11 found [ 779.116903][T12754] usb 1-1: USB disconnect, device number 3 [ 779.265913][T13180] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 779.418881][T13180] usb 5-1: Invalid ep0 maxpacket: 64 [ 779.618661][T13180] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 779.776046][T13180] usb 5-1: Invalid ep0 maxpacket: 64 [ 779.782146][T13180] usb usb5-port1: attempt power cycle [ 779.884398][T16346] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 779.924969][T16346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3083'. [ 780.149284][T13180] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 780.200191][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3084'. [ 780.227124][T13180] usb 5-1: Invalid ep0 maxpacket: 64 [ 780.429518][T16359] tipc: Started in network mode [ 780.434811][T16359] tipc: Node identity 00000000000000004000000000213a2d, cluster identity 4711 [ 780.452276][T16359] tipc: Enabling of bearer rejected, failed to enable media [ 780.489069][T13180] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 780.530984][T13180] usb 5-1: Invalid ep0 maxpacket: 64 [ 780.546476][T13180] usb usb5-port1: unable to enumerate USB device [ 780.583414][T16361] vlan0: entered promiscuous mode [ 780.602003][T16361] bridge0: entered promiscuous mode [ 780.618935][T16361] vlan0: entered allmulticast mode [ 780.634459][T16361] bridge0: entered allmulticast mode [ 780.651516][T12754] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 780.828640][T12754] usb 3-1: Using ep0 maxpacket: 8 [ 780.897109][T12754] usb 3-1: unable to get BOS descriptor or descriptor too short [ 780.957849][T12754] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 781.181013][T12754] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 781.269485][T12754] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 781.311373][T12754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.355642][T12754] usb 3-1: Product: syz [ 781.374063][T12754] usb 3-1: Manufacturer: syz [ 781.385781][T12754] usb 3-1: SerialNumber: syz [ 781.666817][T16378] loop6: detected capacity change from 0 to 7 [ 781.776690][T16378] Dev loop6: unable to read RDB block 7 [ 781.782751][T16378] loop6: unable to read partition table [ 781.793832][T16378] loop6: partition table beyond EOD, truncated [ 781.828603][T16378] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 781.875859][T16357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.886855][T16357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.148281][T16385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3097'. [ 782.175930][T16387] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3099'. [ 782.186087][T16389] xt_hashlimit: size too large, truncated to 1048576 [ 782.189281][T16357] could not allocate digest TFM handle sha512-arm [ 782.373797][T16396] netlink: 368 bytes leftover after parsing attributes in process `syz.3.3102'. [ 782.885373][T12763] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 783.068740][T12763] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 783.082461][T12763] usb 1-1: config 0 has no interface number 0 [ 783.139578][T12763] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 783.188308][T12763] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 783.204726][T12763] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 783.224928][T12763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.298317][T12763] usb 1-1: config 0 descriptor?? [ 783.307657][T16391] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 783.321782][T12763] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 783.330628][T12763] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 783.521233][T12763] usb 1-1: USB disconnect, device number 4 [ 783.910015][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3104'. [ 784.257715][ T5883] usb 3-1: USB disconnect, device number 7 [ 784.509132][T16421] netlink: 'syz.3.3107': attribute type 4 has an invalid length. [ 784.689432][T13180] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 784.784689][T16428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3111'. [ 784.798049][T16430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3110'. [ 784.920205][T16432] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3112'. [ 784.935101][T13180] usb 1-1: config 0 has no interfaces? [ 784.953267][T13180] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 784.962944][T13180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.971581][T13180] usb 1-1: Product: syz [ 784.975945][T13180] usb 1-1: Manufacturer: syz [ 784.995479][T13180] usb 1-1: SerialNumber: syz [ 785.025576][T13180] usb 1-1: config 0 descriptor?? [ 785.230766][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 785.781675][T16453] xt_NFQUEUE: number of total queues is 0 [ 786.380662][T12754] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 786.543928][T12754] usb 4-1: config 0 has no interfaces? [ 786.557084][T12754] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 786.569496][T12753] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 786.587735][T12754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.625897][T14952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 786.637805][T14952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 786.647877][T12754] usb 4-1: Product: syz [ 786.648628][T14952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 786.655419][T12754] usb 4-1: Manufacturer: syz [ 786.662875][T14952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 786.674438][T14952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 786.732712][T12754] usb 4-1: SerialNumber: syz [ 786.759211][T12753] usb 3-1: config 0 has no interfaces? [ 786.779731][T12754] usb 4-1: config 0 descriptor?? [ 786.834832][T13448] bond0: (slave syz_tun): Releasing backup interface [ 786.864296][T12753] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 787.078528][T12753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.134197][T12753] usb 3-1: Product: syz [ 787.150001][T12753] usb 3-1: Manufacturer: syz [ 787.164347][T12753] usb 3-1: SerialNumber: syz [ 787.203127][T12753] usb 3-1: config 0 descriptor?? [ 787.578202][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'. [ 787.587541][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'. [ 788.248155][T12746] usb 1-1: USB disconnect, device number 5 [ 788.808859][T15328] Bluetooth: hci1: command tx timeout [ 788.931952][T16470] loop6: detected capacity change from 0 to 7 [ 788.951599][T16470] Dev loop6: unable to read RDB block 7 [ 788.957259][T16470] loop6: unable to read partition table [ 788.977653][T12753] usb 4-1: USB disconnect, device number 113 [ 789.030114][T16470] loop6: partition table beyond EOD, truncated [ 789.071795][T16462] chnl_net:caif_netlink_parms(): no params data found [ 789.081252][T16470] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 789.117080][T16473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3125'. [ 789.586995][ T30] audit: type=1326 audit(1747374523.241:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e418e969 code=0x7ffc0000 [ 789.649153][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 789.677052][T12753] usb 3-1: USB disconnect, device number 8 [ 789.697294][T16489] netlink: 'syz.4.3128': attribute type 9 has an invalid length. [ 789.732112][ T30] audit: type=1326 audit(1747374523.251:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e418e969 code=0x7ffc0000 [ 789.754761][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.829532][T16492] xt_hashlimit: size too large, truncated to 1048576 [ 789.845619][T16489] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 789.859316][T16489] macvlan2: entered allmulticast mode [ 789.868577][T16489] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 789.929001][T16462] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.963206][T16462] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.009772][T16462] bridge_slave_0: entered allmulticast mode [ 790.042533][T16462] bridge_slave_0: entered promiscuous mode [ 790.113485][T16462] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.128649][T16462] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.137656][T16462] bridge_slave_1: entered allmulticast mode [ 790.149915][T16462] bridge_slave_1: entered promiscuous mode [ 790.295036][T11941] bridge_slave_1: left allmulticast mode [ 790.300969][T11941] bridge_slave_1: left promiscuous mode [ 790.306795][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.314385][T12753] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 790.350147][T11941] bridge_slave_0: left allmulticast mode [ 790.372992][T11941] bridge_slave_0: left promiscuous mode [ 790.383280][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.488629][T12753] usb 4-1: Using ep0 maxpacket: 32 [ 790.506288][T12753] usb 4-1: config 0 has an invalid interface number: 201 but max is 0 [ 790.532877][T12753] usb 4-1: config 0 has no interface number 0 [ 790.565159][T12753] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=e9.0e [ 790.584953][T12753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.654197][T12753] usb 4-1: Product: syz [ 790.664744][T12753] usb 4-1: Manufacturer: syz [ 790.674546][T12753] usb 4-1: SerialNumber: syz [ 790.706445][T12753] usb 4-1: config 0 descriptor?? [ 790.890378][T15328] Bluetooth: hci1: command tx timeout [ 790.951667][T16497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.010390][T16497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.236345][T16523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3135'. [ 791.643182][T12753] pcwd_usb: The device isn't a Human Interface Device [ 791.685527][T12753] usb 4-1: USB disconnect, device number 114 [ 791.881913][T16532] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[16532] [ 792.025100][T11941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.034442][T11941] bond_slave_0: left promiscuous mode [ 792.046613][T11941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.056751][T11941] bond_slave_1: left promiscuous mode [ 792.062993][T11941] bond0 (unregistering): Released all slaves [ 792.197426][T11941] bond1 (unregistering): Released all slaves [ 792.216442][T16462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.232878][T16462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.567013][T11941] tipc: Left network mode [ 792.615419][T16462] team0: Port device team_slave_0 added [ 792.661347][T16462] team0: Port device team_slave_1 added [ 792.750176][T13180] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 792.758578][T12753] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 792.790234][T16462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.797499][T16462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.832610][T16462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.846319][T16462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.876186][T16462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.904819][T16462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.920315][T13180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.928838][T12753] usb 1-1: Using ep0 maxpacket: 16 [ 792.930603][T13180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 792.947225][T13180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 792.960300][T13180] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 792.970607][T15328] Bluetooth: hci1: command tx timeout [ 792.975837][T12753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.976743][T13180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.013179][T16542] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 793.031732][T16538] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 793.035558][T12753] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 793.050293][T16542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3141'. [ 793.054180][T13180] hub 5-1:1.0: bad descriptor, ignoring hub [ 793.067946][T12753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.074239][T13180] hub 5-1:1.0: probe with driver hub failed with error -5 [ 793.082173][T12753] usb 1-1: config 0 descriptor?? [ 793.099364][T13180] cdc_wdm 5-1:1.0: skipping garbage [ 793.104649][T13180] cdc_wdm 5-1:1.0: skipping garbage [ 793.114514][T13180] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 793.125682][T13180] cdc_wdm 5-1:1.0: Unknown control protocol [ 793.314322][T16462] hsr_slave_0: entered promiscuous mode [ 793.343786][T16462] hsr_slave_1: entered promiscuous mode [ 793.384881][T16462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.418586][T16551] "syz.4.3139" (16551) uses obsolete ecb(arc4) skcipher [ 793.432933][T16462] Cannot create hsr debugfs directory [ 793.548884][ C0] wdm_int_callback: 8766 callbacks suppressed [ 793.548912][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 793.561693][ C0] wdm_int_callback: 8766 callbacks suppressed [ 793.561719][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 793.568537][T12753] logitech-djreceiver 0003:046D:C513.0023: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.0-1/input0 [ 795.048966][T15328] Bluetooth: hci1: command tx timeout [ 795.097856][T11941] mac80211_hwsim hwsim13 wlan0 (unregistering): left allmulticast mode [ 795.788689][ T5891] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 795.834941][T12763] usb 1-1: USB disconnect, device number 6 [ 795.989785][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 796.037820][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 796.071337][ T5891] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 796.081743][ T5891] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 796.107997][ T5891] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 796.122733][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.184583][ T5891] usb 4-1: Product: syz [ 796.218579][ T5891] usb 4-1: Manufacturer: syz [ 796.248408][ T5891] usb 4-1: SerialNumber: syz [ 796.346674][T12753] usb 5-1: USB disconnect, device number 90 [ 796.450277][T11941] hsr_slave_0: left promiscuous mode [ 796.456469][T11941] hsr_slave_1: left promiscuous mode [ 796.471387][T11941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.595083][T16594] fuse: Bad value for 'max_read' [ 796.707962][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.719198][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.167904][T16604] loop6: detected capacity change from 0 to 7 [ 797.175828][T16596] could not allocate digest TFM handle sha512-arm [ 797.185175][T16604] Dev loop6: unable to read RDB block 7 [ 797.195349][T16604] loop6: unable to read partition table [ 797.258709][T16604] loop6: partition table beyond EOD, truncated [ 797.275583][T16604] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 797.750244][T11941] team_slave_1 (unregistering): left promiscuous mode [ 797.763835][T11941] team_slave_1 (unregistering): left allmulticast mode [ 797.785468][T11941] team0 (unregistering): Port device team_slave_1 removed [ 797.865611][T11941] team_slave_0 (unregistering): left promiscuous mode [ 797.873013][T11941] team_slave_0 (unregistering): left allmulticast mode [ 797.883617][T11941] team0 (unregistering): Port device team_slave_0 removed [ 799.054886][T12763] usb 4-1: USB disconnect, device number 115 [ 799.120642][T11941] IPVS: stop unused estimator thread 0... [ 799.301853][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 799.311232][T16615] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3155'. [ 799.795306][T16462] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 799.839534][T16462] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 799.889227][T16462] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 800.109165][T16462] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 800.512258][T16462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.578552][T13180] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 800.631651][T16462] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.697545][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.704768][ T7101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.821670][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.828883][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.904312][T13180] usb 4-1: config 0 has no interfaces? [ 800.995691][T13180] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 801.010089][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3161'. [ 801.024339][T16637] vlan2: entered promiscuous mode [ 801.029642][T13180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.048564][T13180] usb 4-1: Product: syz [ 801.057236][T16637] ip6gretap0: entered promiscuous mode [ 801.092777][T13180] usb 4-1: Manufacturer: syz [ 801.120808][T13180] usb 4-1: SerialNumber: syz [ 801.163848][T13180] usb 4-1: config 0 descriptor?? [ 801.445557][T16641] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 801.475322][T16641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3162'. [ 801.497568][T16462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.879834][T16462] veth0_vlan: entered promiscuous mode [ 802.512283][T16462] veth1_vlan: entered promiscuous mode [ 802.649077][T12753] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 802.680399][T16462] veth0_macvtap: entered promiscuous mode [ 802.726551][T16462] veth1_macvtap: entered promiscuous mode [ 802.792775][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 802.867859][T16462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.004168][T16462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.028990][T16462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.061468][T16462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.080616][T12753] usb 5-1: config 0 has no interfaces? [ 803.093266][T16462] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.103194][T12753] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 803.111389][T16462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.128010][T12753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.146265][T12753] usb 5-1: Product: syz [ 803.159591][T12753] usb 5-1: Manufacturer: syz [ 803.182176][T12753] usb 5-1: SerialNumber: syz [ 803.268975][T12753] usb 5-1: config 0 descriptor?? [ 803.538024][ T7101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.610792][ T7101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.682430][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 803.693866][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 803.801088][ T7101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.828210][ T7101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.103253][T12746] usb 4-1: USB disconnect, device number 116 [ 804.253748][ T30] audit: type=1326 audit(1747374537.921:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16682 comm="syz.3.3171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07e418e969 code=0x0 [ 804.536054][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 805.159375][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'. [ 805.200048][T16709] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 805.228607][T16709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.459536][T12753] usb 5-1: USB disconnect, device number 91 [ 805.749817][T16723] xt_hashlimit: size too large, truncated to 1048576 [ 805.942148][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 805.953359][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 806.169254][T12754] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 806.436753][T12754] usb 5-1: config 0 has no interfaces? [ 806.458936][T12754] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 806.468247][T12754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.638498][T12754] usb 5-1: Product: syz [ 806.710115][T12754] usb 5-1: Manufacturer: syz [ 806.740978][T12754] usb 5-1: SerialNumber: syz [ 806.772976][T12754] usb 5-1: config 0 descriptor?? [ 807.242563][T14952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 807.268842][T14952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 807.299875][T14952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 807.309553][T14952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 807.318763][T14952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 807.723452][ T7102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.933770][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 807.942839][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 808.358584][T12753] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 808.375446][ T7102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.528354][T12753] usb 1-1: Using ep0 maxpacket: 16 [ 808.589898][T12753] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 808.599464][T12753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.607487][T12753] usb 1-1: Product: syz [ 808.612504][T12753] usb 1-1: Manufacturer: syz [ 808.617199][T12753] usb 1-1: SerialNumber: syz [ 808.637038][T12753] usb 1-1: config 0 descriptor?? [ 808.747004][ T7102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.828394][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.844233][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.879027][T16752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.908303][T16752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.274985][ T5883] usb 5-1: USB disconnect, device number 92 [ 809.338142][T16747] chnl_net:caif_netlink_parms(): no params data found [ 809.380277][T14952] Bluetooth: hci0: command tx timeout [ 809.438808][T12753] speedtch 1-1:0.0: speedtch_bind: wrong device class 68 [ 809.467501][T12753] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 809.787284][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.806116][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.817068][T16747] bridge_slave_0: entered allmulticast mode [ 809.873993][T16747] bridge_slave_0: entered promiscuous mode [ 810.292509][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.303264][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.312859][T12767] usb 1-1: USB disconnect, device number 7 [ 810.320150][T16747] bridge_slave_1: entered allmulticast mode [ 810.332077][T16747] bridge_slave_1: entered promiscuous mode [ 810.912162][T16747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.935983][T16747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.252834][ T30] audit: type=1800 audit(1747374544.921:278): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3197" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 811.448652][T14952] Bluetooth: hci0: command tx timeout [ 811.488661][T16747] team0: Port device team_slave_0 added [ 811.520538][T16747] team0: Port device team_slave_1 added [ 811.908751][ T7102] bridge_slave_1: left allmulticast mode [ 811.918612][ T7102] bridge_slave_1: left promiscuous mode [ 812.016438][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.136062][ T7102] bridge_slave_0: left allmulticast mode [ 812.218565][ T7102] bridge_slave_0: left promiscuous mode [ 812.224423][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.270067][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3198'. [ 813.528613][T14952] Bluetooth: hci0: command tx timeout [ 814.056689][ T7102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.058862][T12767] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 814.074048][ T7102] bond_slave_0: left promiscuous mode [ 814.084779][ T7102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.098615][T13180] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 814.098697][ T7102] bond_slave_1: left promiscuous mode [ 814.113504][ T7102] bond0 (unregistering): Released all slaves [ 814.253886][T12767] usb 5-1: config 0 has no interfaces? [ 814.261967][T13180] usb 4-1: config 0 has no interfaces? [ 814.270423][T12767] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 814.279930][T12767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.281756][ T7102] bond1 (unregistering): Released all slaves [ 814.288260][T12767] usb 5-1: Product: syz [ 814.301547][T13180] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 814.311448][T12767] usb 5-1: Manufacturer: syz [ 814.316093][T12767] usb 5-1: SerialNumber: syz [ 814.320845][T13180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.329013][T13180] usb 4-1: Product: syz [ 814.334002][T13180] usb 4-1: Manufacturer: syz [ 814.334991][T16747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.341275][T12767] usb 5-1: config 0 descriptor?? [ 814.347079][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.357312][T13180] usb 4-1: SerialNumber: syz [ 814.381532][T16747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.439505][T13180] usb 4-1: config 0 descriptor?? [ 814.445162][T16747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.459772][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.485768][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.492944][T16747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.616170][ T7102] tipc: Left network mode [ 814.757666][T13180] usb 4-1: USB disconnect, device number 117 [ 814.853554][T16747] hsr_slave_0: entered promiscuous mode [ 814.863127][T16747] hsr_slave_1: entered promiscuous mode [ 815.004192][ T5883] usb 5-1: USB disconnect, device number 93 [ 815.608613][T14952] Bluetooth: hci0: command tx timeout [ 815.627736][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 815.640020][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 815.992580][ T7102] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 816.437306][ T30] audit: type=1800 audit(1747374550.081:279): pid=16867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3210" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 816.561240][ T7102] hsr_slave_0: left promiscuous mode [ 816.574817][ T7102] hsr_slave_1: left promiscuous mode [ 816.593534][ T7102] batman_adv: batadv0: Interface deactivated: dummy0 [ 816.615167][ T7102] batman_adv: batadv0: Removing interface: dummy0 [ 816.640594][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.654657][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.815627][ T7102] veth1_macvtap: left promiscuous mode [ 816.834988][ T7102] veth0_macvtap: left promiscuous mode [ 816.848948][ T7102] veth1_vlan: left promiscuous mode [ 816.863352][ T7102] veth0_vlan: left promiscuous mode [ 816.964762][T16879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 819.939727][T16897] bond_slave_0: entered promiscuous mode [ 819.945525][T16897] bond_slave_1: entered promiscuous mode [ 819.967445][T16897] vlan2: entered promiscuous mode [ 819.972779][T16897] bond0: entered promiscuous mode [ 820.015364][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 820.236481][T16914] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3221'. [ 820.998805][ T5883] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 821.216291][ T5883] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 821.599947][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.624142][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.663024][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 821.732870][ T5883] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 821.747220][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.777494][ T5883] usb 2-1: config 0 descriptor?? [ 822.017790][T16935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.057439][T16935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.142000][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 822.170863][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 822.219995][ T5883] usb 2-1: USB disconnect, device number 114 [ 822.225781][T16942] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3226'. [ 822.676663][ T30] audit: type=1326 audit(1747374556.341:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755858e969 code=0x7ffc0000 [ 822.741169][T16954] QAT: Invalid ioctl 35315 [ 822.752216][ T30] audit: type=1326 audit(1747374556.341:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755858e969 code=0x7ffc0000 [ 822.796526][ T30] audit: type=1326 audit(1747374556.371:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f755858e969 code=0x7ffc0000 [ 822.801622][T16747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 822.820000][ T30] audit: type=1326 audit(1747374556.371:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755858e969 code=0x7ffc0000 [ 822.866718][ T30] audit: type=1326 audit(1747374556.391:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755858e969 code=0x7ffc0000 [ 822.939518][ T30] audit: type=1326 audit(1747374556.391:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7558590887 code=0x7ffc0000 [ 823.049607][ T30] audit: type=1326 audit(1747374556.391:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f75585907fc code=0x7ffc0000 [ 823.092806][T16747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 823.139189][T16747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 823.147712][ T30] audit: type=1326 audit(1747374556.391:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7558590734 code=0x7ffc0000 [ 823.288701][ T30] audit: type=1326 audit(1747374556.391:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7558590734 code=0x7ffc0000 [ 823.361726][T16747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 823.424928][ T30] audit: type=1326 audit(1747374556.391:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.1.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f755858d5ca code=0x7ffc0000 [ 823.788565][T12767] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 823.888799][T16983] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3229'. [ 823.918146][T16986] xt_NFQUEUE: number of total queues is 0 [ 824.000851][T16747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.166664][T12767] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 824.177134][T12767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.217715][T12767] usb 4-1: config 0 descriptor?? [ 824.612176][T12767] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 824.686584][T16747] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.265574][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.272935][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.306032][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.313237][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.328579][T12767] cpia1 4-1:0.0: unexpected state after lo power cmd: 01 [ 825.714738][T16747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.726912][T12767] gspca_cpia1: usb_control_msg 02, error -32 [ 826.035215][T12767] gspca_cpia1: usb_control_msg 02, error -71 [ 826.055170][T12767] gspca_cpia1: usb_control_msg 05, error -71 [ 826.117791][T12767] cpia1 4-1:0.0: unexpected systemstate: 01 [ 826.161493][T16747] veth0_vlan: entered promiscuous mode [ 826.175901][T12767] usb 4-1: USB disconnect, device number 118 [ 826.229034][T16747] veth1_vlan: entered promiscuous mode [ 826.371193][T16747] veth0_macvtap: entered promiscuous mode [ 826.434948][T16747] veth1_macvtap: entered promiscuous mode [ 826.961508][T16747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.081962][T16747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.154771][T16747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.165170][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3241'. [ 827.167309][T16747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.183226][T16747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.192043][T16747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.998628][T17019] binfmt_misc: register: failed to install interpreter file ./file0 [ 828.908542][T11939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.025901][T11939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.103287][T17029] ipvlan2: entered promiscuous mode [ 829.108792][T12754] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 829.123280][T17029] ipvlan2: entered allmulticast mode [ 829.133378][T17029] team0: entered allmulticast mode [ 829.140379][T17029] team_slave_0: entered allmulticast mode [ 829.152788][T17029] team_slave_1: entered allmulticast mode [ 829.165001][T17029] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 829.177901][T17029] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 17029, name: syz.0.3243 [ 829.188928][T17029] preempt_count: 0, expected: 0 [ 829.230041][T12753] usb 2-1: new high-speed USB device number 115 using dummy_hcd SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 829.310198][T17029] RCU nest depth: 1, expected: 0 [ 829.358105][T17029] 3 locks held by syz.0.3243/17029: [ 829.449882][T17029] #0: ffffffff8ea65d40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 829.528538][T12754] usb 4-1: Using ep0 maxpacket: 8 [ 829.594466][T17029] #1: ffffffff8f2f7248 (rtnl_mutex){+.+.}-{4:4} [ 829.595251][T12754] usb 4-1: unable to get BOS descriptor or descriptor too short [ 829.633855][T17029] , at: rtnl_newlink+0x8db/0x1c70 [ 829.640513][T12754] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 829.669073][T12754] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 829.679659][T12753] usb 2-1: config 0 has no interfaces? [ 829.686722][T17029] #2: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 829.808698][T17029] CPU: 0 UID: 0 PID: 17029 Comm: syz.0.3243 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 829.808732][T17029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 829.808746][T17029] Call Trace: [ 829.808755][T17029] [ 829.808765][T17029] dump_stack_lvl+0x189/0x250 [ 829.808808][T17029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.808843][T17029] ? console_unlock+0x21b/0x270 [ 829.808871][T17029] ? print_lock_name+0xde/0x100 [ 829.808912][T17029] __might_resched+0x495/0x610 [ 829.808934][T17029] ? preempt_schedule_irq+0xa5/0x150 [ 829.808953][T17029] ? __pfx___might_resched+0x10/0x10 [ 829.808975][T17029] ? preempt_schedule_irq+0xde/0x150 [ 829.809002][T17029] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 829.809045][T17029] __mutex_lock+0x106/0xe80 [ 829.809075][T17029] ? __dev_notify_flags+0x1d9/0x2e0 [ 829.809098][T17029] ? __pfx___dev_notify_flags+0x10/0x10 [ 829.809125][T17029] ? dev_set_allmulti+0x10e/0x260 [ 829.809159][T17029] ? __pfx___mutex_lock+0x10/0x10 [ 829.809201][T17029] ? netif_set_allmulti+0x267/0x380 [ 829.809234][T17029] dev_set_allmulti+0x10e/0x260 [ 829.809259][T17029] team_change_rx_flags+0x20f/0x330 [ 829.809294][T17029] ? team_change_rx_flags+0x29/0x330 [ 829.809330][T17029] ? __pfx_team_change_rx_flags+0x10/0x10 [ 829.809362][T17029] netif_set_allmulti+0x212/0x380 [ 829.809394][T17029] dev_set_allmulti+0x12b/0x260 [ 829.809416][T17029] ? __pfx_ipvlan_change_rx_flags+0x10/0x10 [ 829.809452][T17029] netif_set_allmulti+0x212/0x380 [ 829.809490][T17029] __dev_change_flags+0x52e/0x6d0 [ 829.809517][T17029] ? rtnl_is_locked+0x15/0x20 [ 829.809548][T17029] ? __pfx___dev_change_flags+0x10/0x10 [ 829.809569][T17029] ? ipvlan_link_new+0x87b/0xa90 [ 829.809610][T17029] rtnl_newlink_create+0x546/0xaf0 [ 829.809654][T17029] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 829.809689][T17029] ? rtnl_newlink+0x8db/0x1c70 [ 829.809709][T17029] ? __pfx___mutex_lock+0x10/0x10 [ 829.809744][T17029] ? ns_capable+0x8a/0xf0 [ 829.809772][T17029] rtnl_newlink+0x16d6/0x1c70 [ 829.809817][T17029] ? __pfx_rtnl_newlink+0x10/0x10 [ 829.809846][T17029] ? rcu_is_watching+0x15/0xb0 [ 829.809862][T17029] ? trace_sched_exit_tp+0x38/0x120 [ 829.809883][T17029] ? __schedule+0x1700/0x4cd0 [ 829.809929][T17029] ? preempt_schedule_irq+0xb5/0x150 [ 829.809963][T17029] ? __pfx___schedule+0x10/0x10 [ 829.810006][T17029] ? rcu_is_watching+0x15/0xb0 [ 829.810021][T17029] ? trace_irq_disable+0x37/0x110 [ 829.810049][T17029] ? aa_get_newest_label+0xf7/0x5d0 [ 829.810088][T17029] ? __lock_acquire+0xaac/0xd20 [ 829.810147][T17029] ? __pfx_rtnl_newlink+0x10/0x10 [ 829.810166][T17029] rtnetlink_rcv_msg+0x7cf/0xb70 [ 829.810188][T17029] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 829.810213][T17029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 829.810245][T17029] ? ref_tracker_free+0x63a/0x7d0 [ 829.810268][T17029] ? __copy_skb_header+0xa7/0x550 [ 829.810308][T17029] netlink_rcv_skb+0x219/0x490 [ 829.810328][T17029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 829.810348][T17029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 829.810401][T17029] ? netlink_deliver_tap+0x2e/0x1b0 [ 829.810427][T17029] ? netlink_deliver_tap+0x2e/0x1b0 [ 829.810458][T17029] netlink_unicast+0x75b/0x8d0 [ 829.810484][T17029] netlink_sendmsg+0x805/0xb30 [ 829.810518][T17029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.810552][T17029] ? aa_sock_msg_perm+0x94/0x160 [ 829.810578][T17029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 829.810605][T17029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.810626][T17029] __sock_sendmsg+0x219/0x270 [ 829.810645][T17029] ____sys_sendmsg+0x505/0x830 [ 829.810689][T17029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.810732][T17029] ? import_iovec+0x74/0xa0 [ 829.810767][T17029] ___sys_sendmsg+0x21f/0x2a0 [ 829.810792][T17029] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.810862][T17029] ? __fget_files+0x2a/0x420 [ 829.810890][T17029] ? __fget_files+0x3a0/0x420 [ 829.810929][T17029] __x64_sys_sendmsg+0x19b/0x260 [ 829.810953][T17029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 829.811006][T17029] ? do_syscall_64+0xba/0x210 [ 829.811040][T17029] do_syscall_64+0xf6/0x210 [ 829.811070][T17029] ? clear_bhb_loop+0x60/0xb0 [ 829.811090][T17029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.811106][T17029] RIP: 0033:0x7f55c0d8e969 [ 829.811127][T17029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.811147][T17029] RSP: 002b:00007f55c1c36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.811171][T17029] RAX: ffffffffffffffda RBX: 00007f55c0fb6160 RCX: 00007f55c0d8e969 [ 829.811187][T17029] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 000000000000000a [ 829.811200][T17029] RBP: 00007f55c0e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 829.811214][T17029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.811226][T17029] R13: 0000000000000000 R14: 00007f55c0fb6160 R15: 00007f55c10dfa28 [ 829.811250][T17029] [ 829.811278][T17029] [ 830.292743][T17029] ============================= [ 830.297593][T17029] [ BUG: Invalid wait context ] [ 830.302475][T17029] 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 Tainted: G W [ 830.311165][T17029] ----------------------------- [ 830.316017][T17029] syz.0.3243/17029 is trying to lock: [ 830.321408][T17029] ffff88805378cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x10e/0x260 [ 830.331710][T17029] other info that might help us debug this: [ 830.337610][T17029] context-{5:5} [ 830.341090][T17029] 3 locks held by syz.0.3243/17029: [ 830.346296][T17029] #0: ffffffff8ea65d40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 830.355908][T17029] #1: ffffffff8f2f7248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 830.364996][T17029] #2: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 830.374860][T17029] stack backtrace: [ 830.378629][T17029] CPU: 0 UID: 0 PID: 17029 Comm: syz.0.3243 Tainted: G W 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 830.378663][T17029] Tainted: [W]=WARN [ 830.378671][T17029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 830.378684][T17029] Call Trace: [ 830.378692][T17029] [ 830.378700][T17029] dump_stack_lvl+0x189/0x250 [ 830.378737][T17029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.378770][T17029] ? __pfx__printk+0x10/0x10 [ 830.378788][T17029] ? console_unlock+0x21b/0x270 [ 830.378812][T17029] ? print_lock_name+0xde/0x100 [ 830.378849][T17029] __lock_acquire+0xbcf/0xd20 [ 830.378883][T17029] ? dev_set_allmulti+0x10e/0x260 [ 830.378912][T17029] lock_acquire+0x120/0x360 [ 830.378958][T17029] ? dev_set_allmulti+0x10e/0x260 [ 830.378993][T17029] __mutex_lock+0x182/0xe80 [ 830.379023][T17029] ? dev_set_allmulti+0x10e/0x260 [ 830.379050][T17029] ? __dev_notify_flags+0x1d9/0x2e0 [ 830.379081][T17029] ? __pfx___dev_notify_flags+0x10/0x10 [ 830.379109][T17029] ? dev_set_allmulti+0x10e/0x260 [ 830.379133][T17029] ? __pfx___mutex_lock+0x10/0x10 [ 830.379162][T17029] ? netif_set_allmulti+0x267/0x380 [ 830.379188][T17029] dev_set_allmulti+0x10e/0x260 [ 830.379213][T17029] team_change_rx_flags+0x20f/0x330 [ 830.379247][T17029] ? team_change_rx_flags+0x29/0x330 [ 830.379280][T17029] ? __pfx_team_change_rx_flags+0x10/0x10 [ 830.379309][T17029] netif_set_allmulti+0x212/0x380 [ 830.379341][T17029] dev_set_allmulti+0x12b/0x260 [ 830.379369][T17029] ? __pfx_ipvlan_change_rx_flags+0x10/0x10 [ 830.379402][T17029] netif_set_allmulti+0x212/0x380 [ 830.379435][T17029] __dev_change_flags+0x52e/0x6d0 [ 830.379463][T17029] ? rtnl_is_locked+0x15/0x20 [ 830.379498][T17029] ? __pfx___dev_change_flags+0x10/0x10 [ 830.379527][T17029] ? ipvlan_link_new+0x87b/0xa90 [ 830.379563][T17029] rtnl_newlink_create+0x546/0xaf0 [ 830.379599][T17029] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 830.379627][T17029] ? rtnl_newlink+0x8db/0x1c70 [ 830.379653][T17029] ? __pfx___mutex_lock+0x10/0x10 [ 830.379685][T17029] ? ns_capable+0x8a/0xf0 [ 830.379705][T17029] rtnl_newlink+0x16d6/0x1c70 [ 830.379732][T17029] ? __pfx_rtnl_newlink+0x10/0x10 [ 830.379754][T17029] ? rcu_is_watching+0x15/0xb0 [ 830.379770][T17029] ? trace_sched_exit_tp+0x38/0x120 [ 830.379800][T17029] ? __schedule+0x1700/0x4cd0 [ 830.379828][T17029] ? preempt_schedule_irq+0xb5/0x150 [ 830.379851][T17029] ? __pfx___schedule+0x10/0x10 [ 830.379878][T17029] ? rcu_is_watching+0x15/0xb0 [ 830.379894][T17029] ? trace_irq_disable+0x37/0x110 [ 830.379928][T17029] ? aa_get_newest_label+0xf7/0x5d0 [ 830.379952][T17029] ? __lock_acquire+0xaac/0xd20 [ 830.379987][T17029] ? __pfx_rtnl_newlink+0x10/0x10 [ 830.380008][T17029] rtnetlink_rcv_msg+0x7cf/0xb70 [ 830.380031][T17029] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 830.380052][T17029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.380079][T17029] ? ref_tracker_free+0x63a/0x7d0 [ 830.380100][T17029] ? __copy_skb_header+0xa7/0x550 [ 830.380131][T17029] netlink_rcv_skb+0x219/0x490 [ 830.380153][T17029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.380175][T17029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 830.380208][T17029] ? netlink_deliver_tap+0x2e/0x1b0 [ 830.380230][T17029] ? netlink_deliver_tap+0x2e/0x1b0 [ 830.380254][T17029] netlink_unicast+0x75b/0x8d0 [ 830.380277][T17029] netlink_sendmsg+0x805/0xb30 [ 830.380303][T17029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.380327][T17029] ? aa_sock_msg_perm+0x94/0x160 [ 830.380352][T17029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 830.380374][T17029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.380396][T17029] __sock_sendmsg+0x219/0x270 [ 830.380416][T17029] ____sys_sendmsg+0x505/0x830 [ 830.380445][T17029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.380477][T17029] ? import_iovec+0x74/0xa0 [ 830.380507][T17029] ___sys_sendmsg+0x21f/0x2a0 [ 830.380535][T17029] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.380574][T17029] ? __fget_files+0x2a/0x420 [ 830.380599][T17029] ? __fget_files+0x3a0/0x420 [ 830.380632][T17029] __x64_sys_sendmsg+0x19b/0x260 [ 830.380660][T17029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.380695][T17029] ? do_syscall_64+0xba/0x210 [ 830.380723][T17029] do_syscall_64+0xf6/0x210 [ 830.380752][T17029] ? clear_bhb_loop+0x60/0xb0 [ 830.380774][T17029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.380793][T17029] RIP: 0033:0x7f55c0d8e969 [ 830.380810][T17029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.380828][T17029] RSP: 002b:00007f55c1c36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.380848][T17029] RAX: ffffffffffffffda RBX: 00007f55c0fb6160 RCX: 00007f55c0d8e969 [ 830.380863][T17029] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 000000000000000a [ 830.380877][T17029] RBP: 00007f55c0e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 830.380892][T17029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.380906][T17029] R13: 0000000000000000 R14: 00007f55c0fb6160 R15: 00007f55c10dfa28 [ 830.380932][T17029] [ 830.928560][T17029] dummy0: entered allmulticast mode [ 830.939704][T17029] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 832.121774][T12753] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 832.171460][T12753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.197201][T12753] usb 2-1: config 0 descriptor?? [ 832.223833][T11940] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.239332][T12753] usb 2-1: can't set config #0, error -71 [ 832.338988][T12754] usb 4-1: string descriptor 0 read error: -71 [ 832.345268][T12754] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 832.362548][T12753] usb 2-1: USB disconnect, device number 115 [ 832.369095][T12754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.387044][T12754] usb 4-1: can't set config #8, error -71 [ 832.467488][T11940] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.471695][T12754] usb 4-1: USB disconnect, device number 119 [ 832.559992][T11940] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.630753][T11940] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.752999][T11940] bridge_slave_1: left allmulticast mode [ 832.760870][T11940] bridge_slave_1: left promiscuous mode [ 832.766645][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.777464][T11940] bridge_slave_0: left allmulticast mode [ 832.783919][T11940] bridge_slave_0: left promiscuous mode [ 832.790032][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.925872][T11940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.937579][T11940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.952459][T11940] bond0 (unregistering): Released all slaves [ 833.178216][T11940] hsr_slave_0: left promiscuous mode [ 833.185596][T11940] hsr_slave_1: left promiscuous mode [ 833.191548][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.201483][T11940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.212009][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.219893][T11940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.230692][T11940] veth1_macvtap: left promiscuous mode [ 833.236292][T11940] veth0_macvtap: left promiscuous mode [ 833.242590][T11940] veth1_vlan: left promiscuous mode [ 833.248021][T11940] veth0_vlan: left promiscuous mode [ 833.417848][T11940] team0 (unregistering): Port device team_slave_1 removed [ 833.449977][T11940] team0 (unregistering): Port device team_slave_0 removed [ 833.820746][T11940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.881854][T11940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.932788][T11940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.977546][T11940] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.107662][T11940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.161673][T11940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.242172][T11940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.294184][T11940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.408262][T11940] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.456349][T11940] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.503718][T11940] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.555705][T11940] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.651704][T11940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.693415][T11940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.741442][T11940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.806127][T11940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.952295][T11940] bridge_slave_1: left allmulticast mode [ 834.958011][T11940] bridge_slave_1: left promiscuous mode [ 834.968868][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.977796][T11940] bridge_slave_0: left allmulticast mode [ 834.984926][T11940] bridge_slave_0: left promiscuous mode [ 834.990986][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.002031][T11940] bridge_slave_1: left allmulticast mode [ 835.007744][T11940] bridge_slave_1: left promiscuous mode [ 835.013824][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.024812][T11940] bridge_slave_0: left allmulticast mode [ 835.031394][T11940] bridge_slave_0: left promiscuous mode [ 835.037113][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.047062][T11940] bridge_slave_1: left allmulticast mode [ 835.053520][T11940] bridge_slave_1: left promiscuous mode [ 835.059370][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.067803][T11940] bridge_slave_0: left allmulticast mode [ 835.073692][T11940] bridge_slave_0: left promiscuous mode [ 835.079937][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.089832][T11940] bridge_slave_1: left allmulticast mode [ 835.095502][T11940] bridge_slave_1: left promiscuous mode [ 835.101266][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.110618][T11940] bridge_slave_0: left allmulticast mode [ 835.116294][T11940] bridge_slave_0: left promiscuous mode [ 835.123005][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.584152][T11940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.595136][T11940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.604786][T11940] bond0 (unregistering): Released all slaves [ 835.619831][T11940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.630126][T11940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.639948][T11940] bond0 (unregistering): Released all slaves [ 835.654872][T11940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.663985][T11940] bond_slave_0: left promiscuous mode [ 835.671987][T11940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.680969][T11940] bond_slave_1: left promiscuous mode [ 835.687073][T11940] bond0 (unregistering): Released all slaves [ 835.702008][T11940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.713138][T11940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.722860][T11940] bond0 (unregistering): Released all slaves [ 835.861669][T11940] tipc: Left network mode [ 835.963948][T11940] mac80211_hwsim hwsim45 wlan0 (unregistering): left allmulticast mode [ 836.376473][T11940] mac80211_hwsim hwsim41 wlan0 (unregistering): left allmulticast mode [ 836.582942][T11940] hsr_slave_0: left promiscuous mode [ 836.588952][T11940] hsr_slave_1: left promiscuous mode [ 836.594912][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.602431][T11940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.614632][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.622910][T11940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.634685][T11940] hsr_slave_0: left promiscuous mode [ 836.640733][T11940] hsr_slave_1: left promiscuous mode [ 836.646599][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.654280][T11940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.662330][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.670113][T11940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.683674][T11940] hsr_slave_0: left promiscuous mode [ 836.689767][T11940] hsr_slave_1: left promiscuous mode [ 836.695711][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.705189][T11940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.713786][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.722831][T11940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.734047][T11940] hsr_slave_0: left promiscuous mode [ 836.741571][T11940] hsr_slave_1: left promiscuous mode [ 836.747556][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.759139][T11940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.769427][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.776885][T11940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.798101][T11940] veth1_macvtap: left promiscuous mode [ 836.805854][T11940] veth0_macvtap: left promiscuous mode [ 836.812963][T11940] veth1_vlan: left promiscuous mode [ 836.818349][T11940] veth0_vlan: left promiscuous mode [ 836.826238][T11940] veth1_macvtap: left promiscuous mode [ 836.831881][T11940] veth0_macvtap: left promiscuous mode [ 836.837502][T11940] veth1_vlan: left promiscuous mode [ 836.844556][T11940] veth0_vlan: left promiscuous mode [ 836.850684][T11940] veth1_macvtap: left promiscuous mode [ 836.856232][T11940] veth0_macvtap: left promiscuous mode [ 836.864240][T11940] veth1_vlan: left promiscuous mode [ 836.869697][T11940] veth0_vlan: left promiscuous mode [ 836.875800][T11940] veth1_macvtap: left promiscuous mode [ 836.883189][T11940] veth0_macvtap: left promiscuous mode [ 836.888898][T11940] veth1_vlan: left promiscuous mode [ 836.894311][T11940] veth0_vlan: left promiscuous mode [ 837.164408][T11940] team_slave_1 (unregistering): left promiscuous mode [ 837.173357][T11940] team0 (unregistering): Port device team_slave_1 removed [ 837.197269][T11940] team_slave_0 (unregistering): left promiscuous mode [ 837.204816][T11940] team0 (unregistering): Port device team_slave_0 removed [ 837.401374][T11940] team0 (unregistering): Port device team_slave_1 removed [ 837.428031][T11940] team0 (unregistering): Port device team_slave_0 removed [ 837.631675][T11940] team_slave_1 (unregistering): left promiscuous mode [ 837.639085][T11940] team0 (unregistering): Port device team_slave_1 removed [ 837.667913][T11940] team_slave_0 (unregistering): left promiscuous mode [ 837.676713][T11940] team0 (unregistering): Port device team_slave_0 removed [ 837.904450][T11940] team_slave_1 (unregistering): left allmulticast mode [ 837.912277][T11940] team0 (unregistering): Port device team_slave_1 removed [ 837.939087][T11940] team_slave_0 (unregistering): left allmulticast mode [ 837.946539][T11940] team0 (unregistering): Port device team_slave_0 removed [ 838.024046][T11940] dummy0 (unregistering): left allmulticast mode [ 838.031021][T11940] team0 (unregistering): Port device dummy0 removed