last executing test programs: 5m12.592722034s ago: executing program 3 (id=3893): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df000000000000010902"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 5m9.280418514s ago: executing program 3 (id=3908): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5m5.697079799s ago: executing program 3 (id=3921): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1a0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x16a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 5m4.379073621s ago: executing program 3 (id=3927): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c05, r3) dup2(r2, r0) 5m4.133738419s ago: executing program 3 (id=3928): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x7eacfa71abeb3756}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@arm64={0xe7, 0xe, 0x3, '\x00', 0xb44b}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m3.62045103s ago: executing program 3 (id=3929): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, 0x0, 0x4800) 5m3.312771099s ago: executing program 32 (id=3929): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, 0x0, 0x4800) 3.607051881s ago: executing program 1 (id=5069): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x840) 3.379313292s ago: executing program 1 (id=5073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 3.338469943s ago: executing program 5 (id=5074): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010000"]) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3fce, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="ad3ff7b90a9e16fba43fedc940f643ae3a5e50fb3bf8bea8ee0ed412e78bad073d6845433ea75c35a258390c19c167ec54c0d47e586451c19b9fd2a09e04ea2ecc8e39f2910f7e9bd8bee9a5ea4461fffbfd05d42f3e289ff88a25bbded1f9daad3393942ae1c7a72de79bbe6bb1ed121878e6abbccbe25ffb3f6918d883c85269821baa0abe904229150c542659986592b54319988c0967c6956c115dd734b83184ceb3ed21abd66c7212ed1adee4139e1bc7c897958e39f20b591ac8", @ANYRES8], 0x50) lchown(0x0, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.27282525s ago: executing program 0 (id=5075): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="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", 0x241}], 0x1}}], 0x1, 0x80) 3.193837822s ago: executing program 0 (id=5077): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50026bd7000ffffffff07080000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ff"], 0x38}}, 0x0) 3.186075812s ago: executing program 1 (id=5078): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x9, @local, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.039135897s ago: executing program 2 (id=5079): socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) munlockall() 2.99582334s ago: executing program 0 (id=5080): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x3f) write$apparmor_current(r3, &(0x7f00000001c0)=@profile={'permprofile ', ':\':\x02'}, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(0x0, 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @mcast1, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x4040) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f00000003c0)=0x8) socket$packet(0x11, 0x2, 0x300) 2.976214004s ago: executing program 1 (id=5081): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1a0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x16a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 2.847582487s ago: executing program 2 (id=5083): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x3f) write$apparmor_current(r3, &(0x7f00000001c0)=@profile={'permprofile ', ':\':\x02'}, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(0x0, 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @mcast1, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x4040) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f00000003c0)=0x8) socket$packet(0x11, 0x2, 0x300) 1.546309887s ago: executing program 5 (id=5084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newtfilter={0x48, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}]}}]}, 0x48}}, 0x24044094) 1.345545875s ago: executing program 5 (id=5085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003580)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x7f0}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 1.311685163s ago: executing program 1 (id=5086): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x54, 0x2c, 0x400, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x3, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xfa}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0xfffffff6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg$inet(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)}}], 0x1, 0x20000010) recvmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r6, 0xffffffffffffffff, 0x0) r10 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r10, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xec, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r12, 0x417}, &(0x7f0000000240)=0x8) 1.190200385s ago: executing program 2 (id=5088): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x104) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x7, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0xff, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0xa6, 0x7, 0x0, 0x24, 0x6, 0x40, 0xf, 0x6e, 0x2, 0x9, 0x13, 0x0, 0x401, 0xa8000000, 0xd, 0xb, 0x9, 0x8, '\x00', 0xfc, 0x7}) 1.144058075s ago: executing program 0 (id=5089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x3b, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 1.08658664s ago: executing program 4 (id=5090): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) 1.069175822s ago: executing program 5 (id=5091): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 983.847351ms ago: executing program 0 (id=5092): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1, 0x8}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x7fff}, 0x8) 911.28937ms ago: executing program 2 (id=5093): ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000500)={0x0, 0x0, 0x4}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 883.280696ms ago: executing program 4 (id=5094): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0xe) dup3(r1, r0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 847.894204ms ago: executing program 0 (id=5095): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010000"]) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3fce, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="ad3ff7b90a9e16fba43fedc940f643ae3a5e50fb3bf8bea8ee0ed412e78bad073d6845433ea75c35a258390c19c167ec54c0d47e586451c19b9fd2a09e04ea2ecc8e39f2910f7e9bd8bee9a5ea4461fffbfd05d42f3e289ff88a25bbded1f9daad3393942ae1c7a72de79bbe6bb1ed121878e6abbccbe25ffb3f6918d883c85269821baa0abe904229150c542659986592b54319988c0967c6956c115dd734b83184ceb3ed21abd66c7212ed1adee4139e1bc7c897958e39f20b591ac8", @ANYRES8], 0x50) lchown(0x0, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 846.321943ms ago: executing program 2 (id=5096): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50026bd7000ffffffff07080000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ff"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 814.169951ms ago: executing program 1 (id=5097): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1a0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x16a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 768.146054ms ago: executing program 4 (id=5098): bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 745.815424ms ago: executing program 2 (id=5099): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1a0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x16a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 687.010582ms ago: executing program 4 (id=5100): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="1883cc7594fbeb06afa2fdb600f7b3fb", 0x10}], 0x1, 0x0, 0x0, 0x4004}], 0x1, 0xa841) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000280)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000240)="e7", 0x27f}]) 370.612088ms ago: executing program 4 (id=5101): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0xfffffffb, 0xff, {}, 0x0, 0x0, 0xfb}) 270.486723ms ago: executing program 4 (id=5102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x201a}) 148.488582ms ago: executing program 5 (id=5103): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX], 0xf4}}, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) 0s ago: executing program 5 (id=5104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): er0>, priority 0 [ 1294.553549][T21564] syzkaller0: entered promiscuous mode [ 1294.573447][T21564] syzkaller0: entered allmulticast mode [ 1294.602503][T21558] bridge0: entered promiscuous mode [ 1294.610943][T21558] bridge0: port 2(macvtap2) entered blocking state [ 1294.639080][T21558] bridge0: port 2(macvtap2) entered disabled state [ 1294.688379][T21558] macvtap2: entered allmulticast mode [ 1294.693778][T21558] bridge0: entered allmulticast mode [ 1294.719540][T21558] macvtap2: left allmulticast mode [ 1294.724759][T21558] bridge0: left allmulticast mode [ 1294.734573][T21570] netlink: 'syz.5.4207': attribute type 1 has an invalid length. [ 1294.743323][T21558] bridge0: left promiscuous mode [ 1294.751540][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1294.857977][T21571] tipc: Resetting bearer [ 1295.092954][T21577] netlink: 'syz.5.4208': attribute type 21 has an invalid length. [ 1295.176676][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4204'. [ 1295.677438][ T5914] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1295.861311][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 1295.873087][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.884639][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.894803][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1295.963555][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.995652][ T5914] usb 3-1: config 0 descriptor?? [ 1296.012818][ T5914] hub 3-1:0.0: USB hub found [ 1296.442503][ T5914] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1297.034014][T21606] macsec1: entered promiscuous mode [ 1297.045109][T21606] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 1297.064010][T21606] macsec1: entered allmulticast mode [ 1297.116908][T21606] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 1298.503133][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 1298.532316][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4218'. [ 1298.547894][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1298.594604][T21614] netlink: 'syz.0.4219': attribute type 1 has an invalid length. [ 1298.605197][ T5914] usb 3-1: USB disconnect, device number 18 [ 1298.746881][T21619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4220'. [ 1300.181780][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.188910][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.910128][ T5914] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1301.410149][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.420628][ T5914] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1301.471963][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1301.577443][ T5914] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1301.606956][ T5914] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1301.729053][ T5914] usb 3-1: Manufacturer: syz [ 1301.753404][ T5914] usb 3-1: config 0 descriptor?? [ 1301.825613][ T5914] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1302.375914][T21665] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4229'. [ 1304.272641][T21679] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1304.279186][T21679] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1304.295390][T21679] vhci_hcd vhci_hcd.0: Device attached [ 1304.537459][ T5914] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1304.617349][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4234'. [ 1304.995031][T21681] vhci_hcd: connection reset by peer [ 1305.000829][T11245] vhci_hcd: stop threads [ 1305.005175][T11245] vhci_hcd: release socket [ 1305.010491][T11245] vhci_hcd: disconnect device [ 1305.535094][ T89] usb 3-1: USB disconnect, device number 19 [ 1305.970887][T21693] bridge0: port 1(batadv0) entered disabled state [ 1306.038213][T21693] veth0_to_bridge: left allmulticast mode [ 1306.044029][T21693] veth0_to_bridge: left promiscuous mode [ 1306.101195][T21693] bridge0: port 2(veth0_to_bridge) entered disabled state [ 1306.184132][T21693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1309.879002][ T5914] vhci_hcd: vhci_device speed not set [ 1310.776030][T21752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4251'. [ 1313.052719][ T5914] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1313.661186][T21772] usb usb8: usbfs: process 21772 (syz.4.4253) did not claim interface 0 before use [ 1313.678386][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 1313.742830][ T5914] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1313.752754][ T5914] usb 1-1: config 0 has no interface number 0 [ 1313.805265][ T5914] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1313.814827][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.834893][ T5914] usb 1-1: Product: syz [ 1313.854845][ T5914] usb 1-1: Manufacturer: syz [ 1313.909627][ T5914] usb 1-1: SerialNumber: syz [ 1313.942782][ T5914] usb 1-1: config 0 descriptor?? [ 1313.970002][ T5914] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1313.982250][ T5914] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1314.234662][ T5914] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1315.287362][ T5927] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 1315.598925][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1315.606556][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1316.162921][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1316.247457][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1316.259610][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1316.273190][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1316.282116][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1316.382267][ T5914] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 1316.408308][ T5914] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1316.469806][ T5914] usb 1-1: USB disconnect, device number 20 [ 1316.482819][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1316.495887][ T5914] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1316.536258][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1316.588526][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1316.668740][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1316.676315][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1316.706455][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1316.725859][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1316.781644][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1316.838055][ T5927] usb 3-1: string descriptor 0 read error: -22 [ 1316.844569][ T5927] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1316.860314][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.898254][ T5927] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1317.395796][T21806] fuse: Bad value for 'group_id' [ 1317.419550][T21806] fuse: Bad value for 'group_id' [ 1317.502070][T21784] misc userio: Begin command sent, but we're already running [ 1317.594262][T21784] misc userio: Begin command sent, but we're already running [ 1317.800857][T21813] netlink: 'syz.4.4265': attribute type 1 has an invalid length. [ 1318.800014][T21830] usb usb8: usbfs: process 21830 (syz.5.4267) did not claim interface 0 before use [ 1318.887907][ T30] audit: type=1400 audit(1764646502.066:1532): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=21822 comm="syz.5.4267" [ 1320.111383][T21836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1320.200354][T21836] pimreg3: entered allmulticast mode [ 1320.249731][ T89] usb 3-1: USB disconnect, device number 20 [ 1320.319140][T21843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4270'. [ 1320.657123][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4273'. [ 1322.524420][T21879] syz.1.4277 (21879): /proc/21871/oom_adj is deprecated, please use /proc/21871/oom_score_adj instead. [ 1324.173776][ T30] audit: type=1326 audit(1764646507.426:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1324.284505][ T30] audit: type=1326 audit(1764646507.426:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1324.316286][ T30] audit: type=1326 audit(1764646507.426:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1324.403123][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4281'. [ 1324.434199][ T30] audit: type=1326 audit(1764646507.426:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1324.556081][ T30] audit: type=1326 audit(1764646507.426:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1324.578951][ T89] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 1324.781981][ T89] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1324.826868][ T30] audit: type=1326 audit(1764646507.436:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1324.869949][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1324.897705][ T30] audit: type=1326 audit(1764646507.436:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1324.898110][ T89] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1325.132589][ T89] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1325.427306][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.466576][ T30] audit: type=1326 audit(1764646507.436:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1325.498403][ T89] usb 1-1: config 0 descriptor?? [ 1325.504488][T21901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1325.518071][T21901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1325.605246][ T89] metro_usb 1-1:0.0: Metrologic USB to Serial converter detected [ 1325.627958][ T30] audit: type=1326 audit(1764646507.436:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1325.671787][ T89] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1325.757687][ T30] audit: type=1326 audit(1764646507.436:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21887 comm="syz.4.4280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1326.222419][T21914] usb usb8: usbfs: process 21914 (syz.4.4283) did not claim interface 0 before use [ 1326.632893][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4285'. [ 1326.650353][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4285'. [ 1327.667037][ T5914] usb 1-1: USB disconnect, device number 21 [ 1327.692907][ T5914] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1327.892645][ T5914] metro_usb 1-1:0.0: device disconnected [ 1328.079826][T21939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4287'. [ 1329.767978][ T89] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1329.789648][T21954] program syz.2.4292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1329.801374][T21954] futex_wake_op: syz.2.4292 tries to shift op by 32; fix this program [ 1329.931654][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1329.931666][ T30] audit: type=1326 audit(1764646513.076:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1329.969690][ T30] audit: type=1326 audit(1764646513.076:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1329.992338][ T30] audit: type=1326 audit(1764646513.076:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1330.088788][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4293'. [ 1330.355664][ T89] usb 6-1: Using ep0 maxpacket: 32 [ 1330.369365][ T89] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1330.397996][ T89] usb 6-1: config 0 has no interface number 0 [ 1330.442676][ T30] audit: type=1326 audit(1764646513.076:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1330.636899][ T89] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1330.667411][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.687491][ T89] usb 6-1: Product: syz [ 1330.727034][ T89] usb 6-1: Manufacturer: syz [ 1330.732651][ T30] audit: type=1326 audit(1764646513.076:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1330.809420][ T89] usb 6-1: SerialNumber: syz [ 1330.820420][ T89] usb 6-1: config 0 descriptor?? [ 1330.840745][ T89] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1330.857138][ T89] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 1330.868259][ T30] audit: type=1326 audit(1764646513.076:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1330.950577][T21963] netlink: 'syz.1.4294': attribute type 10 has an invalid length. [ 1331.044157][ T89] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1331.097581][ T30] audit: type=1326 audit(1764646513.076:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1331.203204][ T30] audit: type=1326 audit(1764646513.076:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1331.223231][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4295'. [ 1331.273649][ T30] audit: type=1326 audit(1764646513.086:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1331.294902][T21965] pimreg3: entered allmulticast mode [ 1331.433711][ T30] audit: type=1326 audit(1764646513.086:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.2.4292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1332.496712][ T89] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 1332.543950][ T89] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1332.631382][T21987] netlink: 'syz.4.4298': attribute type 4 has an invalid length. [ 1332.652663][T21987] netlink: 'syz.4.4298': attribute type 4 has an invalid length. [ 1332.846593][ T89] usb 6-1: USB disconnect, device number 9 [ 1332.865481][ T89] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1333.515068][T21994] usb usb8: usbfs: process 21994 (syz.5.4300) did not claim interface 0 before use [ 1333.869767][T21998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4301'. [ 1336.227992][T22037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4307'. [ 1337.645960][T22051] usb usb8: usbfs: process 22051 (syz.2.4311) did not claim interface 0 before use [ 1339.333823][T22069] usb usb8: usbfs: process 22069 (syz.2.4315) did not claim interface 0 before use [ 1339.366283][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1339.366301][ T30] audit: type=1400 audit(1764646522.596:1597): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22065 comm="syz.2.4315" [ 1340.242099][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4316'. [ 1340.324195][T22079] bridge_slave_1: left allmulticast mode [ 1340.535281][T22079] bridge_slave_1: left promiscuous mode [ 1340.541577][T22079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.704650][T22079] bridge_slave_0: left allmulticast mode [ 1340.721800][T22079] bridge_slave_0: left promiscuous mode [ 1340.784297][T22079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.713301][T22096] delete_channel: no stack [ 1341.967382][ T5927] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1342.814105][ T5927] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1342.825407][ T5927] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1343.149538][T22107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4323'. [ 1343.439400][ T5927] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1343.449001][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.520117][T22096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1343.530726][ T5927] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1343.878284][T22096] veth1_to_team: entered promiscuous mode [ 1343.889718][T22096] bridge0: entered promiscuous mode [ 1343.896631][T22096] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1343.908937][T22096] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1343.922503][T22096] hsr1: entered allmulticast mode [ 1343.927626][T22096] veth1_to_team: entered allmulticast mode [ 1343.933540][T22096] bridge0: entered allmulticast mode [ 1344.151435][T22114] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4324'. [ 1344.160713][T22114] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4324'. [ 1344.169883][T22114] netlink: 'syz.5.4324': attribute type 3 has an invalid length. [ 1344.177662][T22114] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4324'. [ 1344.582121][ T30] audit: type=1326 audit(1764646527.826:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1344.676892][ T30] audit: type=1326 audit(1764646527.826:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1344.940697][ T30] audit: type=1326 audit(1764646527.826:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1345.035519][T22117] : renamed from bridge_slave_0 (while UP) [ 1345.341018][ T30] audit: type=1326 audit(1764646527.826:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1345.407160][ T89] usb 3-1: USB disconnect, device number 21 [ 1345.576247][ T30] audit: type=1326 audit(1764646527.826:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1345.685617][ T30] audit: type=1326 audit(1764646527.826:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1345.762192][ T30] audit: type=1326 audit(1764646527.826:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1345.784305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.107469][ T30] audit: type=1326 audit(1764646527.826:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1346.267327][ T30] audit: type=1326 audit(1764646527.826:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1346.359180][ T30] audit: type=1326 audit(1764646527.826:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1346.978729][T22143] program syz.5.4329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1346.990177][T22143] futex_wake_op: syz.5.4329 tries to shift op by 32; fix this program [ 1347.213044][T22139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4330'. [ 1347.633842][T22150] usb usb8: usbfs: process 22150 (syz.0.4331) did not claim interface 0 before use [ 1348.837952][T22172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1350.437594][T22190] program syz.2.4341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1351.280829][T22195] netlink: 'syz.5.4342': attribute type 1 has an invalid length. [ 1352.340801][T22207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4344'. [ 1352.829957][T22217] netlink: 'syz.4.4346': attribute type 10 has an invalid length. [ 1352.880678][T22218] netlink: 'syz.4.4346': attribute type 10 has an invalid length. [ 1352.890287][T22217] team0: Port device netdevsim0 added [ 1352.914989][T22218] team0: Port device netdevsim0 removed [ 1354.973140][T22240] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1355.102913][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1355.119003][T22244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1356.699741][T22254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1357.257803][ T5914] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1357.469042][ T5914] usb 2-1: config 0 has no interfaces? [ 1357.480783][ T5914] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1357.491463][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.499974][ T5914] usb 2-1: Product: syz [ 1357.504355][ T5914] usb 2-1: Manufacturer: syz [ 1357.509163][ T5914] usb 2-1: SerialNumber: syz [ 1357.516808][ T5914] usb 2-1: config 0 descriptor?? [ 1358.035427][T22256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.046517][T22256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.664375][T22284] usb usb8: usbfs: process 22284 (syz.4.4358) did not claim interface 0 before use [ 1360.092597][ T89] usb 2-1: USB disconnect, device number 4 [ 1360.420021][T22287] vhci_hcd vhci_hcd.0: port 0 already used [ 1360.457482][T22287] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 1360.464111][T22287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1360.482120][T22287] vhci_hcd vhci_hcd.0: Device attached [ 1360.501836][T22293] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 1360.508446][T22293] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1360.554800][T22293] vhci_hcd vhci_hcd.0: Device attached [ 1360.578476][T22297] delete_channel: no stack [ 1360.597405][T22287] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 1360.604010][T22287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1360.657669][T22287] vhci_hcd vhci_hcd.0: Device attached [ 1360.729076][T22287] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 1360.735725][T22287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1360.822077][T22287] vhci_hcd vhci_hcd.0: Device attached [ 1360.841621][T22293] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(21) [ 1360.848263][T22293] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1360.990736][T22293] vhci_hcd vhci_hcd.0: Device attached [ 1361.053751][T22287] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1361.092134][T22287] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1361.127617][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1361.266354][T22315] netlink: 'syz.5.4362': attribute type 2 has an invalid length. [ 1361.427984][T22287] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1361.468774][T22287] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(30) [ 1361.475404][T22287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1361.527575][T22287] vhci_hcd vhci_hcd.0: Device attached [ 1361.541473][T22291] vhci_hcd: connection closed [ 1361.541725][T22300] vhci_hcd: connection closed [ 1361.541756][ T44] vhci_hcd: stop threads [ 1361.546570][T22294] vhci_hcd: connection closed [ 1361.555573][T22298] vhci_hcd: connection closed [ 1361.563650][T22307] vhci_hcd: connection closed [ 1361.580602][ T44] vhci_hcd: release socket [ 1361.600452][ T5914] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1361.625945][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.632469][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.146470][ T44] vhci_hcd: disconnect device [ 1362.156018][ T5914] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1362.206031][ T44] vhci_hcd: stop threads [ 1362.211439][ T44] vhci_hcd: release socket [ 1362.216009][ T5914] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1362.228035][ T44] vhci_hcd: disconnect device [ 1362.314384][ T44] vhci_hcd: stop threads [ 1362.318910][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.353362][ T44] vhci_hcd: release socket [ 1362.360845][T22316] vhci_hcd: connection closed [ 1362.383844][ T44] vhci_hcd: disconnect device [ 1362.445498][T22303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1362.482746][ T5914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1362.540894][ T44] vhci_hcd: stop threads [ 1362.545171][ T44] vhci_hcd: release socket [ 1362.882632][T22297] veth1_to_team: entered promiscuous mode [ 1362.890395][ T44] vhci_hcd: disconnect device [ 1362.904392][T22297] bridge0: entered promiscuous mode [ 1362.946594][T22297] debugfs: 'hsr1' already exists in 'hsr' [ 1362.970297][T22297] Cannot create hsr debugfs directory [ 1362.976419][T22297] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1363.017642][ T44] vhci_hcd: stop threads [ 1363.027443][T22297] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1363.064847][T22297] hsr1: entered allmulticast mode [ 1363.234997][ T44] vhci_hcd: release socket [ 1363.253568][ T44] vhci_hcd: disconnect device [ 1363.264695][ T44] vhci_hcd: stop threads [ 1363.272040][T22297] veth1_to_team: entered allmulticast mode [ 1363.357366][ T44] vhci_hcd: release socket [ 1363.371173][ T44] vhci_hcd: disconnect device [ 1363.446633][T22297] bridge0: entered allmulticast mode [ 1363.958677][T22341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1363.977602][T22341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1365.356185][T10539] usb 2-1: USB disconnect, device number 5 [ 1365.498318][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1365.683954][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4370'. [ 1365.747765][T22357] bridge0: port 1(batadv0) entered disabled state [ 1366.368683][T22357] bridge0 (unregistering): left promiscuous mode [ 1366.540520][T22365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1368.146647][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1368.178736][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1368.207447][T22378] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1368.365884][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 1368.365901][ T30] audit: type=1326 audit(1764646551.626:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1368.394227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1368.412928][ T30] audit: type=1326 audit(1764646551.666:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1368.528713][ T30] audit: type=1326 audit(1764646551.666:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1368.616056][ T30] audit: type=1326 audit(1764646551.666:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1368.724306][ T30] audit: type=1326 audit(1764646551.666:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1368.847076][ T30] audit: type=1326 audit(1764646551.666:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1368.949140][ T30] audit: type=1326 audit(1764646551.666:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1369.017397][ T30] audit: type=1326 audit(1764646551.666:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1369.039527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.229089][ T30] audit: type=1326 audit(1764646551.666:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1369.271468][ T30] audit: type=1326 audit(1764646551.676:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22369 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1369.293635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1371.877339][ T9] kworker/0:0 (9) used greatest stack depth: 16232 bytes left [ 1372.386357][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4385'. [ 1372.411064][T22419] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4382'. [ 1372.420407][T22419] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4382'. [ 1372.429507][T22419] netlink: 'syz.1.4382': attribute type 3 has an invalid length. [ 1372.437487][T22419] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4382'. [ 1372.957435][ T5927] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1373.342241][T22432] netlink: 'syz.0.4386': attribute type 10 has an invalid length. [ 1373.353973][T22432] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1373.369052][T22432] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1373.378275][T22432] team0: Port device netdevsim0 added [ 1373.412394][T22432] netlink: 'syz.0.4386': attribute type 10 has an invalid length. [ 1373.479119][T22432] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1373.675448][T22432] team0: Port device netdevsim0 removed [ 1374.013816][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1374.044624][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1374.088225][T22419] : renamed from bridge_slave_0 (while UP) [ 1374.437740][ T5927] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1374.446823][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.536415][ T5927] usb 3-1: Product: syz [ 1374.540718][ T5927] usb 3-1: Manufacturer: syz [ 1374.567497][ T5927] usb 3-1: SerialNumber: syz [ 1374.614446][ T5927] usb 3-1: config 0 descriptor?? [ 1374.661297][T22424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1374.670342][T22424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1375.430677][T22450] veth1_to_bond: mtu less than device minimum [ 1376.126630][ T5927] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71 [ 1376.175837][ T5927] usb 3-1: USB disconnect, device number 22 [ 1376.431631][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4391'. [ 1376.846934][T22464] usb usb8: usbfs: process 22464 (syz.0.4393) did not claim interface 0 before use [ 1376.956309][T22470] netlink: 'syz.5.4394': attribute type 4 has an invalid length. [ 1377.077675][T22471] netlink: 'syz.5.4394': attribute type 4 has an invalid length. [ 1378.328284][ T5927] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1378.527537][T22490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4396'. [ 1378.742340][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 1378.795350][ T5927] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 1378.825127][ T5927] usb 2-1: config 0 has no interface number 0 [ 1378.841816][ T5927] usb 2-1: config 0 interface 228 has no altsetting 0 [ 1379.049504][ T5927] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice= 0.02 [ 1379.059085][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.067145][ T5927] usb 2-1: Product: syz [ 1379.071748][ T5927] usb 2-1: Manufacturer: syz [ 1379.076336][ T5927] usb 2-1: SerialNumber: syz [ 1379.085158][ T5927] usb 2-1: config 0 descriptor?? [ 1379.644200][T22490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4396'. [ 1381.001472][ T5927] net1080 2-1:0.228: probe with driver net1080 failed with error -71 [ 1381.015281][ T5927] usb 2-1: USB disconnect, device number 6 [ 1381.422720][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4402'. [ 1383.292470][T22536] binfmt_misc: register: failed to install interpreter file ./file0 [ 1383.359183][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1383.359198][ T30] audit: type=1326 audit(1764646566.536:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1383.437413][ T30] audit: type=1326 audit(1764646566.536:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1383.463325][T22544] netlink: 'syz.5.4408': attribute type 1 has an invalid length. [ 1383.577643][ T30] audit: type=1326 audit(1764646566.536:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1383.668328][ T30] audit: type=1326 audit(1764646566.546:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1383.702452][ T30] audit: type=1326 audit(1764646566.546:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1383.726618][ T30] audit: type=1326 audit(1764646566.546:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1383.794099][ T30] audit: type=1326 audit(1764646566.546:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1383.851421][T22550] usb usb8: usbfs: process 22550 (syz.4.4409) did not claim interface 0 before use [ 1384.111846][T22544] veth3: entered promiscuous mode [ 1384.229699][T22544] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 1384.518212][ T30] audit: type=1326 audit(1764646566.546:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1384.551378][ T30] audit: type=1326 audit(1764646566.546:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1384.707433][ T30] audit: type=1326 audit(1764646566.656:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22533 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 1385.224983][T22571] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1386.888910][T22594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4416'. [ 1388.904758][T22615] ksmbd: Unknown IPC event: 0, ignore. [ 1389.567369][ T5927] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1389.631628][T22588] tipc: Started in network mode [ 1389.636638][T22588] tipc: Node identity 4, cluster identity 4711 [ 1389.653217][T22588] tipc: Node number set to 4 [ 1390.219288][ T5927] usb 1-1: config 0 has no interfaces? [ 1390.279281][ T5927] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1390.381419][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.461368][ T5927] usb 1-1: Product: syz [ 1390.465626][ T5927] usb 1-1: Manufacturer: syz [ 1390.470488][T12976] tipc: Left network mode [ 1390.500601][ T5927] usb 1-1: SerialNumber: syz [ 1390.529274][ T5927] usb 1-1: config 0 descriptor?? [ 1390.983153][T22623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.992293][T22623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.008420][T22633] usb usb8: usbfs: process 22633 (syz.1.4426) did not claim interface 0 before use [ 1391.906036][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4430'. [ 1392.388534][T22653] usb usb8: usbfs: process 22653 (syz.4.4431) did not claim interface 0 before use [ 1392.460512][ T5907] usb 1-1: USB disconnect, device number 22 [ 1392.917500][ T5927] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1393.276247][T22670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4432'. [ 1393.380440][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1393.390279][ T5927] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1393.428152][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1393.453168][ T5927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1393.471087][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.481386][ T5927] usb 3-1: Product: syz [ 1393.487838][ T5927] usb 3-1: Manufacturer: syz [ 1393.495217][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4442'. [ 1393.507347][ T5927] usb 3-1: SerialNumber: syz [ 1393.521061][ T5927] hub 3-1:1.0: bad descriptor, ignoring hub [ 1393.529492][ T5927] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1394.803568][ T5911] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1394.946052][ T5927] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1394.974013][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4435'. [ 1395.051473][ T5911] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1395.068333][ T5911] usb 5-1: config 0 has no interface number 0 [ 1395.078341][ T5911] usb 5-1: config 0 interface 122 has no altsetting 0 [ 1395.088626][ T5927] usb 3-1: USB disconnect, device number 23 [ 1395.103229][ T5927] usblp0: removed [ 1395.114445][ T5911] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1395.135591][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.160004][ T5911] usb 5-1: Product: syz [ 1395.188017][ T5911] usb 5-1: Manufacturer: syz [ 1395.197951][ T5911] usb 5-1: SerialNumber: syz [ 1395.313115][ T5911] usb 5-1: config 0 descriptor?? [ 1395.600382][T22692] binder: 22680:22692 ioctl c018620c 80000380 returned -22 [ 1396.893471][ T5907] usb 5-1: USB disconnect, device number 18 [ 1396.899902][ T5907] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1397.407991][T22706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4441'. [ 1397.417074][T22706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4441'. [ 1399.261278][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1399.261298][ T30] audit: type=1400 audit(1764646582.506:1759): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22721 comm="syz.2.4447" [ 1399.587605][ T5911] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1399.735556][ T5911] usb 5-1: device descriptor read/64, error -71 [ 1399.977384][ T5911] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1400.410657][ T5911] usb 5-1: device descriptor read/64, error -71 [ 1400.518466][ T5911] usb usb5-port1: attempt power cycle [ 1401.039644][ T5911] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1401.079615][ T5911] usb 5-1: device descriptor read/8, error -71 [ 1401.527915][ T5911] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1401.553623][ T5911] usb 5-1: device descriptor read/8, error -71 [ 1401.868068][ T5911] usb usb5-port1: unable to enumerate USB device [ 1403.931749][T22774] program syz.4.4454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1404.066971][T22777] usb usb8: usbfs: process 22777 (syz.1.4453) did not claim interface 0 before use [ 1404.076628][ T30] audit: type=1400 audit(1764646587.326:1760): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22770 comm="syz.1.4453" [ 1404.777604][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1404.786708][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1406.631366][T22804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4459'. [ 1406.874379][T22806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'. [ 1408.093122][T22812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1408.351270][ T30] audit: type=1326 audit(1764646591.606:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1408.373371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.535104][ T30] audit: type=1326 audit(1764646591.606:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1408.557183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.586837][ T30] audit: type=1326 audit(1764646591.606:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1408.628983][ T30] audit: type=1326 audit(1764646591.616:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1408.652143][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.898233][ T30] audit: type=1326 audit(1764646591.616:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1408.921369][ T30] audit: type=1326 audit(1764646591.616:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1408.943861][ T5911] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1409.289219][ T30] audit: type=1326 audit(1764646591.616:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1409.387407][ T30] audit: type=1326 audit(1764646591.616:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1409.411519][ T30] audit: type=1326 audit(1764646591.616:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1409.467578][ T5911] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1409.518789][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.526820][ T5911] usb 3-1: Product: syz [ 1409.548241][ T30] audit: type=1326 audit(1764646591.616:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22813 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1409.668402][ T5911] usb 3-1: Manufacturer: syz [ 1409.685457][ T5911] usb 3-1: SerialNumber: syz [ 1409.702359][ T5911] usb 3-1: config 0 descriptor?? [ 1409.718294][ T5911] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1411.482022][ T5911] usb 3-1: USB disconnect, device number 24 [ 1413.500924][T22873] usb usb8: usbfs: process 22873 (syz.1.4485) did not claim interface 0 before use [ 1413.511039][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1413.511058][ T30] audit: type=1400 audit(1764646596.756:1835): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22864 comm="syz.1.4485" [ 1413.744620][T22868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1413.757217][T22868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1414.220955][T22879] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4476'. [ 1415.256199][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4477'. [ 1415.356091][T22890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4477'. [ 1416.885197][T22902] netlink: 'syz.4.4481': attribute type 1 has an invalid length. [ 1417.151164][T22902] veth43: entered promiscuous mode [ 1417.209772][T22902] bond23: (slave veth43): Enslaving as a backup interface with a down link [ 1417.290936][T22916] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1418.853489][T22932] bond24: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1418.910275][T22932] bond24 (unregistering): Released all slaves [ 1419.266386][T22944] trusted_key: encrypted_key: insufficient parameters specified [ 1420.809516][T22961] netlink: 'syz.2.4496': attribute type 1 has an invalid length. [ 1420.882044][T22962] netlink: 'syz.5.4497': attribute type 13 has an invalid length. [ 1420.905029][ T5911] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1420.937466][T22961] veth39: entered promiscuous mode [ 1420.944960][T22961] bond12: (slave veth39): Enslaving as a backup interface with a down link [ 1421.063216][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 1421.110194][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1421.120566][ T5911] usb 5-1: config 7 has an invalid interface number: 188 but max is 0 [ 1421.186330][ T5911] usb 5-1: config 7 has no interface number 0 [ 1421.204872][ T5911] usb 5-1: config 7 interface 188 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 1023 [ 1421.275232][ T5911] usb 5-1: config 7 interface 188 has no altsetting 0 [ 1421.286355][ T5911] usb 5-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=73.76 [ 1421.296201][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.304642][ T5911] usb 5-1: Product: syz [ 1421.309164][ T5911] usb 5-1: Manufacturer: syz [ 1421.320687][ T5911] usb 5-1: SerialNumber: syz [ 1421.369721][T22972] usb usb8: usbfs: process 22972 (syz.0.4498) did not claim interface 0 before use [ 1421.417788][ T30] audit: type=1400 audit(1764646604.626:1836): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22965 comm="syz.0.4498" [ 1421.439884][T22970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4497'. [ 1421.453523][T22956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1421.677241][ T5911] rndis_host 5-1:7.188: invalid descriptor buffer length [ 1421.685466][ T5911] usb 5-1: bad CDC descriptors [ 1421.691133][ T5911] cdc_acm 5-1:7.188: invalid descriptor buffer length [ 1421.714743][ T5911] usb 5-1: USB disconnect, device number 23 [ 1421.798456][T12541] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1421.887389][T12541] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1421.894993][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1422.116718][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1422.239649][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1422.367756][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1422.599906][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1423.129252][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.197370][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.205980][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1423.477676][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1423.627523][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1424.037872][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4503'. [ 1425.705018][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4508'. [ 1425.970505][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4509'. [ 1426.232306][T23029] fuse: Unknown parameter ''roup_id' [ 1426.306437][T23030] netlink: 'syz.4.4511': attribute type 12 has an invalid length. [ 1426.322704][T23030] netlink: 'syz.4.4511': attribute type 4 has an invalid length. [ 1426.714451][T23034] could not allocate digest TFM handle md4 [ 1426.815355][T23041] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1426.911106][T11245] net_ratelimit: 23 callbacks suppressed [ 1426.911128][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1427.090871][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1427.231525][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1427.363634][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1427.480513][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1427.597948][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1427.738124][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1427.867708][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1427.997564][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1428.107918][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1428.144245][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4519'. [ 1429.884472][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1429.908864][ T5911] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1430.168798][ T5911] usb 6-1: config 0 has an invalid interface number: 207 but max is 0 [ 1430.196804][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.211976][ T5911] usb 6-1: config 0 has no interface number 0 [ 1430.318515][ T5911] usb 6-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1430.328113][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.372369][ T5911] usb 6-1: Product: syz [ 1430.381383][ T5911] usb 6-1: Manufacturer: syz [ 1430.438573][ T5911] usb 6-1: SerialNumber: syz [ 1430.452834][ T5911] usb 6-1: config 0 descriptor?? [ 1430.462682][ T5911] qmi_wwan 6-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1430.671932][T10539] usb 6-1: USB disconnect, device number 10 [ 1431.546352][T23109] usb usb8: usbfs: process 23109 (syz.1.4529) did not claim interface 0 before use [ 1431.786171][T10539] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1431.970879][T18800] net_ratelimit: 27 callbacks suppressed [ 1431.970896][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1432.078583][T10539] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1432.088194][T10539] usb 5-1: config 3 has an invalid interface number: 19 but max is 0 [ 1432.096299][T10539] usb 5-1: config 3 has an invalid interface number: 4 but max is 0 [ 1432.097947][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1432.105027][T10539] usb 5-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1432.137600][T10539] usb 5-1: config 3 has no interface number 0 [ 1432.151750][T10539] usb 5-1: config 3 has no interface number 1 [ 1432.236045][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1432.358416][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1432.491385][T10539] usb 5-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 1432.502567][T10539] usb 5-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1432.507504][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1432.516350][T10539] usb 5-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 1432.537853][T10539] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 1432.632397][T10539] usb 5-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 1432.685459][T10539] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 1432.715014][T10539] usb 5-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 1432.729012][T10539] usb 5-1: config 3 interface 19 has no altsetting 0 [ 1432.737506][T10539] usb 5-1: config 3 interface 4 has no altsetting 0 [ 1432.746023][T10539] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 1432.755566][T10539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.763596][T10539] usb 5-1: Product: syz [ 1432.767789][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1432.783309][T10539] usb 5-1: Manufacturer: syz [ 1432.826097][T10539] usb 5-1: SerialNumber: syz [ 1432.877801][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1432.966588][T23124] usb usb8: usbfs: process 23124 (syz.0.4535) did not claim interface 0 before use [ 1432.976229][ T30] audit: type=1400 audit(1764646616.226:1837): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23118 comm="syz.0.4535" [ 1433.014976][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1433.129099][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1433.130870][T10539] pl2303 5-1:3.19: required endpoints missing [ 1433.179616][T10539] pl2303 5-1:3.4: required interrupt-in endpoint missing [ 1433.227829][T10539] usb 5-1: USB disconnect, device number 24 [ 1433.289531][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1434.481329][T23134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4537'. [ 1435.754376][T23147] trusted_key: encrypted_key: insufficient parameters specified [ 1437.060179][T12541] net_ratelimit: 24 callbacks suppressed [ 1437.060201][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1437.073812][T10539] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 1437.224475][T23166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4543'. [ 1437.262482][T23164] usb usb8: usbfs: process 23164 (syz.2.4544) did not claim interface 0 before use [ 1437.329877][T10539] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1437.338966][T10539] usb 5-1: config 1 has an invalid interface number: 181 but max is 0 [ 1437.348620][T10539] usb 5-1: config 1 has no interface number 0 [ 1437.360547][T10539] usb 5-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 1437.371606][T10539] usb 5-1: config 1 interface 181 has no altsetting 0 [ 1437.384030][T10539] usb 5-1: string descriptor 0 read error: -22 [ 1437.391279][T10539] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 1437.401855][T10539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.437420][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1437.478658][T10539] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1437.557450][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1437.706317][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1437.731356][T18800] usb 5-1: Failed to submit usb control message: -71 [ 1437.738776][ T5914] usb 5-1: USB disconnect, device number 25 [ 1437.762537][T18800] usb 5-1: unable to send the bmi data to the device: -71 [ 1437.777509][T18800] usb 5-1: unable to get target info from device [ 1437.784557][T18800] usb 5-1: could not get target info (-71) [ 1437.790590][T18800] usb 5-1: could not probe fw (-71) [ 1437.925647][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1438.240026][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1438.359764][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1438.479591][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1438.588072][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1438.707856][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1438.790941][T23188] usb usb8: usbfs: process 23188 (syz.2.4549) did not claim interface 0 before use [ 1438.801327][ T30] audit: type=1400 audit(1764646622.046:1838): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23180 comm="syz.2.4549" [ 1439.460442][T23199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4553'. [ 1440.417679][T10539] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1440.607399][T10539] usb 5-1: Using ep0 maxpacket: 8 [ 1440.742868][T10539] usb 5-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 1440.754299][T10539] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1440.770098][T10539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.799207][T10539] usb 5-1: config 0 descriptor?? [ 1440.819844][T10539] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 1440.835660][T10539] uvcvideo 5-1:0.0: No valid video chain found. [ 1441.192189][T22655] usb 5-1: USB disconnect, device number 26 [ 1442.068187][T12541] net_ratelimit: 25 callbacks suppressed [ 1442.068208][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1442.198601][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1442.317463][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1442.525411][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1442.657450][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1442.701634][T23246] usb usb8: usbfs: process 23246 (syz.4.4569) did not claim interface 0 before use [ 1442.767391][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1442.914621][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1443.027609][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1443.221272][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1443.403675][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1444.749361][T23297] netdevsim netdevsim4 : renamed from netdevsim0 [ 1444.947421][T22655] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1445.119499][T22655] usb 2-1: Using ep0 maxpacket: 32 [ 1445.272457][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4592'. [ 1445.286524][T22655] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1445.295572][T22655] usb 2-1: config 0 has no interface number 0 [ 1445.308455][T22655] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1445.323446][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4595'. [ 1445.338673][T22655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.338700][T22655] usb 2-1: Product: syz [ 1445.338713][T22655] usb 2-1: Manufacturer: syz [ 1445.338727][T22655] usb 2-1: SerialNumber: syz [ 1445.406028][T22655] usb 2-1: config 0 descriptor?? [ 1445.466582][T22655] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1445.910441][T22655] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1446.001743][T22655] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1447.134335][T18802] net_ratelimit: 29 callbacks suppressed [ 1447.134356][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1447.372023][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1447.500764][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1447.619112][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1447.764013][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1447.889045][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1448.117582][ T30] audit: type=1400 audit(1764646631.306:1839): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23337 comm="syz.0.4600" [ 1448.177204][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1448.349845][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1448.424085][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1448.448408][T22655] usb 2-1: USB disconnect, device number 7 [ 1448.466455][T22655] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1448.492040][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1448.533224][T22655] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1448.620864][T22655] quatech2 2-1:0.51: device disconnected [ 1448.637569][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1449.198476][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1449.557814][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4612'. [ 1450.980147][T23400] usb usb8: usbfs: process 23400 (syz.2.4619) did not claim interface 0 before use [ 1451.214570][T23399] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4621'. [ 1451.730135][T23418] netlink: 'syz.1.4629': attribute type 1 has an invalid length. [ 1452.002599][T23415] veth51: entered promiscuous mode [ 1452.157585][T18802] net_ratelimit: 26 callbacks suppressed [ 1452.157599][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1452.287687][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1452.480166][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1452.501585][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4631'. [ 1452.798187][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1452.997532][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1453.151010][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1453.277435][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1453.398224][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1453.527367][T22655] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1453.535228][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1453.657451][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1453.718485][T22655] usb 5-1: Using ep0 maxpacket: 16 [ 1453.789359][T22655] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1453.798439][T22655] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.912422][T22655] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1453.937449][T22655] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1453.967030][T22655] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1453.976647][T22655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.994156][T22655] usb 5-1: Product: syz [ 1454.007381][T22655] usb 5-1: Manufacturer: syz [ 1454.027705][T22655] usb 5-1: SerialNumber: syz [ 1454.442184][T22655] usb 5-1: USB disconnect, device number 27 [ 1454.486977][T23457] netlink: 'syz.1.4640': attribute type 10 has an invalid length. [ 1454.544680][T23457] batadv0: left promiscuous mode [ 1454.555295][T23457] batadv0: left allmulticast mode [ 1454.574462][T23457] netlink: 'syz.1.4640': attribute type 10 has an invalid length. [ 1454.584944][T23457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4640'. [ 1454.596929][T23457] batadv0: entered promiscuous mode [ 1454.624883][T23457] batadv0: entered allmulticast mode [ 1455.124285][T23469] netlink: 252 bytes leftover after parsing attributes in process `syz.5.4645'. [ 1456.634323][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4651'. [ 1456.775995][T23497] usb usb8: usbfs: process 23497 (syz.1.4652) did not claim interface 0 before use [ 1457.279879][ T60] net_ratelimit: 30 callbacks suppressed [ 1457.279895][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1457.461490][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1457.629955][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1457.747620][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1457.867511][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1457.987411][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1458.146125][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1458.266291][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1458.329285][T23519] netlink: 'syz.2.4662': attribute type 1 has an invalid length. [ 1458.634399][T23527] veth41: entered promiscuous mode [ 1458.812492][T23527] bond13: (slave veth41): Enslaving as a backup interface with a down link [ 1458.847863][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1458.890711][T23529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4661'. [ 1459.017382][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1460.387932][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4678'. [ 1461.213690][T23585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4680'. [ 1462.299910][T12976] net_ratelimit: 26 callbacks suppressed [ 1462.299926][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1462.447405][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1462.557852][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1462.667436][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1462.809579][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1462.918398][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1463.027398][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1463.137463][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1463.247366][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1463.360876][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1464.188589][T23651] usb usb8: usbfs: process 23651 (syz.4.4706) did not claim interface 0 before use [ 1464.227525][ T5914] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1464.379545][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1464.399045][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1464.430344][ T5914] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1464.467663][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.502246][ T5914] usb 2-1: Product: syz [ 1464.516737][ T5914] usb 2-1: Manufacturer: syz [ 1464.528516][ T5914] usb 2-1: SerialNumber: syz [ 1464.546312][ T5914] usb 2-1: config 0 descriptor?? [ 1464.920051][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4719'. [ 1465.094898][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4720'. [ 1465.139517][ T5914] usb 2-1: USB disconnect, device number 8 [ 1465.282781][ T6414] udevd[6414]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1466.151897][T22655] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1466.170084][ T5914] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1466.354999][ T5914] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1466.357349][T22655] usb 3-1: Using ep0 maxpacket: 32 [ 1466.363666][ T5914] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1466.379083][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1466.389513][ T5914] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1466.399739][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1466.408508][ T5914] usb 5-1: Product: syz [ 1466.413156][ T5914] usb 5-1: Manufacturer: syz [ 1466.421708][T22655] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1466.436240][T22655] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1466.444920][T22655] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1466.475944][T22655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.537442][ T5914] usb 5-1: SerialNumber: syz [ 1466.544493][T22655] usb 3-1: config 0 descriptor?? [ 1466.552887][ T5914] usb 5-1: config 0 descriptor?? [ 1466.590194][ T5914] hub 5-1:0.0: bad descriptor, ignoring hub [ 1466.597973][ T5914] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1466.629680][ T5914] usb 5-1: selecting invalid altsetting 0 [ 1466.868523][ T5914] usb 5-1: USB disconnect, device number 28 [ 1467.124309][T22655] hid-rmi 0003:0461:4E72.0042: hidraw0: USB HID v0.02 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 1467.332952][ T60] net_ratelimit: 33 callbacks suppressed [ 1467.332967][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1467.460289][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1467.497524][ T5914] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1467.522766][ T6414] udevd[6414]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1467.553159][T22655] usb 3-1: USB disconnect, device number 25 [ 1467.587439][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1467.669210][ T5914] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1467.698187][ T5914] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1467.711425][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1467.747421][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1467.781327][ T5914] usb 5-1: string descriptor 0 read error: -22 [ 1467.812689][ T5914] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1467.814731][T23708] fido_id[23708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1467.848229][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1467.871687][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1467.928677][ T5914] usb 5-1: config 0 descriptor?? [ 1467.957438][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1467.978853][ T5914] hub 5-1:0.0: bad descriptor, ignoring hub [ 1467.997849][ T5914] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1468.032032][ T5914] usb 5-1: selecting invalid altsetting 0 [ 1468.070106][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1468.171587][T23720] macvlan0: entered promiscuous mode [ 1468.184673][T23720] netlink: 'syz.2.4736': attribute type 1 has an invalid length. [ 1468.198636][T23720] netlink: 'syz.2.4736': attribute type 2 has an invalid length. [ 1468.199122][ T5914] usb 5-1: USB disconnect, device number 29 [ 1468.218208][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1468.337550][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1468.377751][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4734'. [ 1468.387466][T22655] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1468.465271][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1468.630002][T22655] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1468.659691][T22655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.677474][T22655] usb 2-1: config 0 descriptor?? [ 1468.697600][T22655] cp210x 2-1:0.0: cp210x converter detected [ 1469.092440][T22655] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1469.103981][T22655] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1469.304657][T22655] usb 2-1: USB disconnect, device number 9 [ 1469.315333][T22655] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1469.365493][T22655] cp210x 2-1:0.0: device disconnected [ 1469.509049][T23742] usb usb8: usbfs: process 23742 (syz.0.4742) did not claim interface 0 before use [ 1470.130787][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4749'. [ 1470.287514][T22655] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1470.469148][T22655] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.479585][T22655] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.518510][T22655] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1470.537661][T22655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1470.545716][T22655] usb 2-1: SerialNumber: syz [ 1470.664321][T23774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4754'. [ 1470.813054][T22655] usb 2-1: 0:2 : does not exist [ 1470.999388][T22655] usb 2-1: USB disconnect, device number 10 [ 1471.073395][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1471.738546][ T30] audit: type=1400 audit(1764646654.996:1840): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23782 comm="syz.5.4758" [ 1471.742007][T23791] usb usb8: usbfs: process 23791 (syz.5.4758) did not claim interface 0 before use [ 1472.359102][T18802] net_ratelimit: 30 callbacks suppressed [ 1472.359125][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1472.456059][T23801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4762'. [ 1472.477781][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1472.587515][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1472.698621][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1472.827452][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1472.907408][ T5911] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1472.937795][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1473.076296][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 1473.100658][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1473.111360][ T5911] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1473.123196][ T5911] usb 5-1: string descriptor 0 read error: -22 [ 1473.129671][ T5911] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1473.148695][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1473.163529][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.194088][ T5911] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1473.225381][ T5911] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1473.261601][ T5911] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1473.289917][ T5911] usb 5-1: media controller created [ 1473.391842][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1473.393813][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1473.429996][ T5911] zl10353_read_register: readreg error (reg=127, ret==0) [ 1473.527596][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1473.615975][ T5911] usb 5-1: USB disconnect, device number 30 [ 1473.637386][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1473.687647][T22655] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1473.838837][T22655] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1473.847151][T22655] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1473.860204][T22655] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1473.872115][T22655] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1473.895923][T22655] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1473.918998][T22655] usb 1-1: Product: syz [ 1473.924016][T22655] usb 1-1: Manufacturer: syz [ 1473.929852][T22655] usb 1-1: SerialNumber: syz [ 1473.938528][T22655] usb 1-1: config 0 descriptor?? [ 1473.945309][T22655] hub 1-1:0.0: bad descriptor, ignoring hub [ 1473.954100][T22655] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1473.969716][T22655] usb 1-1: selecting invalid altsetting 0 [ 1474.250514][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1474.269691][T23834] tap0: tun_chr_ioctl cmd 2147767521 [ 1474.935987][T23820] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 1475.214972][T23820] usb 1-1: device firmware changed [ 1475.225368][T22655] usb 1-1: USB disconnect, device number 23 [ 1475.566632][T22655] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1476.071236][T22655] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1476.089834][T22655] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1476.157926][T22655] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1476.170459][T22655] usb 1-1: string descriptor 0 read error: -22 [ 1476.176988][T22655] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1476.216285][T22655] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1476.266201][T22655] usb 1-1: config 0 descriptor?? [ 1476.285552][T22655] hub 1-1:0.0: bad descriptor, ignoring hub [ 1476.310233][T23871] usb usb8: usbfs: process 23871 (syz.2.4787) did not claim interface 0 before use [ 1476.322969][T22655] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1476.344092][T22655] usb 1-1: selecting invalid altsetting 0 [ 1476.627696][ T5911] usb 1-1: USB disconnect, device number 24 [ 1476.878942][T23885] netlink: 'syz.1.4795': attribute type 1 has an invalid length. [ 1477.084473][T23885] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1477.458931][ T60] net_ratelimit: 30 callbacks suppressed [ 1477.458951][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1477.527995][ T5911] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1477.593001][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1477.746451][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1477.777388][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 1477.808088][ T5911] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1477.848969][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.860482][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1477.929489][ T5911] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1477.944585][ T5911] pvrusb2: ********** [ 1477.956500][ T5911] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1477.977461][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1478.001097][ T5911] pvrusb2: Important functionality might not be entirely working. [ 1478.021035][ T5911] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1478.045099][ T5911] pvrusb2: ********** [ 1478.107474][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1478.124261][ T2344] pvrusb2: Invalid write control endpoint [ 1478.220001][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1478.301467][ T2344] pvrusb2: Invalid write control endpoint [ 1478.320214][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1478.348011][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1478.410700][T22655] usb 3-1: USB disconnect, device number 26 [ 1478.412696][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1478.469624][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1478.507618][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1478.507705][ T2344] pvrusb2: Device being rendered inoperable [ 1478.522566][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1478.530104][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1478.544595][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1478.557371][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1478.568959][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1478.639995][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1478.896433][T23944] usb usb8: usbfs: process 23944 (syz.4.4814) did not claim interface 0 before use [ 1478.977396][ T30] audit: type=1400 audit(1764646662.156:1841): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23931 comm="syz.4.4814" [ 1480.721688][T23981] netlink: 'syz.4.4831': attribute type 1 has an invalid length. [ 1480.808926][T23981] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1481.108908][T22655] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1481.279392][T22655] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1481.288110][T22655] usb 3-1: config 0 has no interface number 0 [ 1481.295549][T22655] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1481.322402][T22655] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1481.345599][T22655] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1481.413277][T22655] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1481.455641][T22655] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1481.487094][T22655] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1481.525648][T22655] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1481.545469][T22655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.583012][T22655] usb 3-1: config 0 descriptor?? [ 1481.608134][T23985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1481.615620][T23985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1481.641137][T22655] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1481.727519][ T5911] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1481.866717][T22655] usb 3-1: USB disconnect, device number 27 [ 1481.867417][ T5927] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1481.913175][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1481.947635][T22655] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1481.958474][ T5911] usb 6-1: config 4 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1481.982248][ T5911] usb 6-1: config 4 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.993823][ T5911] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1482.023254][ T5911] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1482.033129][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.109248][ T5927] usb 5-1: config 0 has no interfaces? [ 1482.115274][ T5927] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1482.125011][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.139263][ T5927] usb 5-1: config 0 descriptor?? [ 1482.483525][T12976] net_ratelimit: 30 callbacks suppressed [ 1482.483547][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1482.538599][T24005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.552218][ T30] audit: type=1326 audit(1764646665.806:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1482.579910][T24005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.603135][T22655] usb 5-1: USB disconnect, device number 31 [ 1482.613959][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1482.671391][ T5911] holtek_mouse 0003:04D9:A067.0043: unknown main item tag 0x0 [ 1482.674844][ T30] audit: type=1326 audit(1764646665.806:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1482.679501][ T5911] holtek_mouse 0003:04D9:A067.0043: unknown main item tag 0x3 [ 1482.757495][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1482.810205][ T30] audit: type=1326 audit(1764646665.926:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1482.852578][ T30] audit: type=1326 audit(1764646665.926:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1482.856871][ T5911] holtek_mouse 0003:04D9:A067.0043: unknown main item tag 0x3 [ 1482.874955][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1482.882804][ T30] audit: type=1326 audit(1764646665.926:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1482.914762][ T30] audit: type=1326 audit(1764646665.926:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1482.938036][ T30] audit: type=1326 audit(1764646665.936:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1482.965527][ T30] audit: type=1326 audit(1764646665.936:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1482.988213][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1482.997039][ T30] audit: type=1326 audit(1764646665.936:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24016 comm="syz.2.4845" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1483.047398][ T5911] holtek_mouse 0003:04D9:A067.0043: item fetching failed at offset 4/8 [ 1483.077804][ T5911] holtek_mouse 0003:04D9:A067.0043: hid parse failed: -22 [ 1483.085851][ T5911] holtek_mouse 0003:04D9:A067.0043: probe with driver holtek_mouse failed with error -22 [ 1483.097441][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1483.113828][ T5911] usb 6-1: USB disconnect, device number 11 [ 1483.188059][T22655] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1483.207454][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1483.317531][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1483.367585][T22655] usb 5-1: Using ep0 maxpacket: 16 [ 1483.378747][T22655] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1483.397419][T22655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1483.449433][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1483.557424][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1483.565595][T22655] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1483.607233][T22655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.676391][T22655] usb 5-1: Product: syz [ 1483.692035][T22655] usb 5-1: Manufacturer: syz [ 1483.703212][T22655] usb 5-1: SerialNumber: syz [ 1483.729869][T22655] usb 5-1: config 0 descriptor?? [ 1483.759585][T22655] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input119 [ 1483.786610][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.794037][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.803364][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.810776][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.818279][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.825611][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.832950][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.840304][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.848542][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.855888][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.863583][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.871366][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.879106][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.886436][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.893905][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.901260][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.908581][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.915855][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.923169][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.930573][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.937952][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.945242][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.952572][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.959901][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.967230][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.974622][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.981991][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.989345][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1483.996649][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.004018][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.011347][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.018642][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.025920][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.033200][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.040517][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.047811][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.055120][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.062447][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.069797][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.077131][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.084525][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.092014][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.100209][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.107560][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.115023][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.122349][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.129692][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.137030][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.144366][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.151728][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.159036][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.166378][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.173714][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.181053][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.188435][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.188462][ T5183] usb 5-1: control msg error: -71 [ 1484.195796][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.208811][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.216132][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.223541][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.230876][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.238214][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.245549][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.253074][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.260424][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.269343][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.276606][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1484.298090][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.305546][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.315094][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.325083][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.333123][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.340718][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.348302][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.355779][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.363406][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.371047][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.378599][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.386116][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.397387][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.404757][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.412081][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.419445][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.426800][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.434117][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.441810][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.449222][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.456747][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.457439][ T5183] usb 5-1: control msg error: -71 [ 1484.464098][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.477371][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.484723][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.492607][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.504400][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.511010][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.511922][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.518014][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.526788][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.531965][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1484.540839][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.555091][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.562423][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.569802][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.577138][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.584344][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1484.608726][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.617918][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.626934][T24041] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1484.627331][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.644616][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.648112][T24041] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1484.652358][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.669103][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.676404][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.683773][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.691049][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.698319][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.705596][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.713199][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.720478][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.727793][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.735094][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.742418][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.749766][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.757120][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.764431][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.771766][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.779132][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.786424][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.793844][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.801527][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.809003][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.816289][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.823587][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.830897][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.838243][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.845555][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.852883][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.860278][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.867594][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.874907][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.882231][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.889809][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.897133][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.904435][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.911803][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.919161][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.926634][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.933921][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.941248][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.948592][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.955894][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.963202][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.970543][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.977831][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.985206][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.992557][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1484.999889][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.007190][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.014495][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.021790][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.029270][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.036633][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.043937][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.051275][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.058570][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.065851][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.073154][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.080465][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.087858][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.095217][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.102566][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.115169][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.120375][ T5183] usb 5-1: control msg error: -71 [ 1485.124407][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.136014][T22655] usb 5-1: USB disconnect, device number 32 [ 1485.142254][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1485.142279][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19 [ 1485.663479][T24050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1486.187775][T24060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4863'. [ 1486.223396][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4872'. [ 1486.278423][T24064] usb usb8: usbfs: process 24064 (syz.2.4862) did not claim interface 0 before use [ 1486.443091][T24062] bridge_slave_1 (unregistering): left promiscuous mode [ 1486.470293][T24062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.878788][T24090] netlink: 'syz.5.4877': attribute type 1 has an invalid length. [ 1486.943724][T24090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1487.570700][T18800] net_ratelimit: 24 callbacks suppressed [ 1487.570722][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1487.660081][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4880'. [ 1487.727606][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1487.858075][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1488.014990][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1488.090483][T24119] usb usb8: usbfs: process 24119 (syz.1.4885) did not claim interface 0 before use [ 1488.138954][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1488.170366][ T30] audit: type=1400 audit(1764646671.346:1851): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24113 comm="syz.1.4885" [ 1488.354972][T24124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1488.362358][T24124] IPv6: NLM_F_CREATE should be set when creating new route [ 1488.369630][T24124] IPv6: NLM_F_CREATE should be set when creating new route [ 1488.376909][T24124] IPv6: NLM_F_CREATE should be set when creating new route [ 1488.406958][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1488.540116][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1488.657941][T24127] netlink: 'syz.5.4889': attribute type 1 has an invalid length. [ 1488.855975][T24127] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1488.867420][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1488.977374][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1489.101543][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1489.592718][T24137] usb usb8: usbfs: process 24137 (syz.0.4891) did not claim interface 0 before use [ 1490.455533][T24166] netlink: 'syz.5.4902': attribute type 4 has an invalid length. [ 1490.509870][T24170] netlink: 'syz.5.4902': attribute type 4 has an invalid length. [ 1490.627840][T24172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4903'. [ 1492.161920][T24198] usb usb8: usbfs: process 24198 (syz.4.4911) did not claim interface 0 before use [ 1492.639148][T18800] net_ratelimit: 26 callbacks suppressed [ 1492.639163][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1492.760647][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1492.887834][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1493.007675][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1493.117680][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1493.227417][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1493.337725][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1493.448020][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1493.557372][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1493.667557][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1495.251167][T24260] usb usb8: usbfs: process 24260 (syz.1.4930) did not claim interface 0 before use [ 1495.260846][ T30] audit: type=1400 audit(1764646678.506:1852): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24248 comm="syz.1.4930" [ 1495.740547][T22655] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1495.909015][T22655] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1495.918079][T22655] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1495.952859][T22655] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1495.978156][T22655] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1496.088139][T22655] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1496.150550][T22655] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1496.185411][T24270] usb usb8: usbfs: process 24270 (syz.2.4935) did not claim interface 0 before use [ 1496.194975][ T30] audit: type=1400 audit(1764646679.446:1853): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24266 comm="syz.2.4935" [ 1496.246353][T22655] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1496.256753][T22655] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1496.275956][T22655] usb 1-1: Product: syz [ 1496.289133][T22655] usb 1-1: Manufacturer: syz [ 1496.310847][T24265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1496.319737][T22655] cdc_wdm 1-1:1.0: skipping garbage [ 1496.360086][T22655] cdc_wdm 1-1:1.0: skipping garbage [ 1496.397134][T22655] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1496.403989][T22655] cdc_wdm 1-1:1.0: Unknown control protocol [ 1496.590591][ C0] wdm_int_callback: 2 callbacks suppressed [ 1496.590616][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1496.603028][ C0] wdm_int_callback: 2 callbacks suppressed [ 1496.603043][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1496.615130][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1496.621730][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1496.627988][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1496.634588][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1496.640835][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1496.642553][ T5911] usb 1-1: USB disconnect, device number 25 [ 1496.647438][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1496.647459][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1497.721835][T12541] net_ratelimit: 31 callbacks suppressed [ 1497.721856][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1497.934091][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1498.071036][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1498.210039][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1498.340089][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1498.477661][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1498.597412][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1498.707380][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1498.817368][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1498.947494][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1499.042884][T24321] usb usb8: usbfs: process 24321 (syz.0.4951) did not claim interface 0 before use [ 1499.078467][ T30] audit: type=1400 audit(1764646682.306:1854): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24313 comm="syz.0.4951" [ 1501.082799][T24377] usb usb8: usbfs: process 24377 (syz.5.4976) did not claim interface 0 before use [ 1501.130323][ T30] audit: type=1400 audit(1764646684.336:1855): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24372 comm="syz.5.4976" [ 1501.421883][T24385] usb usb8: usbfs: process 24385 (syz.1.4977) did not claim interface 0 before use [ 1501.484626][ T30] audit: type=1400 audit(1764646684.686:1856): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24378 comm="syz.1.4977" [ 1502.851845][T12541] net_ratelimit: 32 callbacks suppressed [ 1502.851865][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1503.074951][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1503.157027][T24426] usb usb8: usbfs: process 24426 (syz.0.4995) did not claim interface 0 before use [ 1503.187743][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1503.195528][ T30] audit: type=1400 audit(1764646686.416:1857): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24421 comm="syz.0.4995" [ 1503.320674][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1503.522186][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1503.668717][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1503.765747][ T30] audit: type=1400 audit(1764646687.026:1858): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24423 comm="syz.4.4994" [ 1503.865394][T24432] usb usb8: usbfs: process 24432 (syz.4.4994) did not claim interface 0 before use [ 1503.905457][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1504.034727][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1504.168572][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1504.377570][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1504.526478][T24445] usb usb8: usbfs: process 24445 (syz.5.4998) did not claim interface 0 before use [ 1504.572845][ T30] audit: type=1400 audit(1764646687.776:1859): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24440 comm="syz.5.4998" [ 1506.753240][T24485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5013'. [ 1507.848764][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880203b0800: rx timeout, send abort [ 1507.859340][T12541] net_ratelimit: 28 callbacks suppressed [ 1507.859360][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1507.860136][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880203b0800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1507.968593][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1508.107559][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1508.233057][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1508.312036][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5028'. [ 1508.348190][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1508.458867][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1508.577391][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1508.690237][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1508.871146][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1509.027703][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1509.270604][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5036'. [ 1509.635584][T24553] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5040'. [ 1509.683686][T24553] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5040'. [ 1509.690754][ T5911] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1509.938149][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 1509.989204][ T5911] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1509.999802][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.008703][ T5911] usb 5-1: Product: syz [ 1510.013012][ T5911] usb 5-1: Manufacturer: syz [ 1510.018572][ T5911] usb 5-1: SerialNumber: syz [ 1510.029579][ T5911] usb 5-1: config 0 descriptor?? [ 1510.240560][ T5911] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1510.796216][T24581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5049'. [ 1511.353430][ T5911] gspca_sunplus: reg_w_riv err -71 [ 1511.358849][ T5911] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1511.377634][ T5911] usb 5-1: USB disconnect, device number 33 [ 1512.728488][T24618] usb usb8: usbfs: process 24618 (syz.1.5059) did not claim interface 0 before use [ 1512.738505][ T30] audit: type=1400 audit(1764646695.986:1860): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24614 comm="syz.1.5059" [ 1512.757965][ C1] vkms_vblank_simulate: vblank timer overrun [ 1512.983711][ T60] net_ratelimit: 28 callbacks suppressed [ 1512.983732][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1513.109297][T22655] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1513.209444][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1513.277398][T22655] usb 1-1: Using ep0 maxpacket: 8 [ 1513.284433][T22655] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1513.294699][T22655] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1513.310204][T22655] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1513.328416][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1513.340085][T22655] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1513.373822][T22655] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1513.416132][T22655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.437956][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1513.577408][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1513.697481][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1513.711301][T22655] usb 1-1: GET_CAPABILITIES returned 0 [ 1513.716915][T22655] usbtmc 1-1:16.0: can't read capabilities [ 1513.844262][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1513.921968][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1513.931450][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1513.940572][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1513.949643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1513.968151][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1513.977237][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1513.986299][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1513.995353][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.004405][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.013465][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.022499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1514.034427][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1514.044910][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.053992][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.063047][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.072107][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.081161][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.090239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1514.098277][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.107345][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1514.151565][ T5927] usb 1-1: USB disconnect, device number 26 [ 1514.159528][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1514.277397][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1514.398666][T24640] vivid-000: disconnect [ 1514.413779][T24639] vivid-000: reconnect [ 1514.847663][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1515.576069][T24683] usb usb8: usbfs: process 24683 (syz.0.5080) did not claim interface 0 before use [ 1515.673242][T24687] usb usb8: usbfs: process 24687 (syz.2.5083) did not claim interface 0 before use [ 1515.698450][ T30] audit: type=1400 audit(1764646698.936:1861): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24679 comm="syz.2.5083" [ 1516.890105][T24699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5089'. [ 1517.026264][ T30] audit: type=1326 audit(1764646700.286:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.5.5091" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0 [ 1517.977423][T10539] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1518.090266][T12976] net_ratelimit: 30 callbacks suppressed [ 1518.090280][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1518.153884][T10539] usb 5-1: Using ep0 maxpacket: 8 [ 1518.202109][T10539] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1518.257389][T10539] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1518.281990][T10539] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1518.292156][T10539] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1518.345930][T10539] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1518.366183][T10539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.377758][T24744] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1518.417583][ T31] INFO: task kworker/0:2:89 blocked for more than 143 seconds. [ 1518.437412][ T31] Not tainted syzkaller #0 [ 1518.462739][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1518.471476][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1518.517413][ T31] task:kworker/0:2 state:D stack:19624 pid:89 tgid:89 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1518.560671][ T31] Workqueue: usb_hub_wq hub_event [ 1518.577232][ T31] Call Trace: [ 1518.590793][ T31] [ 1518.600813][ T31] __schedule+0x1798/0x4cc0 [ 1518.610090][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1518.619311][T10539] usb 5-1: GET_CAPABILITIES returned 0 [ 1518.627463][T10539] usbtmc 5-1:16.0: can't read capabilities [ 1518.637409][ T31] ? __pfx___schedule+0x10/0x10 [ 1518.667901][ T31] ? schedule+0x91/0x360 [ 1518.692688][ T31] schedule+0x165/0x360 [ 1518.717483][ T31] schedule_preempt_disabled+0x13/0x30 [ 1518.729170][ T31] __mutex_lock+0x7e6/0x1350 [ 1518.734994][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1518.741124][ T31] ? hub_event+0x21e5/0x4a20 [ 1518.747388][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1518.755068][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1518.761408][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1518.771352][ T31] hub_event+0x21e5/0x4a20 [ 1518.775882][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1518.786053][ T31] ? __pfx_hub_event+0x10/0x10 [ 1518.807676][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1518.813623][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1518.823646][T10539] usb 5-1: USB disconnect, device number 34 [ 1518.850230][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1518.857389][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1518.862417][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1518.874560][ T31] process_scheduled_works+0xae1/0x17b0 [ 1518.884782][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1518.892264][ T31] worker_thread+0x8a0/0xda0 [ 1518.896964][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1518.908845][ T31] ? __kthread_parkme+0x7b/0x200 [ 1518.914985][ T31] kthread+0x711/0x8a0 [ 1518.926130][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1518.936224][ T31] ? __pfx_kthread+0x10/0x10 [ 1518.944295][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1518.952566][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1518.960208][ T31] ? __pfx_kthread+0x10/0x10 [ 1518.967117][ T31] ret_from_fork+0x4bc/0x870 [ 1518.977545][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1518.985100][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1518.992126][ T31] ? __switch_to_asm+0x39/0x70 [ 1519.000404][ T31] ? __switch_to_asm+0x33/0x70 [ 1519.010504][ T31] ? __pfx_kthread+0x10/0x10 [ 1519.017590][ T31] ret_from_fork_asm+0x1a/0x30 [ 1519.022454][ T31] [ 1519.036091][ T31] [ 1519.036091][ T31] Showing all locks held in the system: [ 1519.044760][ T31] 5 locks held by kworker/1:0/24: [ 1519.050857][ T31] #0: ffff888140a8e148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1519.072638][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1519.086374][ T31] #2: ffff888144ff7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1519.095451][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1519.095858][ T31] #3: ffff888028c87518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1519.112974][ T31] #4: ffff8880287a0468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1519.122883][ T31] 1 lock held by khungtaskd/31: [ 1519.127859][ T31] #0: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1519.137902][ T31] 5 locks held by kworker/0:2/89: [ 1519.142972][ T31] #0: ffff888140a8e148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1519.154497][ T31] #1: ffffc900025cfba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1519.166920][ T31] #2: ffff888145732198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1519.176359][ T31] #3: ffff888145735518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1519.188291][ T31] #4: ffff888028c67268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1519.198248][ T31] 2 locks held by getty/5588: [ 1519.202930][ T31] #0: ffff88802fe2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1519.214940][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1519.222444][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1519.232765][ T31] 5 locks held by kworker/1:1/14867: [ 1519.238173][ T31] #0: ffff888140a8e148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1519.249550][ T31] #1: ffffc9000b76fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1519.261489][ T31] #2: ffff888028da7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1519.270651][ T31] #3: ffff88814530a518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1519.280887][ T31] #4: ffff888028c67268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1519.291060][ T31] [ 1519.293407][ T31] ============================================= [ 1519.293407][ T31] [ 1519.305218][ T31] NMI backtrace for cpu 0 [ 1519.305244][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1519.305268][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1519.305277][ T31] Call Trace: [ 1519.305284][ T31] [ 1519.305291][ T31] dump_stack_lvl+0x189/0x250 [ 1519.305316][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1519.305329][ T31] ? __pfx__printk+0x10/0x10 [ 1519.305345][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1519.305366][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1519.305381][ T31] ? __pfx__printk+0x10/0x10 [ 1519.305392][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1519.305408][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1519.305424][ T31] watchdog+0xf60/0xfa0 [ 1519.305437][ T31] ? watchdog+0x1e2/0xfa0 [ 1519.305450][ T31] kthread+0x711/0x8a0 [ 1519.305464][ T31] ? __pfx_watchdog+0x10/0x10 [ 1519.305474][ T31] ? __pfx_kthread+0x10/0x10 [ 1519.305486][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1519.305497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.305508][ T31] ? __pfx_kthread+0x10/0x10 [ 1519.305520][ T31] ret_from_fork+0x4bc/0x870 [ 1519.305532][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1519.305544][ T31] ? __switch_to_asm+0x39/0x70 [ 1519.305552][ T31] ? __switch_to_asm+0x33/0x70 [ 1519.305560][ T31] ? __pfx_kthread+0x10/0x10 [ 1519.305571][ T31] ret_from_fork_asm+0x1a/0x30 [ 1519.305587][ T31] [ 1519.305610][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1519.336841][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1519.340601][ C1] NMI backtrace for cpu 1 [ 1519.340615][ C1] CPU: 1 UID: 0 PID: 11245 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1519.340632][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1519.340643][ C1] Workqueue: bond2 bond_mii_monitor [ 1519.340674][ C1] RIP: 0010:kasan_save_alloc_info+0x40/0x50 [ 1519.340697][ C1] Code: c1 49 01 c6 0f 94 c0 08 c8 74 09 5b 41 5e c3 cc cc cc cc cc 89 d3 ba 10 00 00 00 4c 89 f7 31 f6 e8 d5 6e 22 09 4c 89 f7 89 de <5b> 41 5e e9 e8 cd ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 1519.340710][ C1] RSP: 0018:ffffc90000a08988 EFLAGS: 00000246 [ 1519.340723][ C1] RAX: ffff888056eab370 RBX: 0000000000000820 RCX: 0000000000000000 [ 1519.340734][ C1] RDX: 0000000000000000 RSI: 0000000000000820 RDI: ffff888056eab370 [ 1519.340745][ C1] RBP: 0000000000000820 R08: 00000000ffffffff R09: 0000000000000000 [ 1519.340759][ C1] R10: ffff888056eab370 R11: fffffbfff33022b4 R12: 0000000000000801 [ 1519.340769][ C1] R13: 00000000000000f0 R14: ffff888056eab370 R15: 0000000000000001 [ 1519.340780][ C1] FS: 0000000000000000(0000) GS:ffff88812622d000(0000) knlGS:0000000000000000 [ 1519.340793][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1519.340804][ C1] CR2: 00000000f745a068 CR3: 0000000077362000 CR4: 00000000003526f0 [ 1519.340817][ C1] Call Trace: [ 1519.340824][ C1] [ 1519.340832][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1519.340848][ C1] kmem_cache_alloc_node_noprof+0x433/0x710 [ 1519.340871][ C1] ? __alloc_skb+0x112/0x2d0 [ 1519.340888][ C1] ? look_up_lock_class+0x74/0x170 [ 1519.340908][ C1] __alloc_skb+0x112/0x2d0 [ 1519.340926][ C1] mrp_pdu_append_vecattr_event+0x238/0x1710 [ 1519.340945][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1519.340969][ C1] mrp_attr_event+0x164/0x350 [ 1519.340986][ C1] mrp_join_timer+0x57/0x170 [ 1519.341002][ C1] call_timer_fn+0x17e/0x5f0 [ 1519.341017][ C1] ? __pfx_mrp_join_timer+0x10/0x10 [ 1519.341032][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1519.341047][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1519.341065][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1519.341082][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.341104][ C1] ? __pfx_mrp_join_timer+0x10/0x10 [ 1519.341120][ C1] __run_timer_base+0x61a/0x860 [ 1519.341140][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1519.341160][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1519.341186][ C1] run_timer_softirq+0xb7/0x180 [ 1519.341201][ C1] handle_softirqs+0x286/0x870 [ 1519.341218][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1519.341235][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1519.341253][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1519.341274][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1519.341289][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1519.341308][ C1] irq_exit_rcu+0x9/0x30 [ 1519.341322][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1519.341338][ C1] [ 1519.341343][ C1] [ 1519.341349][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1519.341365][ C1] RIP: 0010:vprintk_emit+0x49d/0x590 [ 1519.341383][ C1] Code: 0f 84 34 ff ff ff e8 32 0a 20 00 fb eb 44 e8 2a 0a 20 00 e8 e5 1e a8 09 4d 85 f6 74 94 e8 1b 0a 20 00 fb 48 c7 c7 80 10 f3 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 9b 39 [ 1519.341396][ C1] RSP: 0018:ffffc9001bbd7480 EFLAGS: 00000293 [ 1519.341408][ C1] RAX: ffffffff81a07335 RBX: ffffffff81a0718e RCX: ffff888032b58000 [ 1519.341419][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df31080 [ 1519.341429][ C1] RBP: ffffc9001bbd7590 R08: ffffffff8f7cf277 R09: 1ffffffff1ef9e4e [ 1519.341440][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9e4f R12: 0000000000000000 [ 1519.341451][ C1] R13: 000000000000003a R14: 0000000000000200 R15: 1ffff9200377ae94 [ 1519.341463][ C1] ? vprintk_emit+0x2ee/0x590 [ 1519.341481][ C1] ? vprintk_emit+0x495/0x590 [ 1519.341503][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1519.341528][ C1] _printk+0xcf/0x120 [ 1519.341542][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.341560][ C1] ? __pfx__printk+0x10/0x10 [ 1519.341576][ C1] ? __netdev_printk+0x365/0x4d0 [ 1519.341593][ C1] netdev_warn+0x10a/0x160 [ 1519.341612][ C1] ? __pfx_netdev_warn+0x10/0x10 [ 1519.341630][ C1] ? mutex_is_locked+0x17/0x50 [ 1519.341646][ C1] ? rtnl_is_locked+0x15/0x20 [ 1519.341664][ C1] ? __ethtool_get_link_ksettings+0xe7/0x190 [ 1519.341681][ C1] bond_mii_monitor+0x19ee/0x2e70 [ 1519.341707][ C1] ? __pfx_bond_mii_monitor+0x10/0x10 [ 1519.341724][ C1] ? register_lock_class+0x51/0x320 [ 1519.341748][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1519.341766][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1519.341781][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1519.341796][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1519.341812][ C1] process_scheduled_works+0xae1/0x17b0 [ 1519.341840][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1519.341862][ C1] worker_thread+0x8a0/0xda0 [ 1519.341879][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1519.341899][ C1] ? __kthread_parkme+0x7b/0x200 [ 1519.341919][ C1] kthread+0x711/0x8a0 [ 1519.341938][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1519.341953][ C1] ? __pfx_kthread+0x10/0x10 [ 1519.341972][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1519.341987][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.342002][ C1] ? __pfx_kthread+0x10/0x10 [ 1519.342020][ C1] ret_from_fork+0x4bc/0x870 [ 1519.342037][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1519.342055][ C1] ? __switch_to_asm+0x39/0x70 [ 1519.342067][ C1] ? __switch_to_asm+0x33/0x70 [ 1519.342079][ C1] ? __pfx_kthread+0x10/0x10 [ 1519.342102][ C1] ret_from_fork_asm+0x1a/0x30 [ 1519.342122][ C1] [ 1523.107497][T11245] net_ratelimit: 27 callbacks suppressed [ 1523.107520][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1523.237574][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1523.347433][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1523.457910][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1523.567421][T11245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1523.677457][T18800] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1523.787444][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1523.897395][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1524.007403][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1524.127424][T18802] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1528.177818][T12976] net_ratelimit: 35 callbacks suppressed [ 1528.177840][T12976] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1528.297768][T12541] bond2: (slave ip6gretap2): failed to get link speed/duplex