last executing test programs: 39.530288504s ago: executing program 4 (id=3350): syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@initdev, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x10005, 0xcbd00) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000040)=""/154) 37.563682835s ago: executing program 4 (id=3353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) r3 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r3, &(0x7f00000001c0)={0xc, &(0x7f0000000100)={0x0, 0x3, 0x6, {0x6, 0x33, "c467a247"}}, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r5, 0x1c0}, &(0x7f0000000080)=0x8) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x9, 0x0, [{0xc0011022, 0x0, 0x8}, {0xa2e, 0x0, 0xfffffffffffffffd}, {0xb81, 0x0, 0x4}, {0xc0010114, 0x0, 0x3a}, {0x572, 0x0, 0x400}, {0xb79, 0x0, 0x141}, {0x0, 0x0, 0x7d739d31}, {0xa62, 0x0, 0x29}, {0x19b, 0x0, 0xf6c}]}) r8 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00') r9 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r9, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x2, "207d3d00000062493f2fdbb01e0adb4f000000001200000000000900"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}, @exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) write$P9_RREADDIR(r8, &(0x7f0000000240)={0xa6, 0x29, 0x2, {0x39b9, [{{0x20, 0x4, 0x3}, 0x1, 0x6a, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x280000000, 0x3, 0x7, './file0'}, {{0x4, 0x2}, 0xfffffffffffffff8, 0x53, 0x7, './file0'}, {{0x0, 0x4, 0x1}, 0x100, 0x0, 0x7, './file0'}, {{0x10, 0x0, 0x6}, 0x1, 0x40, 0x7, './file0'}]}}, 0xa6) pread64(r8, &(0x7f0000019240)=""/102365, 0x18fdd, 0x400101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 35.364268445s ago: executing program 4 (id=3360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000019040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000019080)=ANY=[@ANYBLOB="aaf82a9680695fff91b1e62fbb9f02154c8c1263a35b436949743755dfff7f058db8984fe6fa5d2d8b9daf49aa5bcf7da3f69229f0e98ccc", @ANYRESHEX=0x0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x6018) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0xbc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000019280)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x50, 0x3a, 0x1, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x4, 0x0, 0xff, @empty, @local, [@fragment={0x0, 0x0, 0x60, 0x0, 0x0, 0x8, 0x64}, @fragment={0xff, 0x0, 0x7, 0x1, 0x0, 0x3, 0x66}], "fafb17c163a31b5b33cb96d303b962b9"}}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000140)=0x80000000, 0x4) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 34.397476384s ago: executing program 4 (id=3366): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, 0x0, 0x0, 0x7f, 0x4, 0x4, 0x60, 0x8}) read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000240)={0x13, 0x5}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000001500)={@my=0x1}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0x2000, 0xfffffffd, 0x0, 0x0, 0x9aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x7, {0xffffffffffffffff, 0x1, 0x1000001, 0x3, 0x0, 0x1, {0x0, 0x8000000000000001, 0x2004, 0x80, 0x4362d09f, 0x1, 0xfffffffe, 0x6, 0x3d, 0x1000, 0x3, r4, r5, 0x4, 0xdffffffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x114d401, 0x0) socket(0xa, 0x3, 0x3a) 33.156414818s ago: executing program 4 (id=3370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) lremovexattr(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000100)={0xa, 0x100, 0xdf, @empty}, 0x1c, 0x0}}], 0x6a9, 0x4008004) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[], 0x48}}, 0x24008084) sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="00f2c54361228942abb430aa9605666b92c7"], 0x48}}, 0x20000000) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x30, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x7}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x3}, {0x2, 0x3}]}, @NHA_FDB={0x4}]}, 0x30}}, 0x4000) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000000010102deffffff000000000300000a060012400001000008000c40000000000600124000040000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4040000) sendmmsg$inet(r8, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000001c0)="7cfd3ac948f23da14db27f65fa42fa7206748d59d8468e73eda2fa28a62a2846", 0x20}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="d425f678370f9c7fb387485a21f54661c4ae6ee25fa8bafacef663b327a2fa7397091370f9dfa3e0831c04d5c8727aa49e5541", 0x33}, {&(0x7f0000001ec0)="7f1b6818395b0a989bf0aa0aa7caa9d2c9a9646fff4f721d00b84a6c6d0c4ee2f47580a644846df15df33ed8f5d8dbca25aaa706bc333f20891629eb3625df2586fa54b5929b96395dacf7bcbfa98da63a0c7c4545975239bffab4dbd7fbc39514dd161694a1151d0f4ce8d97410a3f66758ddaf536163eb03bf084fe115c342d1ae2aadf495e9781f4dd6232bc92f0a770a80a7f809ae930635e7e12068d4d176631b8a88791afabb604563ef875990973777abb5fb9dba8075e281925a81452dbc402661231e062917673bcda9d5e3eb2c2253ac3ffb593f5a8bc1677b3cf976839517d9eae603d0", 0xe9}, {&(0x7f0000001fc0)="d70f4a9fed2610415604d17d451526e7b8ab1f2bace2669afd74da419a0da5e49739a1084754db362c425486ab55c58b5f", 0x31}], 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="3c00008057cb0629c3652a00832739ac1414aa0101ac1e0101640101020a0008000000000000000000e00000018606000000000000001000400000000000010100000b000000100000000000001b074c4600940400001000000000000000020000000600000070009cd9000000000700000089276d7f000001e0000002ac1e0101ac1414bbe0000001e000000164010101e0000002ac141418821195c4b064b47fbd86d10c1b1b94606d071b3cac1414bbac29143364010102541414bbac14bb880f189ed54018aed6086ab1b2392a000010000000000000000100000000f0ffff0f0020000000000001000000ffff"], 0xfc}}], 0x1, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, &(0x7f00000006c0)={0x14, &(0x7f0000000500)={0x20, 0xa, 0xd1, {0xd1, 0x21, "9dc2135b2260cdab160f593eaa971ca95e8fbbf2ff96b8f4604e153011b7c9d843d8f2aeffa0a282c80b5cc0b1df3a9e6ff1eb151bb20f44576f93b02e1c8497df340830e219a4adf827efebdc0fbad648e74b7f2a0c103eb036193f24aeb382c2ad026cbb3c9f35a07069ef8a153d0b3f3001eb33e46cc7468e4591b4befa68b6b0fcda4dd0f6efc9cb6b067fd92559e2becec3b037c9f4cc0cc071a03905d71036393a585a93dc94c616aee976ecf9856eb77efa5decb40e3de066e19dfcc6137bce7aaccd8249d29fbe72c48886"}}, &(0x7f0000000600)={0x0, 0x3, 0x35, @string={0x35, 0x3, "6edefce927e9a34858ab46803c838b4592f1ab20a7eece736a284d90ea8fa57ae8503b547a7f4b23a79c8df8f12db9ff33f5f0"}}, &(0x7f0000000640)={0x0, 0x22, 0xe, {[@global=@item_012={0x1, 0x1, 0x6, "c3"}, @local=@item_012={0x1, 0x2, 0x2, 'W'}, @main=@item_4={0x3, 0x0, 0x9, "a68ded4d"}, @local=@item_4={0x3, 0x2, 0x2, "20572ee9"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x4c4}}}}, &(0x7f0000000980)={0x18, &(0x7f0000000700)={0x40, 0x14}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000880)={0x20, 0x1, 0xa9, "497fcde6fc37171258849c77cb18a60afa9e2f8e3af1ca850dfb5a683af94b950878d81f6b7b51c6b0651b19b158c81098928470ea274e25ef0fd5344b114f4bff50630abaa97bf99d761703916b2d4d7941baf5913bb60770919f6f8f3738f5ba0e39cfe77ba96c43065c2ba4dc4671295f433e1b12fb3f8ce973196ec5c3d3f77a8a297252747b8881678b8e1793689e71b3a69384e7ab1e7d7da9e196f3147d813b79975a8574aa"}, &(0x7f0000000940)={0x20, 0x3, 0x1}}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 32.839366305s ago: executing program 4 (id=3371): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="cdeb28c3ff5d00e4b444", 0xa}], 0x1}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x2, {0x1c, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x44) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2102) 32.280314926s ago: executing program 32 (id=3371): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="cdeb28c3ff5d00e4b444", 0xa}], 0x1}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x2, {0x1c, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x44) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2102) 9.305045119s ago: executing program 5 (id=3457): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r1, 0x400, 0x2) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x39) syz_usb_control_io$printer(r0, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) 8.336895631s ago: executing program 2 (id=3462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00', 0x1f) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.259661512s ago: executing program 2 (id=3463): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}}, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.869402792s ago: executing program 0 (id=3465): socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) socketpair(0x18, 0x2, 0xdfb, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002040)='io.stat\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x2, 0x80004}) fcntl$lock(r0, 0x5, &(0x7f0000000380)={0x1, 0x0, 0x20000000000103ff, 0x800000000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000005c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000340)='\b', 0x1}], 0x1}}], 0x1, 0x50900) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000640)=""/4113, &(0x7f00000000c0)=0x1011) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="d0e5b4ce1bd9675e36c2bb289c24986eca7c66d54dbfe791d06f80c52606190e39a561d4589d59c5bc3b53a2977e9661e5c5e9c74ef393b5949d96268c01e153ba760e6a038c722be0e686ccca4063ae221ace7b2e4620841e6b72b48ec5de3eaaa12d2562cd62081623b8b53173997666417602d83f10b3117737f3e7e80f28f8a3d8fbb56c46ca138e2e0391ae1589cf3c0a7591efe620d1cc1800bc000084c531396669926e10f59bbcf2cd812b488f82ce0e98b89bf5d634a16531bbe11aa0c53fa92fa61384"]) read$FUSE(r8, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r8, &(0x7f0000004300)={0x50, 0x0, r9, {0x7, 0x29, 0x20000001, 0x20000000, 0x3, 0x8, 0x7ff, 0xc3a, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f0000002000)) syz_fuse_handle_req(r8, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r10, r11, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0xffff, 0x71cc, 0x0, {0x2, 0x800, 0x9, 0x3, 0x0, 0x6, 0xfffffff9, 0xb, 0x7, 0xc000, 0x4, r7, r11, 0x4, 0x5}}}, 0x78) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r4, r5, 0x4, 0x5, 0x4}, 0x50) 7.631824677s ago: executing program 5 (id=3466): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x40) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xf5ff, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 7.496113396s ago: executing program 0 (id=3467): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x17, &(0x7f0000000000)={0xe8ad, 0x7, 0xb, 0xffffffffffffffff, 0x8001, 0x7ff, 0x5, 0x3, 0x100000000000006, 0x200, 0x3, 0x4, 0x9, 0x80000000000005, 0x11, 0xffffffffffffffff, 0xfffffffe, 0x5, 0xc, 0xfffffffd, 0x5, 0x1, 0x11cb, 0xffffffff, 0xd, 0x8000000c}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8007ff, 0xf86, 0x7fffffff}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) unshare(0x22020600) socket$kcm(0x29, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x54}}, 0x4008006) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8884010000000000340012800b00010067656e6576650000240002800400060005c7e16bca489888bf000700"/60], 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34325852}}) 7.367722573s ago: executing program 5 (id=3468): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r5, 0x4010e501, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="241000000300000000000000000000000a08000340000020df07001a2f1d1fff"], 0x24}}, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.169887579s ago: executing program 0 (id=3469): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="66b90c0b00000f32ba410066ed0fc79a08000f01cf0f32650f01c965660f5e180f01cb670f005f03660ff44e41", 0x2d}], 0x1, 0x2b, &(0x7f0000000200), 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) fsopen(&(0x7f0000000040)='hfs\x00', 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="506ca5188a20cb04dd4f9d5e944ab6a3b959c47511c21f97ff25d02dcd4f7c769f2283e9533955fa8053c3d2aad6ba8301a0aa922612a7bc3c028ffe9a497c1f66823c1819dd55e81c1767e9a5eddcd206ba721f2896f409546b0c8f7e4dc1b40b3d39ec0ddbd7ea3eac0dee22a9569f24621f61a52668baeaf2808d27e66c9bd1020502c33707d0cd85fa36e4986b398458"], 0x0, 0x27, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc040ff0b, &(0x7f0000000180)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r6 = syz_io_uring_setup(0x2d0, &(0x7f0000000500)={0x0, 0x90e9, 0x400, 0xfffffffe, 0x374}, 0x0, &(0x7f0000000280), 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$udambuf(0xffffff9c, 0x0, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x7c}}], 0x1, 0x44040) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x80) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x200007, 0x2000000007c, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x200, 0x3fffffc, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000440)={@private=0xa010100, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f, 0x0, 0x0, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 7.125529069s ago: executing program 1 (id=3470): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x8912, 0x7, 0x1, 0x77d4}, {0x101, 0x6e, 0x9, 0xfffffffa}, {0x2bc, 0x6, 0x0, 0x8}, {0x2, 0x6, 0x1}, {0x401, 0x37, 0x9, 0x2}, {0x5, 0x5, 0x83, 0xfff}, {0xa, 0x5, 0x3, 0xffff}]}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x200000, 0x40210003, 0xfffffffd, 0x6, 0x7}) socket(0x2, 0x3, 0xff) 6.689450265s ago: executing program 1 (id=3472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 6.486991476s ago: executing program 2 (id=3473): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x6, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000023c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="2011040600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f00000021c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYRESHEX=r4], 0xa4}}, 0x240028c1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8108551b, &(0x7f0000002a40)) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000180)={0x0, 0x3, 0x3, 0x7}) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="b5759644177b800e23d2119f0be768f994c223cb1a2c", 0x16}, {0x0}, {&(0x7f0000000300)='l', 0x1}, {&(0x7f0000000500)="9c801f1b17ab0e00bca44b545b6eb7df6ca915b0bd9aa806fca42a6b331e4fdab4b7e89a720f293fde3eb3f7122075a54f12403e4c58c681e37857ff03fca18ae9ecc9bdac0dd297f1412ef1cd1b87811a888f45b7eae93fa72b4fe96da43013fc31c18fa3f2ba5dec4e204e2c462e6e459c3e32abba5983e4de879952785ff78f3f", 0x82}, {&(0x7f00000005c0)="26034993232e98ea9c4c76cf3928a9ef187e3e4380f54fff671e5981c0ee67187bfbfe75b24fa408cfdbf8dc7cd3f9605de1332e019311145a61ee40da10fd61131a99636b41e28f7d26ddd6246570441272f97f25e5319e2568df87eb4c91a86d36bb98ea89661509d5", 0x6a}, {&(0x7f0000000680)="a28c4cc7e5d442b5d6e852552ab509c70da990bde2c31f84c0be82a55c572087dcd9cb827029424a", 0x28}], 0x6}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000980301020000641b0000000000000000000005000400000000000900b8bbfbc57a30000000000500010007"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.414401683s ago: executing program 1 (id=3474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000019040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000019080)=ANY=[@ANYBLOB="aaf82a9680695fff91b1e62fbb9f02154c8c1263a35b436949743755dfff7f058db8984fe6fa5d2d8b9daf49aa5bcf7da3f69229f0e98ccc", @ANYRESHEX=0x0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x6018) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0xbc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000019280)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x50, 0x3a, 0x1, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x4, 0x0, 0xff, @empty, @local, [@fragment={0x0, 0x0, 0x60, 0x0, 0x0, 0x8, 0x64}, @fragment={0xff, 0x0, 0x7, 0x1, 0x0, 0x3, 0x66}], "fafb17c163a31b5b33cb96d303b962b9"}}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000140)=0x80000000, 0x4) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) 5.737484151s ago: executing program 0 (id=3475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3af7912e, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x8e080) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r2 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1f8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, r1}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x1}]}]}, 0x1f8}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r3, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b}, 0x6}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="987c602abc657322c2f113b55c8793110000000500000000ffffffffca42", @ANYRES16=r5, @ANYBLOB="13000000000000000000170000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x2, 0x2f3, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000074ae8440f20c5062bd87010203010902e10201000000000904"], 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 4.599448499s ago: executing program 5 (id=3477): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2, 0x900}, 0x10}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BLKDISCARDZEROES(r7, 0x127c, &(0x7f00000000c0)) 3.189248785s ago: executing program 5 (id=3480): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) getpriority(0x914957dcbcc9fb43, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) listen(r0, 0x0) r2 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x180c4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r3, 0xfffff000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) unshare(0x2c020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x9, 0x91, {{0xc, 0x4, 0x0, 0x3e, 0x30, 0x66, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@ssrr={0x89, 0x1b, 0x98, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40005200060010"], 0x24}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r6, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x18050}, 0x0) 2.843441999s ago: executing program 0 (id=3481): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 2.684775565s ago: executing program 3 (id=3483): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}}, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.588517225s ago: executing program 0 (id=3484): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='y', 0x1, r0) keyctl$invalidate(0x15, r1) r2 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r4, @ANYBLOB="7ba9"], 0x0) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748edd, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0xc8, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x94}}]}, 0x30}}, 0x0) connect$vsock_stream(r9, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "6c4224d6feb8e821ef149c666c367ba3e23d5500ea52acc483f634efef210490de58f9d5bb0357e06177d49b052c8102e2dd002825c94032ccd41a2370d1828c", 0x23}, 0x48, r2) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe4) r12 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f00000001c0), 0x4) 2.364246763s ago: executing program 2 (id=3485): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r2 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) sendto$packet(r2, &(0x7f0000000100)="02445f0100088000000000850800408eac052cb01281b2bcfb23e26bebf153b8099e", 0x22, 0x80448d4, &(0x7f0000000040)={0x11, 0x18, r1, 0x1, 0x3, 0x6, @random="f5ae63e957d0"}, 0x14) 2.166444079s ago: executing program 2 (id=3486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000019040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000019080)=ANY=[@ANYBLOB="aaf82a9680695fff91b1e62fbb9f02154c8c1263a35b436949743755dfff7f058db8984fe6fa5d2d8b9daf49aa5bcf7da3f69229f0e98ccc", @ANYRESHEX=0x0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x6018) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0xbc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000019280)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x50, 0x3a, 0x1, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x4, 0x0, 0xff, @empty, @local, [@fragment={0x0, 0x0, 0x60, 0x0, 0x0, 0x8, 0x64}, @fragment={0xff, 0x0, 0x7, 0x1, 0x0, 0x3, 0x66}], "fafb17c163a31b5b33cb96d303b962b9"}}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000140)=0x80000000, 0x4) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 2.035475648s ago: executing program 1 (id=3488): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r5, 0x4010e501, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="241000000300000000000000000000000a08000340000020df07001a2f1d1fff"], 0x24}}, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.190320478s ago: executing program 5 (id=3489): syz_usb_connect(0x3, 0x3b, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) fcntl$addseals(r0, 0x409, 0x2) 1.011614128s ago: executing program 2 (id=3490): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='ns\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000400), 0x4) syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x40, 0x3, 0x0, 0x1, 0x0, 0x4}, {0x2, 0x0, 0x8, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0xfffffffd, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x1000, 0x3, 0x0, 0xb9, 0x2, 0x8000000}}, 0xe4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x3, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000240)={0x9, r6, r5}) r7 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x96b, 0xfffffffc}}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0xf0f041, 0x100}) getdents64(r0, 0x0, 0x46) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x11, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mq_open(&(0x7f0000000000)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xde\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba]\b\x1b\xf5\x85\xe5\nt\xd1\xcf\v\xab\xfd\x9a(\xe7\xf9\xa7yY\x18i\xcc\xe7\x1d\xc5J\xf0\xc5\xc7\xd9hi\xc8\xc6\x9b-\xe9\xf1.\x1dE=\x117n\x88^\x9a\x927\x0f{r\xfe\xe3\xae\xf9\x16\x98=0\x99\xa0\xbd\x03\nK\xeaI\x83>\xe4\xbd\x98\x89Ub\xf2\xad\xdb\\\xf62\t\x10W\x80\x16\aJB\xf9\x1c\x06\x98+\xa7\xcf\x1c\xa7j\xea\xf8\xf0\x1ak\x98$\xd8r\x8c;_S=N\xe7\xba\x8e_\xd2kS\x177p^#\x8b-\xbb;H\xf5v\xb1@\xc12\x9d\xe4\xe4c\xa1\xf1\xb8\xce\x0e.\x8aox\xec)\xf3\x89\xe4\xa4|\xc5\xa9\xa8\xc4\x15;\xc3W.\x1a\xb2\xb3\x15\x9a9\xf1\xa9\xb9\x04e\xd21\xab\x8e(-S\x1d|\x8320\xb2\xd7L\x8b\'\n\xfa7`2D\xf1\x94\x16\xa9\r\x15K\xde\x01\x94?\x97y \x95\xdc\x04\xaf\x96\xd9\x83\x0e2%\xed\xf8E\f\x01A\x88\x897\f\x03\v\xed\x8d\xdc\x9elg\xd11\xac\xfbY\xcbj!\xae\xb7:F\x0e\x83\xd5\xdd\xd7\x94\xea\x00\x00\x00\x00\x00\x00\x97\x9b\x062\x82\x01\x90\x04\xe1\xa6K\v\xe1g\xd5i\"q\xfa\xe7t\xb2\xd0W4\x04\x1a\x1f\xb6L\xc7\t\x18J\xb2Zp\x06J\xa3\xcc\v\xcc\x06\xd2M\x06\x17]\xa3cX\\\x1e\x83\xf0Hm\x83%\x91Q \xf9\xecX\xb2\x10z\xee\"\xfa{U\xb2a\x16\xae\xab\xac\v\xe1(\x13\"\xee$\x8f\xe1\xdd\fC\xfa3}b\x9e\xffsSv\xaf', 0x6e93ebbbcc088cf2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 868.352176ms ago: executing program 3 (id=3491): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x41, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) read$qrtrtun(r2, &(0x7f00000000c0)=""/224, 0xe0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x1e}, @ioring_restriction_sqe_flags_allowed={0x2, 0x9}, @ioring_restriction_sqe_flags_allowed={0x2, 0x4}, @ioring_restriction_sqe_op={0x1, 0x3}, @ioring_restriction_register_op={0x0, 0xb}, @ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_flags_required={0x3, 0xe}, @ioring_restriction_sqe_op={0x1, 0x15}, @ioring_restriction_sqe_flags_allowed={0x2, 0x23}], 0x9) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000280)) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f00000002c0)={0x39, 0x3, 0x6}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x54}}, 0x91) r6 = syz_open_pts(r2, 0x220002) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000004c0)=0x13) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="cef49be609dd2d4eed93e1219b9e756a15889f11aaf8fa907c087427859fcf8dc4a7944110d2a4080eb1577b26c94d3c868c9fbf8e6abbc0492214cb", 0x3c}, {&(0x7f0000000580)="c689d6e916", 0x5}, {&(0x7f00000005c0)="cc0e1293b4f933d6effac50017b6bdd57e131ced9af9e1356119f0f6efe240188d6425862fb024481dbcdc87148cae2f28ebc7056b5da57e56fac3c2180454d7acc36426f655ea3d2bea88c567813b1c4328ac2d7e98dd02c68af98ea82987021b72a0fa517d72103e851bbf", 0x6c}], 0x3, &(0x7f0000000680)=[@ip_ttl={{0x10, 0x0, 0x2, 0x9}}], 0x10}, 0x800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x124, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x488}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20040810}, 0x4) preadv(r0, &(0x7f0000000f00)=[{&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000b00)=""/126, 0x7e}, {&(0x7f0000000b80)=""/17, 0x11}, {&(0x7f0000000bc0)=""/11, 0xb}, {&(0x7f0000000c00)=""/253, 0xfd}, {&(0x7f0000000d00)=""/144, 0x90}, {&(0x7f0000000dc0)=""/94, 0x5e}, {&(0x7f0000000e40)=""/164, 0xa4}], 0x9, 0x9, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000f80)={0x0, 0xfc}, &(0x7f0000000fc0)=0x8) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000001040)={{0x0, 0x3938700}, {r8, r9+10000000}}, &(0x7f0000001080)) io_setup(0x1, &(0x7f00000010c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001640)={'gre0\x00', &(0x7f00000015c0)={'syztnl0\x00', r1, 0x8000, 0x8000, 0x1, 0xa82, {{0xb, 0x4, 0x1, 0x1, 0x2c, 0x64, 0x0, 0xb, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x7a, 0x3, 0x7, [{@local, 0x45}]}, @generic={0x86, 0xb, "a413f4a33928e06c48"}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000034c0)={'ip_vti0\x00', &(0x7f0000003480)={'sit0\x00', r3, 0x10, 0x8, 0x6, 0x4, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x66, 0x0, 0x8, 0x7beea9ae91eb6c78, 0x0, @rand_addr=0x64010100, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmmsg$inet(r4, &(0x7f0000003540)=[{{&(0x7f0000001100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001180)=[{&(0x7f0000001140)="1f70cb0c8bd4b2ffdf56564cb24e1d40fcc1b7ad776396e8e004d9d2abb179c74625b1cd91f930c6cc7e90", 0x2b}], 0x1, &(0x7f00000011c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0xf}}], 0x10}}, {{&(0x7f0000001200)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001240)="31e395afa7d69ed6d12e8efac6f7e5cd948d637ac4fdb00cd037781de7ec04d279217dce5f7478af6f02c9168fc7cae4121ac4747de0923e0fc92e5fe47198d0039e8c599dc19e002982d722b64e74194fcf9de91bf45fd48f9540d2d2bebd85f96dbb7eca1a1c9660bb84049302c17bfb1972da3ca2ec664f7c5850951f53156c61a5b5293b59ab57c9365171a3894a71d9396428352e98677d7ecdde91ab1c84cca9cd4cc98a7151d863353e2329392c2db8158af9f000bcf449b76a2882d1d46dd1e5069347f6147904ae24531d62cd68d1ab06e9e564d10e085b70e1b123581e7590fdd37844ee4a9cc628dc55a4", 0xf0}, {&(0x7f0000001340)="24e0730ba3af0552f8c995a4c64c45b1d863e58293468f", 0x17}, {&(0x7f0000001380)="eeb36ad3239ff21a24c2a326d801636824cc1791ee628b2827916df78f479d3c48bd4ad03f35af4b29696ee0882d68c30091bb38f9ebb4da1f24ad37ca9a0aeeb95f53ba85c7ca1a70cc429495a0a58081c88edbcf421e2617861031edd457f611d06dcb76363ab6f11bb0269f752f24ebfd720e660723dfa4fe7c3fea96c9447e4606b6861982d006ba4f306896605c3c0f869f2969ef0b879a683d202cf356fc2430e59b1ccfa4a8cdaaa11397126547316bb81758ec2c7634615c7342703b0e0529f07defef4f48eadf78bc66dbdb", 0xd0}, {&(0x7f0000001480)}, {&(0x7f00000014c0)="18ddcc4b024096633587b6a5b3a6ec32d05de3f1543cbf837e52744eb9c53793c9e0536e4dadeca9cb216853729b63a763f1edd9aed272aecd63dc7a881cd203f64967d710c166d4c31b169c2fad7acf6664fad242e7bfd66d4f0adab67a970bb4406f73b45fd463700bc34a0770f106", 0x70}, {&(0x7f0000001540)="ff94b2ba4bd267b8aa90364f346fa0b8469e712390669c664f5c1b3e49071cd6235747aa0abb43fbe3", 0x29}], 0x6, &(0x7f0000001680)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xb}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}, @ip_ttl={{0x10, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r1, @rand_addr=0x64010101, @broadcast}}}], 0x90}}, {{&(0x7f0000001740)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001780)="237eb4d6424f94625b6c767387f98b697de14b7eca722fad441be7", 0x1b}, {&(0x7f00000017c0)="040045b488c4f890bf179d8113df58790688aa08097886b5a4271f1ad9e07838349a3009ce6d0df92710b19c7972ad0bce775f312e995b3a9c6b7a8d17d2d4e91181814d94d4", 0x46}, {&(0x7f0000001840)="047165cddb543c151298d1948c4ed1398e941c6e747e0856d595dbf8a518031fe5f825aa3f106a148eeb0bcc435e8720e874a1d2acb2ba3eea63b8c59b1f5e276692f756c3b35908d4e765923f6a7994f732b09d8367e021f9cd2aa5cf5c97f6e1185caa8eb1fbf45281745e61065bd62a310c3f83ff4afb4a80e0e181f368b02b317b811002d873985e74e4055b9c409698bf0f647dee95592225faf485bb57702990b8d2ddb4f83ba44050b7cd8bb66c731cd34b37a21027992b5b1ae42e6d01ef2cdabdfc9750deb7c04b947838ff33ccfc55775064", 0xd7}, {&(0x7f0000001940)="1af9102a7fdfa4bcd1d424b2e0f1de2a675903dcaeb26eaf23bf0ad84a721ed47b6f78a17710c0c2c237218e18e5f4cb0f96d96a8afe788f245583e14b2ae52225a3701151431b9dda8ab8efb9e5a51f3b1ed85c5d7227c8ca2d358cc03a6aed4248dfc942f17c12721fc5ac64cec1070059de82091f6694f81c6dedc87fcb026b9084d4fa92717b1166615bf76f45", 0x8f}, {&(0x7f0000001a00)="d8e8873fea23c20bb7652f6061f45be2dafa54673adcb1cba3c5c57dce75ff319b008d50066d5e1c75d2a554201345f231231e6d94c0dab6b4777191cf81029142a27cf43b5e5166d9a5fe363782952ecfc1acba821492e69590dc6f4a1ce84e65e71e0bacc37cb05fbc463cff8c29520781a083125587ae22a55514c7e7dc3cc27ac1fb9debe0e1264074fb145dde3d9b5371100ddb2596460363b3efff1ff939ebd02555dbaa517f6892192ba953d48e692aa29cfaa303aefde7d4d4ed2b", 0xbf}, {&(0x7f0000001ac0)="b679623676ba03f0235316afeea82cd2846e23c3423cdb415a379a9b1cdca31965ae6c092a45", 0x26}, {&(0x7f0000001b00)="e64f0e9bd434ae5a0e91cb61d471a903db189c96f8de550d88278dea85e46ab2cd052064ffd8db086d370fcd011c227abe4c6cc19e40611a3cdcdcaf5e7e5d04b0e0863b9b51f927f4e2fdc322d0cfdb793b86a6855daab716a0455e5e1e94986b5ff927d2eed9995d0d9708df18d59a50b7ace1f6352a97d7ec8f5315e5e08b26f02afd6942ce98493d27448db3382fde9b74702fada3c1361cd265eb2c103baf37ece1d0c17dd231242da4b2bfdb38b09f54ae960a2709dd842aaf71", 0xbd}], 0x7}}, {{&(0x7f0000001c00)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000001c40)="4e16b871d0ebf4e84cc6695d6e984f1b53123a3763efe63cc8aa055b35340b9b6de3e2027e7d08f285da84f31d47824c1425b3790c150b957d1b2a26712e404bd30c94b1b15fa4753fbeadd29eb521e5b5bdd4e8fd3e400609309929250217a2749d5058ec403f3c", 0x68}, {&(0x7f0000001cc0)="2f36013d038ddc5de4ac8fb4a0678353964f4efb750ae22cc5b7e0e01a1d5b198e88da19310f984fa77ba7162a5a573d2892b1abc0b91604ded7b9b9ffba75198381cfa3c0454736fb45128ebcf08992d2b39d5af7dbab5d599cef5c9869cf1e9eb79b44ba5f588c50f2e166a152cc1156f7f68919629ea20a313a7e23733d710d9076947d57bd11703334837d58b7e18cf116104501aa595da63469c121fc740495913216249453b8fdfa3efc69ec4a7cb3f64772c0a926021f3f2ba9b689a5a347151531dbe2dff65f5dbba445f6eb92ce43dec84f77d8a3782b0e45804e4080021b80bfb36625bf5a053333de696149cc42b9cfe29c91a9d629dc6a2dc0a9fb609bbc1a9298f16607dbe86b0ee0a471f2783d1845e813f780c86b58bacd31bfa07994ef25c7c87bd453b514c87769aa5ae9ae8bdb13736843129ff58068df64b67c36902a6ce309ff3bb892dac2e250934fd0bfe2bf06826706b1cf1e0bc56eaf63fcd855df5b3de0d78aad9291c3019b7bbd148a3bd2c7d69867c34c0ae2b19c5554a7aefb090204580c6cfd0c9b7ea49856ac53f10ec91c152bb8a8f08ece1b452cf6258cd04988a49eab8fb946b22cda1fe64e5473ef2c6e29eba02b23664e18e27383fb595def0010ed2788bacad1ebc8d50c13927e4b0df3c6cb4fd46fbc7eb4abb2630225bed365ecaed8205502b883cfd66cd8f6ab4fed7ff948c7cfe21c5d0de11dd4f598bd65a414321bdf306b362afe749a6fe310cd6d4693d3c1b874c4523df961200c8c5ee973e5f3a3eee0c467fbb97979da79c8f5d3754a085f7bce6449affc71a68419a92519910466cd1eab2d7ac4d0493e7814c827f11952d1525e9b3fa4b2121ca7195271a214bdaad807bb81a5131ec0f1a708ab204bdbb5accdacdae24d6eedc3c11b8933746247160ebeb2dae1bbbe57c6e216901c4e48599bf489ec53dbabd11b413ac2426b763d07a282e66d38e53d087bad58fd4d70957e3fdaa566d1930f7cb8b1811a5dd732451225068a976d24832a99954a4065691f921e84c5b3ce8b4b7daddbc586cdc3b6550bc1a959289486e922dcb6e735cea8642a25d6f0e94b576c43c57ac6298f1eb6081ff335c4671c2db9d662f5469d120cdd6bfacc9eb412643125a204963d14ca169cd94b1bd1de37b365f6be6fa078ce2079d47e0eaca75e34be164a194bb000db59d29a82ee4669cf15f2a023e8b0441fe0cbab31aa87f46c98e4918fe99846af37247b7e7461e68431428d529afdcf83fc7966d4d5ba1f72567a348a4187e12042255f0de24329faede9f099d7417aa1bbd91c73503289c567236b1e073c5bfa0c545a8d7bf02607a971a5684f92e7fdbfc644c392cf993eaef3780b8420ba11a17bfe38575c879a621e70b17fe1401c270ae3a3da228fc6183ae39611bc11a0e7a0dade86333b0b7bf60bb3c4e8422654494ef7d323402fd40890061b1cfdd81a514419d5eb8390aa1393a89d121910650ff445b18ea5e884a74ebd1baa259f5cb608c064806138a1e220b942ef77cc3b5aadb0087fb7570867ae423f76e5a61625246c8da5f02504a133a8262dced4d0f28f0027037885ae455ed74de625df8fc4db799ff01ac82e515855e22791a7cf43b0d968e746da27202252ba95b748fdd7f22fc9a92f697ab6f603ee8a37dd91e9aa78b6085dbbff54b70e4505bc3e7204189487195a7bdeb9f5be7da37cffac1e7001a6cd61c81c671c7d6f0a138d11dd87366b9b7bb98a8aa925d931fa9c5e1069c2fa72e5ba0ec56587c03d941afde3c83b6abd381fe366823d320646fdf4c34cacfac86efe4de76d48ba666a29948d2f8bff4fd1982d227926855af7a23eebe554968d9d05ab07ebc6edaf381f9afd7d18c8dc283b33c40cb8ddaec8a9641084930ce12e3dfe27b0e46f98fa387695824236f1a2930ef09c7ceaa3a10a7d070f70c4fae9b5a0cbcac2c6dd35eec805b6f61c54bc4fe8a38cfce95ac490d95b62908c0422406a33e7966aac3e2e811a5f82b79f9aacd0e68fc2cb88b6311d7ce59fd727deee80c5cf41b4ef6591af2c6b98be20d772ada077a0bf89259d0a1e36c21b7c86f25f6f49de57c352b324279de4638c52930baab9b67b3e8d100678b15df08a0dd134bf15ebadbb523cc2be1d4c05236cd3a4ff5f3dc83adf4ff41956196df4829f434e858a798d0052524e50c79c21d01770f350bcdba2642aefd850c15a998e7f8ca62efd463f6b991e3d243cb01d27ff231cb86ba72ecb602a7ea1573a58a24075175b1e74ee4fb04a3fee0bc748edaa340ada74ccb2bf4f82c48c56667620779c9ef6b899e87cbb5cc121e45c478b93c9337368d5dfed9bfdbc4b6885c13d41f63760a7a60ff92047e21cc611ee3dc3228bec2a85e17979892fcb67026ef7a3137e29cf39b12fcd5741e87344c74de28fb46df56e82c436833f2c929b37a686b80c77c487e468b461e697d6b33644b444b8c52b06e86b22f7d50005cbaa677ab32efd734c33878be7f9a77a0620f488882ac20475e598e3266c37d45463df6c275b0da443847951540caede33c8706059380d022df58dad71c250f695feeaec7e8c70bfc6ee2f7507770fbc5cd653180a35cb082f40dbcaa987ff1eae96d836c588a379a93b49c943f3b90c14737785a7f8548e24bbec437397ebe9d435463b92a15395db37db53dcb14f8ca6380e4d9a15c57b12918abaa74215b771f94c369bb4f961180dff88987ad51344adfc710503ef3d556fb85d30cc7528a83f2b3bebd26f5cc2801aef0f0b720158a4020593b0fb1373dabcacd466b2ad6d2e7dedad5a7633d3a3708d3b3a3649e758878f294408611f4b754210c47723dbd576afe82b4e2fd74516ed3d5657b8a56656376043f1c9fc0264a407cd987ea2e40f744d576c76f3db7648109104f6f52cd58d0c9efccd2e682284708bceca5bb9bad0d0a21764c680a8b1d50ea6b483e791f5973843ecfe54ff36edb9d4ff466aa787d71f2078c3817d9d88c7d305421b6a7c3624c66bb3888b3de29a0c27009713bbd42d82cd1b250d3e92c35e880aa44cb62ee25d2e383f61cb2c2d73aa2634b89af3c8130bba7e2aa9f7cb7ec6d599f86f525420a18fe46d290639d2106ce7ee72886122642ca41f039c1fd73c7196e95f46c6473c0e82cf9db49b62d878791c9fa4896895fbef96196ef54a0ef4f9c2462121c34c13c03f6e4987a2bc0a25997dc68aecaf70186bbd242c8a88121899993ad456d41150bf9f1c08be59279d0a6ab68a122a7a2bcfbbe6f040dd46f0c79f28bb4ddaf9b811fa883d24a02e9cb28e99836383b2961c836b076282009f6eff8895cd1e4d32a39f86d614725eea61452394ab8f1f85dfe6309534db203af230b29a23965e5b65a30ac09c2868228791d844c909f02ddae04991793fef71f76cf3e230b0c3a8d37f00e3b9f486f491cb439fa2241d68b569423be9d080794cc2d0bfd1424c9648d330f7e92c5cadd0bef8f5cdc9ddd8adb11dc045e783e46d966adcf0471f18e8939b8808ac72b7d17b01995b2273e9d5ab4f0428081087c7b6b46a057b2686a93d5b84adbc07412f5dfb1a82db5a1348d7e81f9be76a07969f81b5c7411e29769c899a5533c73d53856caa3119542b40ceab8e0a17fe2aa39e1ab29d850536d8a422989dae0cc3dd75fa9fef207e6a454d34be860cf8b52bdcd2a1e482ce28d82c47e22b3d58774f562bd7c5a463631fe0f6dd8eb9d9b422c288145ea791842ae7b3c914d6bf2faf40871e111772d4a475350eb692553daf9330d411f77213b24a6c175bd4f9aa41c80e0b46f6316b5aa88da7973ddb18ea2903868ba0781c9ea323173b2f3a280124e1f13894c4ca34d19b04fc2c47c62906e2be6181526815904b29e8467e969f41c3edaa0b6c2c567b56fa101350be6eff5e5fc89462d4b502d9c2ae4e3cc822bb7fc875c0f9512fa108d94a825600b081b11bbb12c0c83d4f11bb2f07cf587a1e01a319f4e63e2c13bb60d7c6c9b19d994bb3e63f9b23c9f46a0e6783901ac94828824899759b5046996ca792a7ce09ff96bdeb02e1bdd88fd4d77b91319233f166bf50559b3ae5fd59d26a3d55f1108a2b81abd6f522033be9b437b656e31ed94c9b3fd8d3613f11d7f4a75ac787ced7fbd5f80acf83ce2cb35aafe42e08cc48179457c38e8e961d52ce995c7467a9c95ddb299328d40be07ea11af6273d5e0ebeae15aa265803cf3857f25b6a2d58b3be058896f0296d3e91372d644ecf58014aacc852ae2c495e22c569d7b776039323f39e6db43fab575e10ee9708e28ab19f0083e5fc173ef83dc2932fc8898bf37a500ac25642256098f206a72f26bea9777ee498ea6e795a1057a2b3eb3ceee5fbf1ea380ccfd2c89bc40c497d9b2d9f33a7d6592971cf18f89217780a58d17eb22dfe6f201fd9abca4729aed3d62b0519199945162a95c1ae6fbfe599c831b4a72e016f7e11d66e97ae06327ba9767c345c9a000235f0afcaf3cb36e0f981398bea21440fab0561aa75a2b31da5fcc976eaf6777515d103eb3967a89a59e59feafc1726eb67bbdeff7d0cf1d3c3bed5a123808df747b501be0d5bf3aa4900e7221c56a72e503fb7984c2eb28b196de0d1d01cfa6b949fa34d48ca83a2fd6289d65ba43a656077b5767d996282f93e119e6ae9cfd90ee839fef64dcaaff20c8d372aa0fc029bba610f78f2cd58c9ad6de4b3e4cf8c8a13c065941f4e6d592da168d9ff370100fec583f89d214a8a7eb2d2a6fd5765634a28c2abd75d08ec9b8bfefb3b382edf73a8dba7e154412d13504627edf7c04fc0e18515c97fae8358dd20d52b590d537aa67ddd768e3d13e73257c022e7aeab2492cf6f74cfe31943c2301b9c3524cb295bbd32775c51aa41a9bcd48496e05ff29fce5107498227a4938662edd7354da4a5da66cb983acd4a4b5e3b51b261d16414b169bb61e3e34eea564df976affa839eb5f6c3b1d6c9234d8262f429086e6217ab40a6f53a5af169b5cadaec7d39c152fdfc2cf88c6e467a1d2d1f32c9fc7dc98410d90eca2cc39cedc7fe12a4e4ef66db18ec75080d00ca3c4dd5c655056af3b802d45dfbb17d6c726c49d4f8fac9a5f892f96d1dc65a774d302bae634b5e208aedd055984d1da2a57114b19611baa839b043e040929e3a8c82e0384f6dd7b06b6ed7aaddcc208ea051ea4439e6af59d48cbcf9a66c2cd05b056e16c787ad8afd1f9062ca2cf8e22441f92fb78073bf56dcb8f26b11b876690674c6a7f3e422edd5aa82b42229f3d7ba44a4b5b90bbde6f8ffda20ae2cbdad20a80301ca0f5215994b64616b81f1795fabcfc3383ffcc3b79c370b5a608347f14dfcaba0aa4e92802ca4ab5803af38a4a604d50dd00c8c4df3c49a37236853ac414f024f3cac8c65a4c651710d317635540b9985da7d479002add2880164bf6e55f55a59e6ad73360b97bf09f423e693f4031795bc033fe7b55f7669914e3c8f66b469989d16edc2169b6b804f30d3f16b910eda00d59e244f534ed65ebb0c8f41edc07f4bb99e877af2d24c20d6642c7fe3d30acee7295d3b2f748b3a0541852076cf4da715eef3db2a52d30e94a95b3c7016c64c31839b41daec48decb8921985f9201a9356b2e3ac0de069db772a53ea3a51a9cbfc9cf29ebafc8726f1bc4b104f4769b91d2af77ae5e788b4d93d87ab6577c708c308c278977489ed8b29c475a7ae7ca0f6b378780504e1d919ee32771c8d5fc688009dc7d4fec02bf83bc3b8764c8ad9f5e939775eb3ecaa9ca", 0x1000}], 0x2, &(0x7f0000002d00)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @remote, @multicast2}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @timestamp={0x44, 0x10, 0x75, 0x0, 0x8, [0x8, 0xfffffff0, 0x2]}]}}}], 0x38}}, {{&(0x7f0000002d40)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002d80)="131abaa209b2fa6d5ef324358d8ca484e678321a7f11734c830aa2e5d2afe526d28afc8200d3165d233af3d4e83dfd87eafeba37e0f1f8ac718b5a197098f29fa7e761f8f0ad4b5bc5d509a0bb75e7d71f53f0d9280aeb843d9dd22f714daae3e5ae0e7b537c40293953dd8e107dcb082da07a07b8d05613c10508ebeba4cf701d8ea91e1b8a49e65301ee423d05066eacc1eef2b5702bc21aaccb", 0x9b}, {&(0x7f0000002e40)="a721ec242af29109c5879712aace64acf7ea3d2a8b919f78e0d979c761f0416f8593975d6db72318fc77ca73448541acf90ab05ebb5f4b158d36cb1897abee1dfb5c43833afd41f1a3b949feb690a69a2c891cd0dc923b64918f1c2cdf920b438639b536aa7626dcd026f35a677e342bd67700b8e10c1317e371a2b3ffbeba6809eb15e82504a3807633bad800fc3eb95d595cde21bb8bf5f7fdf0183d0b69a5413d6e9f5d31a07240343cd840c3b10dafe062bd82cc7840dd1f4d3167187bbb4a85fc6fa63fb086c6f7137e8b93aebc06486a60a1e1c77353a556b836b199de64f56669d0ee92f2d59899e27cd8", 0xee}, {&(0x7f0000002f40)="bd63f8b9fbf2291ff241907104088a378909ed9cdb3b943cb4e4b30b5e008423134f26e508f82ec0372cd6b650e8016bc1b966163b5912e8fc9e2bcc5567dd0058430f0ccb30af668f5044299c01b1392a97d8e733a7e9ee40d313721293b92c6794ca038b4c5e82419d706f7e65a202ac93f94d2b7f3d23144b57b4435ab8e2e4cc4cac96b5f1869b6777d105252942e9cefe9775a7d08350398a69dcbc54f4f0ee07cfb62515d827ed9fdef0da3555019144c0829de26d7d", 0xb9}], 0x3, &(0x7f0000003040)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xfff}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1886}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xfd}}], 0x30}}, {{&(0x7f0000003080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003440)=[{&(0x7f00000030c0)="2e89265124d34902b5635e4394e2d8d366e3a1b5ded076df498d1fef97664ef320a0b0df8a9f4624f3fbec702b3261a5c4f1a9a83d85e5c84b302c79f06256ddfac7c4e526187952b7e37dacaa6708c15ea138853957f98a0a65c6cdb40a9962336dcf0bb026a902a716b7fa374d1ee7ec2d27567995ba913e8667a10820e5eb86ca9da4d2ac09ec9f124d003ada188bbebc949411e51a54483ed42b5d8c40d71f8beda360179ddcad47f6b3e04b79423a04d0afb169510eacfd13b11f34f3488a5de28b35064f69d03558f9b8b13873290410a7c8cf2226a32f848b07bf71d26dd7fce62e7189aab73f20f30b4fc2bbcfc1b5f46a99adb3b337f15ac414", 0xfe}, {&(0x7f00000031c0)="2973a362e450f01230225eae0b551923332ca7c7578d2203b2a117a0ee3fb6f5226f97acdcc18e1d55f7c430d5d4ee515241221fbfdc1f65b7adfa1f0b951f27916ae9865cd3172f63ace8c4755ec58339784aab1e2cf7dd4a9239b2f3d169623f69acd8deadb2c1bbffa532a97003322200c2e048bf8b7e7f4f4ab3f5b117a0e71f50766cd74a02438ff1d89229d287610631e08791bcf8fd12d1244d2a3f70c7b5c3554912f00a9826d6961f45a6ee5ae4008b5cb5c8a803afd3b4388e894e06347f1641b9953748ffc5ea49cbcb2fbe05cc7975da63dbe3c81126", 0xdc}, {&(0x7f00000032c0)="76b450", 0x3}, {&(0x7f0000003300)="6d92962295268eb353", 0x9}, {&(0x7f0000003340)="573a0a43bde05efb9ad8d6ef1b0f686676a77b05002585b85d1b9daee3a81352d14427b31dda59eeed76529ffa5ce9d9584280ef452d00f48dd76ca27f847778bf51042ab46ea4cdda0dd2b5f91e7d69ecb4dc780b95dd94a54aa3e207b37fb410dd97c36f457e2408cc28f5738d4fa98b9c1ef521e25a3b8d261b8bc7384c04f4487d4fbdf740e0ab960b809d90a4e3018a62276db3876aef", 0x99}, {&(0x7f0000003400)="9a760949905dd65c34237b2fbd7f532f6f239a4b", 0x14}], 0x6, &(0x7f0000003500)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xfffffa1a}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8000}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r11, @rand_addr=0x64010101, @remote}}}], 0x38}}], 0x6, 0xc000001) creat(&(0x7f0000003600)='./file0\x00', 0x1f0) bind$tipc(r2, &(0x7f0000003640)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000003680)=0x2, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x45440020}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 508.196243ms ago: executing program 3 (id=3492): r0 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00') write$P9_RREADDIR(r0, &(0x7f0000000240)={0xa6, 0x29, 0x2, {0x39b9, [{{0x20, 0x4, 0x3}, 0x1, 0x6a, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x280000000, 0x3, 0x7, './file0'}, {{0x4, 0x2}, 0xfffffffffffffff8, 0x53, 0x7, './file0'}, {{0x0, 0x4, 0x1}, 0x100, 0x0, 0x7, './file0'}, {{0x10, 0x0, 0x6}, 0x1, 0x40, 0x7, './file0'}]}}, 0xa6) pread64(r0, &(0x7f0000019240)=""/102365, 0x18fdd, 0x400101) 328.715252ms ago: executing program 3 (id=3493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000183f010300000000000000000a800000ff03000602"], 0x58}}, 0x0) 183.272436ms ago: executing program 3 (id=3494): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 91.424306ms ago: executing program 1 (id=3495): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='y', 0x1, r0) keyctl$invalidate(0x15, r1) r2 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r4, @ANYBLOB="7ba9"], 0x0) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748edd, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0xc8, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x94}}]}, 0x30}}, 0x0) connect$vsock_stream(r9, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "6c4224d6feb8e821ef149c666c367ba3e23d5500ea52acc483f634efef210490de58f9d5bb0357e06177d49b052c8102e2dd002825c94032ccd41a2370d1828c", 0x23}, 0x48, r2) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe4) r12 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f00000001c0), 0x4) 0s ago: executing program 3 (id=3496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x300, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "be0004", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) kernel console output (not intermixed with test programs): rface number 1 [ 1088.236253][ T5725] usb 2-1: config 0 has no interface number 2 [ 1088.246456][ T5725] usb 2-1: config 0 interface 29 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1088.277186][ T5725] usb 2-1: config 0 interface 47 altsetting 91 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1088.297145][ T5725] usb 2-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x3, skipping [ 1088.370524][ T5725] usb 2-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x1, skipping [ 1088.417155][ T5725] usb 2-1: config 0 interface 47 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1088.466776][ T5725] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1088.498276][ T5725] usb 2-1: config 0 interface 121 has no altsetting 0 [ 1088.525826][ T5725] usb 2-1: config 0 interface 47 has no altsetting 0 [ 1088.557819][ T5725] usb 2-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=ee.8c [ 1088.652479][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.696769][ T5725] usb 2-1: Manufacturer: ᠷ㎅ꓪ纃递Ⰸ텵덏鮜沯럦ꠖ磕뚄啳碫慪ꖜ憷㵻姈⇐⛨᫏䊏﷩䗏ᔏ [ 1088.751370][ T5725] usb 2-1: SerialNumber: 鬭낣罄継ﾗ쳠顾ሣ狨䱨憵罬씽凨䣘霤ͮ᣹ꉑō喽Ⓨ㥥焥↱傀撋ㅉ脒澐蓱῏揳㒰ᮊᆴꑽ⎔ꊶ飤ʞ͙桨欹胁ﺯ煓ဦ鼨⾁羗諱⊜Ċ [ 1088.816009][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1088.816029][ T29] audit: type=1326 audit(1783151560.092:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.4.3053" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1088.909888][ T5725] usb 2-1: config 0 descriptor?? [ 1088.910258][ T29] audit: type=1326 audit(1783151560.132:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.4.3053" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1089.082187][T13345] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1089.126080][T13345] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1089.198549][T13345] usb 5-1: USB disconnect, device number 52 [ 1089.499363][ T5725] usbhid 2-1:0.47: couldn't find an input interrupt endpoint [ 1089.566309][ T5725] usb 2-1: USB disconnect, device number 64 [ 1089.584843][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1089.618145][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1089.657299][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1089.667438][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1089.677760][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1090.289182][ T5646] syz_tun (unregistering): left allmulticast mode [ 1091.056673][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.132526][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.482916][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.546883][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.800212][ T5639] Bluetooth: hci3: command tx timeout [ 1091.873510][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.912689][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.146464][T17291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.190067][T17291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.224792][T17291] bridge_slave_0: entered allmulticast mode [ 1092.255218][T17291] bridge_slave_0: entered promiscuous mode [ 1092.302577][T17291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.326247][T17291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.352761][T17291] bridge_slave_1: entered allmulticast mode [ 1092.390164][T17291] bridge_slave_1: entered promiscuous mode [ 1092.619371][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.640596][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.843412][T17291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.899091][T17291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.937190][T13345] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1093.069177][T17291] team0: Port device team_slave_0 added [ 1093.103038][T13345] usb 2-1: config 215 has an invalid interface number: 40 but max is 0 [ 1093.112731][T13345] usb 2-1: config 215 contains an unexpected descriptor of type 0x2, skipping [ 1093.124802][T17291] team0: Port device team_slave_1 added [ 1093.127188][T13345] usb 2-1: config 215 has no interface number 0 [ 1093.158161][T13345] usb 2-1: config 215 interface 40 has no altsetting 0 [ 1093.179698][T13345] usb 2-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=ee.46 [ 1093.194280][T13345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.220299][T13345] usb 2-1: Product: syz [ 1093.233667][T13345] usb 2-1: Manufacturer: syz [ 1093.252834][T13345] usb 2-1: SerialNumber: syz [ 1093.280049][T17321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3121'. [ 1093.315653][T17321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3121'. [ 1093.352843][T17291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.365151][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.393404][T17291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.423700][T17323] macvlan2: entered promiscuous mode [ 1093.429924][T17323] bridge0: entered promiscuous mode [ 1093.444521][T17321] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 1093.456798][ T35] : left allmulticast mode [ 1093.462909][ T35] : left promiscuous mode [ 1093.478404][ T35] bridge0: port 2() entered disabled state [ 1093.501339][ T35] bridge_slave_0: left allmulticast mode [ 1093.527364][ T35] bridge_slave_0: left promiscuous mode [ 1093.533980][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.545923][T17325] netlink: 'syz.1.3120': attribute type 4 has an invalid length. [ 1093.579442][ T35] pimreg: left allmulticast mode [ 1093.597703][T17328] netlink: 'syz.1.3120': attribute type 4 has an invalid length. [ 1093.686473][T17333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3122'. [ 1093.702778][T17333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3122'. [ 1093.746637][T17266] Set syz1 is full, maxelem 65536 reached [ 1093.756487][T17335] loop5: detected capacity change from 0 to 8392703 [ 1093.850686][T17337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3120'. [ 1093.875846][T17338] netlink: 'syz.0.3122': attribute type 1 has an invalid length. [ 1093.896722][ T5639] Bluetooth: hci3: command tx timeout [ 1093.921124][T17337] openvswitch: netlink: Flow key attr not present in new flow. [ 1094.622324][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.638740][ T35] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 1094.651309][ T35] bond0 (unregistering): Released all slaves [ 1094.665813][ T35] bond1 (unregistering): Released all slaves [ 1094.686976][T17291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.694234][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.721009][T17291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.776476][T17329] : renamed from bridge_slave_1 (while UP) [ 1094.873441][T17336] macvlan4: entered promiscuous mode [ 1094.893054][T13345] rndis_host 2-1:215.40: invalid descriptor buffer length [ 1094.911266][T13345] rndis_host 2-1:215.40: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1094.933454][T13345] cdc_acm 2-1:215.40: invalid descriptor buffer length [ 1094.967796][T13345] usb 2-1: USB disconnect, device number 65 [ 1095.013784][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1095.061656][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.088104][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.120607][ T35] tipc: Left network mode [ 1095.178638][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1095.200011][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.228776][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.358717][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.371410][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1095.380706][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.401648][T17291] hsr_slave_0: entered promiscuous mode [ 1095.407004][ T9] usb 5-1: config 0 descriptor?? [ 1095.414568][T17291] hsr_slave_1: entered promiscuous mode [ 1095.425580][T17291] debugfs: 'hsr0' already exists in 'hsr' [ 1095.431752][T17291] Cannot create hsr debugfs directory [ 1095.487554][ T5360] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1095.622148][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1095.636244][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1095.656208][ T9] usb 5-1: USB disconnect, device number 53 [ 1095.670459][ T5360] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1095.693551][ T5360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.715629][ T5360] usb 3-1: Product: syz [ 1095.722484][ T5360] usb 3-1: Manufacturer: syz [ 1095.748654][ T5360] usb 3-1: SerialNumber: syz [ 1095.767830][ T35] hsr_slave_0: left promiscuous mode [ 1095.774098][ T35] hsr_slave_1: left promiscuous mode [ 1095.786722][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.795498][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.804666][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.816263][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.843057][ T35] veth1_macvtap: left promiscuous mode [ 1095.858288][ T35] veth0_macvtap: left promiscuous mode [ 1095.865629][ T35] veth1_vlan: left promiscuous mode [ 1095.871547][ T35] veth0_vlan: left promiscuous mode [ 1095.961641][ T5639] Bluetooth: hci3: command tx timeout [ 1096.148954][ T9] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1096.330381][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1096.358632][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1096.383855][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1096.405293][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.448271][ T9] usb 5-1: config 0 descriptor?? [ 1096.475258][T17358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1096.535442][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1096.562267][ T29] audit: type=1326 audit(1783151567.842:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.2.3125" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 1096.588644][ T29] audit: type=1326 audit(1783151567.842:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.2.3125" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 1096.633311][ T5360] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1096.642787][ T5360] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1096.661542][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1096.686063][ T5360] usb 3-1: USB disconnect, device number 38 [ 1096.941952][T17385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.959663][T17385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.992320][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1097.000466][T17384] syzkaller1: entered promiscuous mode [ 1097.007714][T17384] syzkaller1: entered allmulticast mode [ 1097.108922][T17387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1097.120646][T17387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1097.221623][T17387] macvlan2: entered promiscuous mode [ 1097.227726][T17387] bridge0: entered promiscuous mode [ 1097.256807][T17387] netlink: 'syz.1.3128': attribute type 1 has an invalid length. [ 1097.366736][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1097.384325][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1097.407940][ T9] usb 5-1: USB disconnect, device number 54 [ 1097.459993][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.471833][T17393] netlink: 'syz.2.3129': attribute type 21 has an invalid length. [ 1097.483011][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.502579][T17387] : renamed from bridge_slave_1 (while UP) [ 1097.518145][T17393] netlink: 'syz.2.3129': attribute type 20 has an invalid length. [ 1097.528268][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.564489][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.783706][T17393] syzkaller0: entered promiscuous mode [ 1097.791656][T17393] syzkaller0: entered allmulticast mode [ 1098.037836][ T5639] Bluetooth: hci3: command tx timeout [ 1098.116452][T17410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3133'. [ 1098.149112][T17410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3133'. [ 1098.168153][T17410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3133'. [ 1098.383502][T17419] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 1098.479202][T17410] macvlan3: entered promiscuous mode [ 1098.892240][T17429] syzkaller0: entered promiscuous mode [ 1098.954505][T17429] syzkaller0: entered allmulticast mode [ 1099.675319][ T29] audit: type=1326 audit(1783151570.932:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17433 comm="syz.4.3136" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1099.914839][ T29] audit: type=1326 audit(1783151570.932:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17433 comm="syz.4.3136" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1100.092127][ T29] audit: type=1326 audit(1783151571.002:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17433 comm="syz.4.3136" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1100.267855][ T29] audit: type=1326 audit(1783151571.002:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17433 comm="syz.4.3136" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1100.617194][T17291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1100.659379][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1100.688711][ T29] audit: type=1326 audit(1783151571.002:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17433 comm="syz.4.3136" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1100.721213][T17291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1100.885228][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1100.893628][T17291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1100.926825][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1101.164090][T17291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1101.180891][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1101.447607][T13345] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1101.459183][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1101.478918][T17461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1101.601681][T13345] usb 5-1: Using ep0 maxpacket: 8 [ 1101.636629][T13345] usb 5-1: config 0 has an invalid interface number: 29 but max is 2 [ 1101.645099][T13345] usb 5-1: config 0 has an invalid interface number: 121 but max is 2 [ 1101.654346][T13345] usb 5-1: config 0 has an invalid interface number: 47 but max is 2 [ 1101.678039][T13345] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1101.686961][T13345] usb 5-1: config 0 has no interface number 0 [ 1101.706737][T13345] usb 5-1: config 0 has no interface number 1 [ 1101.713212][T13345] usb 5-1: config 0 has no interface number 2 [ 1101.720436][T13345] usb 5-1: config 0 interface 29 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1101.730629][T13345] usb 5-1: config 0 interface 47 altsetting 91 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1101.741960][T13345] usb 5-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x3, skipping [ 1101.765276][T13345] usb 5-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x1, skipping [ 1101.778663][T13345] usb 5-1: config 0 interface 47 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1101.805238][T13345] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1101.828771][T13345] usb 5-1: config 0 interface 121 has no altsetting 0 [ 1101.848505][T13345] usb 5-1: config 0 interface 47 has no altsetting 0 [ 1101.882882][T13345] usb 5-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=ee.8c [ 1101.892893][T13345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.917488][T13345] usb 5-1: Manufacturer: ᠷ㎅ꓪ纃递Ⰸ텵덏鮜沯럦ꠖ磕뚄啳碫慪ꖜ憷㵻姈⇐⛨᫏䊏﷩䗏ᔏ [ 1101.945198][T13345] usb 5-1: SerialNumber: 鬭낣罄継ﾗ쳠顾ሣ狨䱨憵罬씽凨䣘霤ͮ᣹ꉑō喽Ⓨ㥥焥↱傀撋ㅉ脒澐蓱῏揳㒰ᮊᆴꑽ⎔ꊶ飤ʞ͙桨欹胁ﺯ煓ဦ鼨⾁羗諱⊜Ċ [ 1101.988177][T13345] usb 5-1: config 0 descriptor?? [ 1102.268225][T13345] usbhid 5-1:0.47: couldn't find an input interrupt endpoint [ 1102.302316][T13345] usb 5-1: USB disconnect, device number 55 [ 1102.599703][T15948] Bluetooth: hci5: command 0x0406 tx timeout [ 1103.115240][T17496] sg_write: data in/out 824/14 bytes for SCSI command 0x0-- guessing data in; [ 1103.115240][T17496] program syz.4.3142 not setting count and/or reply_len properly [ 1103.704998][T17506] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1103.711668][T17506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1103.745247][T17506] vhci_hcd vhci_hcd.0: Device attached [ 1103.986728][ T44] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1104.320842][T17513] vhci_hcd: connection reset by peer [ 1104.344415][ T57] vhci_hcd vhci_hcd.0: stop threads [ 1104.361001][ T57] vhci_hcd vhci_hcd.0: release socket [ 1104.366918][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 1105.561151][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3145'. [ 1105.591641][T17532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3145'. [ 1105.606038][T17532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3145'. [ 1105.672375][T17532] macvlan5: entered promiscuous mode [ 1105.711828][T17532] netlink: 'syz.0.3145': attribute type 1 has an invalid length. [ 1105.758233][T17291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.850959][T17291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.919484][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.926654][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.043308][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.051670][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.334165][T17291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.516501][T17291] veth0_vlan: entered promiscuous mode [ 1106.554475][T17291] veth1_vlan: entered promiscuous mode [ 1106.669483][T17291] veth0_macvtap: entered promiscuous mode [ 1106.710522][T17291] veth1_macvtap: entered promiscuous mode [ 1106.755824][T17291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.799163][T17291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.848823][ T9457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.884180][ T9457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.943230][ T9457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.972680][ T9457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.321513][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.340798][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.763868][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.785423][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.339707][T17571] sg_write: data in/out 824/14 bytes for SCSI command 0x0-- guessing data in; [ 1108.339707][T17571] program syz.4.3154 not setting count and/or reply_len properly [ 1108.773719][T17574] block device autoloading is deprecated and will be removed. [ 1109.147240][ T44] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1111.948557][T17602] sg_write: data in/out 824/14 bytes for SCSI command 0x0-- guessing data in; [ 1111.948557][T17602] program syz.4.3160 not setting count and/or reply_len properly [ 1112.909295][T17611] netlink: 'syz.1.3163': attribute type 21 has an invalid length. [ 1112.923101][T17611] netlink: 'syz.1.3163': attribute type 20 has an invalid length. [ 1114.791249][T17614] syzkaller0: entered promiscuous mode [ 1114.815654][T17614] syzkaller0: entered allmulticast mode [ 1115.075476][T17625] syzkaller0: entered promiscuous mode [ 1115.098679][T17625] syzkaller0: entered allmulticast mode [ 1115.163062][T17632] sit0: entered promiscuous mode [ 1115.172031][T17632] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1115.418978][T17636] sg_write: data in/out 824/14 bytes for SCSI command 0x0-- guessing data in; [ 1115.418978][T17636] program syz.4.3170 not setting count and/or reply_len properly [ 1115.708248][ T808] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1115.891853][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.902061][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.912329][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 1115.926157][ T808] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1115.952177][ T808] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1115.974691][ T808] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.998520][ T808] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1116.042801][ T808] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1116.058455][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.066810][ T808] usb 2-1: Product: syz [ 1116.072214][ T808] usb 2-1: Manufacturer: syz [ 1116.077264][ T808] usb 2-1: SerialNumber: syz [ 1116.245320][T17648] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1116.327619][ T808] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1116.545432][ T29] audit: type=1326 audit(1783151587.812:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1116.601133][ T808] usb 2-1: USB disconnect, device number 66 [ 1116.622641][ T29] audit: type=1326 audit(1783151587.812:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1116.648289][ T808] usblp0: removed [ 1116.669689][ T29] audit: type=1326 audit(1783151587.812:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1116.731436][ T29] audit: type=1326 audit(1783151587.812:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1116.761874][ T29] audit: type=1326 audit(1783151587.812:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=453 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1116.794668][ T29] audit: type=1326 audit(1783151587.812:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1116.856760][T17656] FAULT_INJECTION: forcing a failure. [ 1116.856760][T17656] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.896523][ T29] audit: type=1326 audit(1783151587.812:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1116.923743][T17656] CPU: 1 UID: 0 PID: 17656 Comm: syz.0.3177 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.923783][T17656] Tainted: [L]=SOFTLOCKUP [ 1116.923791][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.923805][T17656] Call Trace: [ 1116.923814][T17656] [ 1116.923824][T17656] dump_stack_lvl+0xe8/0x150 [ 1116.923863][T17656] should_fail_ex+0x40c/0x560 [ 1116.923893][T17656] should_failslab+0xa8/0x100 [ 1116.923926][T17656] __kmalloc_noprof+0xfe/0x720 [ 1116.923956][T17656] ? tomoyo_encode+0x2ad/0x570 [ 1116.923977][T17656] ? tomoyo_encode+0x2ad/0x570 [ 1116.924007][T17656] tomoyo_encode+0x2ad/0x570 [ 1116.924037][T17656] tomoyo_realpath_from_path+0x5fa/0x640 [ 1116.924073][T17656] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1116.924105][T17656] tomoyo_path_number_perm+0x246/0x5f0 [ 1116.924150][T17656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1116.924181][T17656] ? __lock_acquire+0x683/0x2cf0 [ 1116.924224][T17656] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 1116.924277][T17656] ? __fget_files+0x2a/0x420 [ 1116.924309][T17656] ? __fget_files+0x3a2/0x420 [ 1116.924336][T17656] ? __fget_files+0x2a/0x420 [ 1116.924369][T17656] security_file_ioctl_compat+0xc3/0x2a0 [ 1116.924404][T17656] __ia32_compat_sys_ioctl+0x139/0x950 [ 1116.924431][T17656] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1116.924455][T17656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1116.924488][T17656] ? __fget_files+0x3a2/0x420 [ 1116.924524][T17656] ? fput+0xa0/0xd0 [ 1116.924551][T17656] ? ksys_write+0x242/0x270 [ 1116.924598][T17656] __do_fast_syscall_32+0x23e/0x6f0 [ 1116.924631][T17656] ? do_fast_syscall_32+0x33/0x70 [ 1116.924660][T17656] ? lockdep_hardirqs_on+0x7a/0x110 [ 1116.924687][T17656] ? asm_int80_emulation+0x1a/0x20 [ 1116.924708][T17656] ? do_int80_emulation+0x29f/0x550 [ 1116.924737][T17656] ? trace_irq_disable+0x3b/0x140 [ 1116.924770][T17656] do_fast_syscall_32+0x33/0x70 [ 1116.924799][T17656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1116.924826][T17656] RIP: 0023:0xf6fff0ec [ 1116.924845][T17656] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1116.924868][T17656] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1116.924886][T17656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 1116.924896][T17656] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1116.924906][T17656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1116.924915][T17656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1116.924925][T17656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1116.924947][T17656] [ 1117.191052][T17656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1117.572027][T17661] bridge_slave_1: left allmulticast mode [ 1117.577921][T17661] bridge_slave_1: left promiscuous mode [ 1117.583865][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.589893][ T29] audit: type=1326 audit(1783151587.822:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1117.616376][ T29] audit: type=1326 audit(1783151587.822:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1117.647536][ T29] audit: type=1326 audit(1783151587.822:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.1.3171" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1117.673975][T17661] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1117.890982][T17673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1117.900847][T17673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1118.036295][T17679] netlink: 'syz.3.3182': attribute type 1 has an invalid length. [ 1118.098072][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1118.270798][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1118.283194][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1118.293071][ T9] usb 2-1: config 6 has an invalid interface number: 150 but max is 0 [ 1118.304216][ T9] usb 2-1: config 6 has no interface number 0 [ 1118.310679][ T9] usb 2-1: config 6 interface 150 altsetting 6 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 1118.322395][ T9] usb 2-1: config 6 interface 150 has no altsetting 0 [ 1118.332594][ T9] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 1118.343947][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.353491][ T9] usb 2-1: Product: syz [ 1118.358593][ T9] usb 2-1: Manufacturer: syz [ 1118.363535][ T9] usb 2-1: SerialNumber: syz [ 1118.625002][ T9] usb 2-1: USB disconnect, device number 67 [ 1119.371280][ T5725] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1119.533771][ T5725] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1119.543223][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.551616][ T5725] usb 3-1: Product: syz [ 1119.556460][ T5725] usb 3-1: Manufacturer: syz [ 1119.562790][ T5725] usb 3-1: SerialNumber: syz [ 1119.572395][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1119.747167][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1121.326030][T17676] macvlan2: entered promiscuous mode [ 1121.333092][T17676] bridge0: entered promiscuous mode [ 1121.368707][T17686] : renamed from bridge_slave_1 (while UP) [ 1121.389433][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1121.409546][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1121.421714][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1121.424187][ T5725] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1121.439876][ T9] usb 2-1: no configurations [ 1121.460036][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1121.470415][ T9] usb 2-1: can't read configurations, error -22 [ 1121.489909][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1121.500916][ T5725] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1121.565098][ T5725] usb 3-1: USB disconnect, device number 39 [ 1121.585430][T17698] vlan0: entered promiscuous mode [ 1121.684275][T17701] netlink: 'syz.0.3188': attribute type 21 has an invalid length. [ 1121.705006][T17701] netlink: 'syz.0.3188': attribute type 20 has an invalid length. [ 1122.300605][T17712] tipc: Started in network mode [ 1122.326015][T17712] tipc: Node identity b6c5208fed25, cluster identity 4711 [ 1122.365913][T17712] tipc: Enabled bearer , priority 0 [ 1122.396397][T17712] 2: renamed from team_slave_1 (while UP) [ 1122.414253][T17717] netlink: 'syz.0.3193': attribute type 21 has an invalid length. [ 1122.434419][T17717] netlink: 'syz.0.3193': attribute type 20 has an invalid length. [ 1122.447840][T17712] tipc: Disabling bearer [ 1122.577131][ T5725] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1122.728586][ T5725] usb 3-1: Using ep0 maxpacket: 32 [ 1122.753421][ T5725] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1122.805637][T17722] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1122.836595][ T5725] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1122.945898][ T5725] usb 3-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 1122.986267][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.027243][ T5725] usb 3-1: Product: syz [ 1123.043899][ T5725] usb 3-1: Manufacturer: syz [ 1123.071046][ T5725] usb 3-1: SerialNumber: syz [ 1123.194490][T17729] netlink: 'syz.0.3197': attribute type 21 has an invalid length. [ 1123.203885][T17729] netlink: 'syz.0.3197': attribute type 20 has an invalid length. [ 1124.020085][T17739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1124.486356][T17744] vxlan1: entered promiscuous mode [ 1124.518209][T17744] vxlan1: entered allmulticast mode [ 1125.173816][T17755] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1125.180506][T17755] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1125.208349][T17755] vhci_hcd vhci_hcd.0: Device attached [ 1125.350935][T17763] vhci_hcd: connection closed [ 1125.356029][ T35] vhci_hcd vhci_hcd.3: stop threads [ 1125.429919][ T35] vhci_hcd vhci_hcd.3: release socket [ 1125.457167][T16263] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 1125.470535][ T35] vhci_hcd vhci_hcd.3: disconnect device [ 1125.480678][T16263] usb 39-1: enqueue for inactive port 0 [ 1125.567362][T16263] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1125.912860][ T5725] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1126.065975][T17767] netlink: 'syz.2.3205': attribute type 21 has an invalid length. [ 1126.103968][T17767] netlink: 'syz.2.3205': attribute type 20 has an invalid length. [ 1126.196398][ T5725] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1126.299486][ T5725] usb 3-1: USB disconnect, device number 40 [ 1126.348009][T16247] udevd[16247]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1126.577680][ T5360] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1126.759758][ T5360] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1126.778738][ T5360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.813051][ T5360] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.846251][ T5360] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40 [ 1126.862982][ T5360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.887563][ T5360] usb 4-1: Product: syz [ 1126.902595][ T5360] usb 4-1: Manufacturer: syz [ 1126.916807][ T5360] usb 4-1: SerialNumber: syz [ 1126.961196][ T5360] usb 4-1: selecting invalid altsetting 1 [ 1126.976442][ T5360] usb 4-1: unit 6 not found! [ 1127.067255][T16263] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1127.249429][T16263] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1127.280734][T16263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.292594][ T5360] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1127.302900][T16263] usb 2-1: Product: syz [ 1127.320024][T16263] usb 2-1: Manufacturer: syz [ 1127.327577][ T5360] usb 4-1: USB disconnect, device number 61 [ 1127.341637][T16263] usb 2-1: SerialNumber: syz [ 1127.405000][T16247] udevd[16247]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.732696][T17786] vxlan1: entered promiscuous mode [ 1127.742982][T17786] vxlan1: entered allmulticast mode [ 1127.943246][T17794] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3214'. [ 1128.029241][ T5725] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1128.217284][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 1128.237379][ T5725] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1128.258590][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1128.277381][ T5725] usb 3-1: Product: syz [ 1128.286816][ T5725] usb 3-1: Manufacturer: syz [ 1128.315733][ T5725] usb 3-1: SerialNumber: syz [ 1128.343024][ T5725] usb 3-1: config 0 descriptor?? [ 1128.380634][ T5725] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1128.545544][T16263] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1128.556151][T16263] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1128.580966][T16263] usb 2-1: USB disconnect, device number 70 [ 1128.779137][ T5725] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 1128.787530][ T5725] sq905 3-1:0.0: probe with driver sq905 failed with error -32 [ 1129.386952][ T5725] usb 3-1: USB disconnect, device number 41 [ 1129.590383][ T5693] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1129.757124][ T5693] usb 2-1: device descriptor read/64, error -71 [ 1130.017151][ T5693] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1130.167155][ T5693] usb 2-1: device descriptor read/64, error -71 [ 1130.277596][ T5693] usb usb2-port1: attempt power cycle [ 1130.617128][ T5693] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1130.658692][ T5693] usb 2-1: device descriptor read/8, error -71 [ 1130.760876][T16263] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1130.937118][ T5693] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1130.937603][T16263] usb 5-1: Using ep0 maxpacket: 8 [ 1130.986464][T16263] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1131.002280][ T5693] usb 2-1: device descriptor read/8, error -71 [ 1131.029392][T16263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.050923][T16263] usb 5-1: Product: syz [ 1131.065390][T16263] usb 5-1: Manufacturer: syz [ 1131.086615][T16263] usb 5-1: SerialNumber: syz [ 1131.103942][T17820] FAULT_INJECTION: forcing a failure. [ 1131.103942][T17820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.123462][T17820] CPU: 1 UID: 0 PID: 17820 Comm: syz.0.3222 Tainted: G L syzkaller #0 PREEMPT(full) [ 1131.123499][T17820] Tainted: [L]=SOFTLOCKUP [ 1131.123508][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.123521][T17820] Call Trace: [ 1131.123530][T17820] [ 1131.123539][T17820] dump_stack_lvl+0xe8/0x150 [ 1131.123578][T17820] should_fail_ex+0x40c/0x560 [ 1131.123609][T17820] _copy_to_user+0x31/0xb0 [ 1131.123646][T17820] simple_read_from_buffer+0xe1/0x170 [ 1131.123681][T17820] proc_fail_nth_read+0x1bb/0x230 [ 1131.123715][T17820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1131.123749][T17820] ? rw_verify_area+0x24a/0x4c0 [ 1131.123783][T17820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1131.123812][T17820] vfs_read+0x213/0xa80 [ 1131.123850][T17820] ? __pfx___mutex_lock+0x10/0x10 [ 1131.123891][T17820] ? __pfx_vfs_read+0x10/0x10 [ 1131.123927][T17820] ? __fget_files+0x2a/0x420 [ 1131.123960][T17820] ? __fget_files+0x3a2/0x420 [ 1131.123990][T17820] ? __fget_files+0x2a/0x420 [ 1131.124028][T17820] ksys_read+0x150/0x270 [ 1131.124066][T17820] ? __pfx_ksys_read+0x10/0x10 [ 1131.124104][T17820] ? asm_int80_emulation+0x1a/0x20 [ 1131.124133][T17820] do_int80_emulation+0x19a/0x550 [ 1131.124164][T17820] ? trace_irq_disable+0x3b/0x140 [ 1131.124191][T17820] ? asm_int80_emulation+0x1a/0x20 [ 1131.124212][T17820] ? clear_bhb_loop+0x40/0x90 [ 1131.124234][T17820] ? clear_bhb_loop+0x40/0x90 [ 1131.124261][T17820] asm_int80_emulation+0x1a/0x20 [ 1131.124282][T17820] RIP: 0023:0xf71371eb [ 1131.124303][T17820] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1131.124324][T17820] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1131.124348][T17820] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53ed5d0 [ 1131.124364][T17820] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1131.124377][T17820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1131.124390][T17820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1131.124404][T17820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1131.124437][T17820] [ 1131.451898][ T5360] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1131.618987][ T5693] usb usb2-port1: unable to enumerate USB device [ 1131.777182][ T5360] usb 3-1: Using ep0 maxpacket: 16 [ 1131.936054][T17815] bond1: entered promiscuous mode [ 1131.961202][T17815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1132.036002][ T5360] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1132.046135][ T5360] usb 3-1: no configurations [ 1132.053449][ T5360] usb 3-1: can't read configurations, error -22 [ 1132.098350][T17826] bridge1: entered promiscuous mode [ 1132.110103][T17826] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1132.161606][T16263] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1132.177124][T16263] usb 5-1: clock source 0 is not valid, cannot use [ 1132.188364][T16263] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 1132.196189][T16263] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1132.215491][T16263] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1132.227285][T16263] usb 5-1: clock source 0 is not valid, cannot use [ 1132.234996][T16263] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 1132.249914][T16263] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1132.434667][T16263] usb 5-1: USB disconnect, device number 56 [ 1132.564458][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1132.564550][ T29] audit: type=1326 audit(1783151603.842:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1132.608828][ T29] audit: type=1326 audit(1783151603.892:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1132.756655][ T29] audit: type=1326 audit(1783151603.922:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1132.904751][T17845] FAULT_INJECTION: forcing a failure. [ 1132.904751][T17845] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.931937][ T29] audit: type=1326 audit(1783151603.922:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1132.985284][T17845] CPU: 0 UID: 0 PID: 17845 Comm: syz.2.3228 Tainted: G L syzkaller #0 PREEMPT(full) [ 1132.985319][T17845] Tainted: [L]=SOFTLOCKUP [ 1132.985328][T17845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1132.985341][T17845] Call Trace: [ 1132.985350][T17845] [ 1132.985360][T17845] dump_stack_lvl+0xe8/0x150 [ 1132.985398][T17845] should_fail_ex+0x40c/0x560 [ 1132.985429][T17845] should_failslab+0xa8/0x100 [ 1132.985467][T17845] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1132.985495][T17845] ? do_getname+0x2e/0x250 [ 1132.985520][T17845] ? do_getname+0x2e/0x250 [ 1132.985552][T17845] do_getname+0x2e/0x250 [ 1132.985575][T17845] ? __se_sys_renameat+0x25/0x2c0 [ 1132.985604][T17845] __se_sys_renameat+0x31/0x2c0 [ 1132.985633][T17845] __do_fast_syscall_32+0x23e/0x6f0 [ 1132.985664][T17845] ? do_fast_syscall_32+0x33/0x70 [ 1132.985695][T17845] ? lockdep_hardirqs_on+0x7a/0x110 [ 1132.985723][T17845] ? asm_int80_emulation+0x1a/0x20 [ 1132.985743][T17845] ? do_int80_emulation+0x29f/0x550 [ 1132.985777][T17845] do_fast_syscall_32+0x33/0x70 [ 1132.985808][T17845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1132.985836][T17845] RIP: 0023:0xf7f340ec [ 1132.985856][T17845] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1132.985874][T17845] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 000000000000012e [ 1132.985896][T17845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1132.985912][T17845] RDX: 0000000000000003 RSI: 0000000080000100 RDI: 0000000000000000 [ 1132.985925][T17845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1132.985938][T17845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1132.985951][T17845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1132.985981][T17845] [ 1133.180021][ T29] audit: type=1326 audit(1783151603.922:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1133.204412][ T29] audit: type=1326 audit(1783151603.922:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1133.229123][ T29] audit: type=1326 audit(1783151603.922:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1133.253891][ T29] audit: type=1326 audit(1783151603.922:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1133.278378][ T29] audit: type=1326 audit(1783151603.922:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1133.302911][ T29] audit: type=1326 audit(1783151603.922:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.1.3227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 1134.463372][T17866] netlink: 'syz.4.3235': attribute type 21 has an invalid length. [ 1134.506925][T17866] netlink: 'syz.4.3235': attribute type 20 has an invalid length. [ 1134.938460][ T5725] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1135.007910][ T5360] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1135.127732][ T5725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.155066][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1135.167913][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1135.177446][ T5360] usb 3-1: Using ep0 maxpacket: 16 [ 1135.181999][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1135.225403][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1135.273806][ T5725] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1135.283595][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1135.293948][ T5725] usb 2-1: Product: syz [ 1135.298504][ T5725] usb 2-1: Manufacturer: syz [ 1135.303161][ T5725] usb 2-1: SerialNumber: syz [ 1135.312399][ T5725] usb 2-1: config 0 descriptor?? [ 1135.544839][ T5725] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1135.551860][ T5725] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1135.748840][ T5725] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1135.756780][ T5725] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1135.773650][ T5725] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1135.959610][ T5725] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1137.310235][ T5725] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1137.335361][ T5725] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1137.652247][T16263] usb 2-1: USB disconnect, device number 75 [ 1138.027219][T16263] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1138.177185][T16263] usb 2-1: device descriptor read/64, error -71 [ 1138.417238][T16263] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1138.547166][T16263] usb 2-1: device descriptor read/64, error -71 [ 1138.658112][T16263] usb usb2-port1: attempt power cycle [ 1138.695967][ T5360] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1138.709662][ T5360] usb 3-1: no configurations [ 1138.715522][ T5360] usb 3-1: can't read configurations, error -22 [ 1138.902591][T17886] binder: 17885:17886 ioctl c0306201 800002c0 returned -14 [ 1138.997261][T16263] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1139.027874][T16263] usb 2-1: device descriptor read/8, error -71 [ 1139.107121][ T44] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1139.277145][T16263] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1139.278899][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 1139.297177][ T44] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1139.307448][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1139.315771][ T44] usb 4-1: Product: syz [ 1139.320350][T16263] usb 2-1: device descriptor read/8, error -71 [ 1139.329123][ T44] usb 4-1: Manufacturer: syz [ 1139.333863][ T44] usb 4-1: SerialNumber: syz [ 1139.343738][ T44] usb 4-1: config 0 descriptor?? [ 1139.357134][ T5360] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1139.363551][ T44] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1139.428712][T16263] usb usb2-port1: unable to enumerate USB device [ 1139.524692][ T5360] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1139.534120][ T5360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.542258][ T5360] usb 3-1: Product: syz [ 1139.547083][ T5360] usb 3-1: Manufacturer: syz [ 1139.551760][ T5360] usb 3-1: SerialNumber: syz [ 1139.771907][ T44] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 1139.787448][ T44] sq905 4-1:0.0: probe with driver sq905 failed with error -32 [ 1140.341305][ T5360] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1140.368846][ T5360] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1140.396907][T12507] usb 4-1: USB disconnect, device number 62 [ 1140.441151][ T5360] usb 3-1: USB disconnect, device number 45 [ 1141.069888][T17918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1141.197840][ T5360] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1141.392174][ T5360] usb 2-1: Using ep0 maxpacket: 16 [ 1141.543810][ T5360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1141.595966][ T5360] usb 2-1: no configurations [ 1141.623076][ T5360] usb 2-1: can't read configurations, error -22 [ 1142.829111][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1142.829127][ T29] audit: type=1800 audit(1783151614.102:275): pid=17918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3251" name="bus" dev="ramfs" ino=95819 res=0 errno=0 [ 1143.069662][T13345] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1143.251325][T13345] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1143.301518][T13345] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1143.370336][T13345] usb 4-1: Product: syz [ 1143.451159][T13345] usb 4-1: Manufacturer: syz [ 1143.518901][T13345] usb 4-1: SerialNumber: syz [ 1143.559963][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 1143.628600][T13345] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1144.084665][T13345] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1144.109348][T13345] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1144.207231][ T5360] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1144.388093][ T5360] usb 2-1: Using ep0 maxpacket: 8 [ 1144.433406][ T5360] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1144.457196][ T5360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1144.480530][ T5360] usb 2-1: Product: syz [ 1144.491324][ T5360] usb 2-1: Manufacturer: syz [ 1144.524147][ T5360] usb 2-1: SerialNumber: syz [ 1144.538679][ T5360] usb 2-1: config 0 descriptor?? [ 1144.575580][ T5360] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1144.991917][ T5360] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 1145.026233][T17957] netlink: 'syz.0.3261': attribute type 10 has an invalid length. [ 1145.034424][ T5360] sq905 2-1:0.0: probe with driver sq905 failed with error -32 [ 1145.090294][T17959] netlink: 'syz.0.3261': attribute type 10 has an invalid length. [ 1146.889754][T17970] netlink: 'syz.4.3264': attribute type 21 has an invalid length. [ 1146.898052][T17970] netlink: 'syz.4.3264': attribute type 20 has an invalid length. [ 1147.638984][T17957] team0: Port device dummy0 added [ 1147.687599][T17959] team0: Port device dummy0 removed [ 1147.700177][T17959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1147.715509][T12507] usb 4-1: USB disconnect, device number 63 [ 1147.753539][T13345] usb 2-1: USB disconnect, device number 82 [ 1148.170612][T13345] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1148.337319][T13345] usb 2-1: Using ep0 maxpacket: 16 [ 1150.567353][T17998] netlink: 'syz.2.3271': attribute type 21 has an invalid length. [ 1150.575415][T17998] netlink: 'syz.2.3271': attribute type 20 has an invalid length. [ 1152.118100][T18018] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3276'. [ 1152.491844][T18025] fuse: Unknown parameter 'nv' [ 1153.415229][T13345] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1153.423318][T13345] usb 2-1: no configurations [ 1153.439935][T13345] usb 2-1: can't read configurations, error -22 [ 1153.587128][T13345] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1153.757271][T13345] usb 2-1: device descriptor read/64, error -32 [ 1153.868273][T13345] usb usb2-port1: attempt power cycle [ 1154.308649][T13345] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1154.378422][T13345] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1154.430860][T13345] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 29440, setting to 1024 [ 1154.493028][T13345] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1154.552755][T13345] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1154.633469][T13345] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.674546][T13345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1154.728334][T13345] usb 2-1: SerialNumber: syz [ 1154.797247][T13345] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1155.347949][T12507] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1155.518645][T12507] usb 4-1: Using ep0 maxpacket: 8 [ 1155.543833][T12507] usb 4-1: config 0 has an invalid interface number: 29 but max is 2 [ 1155.570576][T12507] usb 4-1: config 0 has an invalid interface number: 121 but max is 2 [ 1155.602568][T12507] usb 4-1: config 0 has an invalid interface number: 47 but max is 2 [ 1155.623330][T12507] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1155.652392][T12507] usb 4-1: config 0 has no interface number 0 [ 1155.665673][T12507] usb 4-1: config 0 has no interface number 1 [ 1155.679950][T12507] usb 4-1: config 0 has no interface number 2 [ 1155.693265][T12507] usb 4-1: config 0 interface 29 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1155.705607][T12507] usb 4-1: config 0 interface 47 altsetting 91 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1155.721724][T12507] usb 4-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x3, skipping [ 1155.736252][T12507] usb 4-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x1, skipping [ 1155.750979][T12507] usb 4-1: config 0 interface 47 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1155.763856][T12507] usb 4-1: config 0 interface 29 has no altsetting 0 [ 1155.772299][T12507] usb 4-1: config 0 interface 121 has no altsetting 0 [ 1155.786785][T12507] usb 4-1: config 0 interface 47 has no altsetting 0 [ 1155.814662][T12507] usb 4-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=ee.8c [ 1155.836764][T12507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.850004][T12507] usb 4-1: Manufacturer: ᠷ㎅ꓪ纃递Ⰸ텵덏鮜沯럦ꠖ磕뚄啳碫慪ꖜ憷㵻姈⇐⛨᫏䊏﷩䗏ᔏ [ 1155.862743][T12507] usb 4-1: SerialNumber: 鬭낣罄継ﾗ쳠顾ሣ狨䱨憵罬씽凨䣘霤ͮ᣹ꉑō喽Ⓨ㥥焥↱傀撋ㅉ脒澐蓱῏揳㒰ᮊᆴꑽ⎔ꊶ飤ʞ͙桨欹胁ﺯ煓ဦ鼨⾁羗諱⊜Ċ [ 1155.869266][T13345] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1155.895213][T18058] PKCS7: Unknown OID: [4] 0.19 [ 1155.900272][T18058] PKCS7: Only support pkcs7_signedData type [ 1155.913248][T12507] usb 4-1: config 0 descriptor?? [ 1155.921760][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 1155.951845][T18058] pim6reg: entered allmulticast mode [ 1155.964640][T18058] pim6reg: left allmulticast mode [ 1156.048089][T13345] usb 3-1: Using ep0 maxpacket: 8 [ 1156.055433][T13345] usb 3-1: config 0 has an invalid interface number: 29 but max is 2 [ 1156.066839][T13345] usb 3-1: config 0 has an invalid interface number: 121 but max is 2 [ 1156.076199][T13345] usb 3-1: config 0 has an invalid interface number: 47 but max is 2 [ 1156.084486][T13345] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1156.093435][T13345] usb 3-1: config 0 has no interface number 0 [ 1156.099696][T13345] usb 3-1: config 0 has no interface number 1 [ 1156.105962][T13345] usb 3-1: config 0 has no interface number 2 [ 1156.115394][T13345] usb 3-1: config 0 interface 29 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1156.138136][T13345] usb 3-1: config 0 interface 47 altsetting 91 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1156.163444][T13345] usb 3-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x3, skipping [ 1156.174539][T13345] usb 3-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x1, skipping [ 1156.185523][T13345] usb 3-1: config 0 interface 47 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1156.197309][T13345] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1156.212590][T13345] usb 3-1: config 0 interface 121 has no altsetting 0 [ 1156.221672][T13345] usb 3-1: config 0 interface 47 has no altsetting 0 [ 1156.231340][T13345] usb 3-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=ee.8c [ 1156.241153][T13345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.254234][T13345] usb 3-1: Manufacturer: ᠷ㎅ꓪ纃递Ⰸ텵덏鮜沯럦ꠖ磕뚄啳碫慪ꖜ憷㵻姈⇐⛨᫏䊏﷩䗏ᔏ [ 1156.280062][T13345] usb 3-1: SerialNumber: 鬭낣罄継ﾗ쳠顾ሣ狨䱨憵罬씽凨䣘霤ͮ᣹ꉑō喽Ⓨ㥥焥↱傀撋ㅉ脒澐蓱῏揳㒰ᮊᆴꑽ⎔ꊶ飤ʞ͙桨欹胁ﺯ煓ဦ鼨⾁羗諱⊜Ċ [ 1156.283479][T12507] usbhid 4-1:0.47: couldn't find an input interrupt endpoint [ 1156.314425][T13345] usb 3-1: config 0 descriptor?? [ 1156.330370][T12507] usb 4-1: USB disconnect, device number 64 [ 1156.603472][T13345] usbhid 3-1:0.47: couldn't find an input interrupt endpoint [ 1156.617813][T13345] usb 3-1: USB disconnect, device number 46 [ 1156.697986][ T5360] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1156.870404][ T5360] usb 5-1: Using ep0 maxpacket: 16 [ 1156.929837][ T5360] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1156.951016][ T5360] usb 5-1: no configurations [ 1156.956388][ T29] audit: type=1326 audit(1783151628.232:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1156.956400][ T5360] usb 5-1: can't read configurations, error -22 [ 1157.010051][ T29] audit: type=1326 audit(1783151628.292:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.036772][ T29] audit: type=1326 audit(1783151628.312:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.063545][ T29] audit: type=1326 audit(1783151628.312:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.122001][ T29] audit: type=1326 audit(1783151628.312:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.164728][ T29] audit: type=1326 audit(1783151628.342:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.196013][ T29] audit: type=1326 audit(1783151628.382:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.232517][T18078] netlink: 'syz.0.3292': attribute type 10 has an invalid length. [ 1157.236590][ T29] audit: type=1326 audit(1783151628.382:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.268042][ T29] audit: type=1326 audit(1783151628.392:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.297479][ T29] audit: type=1326 audit(1783151628.392:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.3.3291" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 1157.328676][T18081] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3292'. [ 1157.346629][T18078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1157.356882][T18078] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1157.389572][T18081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.403853][T18081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.421376][T18081] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1157.472975][T18081] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1157.496086][T13345] usb 2-1: USB disconnect, device number 85 [ 1157.497342][T12507] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1157.546557][T18081] bond0 (unregistering): Released all slaves [ 1157.678829][T12507] usb 3-1: Using ep0 maxpacket: 32 [ 1157.692674][T12507] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.705291][T12507] usb 3-1: config 0 has no interfaces? [ 1157.713355][T12507] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1157.738796][T12507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.775330][T12507] usb 3-1: config 0 descriptor?? [ 1157.915248][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 1157.939491][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3296'. [ 1158.175041][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'. [ 1158.287087][T18081] mmap: syz.0.3292 (18081) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1158.896102][T18099] sctp: [Deprecated]: syz.4.3298 (pid 18099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1158.896102][T18099] Use struct sctp_sack_info instead [ 1159.148455][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1159.185626][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1159.219464][T18104] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1159.230442][T18104] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1159.439619][T18108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3302'. [ 1159.451342][T18107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1159.525381][T18109] macvlan6: entered promiscuous mode [ 1159.560938][T18107] netlink: 'syz.0.3301': attribute type 1 has an invalid length. [ 1159.877314][T12507] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1160.058481][T12507] usb 5-1: Using ep0 maxpacket: 8 [ 1160.076019][T12507] usb 5-1: config 0 has an invalid interface number: 29 but max is 2 [ 1160.100332][T12507] usb 5-1: config 0 has an invalid interface number: 121 but max is 2 [ 1160.125369][T12507] usb 5-1: config 0 has an invalid interface number: 47 but max is 2 [ 1160.150553][T12507] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1160.172274][T12507] usb 5-1: config 0 has no interface number 0 [ 1160.183989][T12507] usb 5-1: config 0 has no interface number 1 [ 1160.196824][T12507] usb 5-1: config 0 has no interface number 2 [ 1160.212534][T12507] usb 5-1: config 0 interface 29 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1160.234570][T12507] usb 5-1: config 0 interface 47 altsetting 91 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1160.262132][T12507] usb 5-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x3, skipping [ 1160.287436][T12507] usb 5-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x1, skipping [ 1160.313116][T12507] usb 5-1: config 0 interface 47 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1160.337921][T12507] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1160.353958][T12507] usb 5-1: config 0 interface 121 has no altsetting 0 [ 1160.370341][T12507] usb 5-1: config 0 interface 47 has no altsetting 0 [ 1160.391700][T12507] usb 5-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=ee.8c [ 1160.409872][T12507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.429194][T12507] usb 5-1: Manufacturer: ᠷ㎅ꓪ纃递Ⰸ텵덏鮜沯럦ꠖ磕뚄啳碫慪ꖜ憷㵻姈⇐⛨᫏䊏﷩䗏ᔏ [ 1160.457546][T12507] usb 5-1: SerialNumber: 鬭낣罄継ﾗ쳠顾ሣ狨䱨憵罬씽凨䣘霤ͮ᣹ꉑō喽Ⓨ㥥焥↱傀撋ㅉ脒澐蓱῏揳㒰ᮊᆴꑽ⎔ꊶ飤ʞ͙桨欹胁ﺯ煓ဦ鼨⾁羗諱⊜Ċ [ 1160.505866][T12507] usb 5-1: config 0 descriptor?? [ 1160.936302][T12507] usbhid 5-1:0.47: couldn't find an input interrupt endpoint [ 1160.962212][ T5360] usb 3-1: USB disconnect, device number 47 [ 1161.009051][T12507] usb 5-1: USB disconnect, device number 59 [ 1161.807175][T13345] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1161.855371][T18157] syzkaller1: entered promiscuous mode [ 1161.867851][T18157] syzkaller1: entered allmulticast mode [ 1161.977234][T13345] usb 3-1: Using ep0 maxpacket: 32 [ 1161.998818][T13345] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.028971][T13345] usb 3-1: config 0 has no interfaces? [ 1162.044518][T13345] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1162.068662][T13345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.108377][T13345] usb 3-1: config 0 descriptor?? [ 1162.179957][T18159] macvlan3: entered promiscuous mode [ 1162.202132][T18159] netlink: 'syz.1.3317': attribute type 1 has an invalid length. [ 1162.627173][ T5725] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1162.803215][ T5725] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1162.815699][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1162.824160][ T5725] usb 2-1: Product: syz [ 1162.829159][ T5725] usb 2-1: Manufacturer: syz [ 1162.835502][ T5725] usb 2-1: SerialNumber: syz [ 1162.857194][ T5725] usb 2-1: config 0 descriptor?? [ 1163.278265][ T5725] usb 2-1: USB disconnect, device number 86 [ 1163.692869][T18167] __nla_validate_parse: 4 callbacks suppressed [ 1163.692891][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3319'. [ 1163.807179][T12507] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1164.007575][T12507] usb 4-1: Using ep0 maxpacket: 16 [ 1164.047324][T12507] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 1164.069221][T12507] usb 4-1: config 254 has no interface number 0 [ 1164.082866][T12507] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1164.142060][T12507] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 1164.165355][T12507] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1164.206481][T12507] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1164.229876][T12507] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1164.252923][T12507] usb 4-1: config 254 interface 235 has no altsetting 0 [ 1164.272760][T12507] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1164.292969][T12507] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1164.313206][T12507] usb 4-1: Product: syz [ 1164.328433][T12507] usb 4-1: Manufacturer: syz [ 1164.345031][T12507] usb 4-1: SerialNumber: syz [ 1164.379611][T18172] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1164.432192][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1164.453333][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.611304][T18172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.643500][T18172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.704333][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1164.728709][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.909935][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1164.948024][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.184450][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.206727][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1165.220958][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1165.222055][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.240245][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1165.252079][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1165.266039][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1165.521777][ T5360] usb 3-1: USB disconnect, device number 48 [ 1165.703511][T12507] usbtest 4-1:254.235: couldn't get endpoints, -71 [ 1165.715028][T12507] usbtest 4-1:254.235: probe with driver usbtest failed with error -71 [ 1165.739406][T12507] usb 4-1: USB disconnect, device number 65 [ 1165.892150][ T35] : left allmulticast mode [ 1165.896859][ T35] : left promiscuous mode [ 1165.903425][ T35] bridge0: port 2() entered disabled state [ 1165.915776][ T35] bridge_slave_0: left allmulticast mode [ 1165.925305][ T35] bridge_slave_0: left promiscuous mode [ 1165.934388][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.276884][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.295348][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.312959][ T35] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1166.339999][ T35] bond0 (unregistering): Released all slaves [ 1166.452375][ T35] tipc: Left network mode [ 1166.636197][T18198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3328'. [ 1166.661308][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3328'. [ 1166.748633][T18198] macvlan3: entered promiscuous mode [ 1166.785441][T18198] netlink: 'syz.3.3328': attribute type 1 has an invalid length. [ 1167.210229][ T35] hsr_slave_0: left promiscuous mode [ 1167.229720][ T35] hsr_slave_1: left promiscuous mode [ 1167.248689][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.271289][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.311889][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.317821][ T5639] Bluetooth: hci1: command tx timeout [ 1167.349545][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.406276][ T35] veth1_macvtap: left promiscuous mode [ 1167.433123][ T35] veth0_macvtap: left promiscuous mode [ 1167.452578][ T35] veth1_vlan: left promiscuous mode [ 1167.467530][ T35] veth0_vlan: left promiscuous mode [ 1168.515309][ T35] team0 (unregistering): Port device 12 removed [ 1168.556564][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1168.722468][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1168.842364][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.879977][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.906438][T18180] bridge_slave_0: entered allmulticast mode [ 1168.923516][T18180] bridge_slave_0: entered promiscuous mode [ 1168.940684][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.966535][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.999718][T18180] bridge_slave_1: entered allmulticast mode [ 1169.008588][T18180] bridge_slave_1: entered promiscuous mode [ 1169.058841][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.072691][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.119704][T18180] team0: Port device team_slave_0 added [ 1169.129621][T18180] team0: Port device team_slave_1 added [ 1169.157346][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 1169.177278][ T5360] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1169.193286][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.201882][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.231008][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.244575][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.277448][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.306681][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.379298][ T5360] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1169.391078][ T5360] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 1169.402975][ T5639] Bluetooth: hci1: command tx timeout [ 1169.418597][T18180] hsr_slave_0: entered promiscuous mode [ 1169.424282][ T5360] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1169.434006][T18180] hsr_slave_1: entered promiscuous mode [ 1169.443008][ T5360] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1169.458985][ T5360] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1169.477275][ T5360] usb 3-1: Product: syz [ 1169.487106][ T5360] usb 3-1: Manufacturer: syz [ 1169.497144][ T5360] usb 3-1: SerialNumber: syz [ 1169.515784][ T5360] usb 3-1: config 0 descriptor?? [ 1169.526536][T18239] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1169.548885][ T5360] usb 3-1: selecting invalid altsetting 0 [ 1170.022428][ T5360] usb 3-1: USB disconnect, device number 49 [ 1170.022475][ C1] usb 3-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 1170.037608][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1170.204247][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1170.250907][T13345] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1170.407776][T13345] usb 4-1: device descriptor read/64, error -71 [ 1170.647660][T13345] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1170.787906][T13345] usb 4-1: device descriptor read/64, error -71 [ 1170.907976][T13345] usb usb4-port1: attempt power cycle [ 1170.951663][T18273] FAULT_INJECTION: forcing a failure. [ 1170.951663][T18273] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.964564][T18273] CPU: 0 UID: 0 PID: 18273 Comm: syz.2.3337 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.964600][T18273] Tainted: [L]=SOFTLOCKUP [ 1170.964608][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.964630][T18273] Call Trace: [ 1170.964639][T18273] [ 1170.964649][T18273] dump_stack_lvl+0xe8/0x150 [ 1170.964688][T18273] should_fail_ex+0x40c/0x560 [ 1170.964719][T18273] should_failslab+0xa8/0x100 [ 1170.964752][T18273] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1170.964780][T18273] ? skb_clone+0x212/0x3a0 [ 1170.964800][T18273] ? skb_clone+0x212/0x3a0 [ 1170.964828][T18273] skb_clone+0x212/0x3a0 [ 1170.964853][T18273] __netlink_deliver_tap+0x413/0x860 [ 1170.964900][T18273] ? netlink_deliver_tap+0x2e/0x1b0 [ 1170.964935][T18273] netlink_deliver_tap+0x19c/0x1b0 [ 1170.964970][T18273] netlink_unicast+0x77f/0x940 [ 1170.965012][T18273] netlink_sendmsg+0x813/0xb40 [ 1170.965043][T18273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1170.965069][T18273] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1170.965097][T18273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1170.965117][T18273] sock_sendmsg_nosec+0x13a/0x180 [ 1170.965147][T18273] ____sys_sendmsg+0x54e/0x850 [ 1170.965187][T18273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1170.965228][T18273] ___sys_sendmsg+0x2a5/0x360 [ 1170.965253][T18273] ? __lock_acquire+0x683/0x2cf0 [ 1170.965280][T18273] ? __pfx____sys_sendmsg+0x10/0x10 [ 1170.965307][T18273] ? __schedule+0x17ef/0x56c0 [ 1170.965354][T18273] ? __fget_files+0x2a/0x420 [ 1170.965376][T18273] ? __fget_files+0x3a2/0x420 [ 1170.965406][T18273] __sys_sendmsg+0x177/0x240 [ 1170.965431][T18273] ? lockdep_hardirqs_on+0x7a/0x110 [ 1170.965457][T18273] ? __pfx___sys_sendmsg+0x10/0x10 [ 1170.965499][T18273] __do_fast_syscall_32+0x23e/0x6f0 [ 1170.965524][T18273] ? do_fast_syscall_32+0x33/0x70 [ 1170.965548][T18273] ? lockdep_hardirqs_on+0x7a/0x110 [ 1170.965571][T18273] ? asm_int80_emulation+0x1a/0x20 [ 1170.965589][T18273] ? do_int80_emulation+0x29f/0x550 [ 1170.965614][T18273] ? trace_irq_disable+0x3b/0x140 [ 1170.965652][T18273] do_fast_syscall_32+0x33/0x70 [ 1170.965678][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1170.965701][T18273] RIP: 0023:0xf7f340ec [ 1170.965719][T18273] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1170.965735][T18273] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1170.965754][T18273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1170.965767][T18273] RDX: 0000000000004044 RSI: 0000000000000000 RDI: 0000000000000000 [ 1170.965778][T18273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1170.965788][T18273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1170.965800][T18273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1170.965825][T18273] [ 1171.358579][T18276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3339'. [ 1171.385797][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3339'. [ 1171.479478][T15948] Bluetooth: hci1: command tx timeout [ 1171.510766][T18279] netlink: 'syz.2.3339': attribute type 1 has an invalid length. [ 1171.518924][T13345] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1171.568123][T13345] usb 4-1: device descriptor read/8, error -71 [ 1171.581555][T18276] macvlan3: entered promiscuous mode [ 1171.601128][T18276] bridge0: entered promiscuous mode [ 1171.837107][T13345] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1171.858030][T13345] usb 4-1: device descriptor read/8, error -71 [ 1171.965519][T13345] usb usb4-port1: unable to enumerate USB device [ 1173.567177][T15948] Bluetooth: hci1: command tx timeout [ 1174.402578][ T9457] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1174.412362][ T9457] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1174.426818][T18276] : renamed from bridge_slave_1 (while UP) [ 1174.441602][T18292] tipc: Invalid UDP bearer configuration [ 1174.441669][T18292] tipc: Enabling of bearer rejected, failed to enable media [ 1174.491931][ T9457] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1174.547124][ T9457] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.210712][T18180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1175.223007][T18180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.232034][T18180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1175.256566][T18180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1175.277881][T18180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1175.303077][T18180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1175.320761][T18180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1175.348735][T18180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1175.611091][T18180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.714455][T18180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.802518][T15722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.809816][T15722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.888176][T18335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1175.926837][T18333] raw_sendmsg: syz.0.3349 forgot to set AF_INET. Fix it! [ 1176.042622][T15722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.049859][T15722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.368177][T12507] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1176.459510][T18180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.576077][T12507] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1176.642030][T12507] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1176.692040][T12507] usb 5-1: Product: syz [ 1176.728541][T12507] usb 5-1: Manufacturer: syz [ 1176.756432][T12507] usb 5-1: SerialNumber: syz [ 1176.814255][T18180] veth0_vlan: entered promiscuous mode [ 1176.820406][T12507] usb 5-1: config 0 descriptor?? [ 1176.934264][T18180] veth1_vlan: entered promiscuous mode [ 1177.315526][T12507] usb 5-1: USB disconnect, device number 60 [ 1177.333458][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.347199][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.356854][T18180] veth0_macvtap: entered promiscuous mode [ 1177.421346][T18180] veth1_macvtap: entered promiscuous mode [ 1177.562146][T18180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.693530][T18180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.804984][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.849554][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.902515][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.964789][ T1169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.235824][T18365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3354'. [ 1178.245931][T18365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3354'. [ 1178.282533][T18365] macvlan4: entered promiscuous mode [ 1178.299819][T18365] netlink: 'syz.2.3354': attribute type 1 has an invalid length. [ 1178.307628][T12507] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1178.332801][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.369023][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.468799][T12507] usb 5-1: Using ep0 maxpacket: 16 [ 1178.483842][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.503704][T12507] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1178.511792][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.524997][T12507] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1178.560370][T12507] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1178.590774][T12507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.602237][T12507] usb 5-1: Product: syz [ 1178.606452][T12507] usb 5-1: Manufacturer: syz [ 1178.612252][T12507] usb 5-1: SerialNumber: syz [ 1178.770056][T18377] netlink: 'syz.1.3323': attribute type 21 has an invalid length. [ 1178.809952][T18377] netlink: 'syz.1.3323': attribute type 20 has an invalid length. [ 1178.870443][T12507] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1178.898597][T12507] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1179.460943][T12507] usb 5-1: USB disconnect, device number 61 [ 1179.564409][T16247] udevd[16247]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.125364][T18404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3361'. [ 1180.149166][ T5725] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1180.321166][ T5725] usb 2-1: Using ep0 maxpacket: 8 [ 1180.336674][ T5725] usb 2-1: config 0 has an invalid interface number: 29 but max is 2 [ 1180.349389][ T5725] usb 2-1: config 0 has an invalid interface number: 121 but max is 2 [ 1180.359250][ T5725] usb 2-1: config 0 has an invalid interface number: 47 but max is 2 [ 1180.367506][ T5725] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1180.376416][ T5725] usb 2-1: config 0 has no interface number 0 [ 1180.382597][ T5725] usb 2-1: config 0 has no interface number 1 [ 1180.389422][ T5725] usb 2-1: config 0 has no interface number 2 [ 1180.395640][ T5725] usb 2-1: config 0 interface 29 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1180.415186][ T5725] usb 2-1: config 0 interface 47 altsetting 91 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1180.453102][ T5725] usb 2-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x3, skipping [ 1180.482945][ T5725] usb 2-1: config 0 interface 47 altsetting 91 has a duplicate endpoint with address 0x1, skipping [ 1180.496346][ T5725] usb 2-1: config 0 interface 47 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1180.509332][ T5725] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1180.522653][ T5725] usb 2-1: config 0 interface 121 has no altsetting 0 [ 1180.529625][ T5725] usb 2-1: config 0 interface 47 has no altsetting 0 [ 1180.539618][ T5725] usb 2-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=ee.8c [ 1180.560933][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.569214][ T44] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1180.577259][ T5725] usb 2-1: Manufacturer: ᠷ㎅ꓪ纃递Ⰸ텵덏鮜沯럦ꠖ磕뚄啳碫慪ꖜ憷㵻姈⇐⛨᫏䊏﷩䗏ᔏ [ 1180.633526][ T5725] usb 2-1: SerialNumber: 鬭낣罄継ﾗ쳠顾ሣ狨䱨憵罬씽凨䣘霤ͮ᣹ꉑō喽Ⓨ㥥焥↱傀撋ㅉ脒澐蓱῏揳㒰ᮊᆴꑽ⎔ꊶ飤ʞ͙桨欹胁ﺯ煓ဦ鼨⾁羗諱⊜Ċ [ 1180.672192][ T5725] usb 2-1: config 0 descriptor?? [ 1180.747187][ T44] usb 3-1: device descriptor read/64, error -71 [ 1180.774420][T18421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1180.788587][T18421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1180.833359][T18421] macvlan7: entered promiscuous mode [ 1180.904548][T18423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1180.945294][T18421] netlink: 'syz.0.3365': attribute type 1 has an invalid length. [ 1181.017335][ T44] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1181.207252][ T44] usb 3-1: device descriptor read/64, error -71 [ 1181.298201][ T5725] usbhid 2-1:0.47: couldn't find an input interrupt endpoint [ 1181.356932][ T5725] usb 2-1: USB disconnect, device number 87 [ 1181.369648][ T44] usb usb3-port1: attempt power cycle [ 1181.759468][ T44] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1181.808104][ T44] usb 3-1: device descriptor read/8, error -71 [ 1181.974195][T18446] netlink: 'syz.1.3369': attribute type 21 has an invalid length. [ 1182.007128][T18446] netlink: 'syz.1.3369': attribute type 20 has an invalid length. [ 1182.087266][ T44] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1182.137703][ T44] usb 3-1: device descriptor read/8, error -71 [ 1182.267515][ T44] usb usb3-port1: unable to enumerate USB device [ 1182.675983][T18451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3372'. [ 1182.905699][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.917795][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.025990][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1183.038773][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.180655][T18458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3377'. [ 1183.201435][T18458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3377'. [ 1183.206920][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1183.221510][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.305232][T18458] macvlan4: entered promiscuous mode [ 1183.351402][T18458] netlink: 'syz.3.3377': attribute type 1 has an invalid length. [ 1183.425762][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1183.440700][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1183.448822][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1183.470577][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1183.499961][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1183.510860][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1183.542283][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.857950][T12507] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1183.944228][T18472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1184.039740][T12507] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1184.074773][T18472] batman_adv: batadv0: Adding interface: dummy0 [ 1184.106509][T12507] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 1184.132259][T18472] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.158135][T12507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1184.178118][T12507] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1184.209606][T12507] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1184.234762][T18472] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1184.249631][T12507] usb 3-1: Product: syz [ 1184.269851][T12507] usb 3-1: Manufacturer: syz [ 1184.297167][T12507] usb 3-1: SerialNumber: syz [ 1184.331805][T12507] usb 3-1: config 0 descriptor?? [ 1184.375946][T18469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1184.455712][T12507] usb 3-1: selecting invalid altsetting 0 [ 1185.037174][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1185.103169][ T5725] usb 3-1: USB disconnect, device number 54 [ 1185.103169][ C0] usb 3-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 1185.119873][T18469] usb 3-1: cannot submit urb 0, error -19: no device [ 1185.136884][T18469] usb 3-1: cannot submit urb 0, error -19: no device [ 1185.147767][T18469] usb 3-1: cannot submit urb 0, error -19: no device [ 1185.161782][T18469] usb 3-1: cannot submit urb 0, error -19: no device [ 1185.169918][T18469] usb 3-1: cannot submit urb 0, error -19: no device [ 1185.182794][T18469] usb 3-1: cannot submit urb 0, error -19: no device [ 1185.193575][T18469] usb 3-1: cannot submit urb 0, error -19: no device [ 1185.206271][T18469] usb 3-1: cannot submit urb 0, error -19: no device [ 1185.249597][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.287438][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.333206][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1185.384310][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1185.416166][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.465271][ T24] usb 4-1: config 0 descriptor?? [ 1185.558165][T15948] Bluetooth: hci0: command tx timeout [ 1185.606068][ T1111] : left allmulticast mode [ 1185.611499][ T1111] : left promiscuous mode [ 1185.616346][ T1111] bridge0: port 2() entered disabled state [ 1185.644077][ T1111] bridge_slave_0: left allmulticast mode [ 1185.649902][ T1111] bridge_slave_0: left promiscuous mode [ 1185.658307][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.947116][T12507] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1185.966444][ T24] hid_parser_main: 28 callbacks suppressed [ 1185.966464][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.000939][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.010342][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.024077][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.051923][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.060194][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.074327][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.097526][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.107115][T12507] usb 2-1: Using ep0 maxpacket: 16 [ 1186.123839][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.163307][T18493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.187222][T18493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.212725][ T24] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1186.290279][ T24] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1186.447858][ T1111] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1186.491700][ T1111] bridge1 (unregistering): left promiscuous mode [ 1186.541366][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.590799][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.630229][ T1111] bond0 (unregistering): Released all slaves [ 1186.674075][ T1111] bond1 (unregistering): Released all slaves [ 1186.727990][ T1111] bond2 (unregistering): Released all slaves [ 1186.810296][T18490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1186.851684][T12507] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1186.872935][T12507] usb 2-1: no configurations [ 1186.878886][T12507] usb 2-1: can't read configurations, error -22 [ 1186.883289][ T44] usb 4-1: USB disconnect, device number 70 [ 1187.430982][T18507] netlink: 'syz.2.3385': attribute type 21 has an invalid length. [ 1187.464111][T18507] netlink: 'syz.2.3385': attribute type 20 has an invalid length. [ 1187.640903][T15948] Bluetooth: hci0: command tx timeout [ 1187.681543][T18515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1187.730184][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1187.753039][T18518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1187.913078][T18518] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 1188.006755][T18521] macvlan0: entered promiscuous mode [ 1188.050490][T18521] bridge0: entered promiscuous mode [ 1188.469306][T18521] : renamed from bridge_slave_1 (while UP) [ 1188.558965][T18470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.592359][T18470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.637553][T18470] bridge_slave_0: entered allmulticast mode [ 1188.676070][T18470] bridge_slave_0: entered promiscuous mode [ 1188.732792][T15722] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.764142][T15722] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.835868][ T1111] hsr_slave_0: left promiscuous mode [ 1188.861188][ T808] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1188.881385][ T1111] hsr_slave_1: left promiscuous mode [ 1188.915548][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.932744][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.943585][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.952630][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.016906][ T1111] veth1_macvtap: left promiscuous mode [ 1189.026472][ T1111] veth0_macvtap: left promiscuous mode [ 1189.032589][ T1111] veth1_vlan: left promiscuous mode [ 1189.071608][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 1189.098103][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.140626][ T808] usb 3-1: config 0 has no interfaces? [ 1189.167080][ T808] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1189.193780][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.236551][ T808] usb 3-1: config 0 descriptor?? [ 1189.247365][ T5725] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1189.429831][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 1189.452325][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1189.494228][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1189.548800][ T5725] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1189.565775][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.584461][ T5725] usb 4-1: Product: syz [ 1189.597041][ T5725] usb 4-1: Manufacturer: syz [ 1189.610747][ T5725] usb 4-1: SerialNumber: syz [ 1189.620999][T18540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.643243][ T5725] usb 4-1: config 0 descriptor?? [ 1189.682994][T18540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.717910][T15948] Bluetooth: hci0: command tx timeout [ 1189.991677][ T5725] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input204 [ 1190.131390][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 1190.175435][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 1190.182658][T18552] netlink: 'syz.1.3394': attribute type 1 has an invalid length. [ 1190.337244][ T5725] rc_core: IR keymap rc-imon-pad not found [ 1190.349728][ T5725] Registered IR keymap rc-empty [ 1190.373573][ T5725] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1190.399026][ T5725] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1190.464724][ T5725] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1190.500815][ T5725] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input205 [ 1190.515183][T18470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.527995][ T5725] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:71> initialized [ 1190.536664][T18470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.548120][T18470] bridge_slave_1: entered allmulticast mode [ 1190.576500][T18470] bridge_slave_1: entered promiscuous mode [ 1190.661250][T15722] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1190.689886][T15722] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1190.724664][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1190.841396][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1190.843171][ T808] usb 4-1: USB disconnect, device number 71 [ 1190.934661][T18554] bridge0: port 2() entered disabled state [ 1190.945099][T18554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.099185][T18554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1191.114534][T18554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.281875][T18554] macvlan0: left promiscuous mode [ 1191.333425][T18470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.352581][ T1169] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.362870][ T1169] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.400435][ T1169] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.429564][ T1169] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.465142][T18470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.499922][ T1169] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.530392][ T1169] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.582416][ T1169] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.596205][ T1169] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.644614][T18562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1191.664365][T18470] team0: Port device team_slave_0 added [ 1191.697556][T18470] team0: Port device team_slave_1 added [ 1191.810964][T15948] Bluetooth: hci0: command tx timeout [ 1191.817299][ T5725] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1191.875909][T18470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.914172][T18470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.000197][T18470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.057098][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 1192.067103][ T5725] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1192.080574][T18470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.100075][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.119373][T18470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.159162][ T5725] usb 4-1: Product: syz [ 1192.166335][ T5725] usb 4-1: Manufacturer: syz [ 1192.177059][ T5725] usb 4-1: SerialNumber: syz [ 1192.191933][ T5725] usb 4-1: config 0 descriptor?? [ 1192.212818][T18470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.226067][ T5725] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1192.515784][T18470] hsr_slave_0: entered promiscuous mode [ 1192.535040][T18470] hsr_slave_1: entered promiscuous mode [ 1192.559193][T18470] debugfs: 'hsr0' already exists in 'hsr' [ 1192.564987][T18470] Cannot create hsr debugfs directory [ 1192.970599][ T44] usb 3-1: USB disconnect, device number 55 [ 1193.233582][T18576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3398'. [ 1193.549420][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1193.755915][T18470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1193.789749][T18470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1193.811714][T18470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1193.839869][T18470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1193.859617][T18470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1193.896418][T18470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1193.920567][T18470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1193.987779][T18470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1194.038969][T18561] netlink: 'syz.3.3397': attribute type 6 has an invalid length. [ 1194.070116][T18561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3397'. [ 1194.118287][T18600] netlink: 'syz.3.3397': attribute type 6 has an invalid length. [ 1194.203200][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3397'. [ 1194.282212][ T5725] gspca_sonixj: reg_r err -71 [ 1194.303045][ T5725] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1194.316345][T18605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3403'. [ 1194.348727][ T5725] usb 4-1: USB disconnect, device number 72 [ 1194.371318][T18605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3403'. [ 1194.512047][T18605] netlink: 'syz.0.3403': attribute type 1 has an invalid length. [ 1194.600800][T18607] macvlan8: entered promiscuous mode [ 1194.971536][T18624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3408'. [ 1195.001566][T18622] syzkaller1: entered promiscuous mode [ 1195.027059][T18622] syzkaller1: entered allmulticast mode [ 1195.231086][T18470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.572847][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1195.695078][T18470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.792457][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.799738][ T9457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.909985][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.917234][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.243705][T18470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.425690][T18470] veth0_vlan: entered promiscuous mode [ 1196.468976][T18470] veth1_vlan: entered promiscuous mode [ 1196.613916][T18470] veth0_macvtap: entered promiscuous mode [ 1196.670399][T18470] veth1_macvtap: entered promiscuous mode [ 1196.740493][T18657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1196.776940][T18470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.792786][T18658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1196.825973][T18470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.863029][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.899103][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.955141][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.013072][T18661] warning: `syz.1.3413' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1197.060546][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.267278][T15722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.294301][T15722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.321732][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1197.338811][ T5725] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1197.373134][ T9457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.381242][ T9457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.509266][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 1197.532990][ T5725] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.574157][ T5725] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1197.604062][ T5725] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=c3.55 [ 1197.623650][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.653965][ T5725] usb 2-1: Product: syz [ 1197.663673][ T5725] usb 2-1: Manufacturer: syz [ 1197.670952][ T5725] usb 2-1: SerialNumber: syz [ 1198.185970][ T5725] usb 2-1: USB disconnect, device number 90 [ 1198.568060][T18693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3420'. [ 1198.874393][T18683] ALSA: mixer_oss: invalid OSS volume 'l88U~!' [ 1198.883941][T18707] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1198.902904][T18683] ALSA: mixer_oss: invalid OSS volume '0PM;{xϻ' [ 1198.923674][T18683] ALSA: mixer_oss: invalid OSS volume '' [ 1198.935584][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1199.041052][T18710] team0: Port device team_slave_0 removed [ 1199.090940][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1200.119509][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3429'. [ 1200.511102][T18738] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3432'. [ 1200.537134][ T5725] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1200.714845][ T5725] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1200.724374][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.736169][ T5725] usb 4-1: Product: syz [ 1200.741221][ T5725] usb 4-1: Manufacturer: syz [ 1200.746193][ T5725] usb 4-1: SerialNumber: syz [ 1200.771489][ T5725] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1200.801643][T13345] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1200.885670][ T5693] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1200.985464][T18746] atomic_op ffff8880563bb198 conn xmit_atomic 0000000000000000 [ 1201.008212][T18746] binder: transaction release 24 bad handle 1, ret = -22 [ 1201.057351][ T5693] usb 6-1: Using ep0 maxpacket: 16 [ 1201.129392][ T5693] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1201.137523][ T5693] usb 6-1: no configurations [ 1201.158017][ T5693] usb 6-1: can't read configurations, error -22 [ 1201.222691][T12507] hid_parser_main: 28 callbacks suppressed [ 1201.222717][T12507] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1201.246387][T12507] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1201.427119][ T10] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1201.497317][T16263] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1201.554216][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3430'. [ 1201.592713][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1201.611145][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1201.629053][ T10] usb 2-1: Product: syz [ 1201.641541][ T10] usb 2-1: Manufacturer: syz [ 1201.651497][ T10] usb 2-1: SerialNumber: syz [ 1201.658417][T16263] usb 3-1: Using ep0 maxpacket: 16 [ 1201.688630][ T10] usb 2-1: config 0 descriptor?? [ 1201.863741][T16263] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1201.883457][T13345] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1201.906343][T16263] usb 3-1: no configurations [ 1201.919303][T13345] ath9k_htc: Failed to initialize the device [ 1201.938296][T16263] usb 3-1: can't read configurations, error -22 [ 1202.049185][T13345] usb 4-1: ath9k_htc: USB layer deinitialized [ 1202.148923][ T10] usb 2-1: USB disconnect, device number 91 [ 1202.394560][T16913] udevd[16913]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1202.996083][T18778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3443'. [ 1203.576786][T18784] netlink: 'syz.0.3445': attribute type 21 has an invalid length. [ 1203.593861][ T24] usb 4-1: USB disconnect, device number 73 [ 1203.623816][T18784] netlink: 'syz.0.3445': attribute type 20 has an invalid length. [ 1203.842778][T18784] syzkaller0: entered promiscuous mode [ 1203.872742][T18784] syzkaller0: entered allmulticast mode [ 1204.171891][T18795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1204.720546][T18812] sg_write: data in/out 824/14 bytes for SCSI command 0x0-- guessing data in; [ 1204.720546][T18812] program syz.2.3453 not setting count and/or reply_len properly [ 1204.827094][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1205.017272][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1205.162943][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1205.195189][ T24] usb 2-1: no configurations [ 1205.215515][ T24] usb 2-1: can't read configurations, error -22 [ 1205.869312][T18816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3454'. [ 1206.327132][T16263] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1206.498013][T16263] usb 6-1: Using ep0 maxpacket: 16 [ 1206.511988][T16263] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1206.530325][T16263] usb 6-1: config 0 has no interface number 0 [ 1206.543606][T16263] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1206.567083][T16263] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1206.578028][T16263] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1206.588495][T16263] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1206.601607][T16263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.610431][T16263] usb 6-1: Product: syz [ 1206.614726][T16263] usb 6-1: Manufacturer: syz [ 1206.621322][T16263] usb 6-1: SerialNumber: syz [ 1206.633571][T16263] usb 6-1: config 0 descriptor?? [ 1206.645373][T18821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1206.653582][T18821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1206.797458][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1206.873870][T18821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1206.881632][T18821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1207.008117][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1207.023801][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1207.033197][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1207.045325][ T24] usb 2-1: Product: syz [ 1207.049919][ T24] usb 2-1: Manufacturer: syz [ 1207.054673][ T24] usb 2-1: SerialNumber: syz [ 1207.069691][ T24] usb 2-1: config 0 descriptor?? [ 1207.084332][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1207.492960][ T24] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 1207.535399][ T24] sq905 2-1:0.0: probe with driver sq905 failed with error -32 [ 1207.698413][T16263] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1207.735399][T16263] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1207.792246][T16263] usb 6-1: USB disconnect, device number 4 [ 1208.035532][T18853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3467'. [ 1208.213106][T16263] usb 2-1: USB disconnect, device number 94 [ 1208.380135][T18864] capability: warning: `syz.1.3470' uses 32-bit capabilities (legacy support in use) [ 1209.527283][T13345] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1209.745577][T13345] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1209.830257][T13345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.920796][T13345] usb 3-1: config 0 descriptor?? [ 1209.976370][T13345] cp210x 3-1:0.0: cp210x converter detected [ 1210.114507][T18895] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[15950] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[18895] [ 1210.182138][T13345] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1210.214283][T13345] cp210x 3-1:0.0: querying part number failed [ 1210.375175][T13345] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1210.393875][T18895] netlink: 'syz.0.3475': attribute type 5 has an invalid length. [ 1210.577167][T16263] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1210.828650][T18908] bridge0: port 3(macvlan5) entered blocking state [ 1210.844321][T18908] bridge0: port 3(macvlan5) entered disabled state [ 1210.869436][T16263] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1210.885972][T18908] macvlan5: entered allmulticast mode [ 1210.899088][T16263] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.936506][T18908] ip6gretap0: entered allmulticast mode [ 1210.953989][T16263] usb 2-1: config 0 has no interface number 0 [ 1210.984314][T16263] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1211.010195][T18908] macvlan5: entered promiscuous mode [ 1211.041092][T18908] bridge0: port 3(macvlan5) entered blocking state [ 1211.048866][T18908] bridge0: port 3(macvlan5) entered forwarding state [ 1211.082372][T16263] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1211.138313][T16263] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.205639][T16263] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1211.252181][T16263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.293416][T16263] usb 2-1: Product: syz [ 1211.343865][T16263] usb 2-1: Manufacturer: syz [ 1211.369932][T16263] usb 2-1: SerialNumber: syz [ 1211.413032][T16263] usb 2-1: config 0 descriptor?? [ 1212.002042][T18925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.062337][T18925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.351652][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3479'. [ 1212.587361][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1212.778288][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1212.808364][ T24] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1212.841076][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1212.891511][ T24] usb 6-1: Product: syz [ 1212.918451][ T24] usb 6-1: Manufacturer: syz [ 1212.928242][T13345] usb 3-1: USB disconnect, device number 58 [ 1212.942870][ T24] usb 6-1: SerialNumber: syz [ 1212.994182][T13345] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1213.005189][ T24] usb 6-1: config 0 descriptor?? [ 1213.042437][T13345] cp210x 3-1:0.0: device disconnected [ 1213.048875][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1213.303356][T13345] usb 2-1: USB disconnect, device number 95 [ 1213.444528][ T24] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 1213.485448][ T24] sq905 6-1:0.0: probe with driver sq905 failed with error -32 [ 1214.014701][ T24] usb 6-1: USB disconnect, device number 5 [ 1214.589367][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1214.727241][ T24] usb 6-1: device descriptor read/64, error -71 [ 1214.977158][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1215.138844][ T24] usb 6-1: device descriptor read/64, error -71 [ 1215.239855][T15948] Bluetooth: hci3: command 0x0406 tx timeout [ 1215.269338][ T24] usb usb6-port1: attempt power cycle [ 1215.289882][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3494'. [ 1215.301934][T18994] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3494'. [ 1215.311681][T18994] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3494'. [ 1215.404906][ C0] ================================================================== [ 1215.413071][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1215.421110][ C0] Read of size 2 at addr ffff88817fc9a774 by task syz.3.3496/18999 [ 1215.429048][ C0] [ 1215.431417][ C0] CPU: 0 UID: 0 PID: 18999 Comm: syz.3.3496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.431457][ C0] Tainted: [L]=SOFTLOCKUP [ 1215.431468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1215.431484][ C0] Call Trace: [ 1215.431494][ C0] [ 1215.431504][ C0] dump_stack_lvl+0xe8/0x150 [ 1215.431544][ C0] print_address_description+0x55/0x1e0 [ 1215.431578][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1215.431602][ C0] print_report+0x58/0x70 [ 1215.431631][ C0] kasan_report+0x117/0x150 [ 1215.431666][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1215.431694][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1215.431724][ C0] __dev_queue_xmit+0x27f/0x37f0 [ 1215.431746][ C0] ? lock_acquire+0x106/0x350 [ 1215.431780][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1215.431815][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1215.431848][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1215.431881][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1215.431907][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1215.431943][ C0] ? br_nf_post_routing+0x1e0/0xee0 [ 1215.431981][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 1215.432011][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1215.432047][ C0] NF_HOOK+0x360/0x3f0 [ 1215.432073][ C0] ? net_generic+0x1e/0x240 [ 1215.432103][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1215.432129][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1215.432157][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1215.432190][ C0] br_forward_finish+0xd3/0x130 [ 1215.432214][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1215.432242][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1215.432267][ C0] NF_HOOK+0x360/0x3f0 [ 1215.432295][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1215.432320][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1215.432348][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1215.432377][ C0] ? br_handle_vlan+0x5e/0x530 [ 1215.432401][ C0] __br_forward+0x397/0x540 [ 1215.432427][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1215.432457][ C0] br_flood+0x3e6/0x8d0 [ 1215.432489][ C0] br_handle_frame_finish+0x1175/0x1990 [ 1215.432525][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1215.432556][ C0] ? net_generic+0x1e/0x240 [ 1215.432584][ C0] ? net_generic+0x1e/0x240 [ 1215.432610][ C0] ? net_generic+0x1e/0x240 [ 1215.432638][ C0] ? br_cfm_cc_ccm_tx+0x110/0x520 [ 1215.432665][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 1215.432715][ C0] br_handle_frame+0x81b/0x1510 [ 1215.432751][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1215.432783][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1215.432816][ C0] ? macvlan_handle_frame+0xd2e/0x1360 [ 1215.432850][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1215.432880][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 1215.432911][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1215.432933][ C0] ? lock_acquire+0x106/0x350 [ 1215.432965][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1215.432997][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1215.433039][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1215.433073][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1215.433106][ C0] ? kernel_text_address+0xa5/0xe0 [ 1215.433145][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 1215.433180][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1215.433213][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 1215.433249][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1215.433276][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1215.433303][ C0] ? dev_gro_receive+0x1097/0x2380 [ 1215.433340][ C0] napi_complete_done+0x299/0x730 [ 1215.433367][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 1215.433394][ C0] ? gro_cell_poll+0x175/0x5d0 [ 1215.433423][ C0] gro_cell_poll+0x5ab/0x5d0 [ 1215.433455][ C0] ? gro_cell_poll+0x175/0x5d0 [ 1215.433481][ C0] __napi_poll+0xaa/0x330 [ 1215.433507][ C0] net_rx_action+0x61d/0xf50 [ 1215.433542][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1215.433570][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1215.433604][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1215.433634][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1215.433661][ C0] ? sched_clock+0x3f/0x60 [ 1215.433696][ C0] handle_softirqs+0x225/0x840 [ 1215.433723][ C0] ? do_softirq+0x76/0xd0 [ 1215.433750][ C0] ? tun_rx_batched+0x185/0x790 [ 1215.433780][ C0] do_softirq+0x76/0xd0 [ 1215.433804][ C0] [ 1215.433812][ C0] [ 1215.433820][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1215.433845][ C0] ? tun_rx_batched+0x185/0x790 [ 1215.433874][ C0] tun_rx_batched+0x616/0x790 [ 1215.433906][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 1215.433935][ C0] ? tun_get_user+0x2717/0x4370 [ 1215.433962][ C0] ? tun_get_user+0x2717/0x4370 [ 1215.433990][ C0] ? tun_get_user+0x23cb/0x4370 [ 1215.434019][ C0] ? tun_get_user+0x23cb/0x4370 [ 1215.434056][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1215.434080][ C0] ? tun_get_user+0x2717/0x4370 [ 1215.434108][ C0] ? tun_get_user+0x2717/0x4370 [ 1215.434135][ C0] tun_get_user+0x2b44/0x4370 [ 1215.434172][ C0] ? aa_file_perm+0x18b/0x15f0 [ 1215.434199][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 1215.434222][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 1215.434252][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1215.434282][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1215.434309][ C0] ? preempt_schedule_common+0x82/0xd0 [ 1215.434337][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 1215.434366][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1215.434394][ C0] ? tun_get+0x1c/0x2f0 [ 1215.434422][ C0] ? tun_get+0x1c/0x2f0 [ 1215.434450][ C0] ? tun_get+0x1c/0x2f0 [ 1215.434476][ C0] ? tun_get+0x1c/0x2f0 [ 1215.434506][ C0] tun_chr_write_iter+0x113/0x200 [ 1215.434536][ C0] vfs_write+0x612/0xba0 [ 1215.434574][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1215.434611][ C0] ? __fget_files+0x2a/0x420 [ 1215.434644][ C0] ksys_write+0x150/0x270 [ 1215.434676][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1215.434714][ C0] __do_fast_syscall_32+0x23e/0x6f0 [ 1215.434747][ C0] ? do_fast_syscall_32+0x33/0x70 [ 1215.434779][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1215.434806][ C0] ? irqentry_exit+0x10f/0x8f0 [ 1215.434837][ C0] do_fast_syscall_32+0x33/0x70 [ 1215.434869][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.434898][ C0] RIP: 0023:0xf7f980ec [ 1215.434919][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1215.434940][ C0] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1215.434966][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1215.434982][ C0] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 1215.434996][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1215.435011][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1215.435025][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1215.435058][ C0] [ 1215.435067][ C0] [ 1216.107514][ C0] The buggy address belongs to the physical page: [ 1216.113969][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17fc9a [ 1216.122838][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 1216.130071][ C0] raw: 057ff00000000000 ffffea0005ff2688 ffffea0005ff2688 0000000000000000 [ 1216.138765][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1216.147362][ C0] page dumped because: kasan: bad access detected [ 1216.153787][ C0] page_owner info is not present (never set?) [ 1216.159872][ C0] [ 1216.162209][ C0] Memory state around the buggy address: [ 1216.167854][ C0] ffff88817fc9a600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1216.175928][ C0] ffff88817fc9a680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1216.184004][ C0] >ffff88817fc9a700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1216.192079][ C0] ^ [ 1216.199812][ C0] ffff88817fc9a780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1216.207887][ C0] ffff88817fc9a800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1216.215958][ C0] ================================================================== [ 1216.224248][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1216.231485][ C0] CPU: 0 UID: 0 PID: 18999 Comm: syz.3.3496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1216.242476][ C0] Tainted: [L]=SOFTLOCKUP [ 1216.246834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1216.256929][ C0] Call Trace: [ 1216.260252][ C0] [ 1216.263143][ C0] vpanic+0x56c/0xa60 [ 1216.267265][ C0] ? __pfx_vpanic+0x10/0x10 [ 1216.272697][ C0] panic+0xc5/0xd0 [ 1216.276476][ C0] ? __pfx_panic+0x10/0x10 [ 1216.280951][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1216.286633][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1216.292316][ C0] check_panic_on_warn+0x89/0xb0 [ 1216.297311][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1216.302991][ C0] end_report+0x73/0x170 [ 1216.307290][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1216.313222][ C0] kasan_report+0x128/0x150 [ 1216.317787][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1216.323483][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 1216.329012][ C0] __dev_queue_xmit+0x27f/0x37f0 [ 1216.334002][ C0] ? lock_acquire+0x106/0x350 [ 1216.338780][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1216.343762][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1216.349080][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1216.354324][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1216.359736][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1216.364751][ C0] ? br_nf_post_routing+0x1e0/0xee0 [ 1216.370514][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 1216.375947][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1216.381904][ C0] NF_HOOK+0x360/0x3f0 [ 1216.386005][ C0] ? net_generic+0x1e/0x240 [ 1216.390532][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1216.394709][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1216.399327][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1216.405253][ C0] br_forward_finish+0xd3/0x130 [ 1216.410125][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1216.416052][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1216.421537][ C0] NF_HOOK+0x360/0x3f0 [ 1216.425634][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1216.429815][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1216.434424][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1216.440085][ C0] ? br_handle_vlan+0x5e/0x530 [ 1216.444968][ C0] __br_forward+0x397/0x540 [ 1216.449496][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1216.454980][ C0] br_flood+0x3e6/0x8d0 [ 1216.459177][ C0] br_handle_frame_finish+0x1175/0x1990 [ 1216.464755][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1216.470685][ C0] ? net_generic+0x1e/0x240 [ 1216.475217][ C0] ? net_generic+0x1e/0x240 [ 1216.479756][ C0] ? net_generic+0x1e/0x240 [ 1216.484288][ C0] ? br_cfm_cc_ccm_tx+0x110/0x520 [ 1216.489340][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 1216.494577][ C0] br_handle_frame+0x81b/0x1510 [ 1216.499462][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1216.504780][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1216.510702][ C0] ? macvlan_handle_frame+0xd2e/0x1360 [ 1216.516192][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1216.521500][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 1216.527162][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1216.532294][ C0] ? lock_acquire+0x106/0x350 [ 1216.537005][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1216.542241][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1216.548336][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1216.553302][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1216.558264][ C0] ? kernel_text_address+0xa5/0xe0 [ 1216.563408][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 1216.569423][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1216.575967][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 1216.582150][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1216.588506][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1216.595219][ C0] ? dev_gro_receive+0x1097/0x2380 [ 1216.600389][ C0] napi_complete_done+0x299/0x730 [ 1216.605440][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 1216.611008][ C0] ? gro_cell_poll+0x175/0x5d0 [ 1216.615795][ C0] gro_cell_poll+0x5ab/0x5d0 [ 1216.620418][ C0] ? gro_cell_poll+0x175/0x5d0 [ 1216.625203][ C0] __napi_poll+0xaa/0x330 [ 1216.629554][ C0] net_rx_action+0x61d/0xf50 [ 1216.634169][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1216.639299][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1216.644522][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1216.649830][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1216.655058][ C0] ? sched_clock+0x3f/0x60 [ 1216.659500][ C0] handle_softirqs+0x225/0x840 [ 1216.664293][ C0] ? do_softirq+0x76/0xd0 [ 1216.668650][ C0] ? tun_rx_batched+0x185/0x790 [ 1216.673528][ C0] do_softirq+0x76/0xd0 [ 1216.677796][ C0] [ 1216.680746][ C0] [ 1216.683700][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1216.688838][ C0] ? tun_rx_batched+0x185/0x790 [ 1216.693715][ C0] tun_rx_batched+0x616/0x790 [ 1216.698421][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 1216.703647][ C0] ? tun_get_user+0x2717/0x4370 [ 1216.708522][ C0] ? tun_get_user+0x2717/0x4370 [ 1216.713402][ C0] ? tun_get_user+0x23cb/0x4370 [ 1216.718269][ C0] ? tun_get_user+0x23cb/0x4370 [ 1216.723143][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1216.728453][ C0] ? tun_get_user+0x2717/0x4370 [ 1216.733330][ C0] ? tun_get_user+0x2717/0x4370 [ 1216.738200][ C0] tun_get_user+0x2b44/0x4370 [ 1216.742910][ C0] ? aa_file_perm+0x18b/0x15f0 [ 1216.747701][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 1216.752484][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 1216.757566][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1216.762528][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1216.767925][ C0] ? preempt_schedule_common+0x82/0xd0 [ 1216.773429][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 1216.778569][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1216.784054][ C0] ? tun_get+0x1c/0x2f0 [ 1216.788232][ C0] ? tun_get+0x1c/0x2f0 [ 1216.792411][ C0] ? tun_get+0x1c/0x2f0 [ 1216.796589][ C0] ? tun_get+0x1c/0x2f0 [ 1216.800766][ C0] tun_chr_write_iter+0x113/0x200 [ 1216.805817][ C0] vfs_write+0x612/0xba0 [ 1216.810087][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1216.814876][ C0] ? __fget_files+0x2a/0x420 [ 1216.819503][ C0] ksys_write+0x150/0x270 [ 1216.823866][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1216.828745][ C0] __do_fast_syscall_32+0x23e/0x6f0 [ 1216.833969][ C0] ? do_fast_syscall_32+0x33/0x70 [ 1216.839017][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1216.844237][ C0] ? irqentry_exit+0x10f/0x8f0 [ 1216.849023][ C0] do_fast_syscall_32+0x33/0x70 [ 1216.853896][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1216.860430][ C0] RIP: 0023:0xf7f980ec [ 1216.864522][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1216.884154][ C0] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1216.892602][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1216.900604][ C0] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 1216.908608][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1216.916616][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1216.924618][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1216.932616][ C0] [ 1216.936271][ C0] Kernel Offset: disabled [ 1216.940600][ C0] Rebooting in 86400 seconds..