last executing test programs: 15m41.20193482s ago: executing program 0 (id=682): r0 = socket(0x32, 0x2, 0xe00) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) 15m40.762269494s ago: executing program 0 (id=686): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000100)={0x0, 0x7079, 0x9, 0x40000014, 0x7d}, &(0x7f00000007c0), &(0x7f0000000200)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = syz_io_uring_setup(0xfc9, &(0x7f0000000140)={0x0, 0x3f4d, 0x0, 0x0, 0xfffffffa}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c", 0x7) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x6, 0x10, 0x1, 0x10, 0xfd}, 0x13) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000800)={{r0}, "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"}) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents(r9, 0xffffffffffffffff, 0x5a) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 15m40.069127898s ago: executing program 0 (id=690): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0xf2}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={r3, 0x5}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) sendmsg$unix(r0, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x3}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="5070e33219e379832e7d8a41463d7fd135f50f7733622f7c696214fe9360f3f486fa472fd17162d6", 0x28}], 0x1, 0x0, 0x0, 0x4040815}, 0x2) 15m39.511095355s ago: executing program 0 (id=691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0202000000000000140012800a00010069706f696200000004000280080005002b02"], 0x3c}, 0x1, 0xba01}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x19fb, @empty, 0x75c41ba2}, 0x1c) listen(r1, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040100,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) unshare(0x2020600) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x40025b0c, &(0x7f0000000040)) 15m35.903116151s ago: executing program 0 (id=700): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000100)={0x0, 0x7079, 0x9, 0x40000014, 0x7d}, &(0x7f00000007c0), &(0x7f0000000200)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = syz_io_uring_setup(0xfc9, &(0x7f0000000140)={0x0, 0x3f4d, 0x0, 0x0, 0xfffffffa}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c", 0x7) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x6, 0x10, 0x1, 0x10, 0xfd}, 0x13) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000800)={{r0}, "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"}) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents(r9, 0xffffffffffffffff, 0x5a) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 15m35.414804808s ago: executing program 0 (id=704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x29f, 0x0, 0x1}]}) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b3702b8"], 0x7c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002800400"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_CQM={0x4}]}, 0x2c}}, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close(r4) fcntl$setsig(r3, 0xa, 0x21) munlockall() 15m34.263003645s ago: executing program 32 (id=704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x29f, 0x0, 0x1}]}) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b3702b8"], 0x7c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002800400"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_CQM={0x4}]}, 0x2c}}, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close(r4) fcntl$setsig(r3, 0xa, 0x21) munlockall() 11.560012187s ago: executing program 2 (id=3875): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x2982, 0x0) close(r4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x199182, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x1000002d, 0x12000, 0x299c0, 0x2, 0x395400000000000, 0x3, 0x3, 0xa74a}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ibss_ssid, 0x6, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0xa800) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='V\xc3\xfb\xfb\xb0o', &(0x7f0000000140)='%(/c\xbe\xfbL:\x9e\xa2\xd5\xc6\\\xee\xf1,\n\xc6\t\x00\x00\x00F\xf75`\xaf?\x8d\xec\xf6\xd48\x10#\xe5ah\x9b\x92\xab\xc0\xb2\xcay\x03\xc3\xc8\x89\xb6Lk\xb7\xb9Q\xb6\xbf+\xea\xe9\x1c2G\xb5\xca4\'D \x13\xd6Ss\xab\x8c\x9f\xb1\xcd\xf0A', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/13) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20000000180c2000000000000000074b49c3c2384062c00"/41], 0x0) 8.698004428s ago: executing program 2 (id=3881): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000080)={0x53, 0xb7c6, 0x7fb, {0x6, 0x2}, {0x3, 0x18}, @const={0x9, {0xfffa, 0x5ed1, 0x5, 0x1}}}) socket(0x10, 0x2, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0x74, 0xfffffffd, &(0x7f0000000940)={0xd, "79b8142115db2c05f171f5306c0c14f1e30004335b6e140c0afd2077a025abe98e"}}) 6.688628357s ago: executing program 4 (id=3890): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x8000001e, 0x0, 0x1}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40087446, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = dup(r4) read$FUSE(r5, 0x0, 0x17) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000002c0)='./file0\x00', 0xec0ca2537b9d087b) 6.537690178s ago: executing program 2 (id=3891): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000011000500000000000003000007000000", @ANYRES32, @ANYBLOB="010000000000000014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 6.537317967s ago: executing program 3 (id=3892): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0x0, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x4008004) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read(r7, &(0x7f00000009c0)=""/4096, 0x1000) sendmmsg$alg(r7, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)='t', 0x1}], 0x1, &(0x7f00000004c0)=[@op={0x18}], 0x18, 0x10008000}], 0x1, 0x1) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r8, &(0x7f0000000580)=[{&(0x7f00000003c0)="ff071d6ce89d96666b08e828be032f55097076e40148c200000000fb00000200000000000000", 0x26}, {&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0a38bc757e61b5aab090000000000000051ed697ff263589940cf437f1efae8e2342bb1adc1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab63a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c88dac48e0bbb2af55a35efca697fe5435b19f", 0xdd}, {&(0x7f0000000000)="a9", 0x1}], 0x3) 6.392614425s ago: executing program 4 (id=3894): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket(0xa, 0x3, 0x3a) (async) r1 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x22, "093b683f0472f61a24ad1d4df25e6d7b8453319a3e4ca4b36fe59e443986c2bc8ee7"}}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0xfffffffffffffdf2, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0xfffffffffffffdf2, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000002440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000002440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001740)={0x0, 0x7, 0xf, 0x1}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300008000fbdbdf251c00000020000180140002006c6f000000000000f1ff00000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300008000fbdbdf251c00000020000180140002006c6f000000000000f1ff00000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="9b0f2bbd7000ffdbdf250100000008000280040001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.34357695s ago: executing program 2 (id=3895): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003000000082505a8a44000010203010902"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = fsopen(&(0x7f0000000400)='jffs2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xf7\xed\xe0[\x8c\xaaz\xab\"\xbf\x94\xdb*\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\f2\\wv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\x01\x00\x00\x00\x00\x00\x00\x00\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95fm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EF\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\xef\xfeIN#O\x81R\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++', 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000080)="1b00000018002507b9409b14ffff0b7a0204be0402071405640620", 0x1b, 0x0, 0x0, 0x0) close(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) 6.243499056s ago: executing program 1 (id=3896): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c0001800600060088480000100015002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x4000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c0001800600060088480000100015002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x4000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r1) (async) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x9, {"a2e3ad214fc752f91b2547f70e06d038e7ff7fc6e5539b325d078b089b3b083872090890e0878f0e1ac6e7049b3367959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f00080470ff004002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73580200000000000000f799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f020000000000000065483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c989d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b32749e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a35ddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) 6.052688077s ago: executing program 3 (id=3897): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab23bd7000fdffffff32000000080017015900000008000300f805ee8b672093c3480d006015c7093193d3168fb133706a7a67306f175fc0fb5b4dfd6bc726529d8a969580017204fd2fb069877abde7434aea0164ce233b6a2e85f359f3bdd654b3849043cbadc87ea4187c1565ab31cefd3321f1ab7c2c5ec049dffd0ed775648fbc2c5c40ba7e15965cd904cc8fb17467e1", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8004002280080003004700000008003e00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x200040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x400) splice(r5, 0x0, r6, &(0x7f0000000240)=0x28, 0x8, 0xf) mknodat(r4, &(0x7f0000000200)='./file3\x00', 0x1000, 0x9) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_IO_FLUSHER(0x41, 0x4000000) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x128, 0x14, 0x400, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x71}, [@INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "7bbd8c8f1d886f5f5750e8dbc7a7e0c7aee2817fb006a8bb222014b336b294e1338f871e557bcb8ab980f778e82488805ab464f5100d95ea24587bf51349b680873cf3573c606240961eeec5d94811525b679d88ed4d6e2ff9076aff51a6f0aa96c5f5d41003469e"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "291f914e98262c77c815a3ded5ec3ac9cfdd0c4118392b5abf6c6e3b2a6d826ea7785b5ac7c8e3b3e4c7e55ec63f4c022c36607937725289a915da4d298ed4739a67b9d7ead06818776a5c58d1f06591d303f84ec2a80c455d077b1cf1bd9738fd33d3765dbb"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "4e2246f7869f4bbd2b7017dcbfdbb73bcb7c9377739d2e0cb214f260966a"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "abe16f3637a9586a1867e119efbf41291ebe"}]}, 0x128}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x4000000c}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x60, 0x8, 0x1, 0xfffffffd}]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004005) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) r10 = syz_usb_connect$cdc_ncm(0x6, 0x8d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002020000202505a1a440000102030109027b00e4710431f210c78963e55502475e2b0201c340ff0904000001020d000008240600010a74c905240009042ff9cd41159d70bb99805e6f54b73b000d240f010200000009000200e006241a0900020424025d84e231c3ad62c505240103030c241b07003000fb030800060905810308005b00060904010000020d00000904010102020d00000905"], &(0x7f0000000680)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x2, 0x9, 0xd, 0x20, 0x9}, 0x1d, &(0x7f0000000540)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7f, 0xf0f, 0x80, [0x0, 0xffff00, 0xff0030]}]}, 0x1, [{0xe0, &(0x7f0000000580)=@string={0xe0, 0x3, "70ddc98319f873de050d754e6294509f502c329f49805c97179d4e454bfaaf6cf8f563ba511c3c147529473eea0f4eddc00ca6ccced02c1cd061f90b44ebdccb2c8435940ba8674114339213c152228c141292cfca00f7255b7ed442d3f37b5eb7de618683a574cc3d4ceab724540181ecb6d2106ff4f3d953f28c3d667b3cad50e9c9f4b44e1ca968d47d526a4336f6c2d31ecf5618172f80a7684de611cd6f906ef4e11076137c13cf4aa140b45203c539829865eecd2c18ca05293cc901ad65d4333e43a3bc6de92e68747a50ac2416f45e99c1ac13a0da43d67ecc44"}}]}) syz_usb_disconnect(r10) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000003080)) 5.936987076s ago: executing program 1 (id=3898): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) 5.874594125s ago: executing program 1 (id=3899): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 5.617153094s ago: executing program 1 (id=3900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) io_setup(0x29e, &(0x7f0000000140)=0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r6, 0x400, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x1fd}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x400000) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x601f, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000000c0)={0x1, 0x0, 0xcc, &(0x7f0000000400)=""/204}) setsockopt$inet_int(r8, 0x0, 0x22, &(0x7f0000000080)=0x7, 0x4) r9 = socket$unix(0x1, 0x5, 0x0) r10 = syz_io_uring_setup(0x48a7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r9, 0x0}) io_uring_enter(r10, 0xa3d, 0x0, 0x0, 0x0, 0x0) r13 = eventfd2(0x0, 0x1) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x9, r5, &(0x7f0000000000)="5e00448568", 0x5, 0x0, 0x0, 0x971a2bbfb5f4c835, r13}]) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 5.19466254s ago: executing program 4 (id=3901): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8063b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x9, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x2000, 0x0, 'syz0\x00', 0x0}) 4.789210221s ago: executing program 1 (id=3902): io_uring_setup(0x194a, &(0x7f0000000a80)={0x0, 0xd3d5, 0x0, 0x5, 0x11a}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001002dbd700000080004ed000000", @ANYRES32=0x0, @ANYBLOB="00a2b578174250eaf3b0aa000003000003000021000006004e24000000000000"], 0x38}}, 0x2000c084) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x3, 0x1) ioctl$MON_IOCX_GET(r3, 0x400c9206, &(0x7f0000000240)={0x0, 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000280)=@x86={0xa, 0xf, 0x5, 0x0, 0xce, 0xe, 0x8, 0x1, 0x7c, 0x1, 0x7, 0x2, 0x0, 0x101, 0x9, 0x9, 0x0, 0x3c, 0x3, '\x00', 0xb, 0x42}) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000240)={0x6}) syz_open_procfs(0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) 4.25261572s ago: executing program 5 (id=3905): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000011000500000000000003000007000000", @ANYRES32=r1, @ANYBLOB="010000000000000014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 4.18129779s ago: executing program 4 (id=3906): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="010000000000000014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 4.100301731s ago: executing program 5 (id=3907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x1fd, 0x2c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0x8000000000000000, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffd, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x517, 0x3ff, 0x5, 0x1ff, 0x9, 0x8, 0x7, 0x0, 0x1000000003, 0x2, 0x6, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x800, 0xd49, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x40005c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x8, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xc39d, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffbff, 0x84, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x8, 0x0, 0x6, 0xab6, 0x0, 0x2, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x80000000000006, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0xa, 0x4, 0x6, 0x5, 0x0, 0xd, 0x2, 0x6, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xecd, 0xcc, 0x8, 0x3]}) pipe2$9p(&(0x7f00000000c0), 0x4880) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000580)={0x0, 0x1, 0xfff, 0x0, 0x8, 0x339}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89fd, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r10) 4.0345974s ago: executing program 3 (id=3908): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 3.96762701s ago: executing program 4 (id=3909): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond_slave_1\x00', 0x8}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0xd, 0x8, 0x0, 0xfffffff7, 0x0}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000002140)={0x0, 0x0, 0x7}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) 3.424239944s ago: executing program 1 (id=3910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000ffdbdf25e400000200000000000000ffffffec000000000000000000000000000000000000000000000400000a000020870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff00000000000000000010000000000000000000000000000200000000000000000008"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff000000000000001aa4036c6500000000000000e4ac00000000020000000000000000000000ffffffffffffffff0700"/113], 0xb8}}, 0x10) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff000000000000001aa4036c6500000000000000e4ac00000000020000000000000000000000ffffffffffffffff0700"/113], 0xb8}}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000000000002500000018e700801400020064756d6d79300000654df41100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000000000002500000018e700801400020064756d6d79300000654df41100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r5 = signalfd4(r0, &(0x7f0000000000)={[0x0, 0x401]}, 0x8, 0x800) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) (async) r6 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@delchain={0x740, 0x65, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x4, 0xfff1}, {0x10, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xad}}, @TCA_RATE={0x6, 0x5, {0xba, 0xb9}}, @filter_kind_options=@f_matchall={{0xd}, {0x6a0, 0x2, [@TCA_MATCHALL_ACT={0x69c, 0x2, [@m_connmark={0x104, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0xd3, 0x6, "1b69bc04ce059be8f419ba16f00c873fa71fd95c899220d6b052cf7f57c93bdb7f57ec72b46b13d4801db48457f386d63470153fc0fc7f4b8e3fbbd8216816644662aa2b73b2b50613e6f127e6f0f4e13c9d9ed38351fa887ab0de7d7b301fe86964a22e0738e61be17f382028b757c8ad5d8cda75e8cc08eb983c1534607791543c3ac3fd38b1ff8811a262db51051d22d81f8d3440af2fb7d3bd2ea63f98f224f8cf0363f41c75adb3cfad49301acca1566a5cb94dbaa388364f50ecfa74587172f66f924f8c3ede9c43b354c876"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x74, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x80000000}]}, {0x41, 0x6, "43978c896b9aa3350d7cea8540f63d02c8e3eee1dce17b5582ea75f12238afdd629eec8247494e1c55d4c50055951ff759ab6eaeb856681b681a66e8dd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x154, 0xd, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0x3, 0x2, 0xffff7fff}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x14}}, @TCA_CT_LABELS={0x14, 0x7, "65682c25ba1cb9f48e74c67dfb98f940"}]}, {0xb4, 0x6, "357a4fa26970920f2651a2309143e3045a4da96a8eaaf065eb82effc89919fa02171308b12c049b16f5338a7f3fce5c03f2253b29a4bcedbeabfcb45a798c65025fcdc3704730e545f11dad310e9b90960cdeb7492171e5df57c99f5b56d533b0f7d138e12afe6cbd468de03b87c07d3b04427f36d374390856006c5ecbcca32887dbd5fbcfeb98e666bcbc65778cdf346c9f8fdd55acfbfe686e17e48d070dab6fdac4c642623fb09d9dbe929dc01a1"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x15c, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x7, 0x2, 0xfffffffa}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x6, 0x8, 0xffffffff, 0x800}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3ff, 0x10000000, 0x4, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x9, 0x5, 0x5, 0x2}, 0x3}}]}, {0xb0, 0x6, "1a9dd483ca0814c183b4b2cbbe23e84e1e58382b4aa75976fe79d729eb76fe6b197fec0143224ef0a2c7cf6c8f07975cc95c844b27b517ffe8ce481cee0ed8636d8d9e8293d2c8974606d87d137233eba94478f4f3bcc296fd78455c578234f1a5b4b8a3bc0a0dbc4f09febe6be53eb030e06e7f11c77754346d35420c3ebc220835231a04b9568aa1708d136f5c163c185346fe213e98422368d39d80bf80259277056dd3358f1501693b87"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0xdc, 0x6, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'fuse\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'matchall\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1e, 0x2, 0x5, 0x100, 0x3ff}}, @TCA_DEF_DATA={0xd, 0x3, 'matchall\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x81, 0xffff, 0x20000000, 0x9, 0x4}}, @TCA_DEF_DATA={0x8, 0x3, 'u32\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'u32\x00'}, @TCA_DEF_DATA={0x16, 0x3, '.!@\'[#[-/#!\'\xa3,%-!\x00'}, @TCA_DEF_DATA={0xe, 0x3, '&-\').^%\xe4[\x00'}, @TCA_DEF_DATA={0xa, 0x3, '-#(\\}\x00'}]}, {0xe, 0x6, "3116c386c931c1b7e135"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x194, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x938, 0xffffffffffffffff, 0x89a8, 0x10}, @local, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8b, 0x40, 0x7, 0x1, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x7fffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x7, 0x787b, 0x1}, @multicast1, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x2, 0x8}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x0, 0x5, 0x3ff}, @multicast1, @rand_addr=0x64010101, 0xffffffff}}]}, {0xa3, 0x6, "68271e428e1b9df196ee8ecad6cb4afe600ebbe6b5b54f9c6f37f4d60eceae7706d6c792cf84ade5628568ef69033e53e7f54bc80d8f47cb3ca69a9906490ebde8bb1b17a1d00c192d4ddc9d0fa1f44f5885f635393e0772f192b62a37d1de9cb828d4fe1e8c43f9bb0d4aac9c772d8f8db29a66c9b1aa57c46ae206c08ddba9524a54eff639d6071f525568795682afb122eee61d932e0d3c82b589a3a97a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf7, 0xf8}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0xb275}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x740}, 0x1, 0x0, 0x0, 0x895}, 0x20000850) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_clone(0xd9224140, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r10, r8, 0x7, r9, &(0x7f0000000000)={r7, 0xffffffffffffffff, 0x8}) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r6) (async) syz_usb_disconnect(r6) write$char_usb(r11, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="38010000040a010300000000000000000200000a18000480140003006970766c616e300000000000000000000c000240000000000000000108000b400000000408000b4000000001ef000c00cf5d484d5defd5392675472ac70a9a1dc7dfc472f11cef77abc585bcc61e6bf1cf2b7d3c0f2b4bf62df23284e7a4908127bc5b3d4600cbab8133dd4765413de8171d184e271864949d7d2d0fee08759475268579616dffd1c7555c9a2cd36e9aadfce85a1836d85f1b86838f578c52674da4d7f8199b2cbbea239bc240525bf545000000dfcd58648667360f169ee6ab96bb62261b022f4d317f45d5f04df645784675957575e71d9065e7ee1588c7ee7e16a7c99793a1845bd29fc434692036c088ae11a1dc56174540139db603182c11f622a7b4edd129fd09469a1e68ec7b52d15713f61fb2752e0352007266b126bde8cefdd2148a41f7b9cb4dbd0d3186a1f78858eabe781e7f218b29462aa23f8833726a3706df84260d9e0b6b6e9d55166ad49526c46dcad186c63b171ea86b583c37e29ca10792df869dcca89a96420d3019dcafa508e60010d486f0e728fd0bba45198ee20b08a407573c523c9522325bc923b88cb37b6b00cdb9efadf9ff2092e5594d8296dd6eda5c82781488fc5eeb8be5e505d97fb6fd498b9061d7e9cb72b66d0e603a3113b09687416c35dc5f75bcc2b8b57b"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x40080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="700000002206010400000000000000000200000716000300686173683a6e65742c706f72742c6e657400000005000100070000000500010007000000050005003e19cc06ec942f52a1a2a0010000000900020073797a30000000000c000780060004404e2100001400078008000a4000"], 0x70}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 3.263658695s ago: executing program 3 (id=3911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x18) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x24000081, &(0x7f00000001c0)={0xa, 0x2, 0xd, @empty}, 0x1c) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="050076cb08ecffff7effffff0101c000"]) pipe(&(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310329bd7000ffffffff0900000008000300", @ANYRES32=r7, @ANYBLOB="080006000209"], 0x24}}, 0x4000) fanotify_init(0x200, 0x0) unshare(0x68040200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, 0x0, &(0x7f00000002c0)={r8, r9+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x10, 0x7]}, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) 3.263262122s ago: executing program 4 (id=3912): r0 = socket(0x2, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5412f5e8a838c522, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x10, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x1b, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40d0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x200002f, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/rfcomm\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) syz_emit_ethernet(0x3e, 0x0, &(0x7f00000001c0)={0x1, 0x93, [0xb33, 0x9aa, 0x80000000, 0xc0f]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0x42, 0x4, 0x270, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x1dc, 0x1dc, 0x1dc, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x1, {0x2}}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@ip={@broadcast, @remote, 0x0, 0xffff00, 'batadv0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x1231e48dc931f0a2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x25, 0x1}, {0x0, 0xfc}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2cc) 2.694504689s ago: executing program 2 (id=3913): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x80000006, 0xff, 0x2, 0x8}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x500, 0x0}, 0x8) 2.161018975s ago: executing program 2 (id=3914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r2 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000200)=0x8, 0x4) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x108242, 0x78e22799f4a46fa9) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1) read$char_usb(r3, &(0x7f0000000140)=""/45, 0x2d) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x29, 0xbb2, 0x60050682, 0x2, 0xfffd, 0x8, 0x1004, 0x0, 0x0, 0x2, 0x36}}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="5f7cff284483d547e849027cb41f707d05b07073d8d1a7d2f2ae901c85eca805d1aeb6ae4215eda371", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="84561687480b1ad3549023cbea449571a60182b0a03d148485b1a0aebe65ed8522d9828371479b6f409bf2188f3d96a46e4a45f9835c41736b9e84842919864a5d6f4e9cd009b18d82bf90b60e0100f8fe1df7fbb3bca357b2c6aeab6369dff62491c0a46ca6da6828dcef06c50964d8d860cf313328fdb84d0d35a9e848fd50a5a1178a031afb6f1baac2478a40175da8a46a29e3a94a10f6b731763834205fb1295a0ef472dce5d01d9006273ab899f660399b5f10ac21aa8c45601b3a1370850fb314d710c3401270cc3d7500", @ANYRESOCT=r0, @ANYBLOB="d12753b48f3b8613e2acd7314e82edbc553d5193ea75edd24e0f8a88a8018850abe561d4726ff77d3bae8362038b75610b30ce8fc1bc39a30459a90ce2", @ANYRES64=r0, @ANYBLOB="1d3dbed0bea3f25fc9ebf81577db9662f02806701627a4171ee245c4f1a877931e272b565b023c31711e73165a754d4fd9313143819f3ed00a2a5746f2fda822ebd9bd2dcf7ee204c13d023729878e097254d07ef0c8c510630901696085548e5a5f0dd088f399bd44467c650f1daf20270e4479a9"], 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x1f, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbb3902649167ff50300000000000000010400", 0x49433553}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x3, &(0x7f0000000100)='Q[I') r6 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r7 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) sync_file_range(r7, 0x2, 0x0, 0x1) sendfile(r6, r6, 0x0, 0x24002de8) 1.616846422s ago: executing program 5 (id=3915): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x8000001e, 0x0, 0x1}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000100)={0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = dup(r4) read$FUSE(r5, 0x0, 0x17) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000002c0)='./file0\x00', 0xec0ca2537b9d087b) 644.934512ms ago: executing program 5 (id=3916): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0xfffc, 0x7, 0x4000}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d6, 0x33}, @in6=@empty, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x144}}, 0x0) 601.266933ms ago: executing program 3 (id=3917): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000011000500000000000003000007000000", @ANYRES32=r1, @ANYBLOB="010000000000000014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 375.508455ms ago: executing program 3 (id=3918): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2400000007060108000000000000000005000000050001000700000008000640"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) shutdown(r6, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}}, 0x2) 129.380108ms ago: executing program 5 (id=3919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="010000000000000014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 0s ago: executing program 5 (id=3920): socket$nl_generic(0x10, 0x3, 0x10) gettid() socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000568000/0x4000)=nil, 0x4000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0x9, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x40]}, 0x8, 0x800) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x3, 0x4, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x4, 0x1, 0x4, 0xff, 0x6, 0x1, "43b67bd2"}, 0x3ff, 0x1, {0x0}, 0x4}) fcntl$setownex(r2, 0xf, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) open_by_handle_at(r4, &(0x7f0000000e80)=ANY=[@ANYBLOB="200000006200000008000000000000a009000700000000020000002f423800000007000000000000"], 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000007c80)) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000140)=0x5) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200003, 0x8}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r9, 0x0, 0x9, 0x0, &(0x7f0000000280)) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2dec, 0x4000, 0x65, 0x0, 0xffffffffffffff97) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): high-speed USB device number 104 using dummy_hcd [ 1140.276855][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 1140.284359][ T5923] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.385089][ T5923] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1140.403311][ T5923] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1140.414332][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.471553][ T5923] usb 6-1: Product: syz [ 1140.482225][ T5923] usb 6-1: Manufacturer: syz [ 1140.487945][T19720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1140.517271][ T5923] usb 6-1: SerialNumber: syz [ 1140.606162][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3534'. [ 1140.751318][ T5923] usb 6-1: 0:2 : does not exist [ 1140.793151][ T5923] usb 6-1: USB disconnect, device number 104 [ 1140.889698][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1140.966952][ T5949] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1141.149107][ T5949] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1141.170418][ T5949] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1141.192799][ T5949] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1141.204300][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.423018][ T5949] usb 2-1: usb_control_msg returned -32 [ 1141.431714][ T5949] usbtmc 2-1:16.0: can't read capabilities [ 1143.247675][T19754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3537'. [ 1143.353123][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3537'. [ 1143.993427][ T6573] usb 2-1: USB disconnect, device number 122 [ 1144.848283][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 1144.877178][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3547'. [ 1145.337005][ T5949] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1145.486858][ T5949] usb 6-1: Using ep0 maxpacket: 16 [ 1145.504623][ T5949] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.529062][ T5949] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.565159][ T5949] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.585333][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.603893][ T5949] usb 6-1: Product: syz [ 1145.618811][ T5949] usb 6-1: Manufacturer: syz [ 1145.634360][ T5949] usb 6-1: SerialNumber: syz [ 1145.915931][ T5949] usb 6-1: 0:2 : does not exist [ 1146.006961][T19796] @: renamed from vlan0 (while UP) [ 1146.222407][ T5949] usb 6-1: USB disconnect, device number 105 [ 1146.317116][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1146.487770][ T5838] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1147.159370][ T5838] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1147.342985][T19810] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1147.356815][ T5838] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.445581][T19810] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1147.455389][ T5838] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1147.487115][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.795197][ T5838] usb 3-1: usb_control_msg returned -32 [ 1147.814082][ T5838] usbtmc 3-1:16.0: can't read capabilities [ 1148.098897][T19818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'. [ 1149.307174][ T6573] usb 3-1: USB disconnect, device number 9 [ 1149.510104][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1149.538195][T19845] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1150.149674][ T5893] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1150.316805][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 1150.325642][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.344340][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1150.377436][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1150.406853][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.434739][ T5893] usb 5-1: Product: syz [ 1150.439344][ T5893] usb 5-1: Manufacturer: syz [ 1150.444003][ T5893] usb 5-1: SerialNumber: syz [ 1150.732763][T12333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1150.747612][T12333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1150.748234][ T5893] usb 5-1: 0:2 : does not exist [ 1150.760164][T12333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1150.772228][T12333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1150.787231][ T6440] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1150.803787][T12333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1150.864377][ T5893] usb 5-1: USB disconnect, device number 39 [ 1150.967307][ T6440] usb 3-1: Using ep0 maxpacket: 16 [ 1151.001829][ T6440] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.021793][ T6440] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.112689][ T6440] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.122376][ T6440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.136177][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1151.152394][ T6440] usb 3-1: Product: syz [ 1151.165863][ T6440] usb 3-1: Manufacturer: syz [ 1151.183150][ T6440] usb 3-1: SerialNumber: syz [ 1151.735522][ T6440] usb 3-1: 0:2 : does not exist [ 1151.743821][ T6440] usb 3-1: unit 6 not found! [ 1151.771835][ T6440] usb 3-1: USB disconnect, device number 10 [ 1151.893773][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1152.182805][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.195433][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44434 - 0 [ 1152.409039][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.452892][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44434 - 0 [ 1152.558896][T19870] chnl_net:caif_netlink_parms(): no params data found [ 1152.633357][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.679479][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44434 - 0 [ 1152.821306][ T36] batman_adv: batadv0: Removing interface: netdevsim0 [ 1152.843847][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.855401][ T5840] Bluetooth: hci0: command tx timeout [ 1152.873826][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44434 - 0 [ 1153.203837][T19870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.215743][T19870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.224164][T19870] bridge_slave_0: entered allmulticast mode [ 1153.233017][T19870] bridge_slave_0: entered promiscuous mode [ 1153.267359][T19870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.290768][T19870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.308203][T19870] bridge_slave_1: entered allmulticast mode [ 1153.323739][T19870] bridge_slave_1: entered promiscuous mode [ 1153.347215][T18755] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1153.380505][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3579'. [ 1153.472301][T19906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3580'. [ 1153.492534][T19903] erspan0: entered promiscuous mode [ 1153.508530][T19903] macvtap3: entered promiscuous mode [ 1153.514070][T19903] macvtap3: entered allmulticast mode [ 1153.530591][T18755] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1153.556809][T19903] erspan0: entered allmulticast mode [ 1153.577204][T18755] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.616800][T18755] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1153.625906][T18755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.701068][ T36] bridge_slave_1: left allmulticast mode [ 1153.707287][ T36] bridge_slave_1: left promiscuous mode [ 1153.713390][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.736896][ T6573] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1153.789995][ T36] bridge_slave_0: left allmulticast mode [ 1153.907265][T18755] usb 3-1: usb_control_msg returned -32 [ 1153.912973][T18755] usbtmc 3-1:16.0: can't read capabilities [ 1153.926233][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.951786][ T6573] usb 5-1: config 6 has an invalid interface number: 57 but max is 0 [ 1153.971265][ T6573] usb 5-1: config 6 has no interface number 0 [ 1154.025075][ T6573] usb 5-1: config 6 interface 57 has no altsetting 0 [ 1154.045374][ T6573] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1154.088847][ T6573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.107214][ T6573] usb 5-1: Product: syz [ 1154.117084][ T6573] usb 5-1: Manufacturer: syz [ 1154.121741][ T6573] usb 5-1: SerialNumber: syz [ 1154.369574][T19906] binder: 19905:19906 ioctl c0306201 80000140 returned -14 [ 1154.377901][T19906] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3580'. [ 1154.405564][ T6573] ums-alauda 5-1:6.57: USB Mass Storage device detected [ 1154.508071][ T6573] usb 5-1: USB disconnect, device number 40 [ 1154.517781][T10254] udevd[10254]: setting mode of /dev/bus/usb/005/040 to 020664 failed: No such file or directory [ 1154.529046][T10254] udevd[10254]: setting owner of /dev/bus/usb/005/040 to uid=0, gid=0 failed: No such file or directory [ 1154.530220][ T36] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1154.717084][ T5893] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1154.832747][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.842956][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.852640][ T36] bond0 (unregistering): Released all slaves [ 1154.874156][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 1154.901399][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.924782][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1154.933940][ T5840] Bluetooth: hci0: command tx timeout [ 1154.942641][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1154.952071][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.960313][ T5893] usb 2-1: Product: syz [ 1154.964616][ T5893] usb 2-1: Manufacturer: syz [ 1154.969310][ T5893] usb 2-1: SerialNumber: syz [ 1155.138524][ T36] bond1 (unregistering): Released all slaves [ 1155.211280][ T5893] usb 2-1: 0:2 : does not exist [ 1155.262731][ T5893] usb 2-1: USB disconnect, device number 123 [ 1155.527442][ T36] bond2 (unregistering): Released all slaves [ 1155.706475][ T36] bond3 (unregistering): Released all slaves [ 1156.087507][ T36] bond4 (unregistering): Released all slaves [ 1156.423672][ T36] bond5 (unregistering): Released all slaves [ 1156.453745][T19870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.496200][T19870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.523549][ T888] usb 3-1: USB disconnect, device number 11 [ 1156.675354][ T36] tipc: Left network mode [ 1156.991324][ T5838] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1157.006870][ T5840] Bluetooth: hci0: command tx timeout [ 1157.338223][T19870] team0: Port device team_slave_0 added [ 1157.432274][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.446413][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.458491][ T5838] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1157.467687][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.483917][T19945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1157.502790][ T5838] usb 3-1: config 0 descriptor?? [ 1157.509076][T19870] team0: Port device team_slave_1 added [ 1157.540455][T19947] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1157.547773][T18694] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1157.552446][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1157.709210][T18694] usb 4-1: config 6 has an invalid interface number: 57 but max is 0 [ 1157.719765][T19947] ip6tnl1: entered promiscuous mode [ 1157.735006][T18694] usb 4-1: config 6 has no interface number 0 [ 1157.756256][T18694] usb 4-1: config 6 interface 57 has no altsetting 0 [ 1157.785192][T18694] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1157.802947][T18694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.821731][T18694] usb 4-1: Product: syz [ 1157.826274][T18694] usb 4-1: Manufacturer: syz [ 1157.831156][T18694] usb 4-1: SerialNumber: syz [ 1157.932720][ T5838] kye 0003:0458:0087.0022: unknown main item tag 0x0 [ 1157.957079][ T5838] kye 0003:0458:0087.0022: unknown main item tag 0x0 [ 1157.965450][ T5838] kye 0003:0458:0087.0022: unknown main item tag 0x0 [ 1157.978749][ T5838] kye 0003:0458:0087.0022: unknown main item tag 0x0 [ 1157.980826][T19870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.986146][ T5838] kye 0003:0458:0087.0022: unknown main item tag 0x0 [ 1158.005498][ T5838] kye 0003:0458:0087.0022: unknown main item tag 0x0 [ 1158.012702][T19870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.012739][T19870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.051779][ T5838] kye 0003:0458:0087.0022: unknown main item tag 0x0 [ 1158.068269][T19946] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1158.081998][ T36] hsr_slave_0: left promiscuous mode [ 1158.094459][ T36] hsr_slave_1: left promiscuous mode [ 1158.110588][ T5838] kye 0003:0458:0087.0022: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0 [ 1158.115417][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.132151][T18694] ums-alauda 4-1:6.57: USB Mass Storage device detected [ 1158.177908][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.200435][T18694] usb 4-1: USB disconnect, device number 40 [ 1158.428902][T19968] FAULT_INJECTION: forcing a failure. [ 1158.428902][T19968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.463546][T19968] CPU: 1 UID: 0 PID: 19968 Comm: syz.4.3591 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.463586][T19968] Tainted: [L]=SOFTLOCKUP [ 1158.463594][T19968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1158.463605][T19968] Call Trace: [ 1158.463612][T19968] [ 1158.463620][T19968] dump_stack_lvl+0xe8/0x150 [ 1158.463646][T19968] should_fail_ex+0x414/0x560 [ 1158.463676][T19968] _copy_from_user+0x2d/0xb0 [ 1158.463696][T19968] get_compat_msghdr+0xad/0x4a0 [ 1158.463722][T19968] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1158.463744][T19968] ? rcu_is_watching+0x15/0xb0 [ 1158.463763][T19968] ? ___sys_recvmsg+0x1c4/0x510 [ 1158.463788][T19968] ___sys_recvmsg+0x17f/0x510 [ 1158.463807][T19968] ? _parse_integer_limit+0x1ae/0x1f0 [ 1158.463834][T19968] ? __pfx____sys_recvmsg+0x10/0x10 [ 1158.463858][T19968] ? kstrtoull+0x12f/0x1d0 [ 1158.463883][T19968] ? __fget_files+0x2a/0x420 [ 1158.463924][T19968] do_recvmmsg+0x36a/0x770 [ 1158.463949][T19968] ? __pfx_do_recvmmsg+0x10/0x10 [ 1158.463969][T19968] ? ksys_write+0x1cb/0x250 [ 1158.463996][T19968] ? __fget_files+0x3a0/0x420 [ 1158.464021][T19968] __sys_recvmmsg+0x19d/0x280 [ 1158.464042][T19968] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1158.464062][T19968] ? __pfx_ksys_write+0x10/0x10 [ 1158.464081][T19968] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1158.464110][T19968] __do_fast_syscall_32+0x1dc/0x570 [ 1158.464128][T19968] ? lockdep_hardirqs_on+0x7b/0x110 [ 1158.464143][T19968] ? do_fast_syscall_32+0x34/0x80 [ 1158.464159][T19968] ? irqentry_exit+0x10f/0x670 [ 1158.464178][T19968] do_fast_syscall_32+0x34/0x80 [ 1158.464195][T19968] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1158.464215][T19968] RIP: 0023:0xf7f26539 [ 1158.464229][T19968] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1158.464244][T19968] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1158.464261][T19968] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 1158.464272][T19968] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 1158.464282][T19968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1158.464291][T19968] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1158.464301][T19968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1158.464323][T19968] [ 1158.891996][T19974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3593'. [ 1159.026874][ T6440] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1159.097430][ T5840] Bluetooth: hci0: command tx timeout [ 1159.162429][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1159.178851][ T6440] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.192173][ T6440] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1159.217005][ T888] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1159.236795][ T6440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.256013][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1159.264230][ T6440] usb 5-1: config 0 descriptor?? [ 1159.291840][ T6440] pwc: Askey VC010 type 2 USB webcam detected. [ 1159.400795][ T888] usb 4-1: Using ep0 maxpacket: 16 [ 1159.413107][ T888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.429462][ T888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1159.440956][ T888] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1159.450318][ T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.459219][ T888] usb 4-1: Product: syz [ 1159.463791][ T888] usb 4-1: Manufacturer: syz [ 1159.469437][ T888] usb 4-1: SerialNumber: syz [ 1159.679991][ T6440] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1159.704312][ T6440] pwc: recv_control_msg error -32 req 02 val 2700 [ 1159.722287][ T888] usb 4-1: 0:2 : does not exist [ 1159.746576][ T6440] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1159.769265][ T888] usb 4-1: USB disconnect, device number 41 [ 1159.776520][ T6440] pwc: recv_control_msg error -32 req 04 val 1000 [ 1159.801311][ T6440] pwc: recv_control_msg error -32 req 04 val 1300 [ 1159.821710][ T6440] pwc: recv_control_msg error -32 req 04 val 1400 [ 1159.833057][ T6440] pwc: recv_control_msg error -32 req 02 val 2000 [ 1159.851201][ T6440] pwc: recv_control_msg error -32 req 02 val 2100 [ 1159.860162][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1159.861422][ T6440] pwc: recv_control_msg error -32 req 04 val 1500 [ 1159.884094][ T6440] pwc: recv_control_msg error -32 req 02 val 2500 [ 1159.897197][ T6440] pwc: recv_control_msg error -32 req 02 val 2400 [ 1159.905145][ T6440] pwc: recv_control_msg error -32 req 02 val 2600 [ 1159.918672][ T6440] pwc: recv_control_msg error -32 req 02 val 2900 [ 1160.015554][T19870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.022971][T19870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.050414][T19870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.061990][T19940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1160.158973][ T5838] usb 3-1: USB disconnect, device number 12 [ 1160.325622][T19870] hsr_slave_0: entered promiscuous mode [ 1160.339135][T19870] hsr_slave_1: entered promiscuous mode [ 1160.348846][T19870] debugfs: 'hsr0' already exists in 'hsr' [ 1160.354693][T19870] Cannot create hsr debugfs directory [ 1160.409352][ T6440] pwc: recv_control_msg error -71 req 04 val 1200 [ 1160.450662][ T6440] pwc: Registered as video103. [ 1160.472467][ T6440] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 1160.642766][ T6440] usb 5-1: USB disconnect, device number 41 [ 1160.678487][ T5893] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1160.840131][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1160.869879][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1160.913775][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1160.933288][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.098151][ T36] IPVS: stop unused estimator thread 0... [ 1161.179492][ T5893] usb 2-1: usb_control_msg returned -32 [ 1161.199038][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 1162.646129][T19870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1162.703345][T19870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1163.514664][ T6440] usb 2-1: USB disconnect, device number 124 [ 1163.545470][T19870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1163.666135][T19870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1164.290877][T20065] binder: 20064:20065 ioctl c06c4124 0 returned -22 [ 1164.392842][T19870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.467370][T19870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.494538][ T5838] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1164.571214][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.578588][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.621245][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.628480][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.667879][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 1164.684399][ T5838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.764470][ T5838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1164.921148][ T5838] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1164.934218][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.007346][ T5838] usb 2-1: Product: syz [ 1165.038731][ T5838] usb 2-1: Manufacturer: syz [ 1165.082196][ T5838] usb 2-1: SerialNumber: syz [ 1165.227303][T19870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.384340][ T5838] usb 2-1: 0:2 : does not exist [ 1165.418095][ T5893] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1165.438729][ T5838] usb 2-1: USB disconnect, device number 125 [ 1165.488181][T19870] veth0_vlan: entered promiscuous mode [ 1165.534290][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1165.560185][T19870] veth1_vlan: entered promiscuous mode [ 1165.581690][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1165.595065][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1165.627629][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1165.721910][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.873249][T19870] veth0_macvtap: entered promiscuous mode [ 1165.898330][T19870] veth1_macvtap: entered promiscuous mode [ 1165.960829][ T5893] usb 5-1: usb_control_msg returned -32 [ 1165.967688][ T5893] usbtmc 5-1:16.0: can't read capabilities [ 1165.980887][T19870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.054011][T19870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.109401][ T6007] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.150024][ T6007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.213360][ T6007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.237402][ T6007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.285833][T20098] netlink: 'syz.1.3613': attribute type 10 has an invalid length. [ 1166.296000][T20098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3613'. [ 1166.425055][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.469463][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.493466][T20098] ipvlan1: entered promiscuous mode [ 1166.503931][T20098] ipvlan1: entered allmulticast mode [ 1166.529857][T20098] veth0_vlan: entered allmulticast mode [ 1166.545201][T20098] bridge0: port 3(ipvlan1) entered blocking state [ 1166.556627][T20098] bridge0: port 3(ipvlan1) entered disabled state [ 1166.572816][T20098] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1166.643133][T20107] bond0: entered promiscuous mode [ 1166.648426][T20107] bond_slave_0: entered promiscuous mode [ 1166.658601][T20107] bond_slave_1: entered promiscuous mode [ 1166.694466][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.703268][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.744137][ T5838] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 1166.780331][ T5838] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1167.473328][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1167.519684][ T888] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1167.718988][ T888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.752100][ T888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1167.775639][ T888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1167.949821][ T5838] usb 5-1: USB disconnect, device number 42 [ 1167.956756][ T888] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1168.073512][ T888] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1168.110638][ T888] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1168.141036][ T888] usb 3-1: Manufacturer: syz [ 1168.231034][ T888] usb 3-1: config 0 descriptor?? [ 1168.647257][ T888] rc_core: IR keymap rc-hauppauge not found [ 1168.653308][ T888] Registered IR keymap rc-empty [ 1168.675048][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1168.728183][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1168.795491][ T888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1168.838605][ T888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 1168.907349][ T5838] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1168.931198][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1168.967100][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1168.997116][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.018794][T20147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.031064][T20147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.057054][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 1169.058073][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.081977][ T5838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.099768][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.204998][ T5838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1169.237047][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.279492][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.296529][ T5838] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1169.322677][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.346412][ T5838] usb 4-1: Product: syz [ 1169.357525][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.369056][ T5838] usb 4-1: Manufacturer: syz [ 1169.381846][ T5838] usb 4-1: SerialNumber: syz [ 1169.407554][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.481682][ T888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.497034][ T6440] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1169.510689][ T888] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1169.545562][ T888] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1169.623007][ T5838] usb 4-1: 0:2 : does not exist [ 1169.676309][ T6440] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1169.693901][ T6440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.729614][ T5838] usb 4-1: USB disconnect, device number 42 [ 1169.910587][ T6440] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1169.941418][ T9049] udevd[9049]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.104461][T20154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.139135][T20154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.163780][T20154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.244697][T20154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.297607][ T5838] usb 3-1: USB disconnect, device number 13 [ 1170.340437][T20154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.475481][ T6440] gspca_sn9c20x: Write register 1000 failed -110 [ 1170.486814][ T6440] gspca_sn9c20x: Device initialization failed [ 1170.493115][ T6440] gspca_sn9c20x 5-1:252.0: probe with driver gspca_sn9c20x failed with error -110 [ 1170.559593][T20154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.606304][T20154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.693620][T20154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.744303][T20154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.773922][T20154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.793824][T20171] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3628'. [ 1170.858401][ T6440] usb 5-1: USB disconnect, device number 43 [ 1171.216858][ T6440] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1171.243590][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1171.368609][ T6440] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1171.378943][ T6440] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1171.402159][ T6440] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1171.442118][ T6440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.670060][ T6440] usb 4-1: usb_control_msg returned -32 [ 1171.684409][ T6440] usbtmc 4-1:16.0: can't read capabilities [ 1171.866950][ T5838] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1172.069023][ T5838] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1172.080428][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1172.115590][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1172.179012][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1172.216213][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1172.260812][ T5838] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1172.313188][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.400033][ T5838] usb 5-1: config 0 descriptor?? [ 1172.414587][T20190] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1172.870166][ T5838] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 1172.886069][ T5838] plantronics 0003:047F:FFFF.0024: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1173.197251][ T6440] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 1173.330465][ T6440] usb 6-1: device descriptor read/64, error -71 [ 1173.452930][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 1173.738751][ T6440] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1173.973718][ T6440] usb 6-1: device descriptor read/64, error -71 [ 1173.986278][T18755] usb 4-1: USB disconnect, device number 43 [ 1174.087224][ T6440] usb usb6-port1: attempt power cycle [ 1174.537083][ T6440] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1174.610382][ T6440] usb 6-1: device descriptor read/8, error -71 [ 1174.657427][T18755] usb 5-1: USB disconnect, device number 44 [ 1174.863550][ T6440] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1174.888063][ T6440] usb 6-1: device descriptor read/8, error -71 [ 1174.997101][ T6440] usb usb6-port1: unable to enumerate USB device [ 1175.477110][T20239] bond1 (unregistering): Released all slaves [ 1175.801825][T20246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3646'. [ 1175.953795][ T5203] Dev loop6: unable to read RDB block 7 [ 1175.987754][ T5203] loop6: unable to read partition table [ 1176.041943][ T5203] loop6: partition table beyond EOD, truncated [ 1176.260765][T20257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3650'. [ 1176.331593][T20258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1176.687133][ T5923] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1176.876918][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 1176.888580][ T5923] usb 4-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 1176.916400][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12032, setting to 64 [ 1177.116828][ T6440] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1177.176350][ T5923] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1177.262817][ T5923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1177.274457][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.486165][ T6440] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1177.528952][ T6440] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1177.721568][ T5923] usb 4-1: Product: syz [ 1177.726878][ T6440] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1177.752638][ T6440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.096911][ T5923] usb 4-1: Manufacturer: syz [ 1178.102698][ T5923] usb 4-1: SerialNumber: syz [ 1178.184923][ T5923] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1178.213886][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 1178.236293][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 1178.276913][ T5923] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1178.283277][ T5923] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1178.304990][ T6440] usb 6-1: usb_control_msg returned -32 [ 1178.317062][ T6440] usbtmc 6-1:16.0: can't read capabilities [ 1178.666142][T20281] FAULT_INJECTION: forcing a failure. [ 1178.666142][T20281] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.680476][T20281] CPU: 0 UID: 0 PID: 20281 Comm: syz.2.3653 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.680510][T20281] Tainted: [L]=SOFTLOCKUP [ 1178.680519][T20281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1178.680532][T20281] Call Trace: [ 1178.680541][T20281] [ 1178.680551][T20281] dump_stack_lvl+0xe8/0x150 [ 1178.680584][T20281] should_fail_ex+0x414/0x560 [ 1178.680624][T20281] should_failslab+0xa8/0x100 [ 1178.680651][T20281] __kmalloc_noprof+0xdf/0x800 [ 1178.680670][T20281] ? kernfs_fop_write_iter+0x158/0x540 [ 1178.680722][T20281] kernfs_fop_write_iter+0x158/0x540 [ 1178.680758][T20281] vfs_write+0x5c9/0xb30 [ 1178.680784][T20281] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1178.680816][T20281] ? __pfx_vfs_write+0x10/0x10 [ 1178.680855][T20281] ? __fget_files+0x2a/0x420 [ 1178.680892][T20281] ksys_write+0x145/0x250 [ 1178.680916][T20281] ? __pfx_ksys_write+0x10/0x10 [ 1178.680947][T20281] __do_fast_syscall_32+0x1dc/0x570 [ 1178.680972][T20281] ? lockdep_hardirqs_on+0x7b/0x110 [ 1178.680992][T20281] ? do_fast_syscall_32+0x34/0x80 [ 1178.681015][T20281] ? irqentry_exit+0x10f/0x670 [ 1178.681042][T20281] do_fast_syscall_32+0x34/0x80 [ 1178.681066][T20281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1178.681093][T20281] RIP: 0023:0xf70ad539 [ 1178.681112][T20281] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1178.681130][T20281] RSP: 002b:00000000f544255c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1178.681152][T20281] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000080000200 [ 1178.681168][T20281] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1178.681189][T20281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1178.681201][T20281] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1178.681215][T20281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1178.681265][T20281] [ 1179.074629][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3655'. [ 1179.326644][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1179.367135][ T6440] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1179.401691][T20292] gretap1: entered promiscuous mode [ 1179.487406][ T888] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1179.496959][ T6440] usb 2-1: device descriptor read/64, error -71 [ 1179.646948][ T888] usb 5-1: Using ep0 maxpacket: 16 [ 1179.653944][ T888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.665111][ T888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1179.683518][ T888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1179.693860][ T888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.698975][ T5923] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1179.703913][ T888] usb 5-1: Product: syz [ 1179.714168][ T888] usb 5-1: Manufacturer: syz [ 1179.719258][ T888] usb 5-1: SerialNumber: syz [ 1179.736989][ T6440] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1179.774112][ T6573] usb 4-1: USB disconnect, device number 44 [ 1179.856807][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 1179.866891][ T6440] usb 2-1: device descriptor read/64, error -71 [ 1179.875071][ T5923] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 1179.888641][ T5923] usb 3-1: config 254 has no interface number 0 [ 1179.894979][ T5923] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1179.912006][ T5923] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1179.924063][ T5923] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1179.937248][ T5923] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1179.954483][ T5923] usb 3-1: config 254 interface 235 has no altsetting 0 [ 1179.957998][ T888] usb 5-1: 0:2 : does not exist [ 1179.977420][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1179.986596][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.988405][ T6440] usb usb2-port1: attempt power cycle [ 1179.997300][ T5923] usb 3-1: Product: syz [ 1180.008004][ T5923] usb 3-1: Manufacturer: syz [ 1180.012652][ T5923] usb 3-1: SerialNumber: syz [ 1180.025437][ T888] usb 5-1: USB disconnect, device number 45 [ 1180.040227][ T5885] usb 6-1: USB disconnect, device number 110 [ 1180.050454][T20292] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1180.143381][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.236997][ T6573] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1180.330266][T20292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1180.339657][ T6440] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1180.396757][ T6573] usb 4-1: Using ep0 maxpacket: 32 [ 1180.398719][ T6440] usb 2-1: device descriptor read/8, error -71 [ 1180.417072][T20292] macvtap4: entered promiscuous mode [ 1180.426090][T20292] macvtap4: entered allmulticast mode [ 1180.432110][T20292] bond0: entered allmulticast mode [ 1180.453748][T20292] bond_slave_0: entered allmulticast mode [ 1180.461744][T20292] bond_slave_1: entered allmulticast mode [ 1180.484413][T20292] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1180.584384][T20301] bond0: left allmulticast mode [ 1180.592214][ T6573] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1180.600608][ T6573] usb 4-1: config 0 has no interface number 0 [ 1180.611731][ T6573] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1180.622717][ T6573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.630850][ T6573] usb 4-1: Product: syz [ 1180.635063][ T6573] usb 4-1: Manufacturer: syz [ 1180.640220][ T6573] usb 4-1: SerialNumber: syz [ 1180.662140][ T6573] usb 4-1: config 0 descriptor?? [ 1180.687984][ T6440] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1180.707576][T20301] bond_slave_0: left allmulticast mode [ 1180.717552][ T6440] usb 2-1: device descriptor read/8, error -71 [ 1180.739571][T20301] bond_slave_1: left allmulticast mode [ 1180.837908][ T6440] usb usb2-port1: unable to enumerate USB device [ 1180.883875][T20304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3661'. [ 1180.915049][T20306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3661'. [ 1180.917085][ T5923] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 1180.959446][ T5923] usbtest 3-1:254.235: probe with driver usbtest failed with error -71 [ 1180.970790][ T6573] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1180.984405][ T5923] usb 3-1: USB disconnect, device number 14 [ 1181.198526][T20294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.207628][T20294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.236331][ T6573] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1181.247031][ T6573] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 1181.260727][ T6573] usb 4-1: USB disconnect, device number 45 [ 1181.456967][T20316] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1182.396149][ T6440] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1182.541997][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.552590][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.582824][ T6440] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1182.616823][ T6440] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1182.636244][ T6440] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1182.665475][ T6440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.806897][T18755] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1182.957995][ T6440] usb 3-1: usb_control_msg returned -32 [ 1182.964020][ T6440] usbtmc 3-1:16.0: can't read capabilities [ 1182.977577][T18755] usb 2-1: Using ep0 maxpacket: 16 [ 1182.995907][T18755] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.007704][T18755] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1183.035893][T18755] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1183.052371][T18755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.062430][T18755] usb 2-1: Product: syz [ 1183.067010][T18755] usb 2-1: Manufacturer: syz [ 1183.072143][T18755] usb 2-1: SerialNumber: syz [ 1183.312879][T18755] usb 2-1: 0:2 : does not exist [ 1183.346439][T18755] usb 2-1: USB disconnect, device number 4 [ 1183.387275][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1183.496809][ T6440] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1183.698605][ T6440] usb 5-1: config 1 has an invalid interface number: 113 but max is 0 [ 1183.707377][ T6440] usb 5-1: config 1 has no interface number 0 [ 1183.719907][ T6440] usb 5-1: config 1 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1183.747158][ T6440] usb 5-1: config 1 interface 113 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1183.757715][ T6440] usb 5-1: config 1 interface 113 has no altsetting 0 [ 1183.768384][ T6440] usb 5-1: New USB device found, idVendor=04e8, idProduct=662e, bcdDevice=9d.cb [ 1183.788221][ T6440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.802144][ T6440] usb 5-1: Product: syz [ 1183.809588][ T6440] usb 5-1: Manufacturer: syz [ 1183.816802][ T6440] usb 5-1: SerialNumber: syz [ 1183.833917][T20348] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1183.841651][T20348] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1183.871021][ T6440] ipaq 5-1:1.113: PocketPC PDA converter detected [ 1184.083034][T20358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3677'. [ 1184.096228][ T6440] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 1184.234269][T20362] gretap1: entered promiscuous mode [ 1184.394444][ T6440] usb 5-1: USB disconnect, device number 46 [ 1184.424678][ T6440] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1184.447135][ T5923] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1184.463076][ T6440] ipaq 5-1:1.113: device disconnected [ 1184.608002][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 1184.618744][ T5923] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 1184.630695][ T5923] usb 6-1: config 254 has no interface number 0 [ 1184.649571][ T5923] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1184.678411][ T5923] usb 6-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1184.704435][ T5923] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1184.739247][ T5923] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1184.750250][ T5923] usb 6-1: config 254 interface 235 has no altsetting 0 [ 1184.759731][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1184.771750][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.774993][ T6440] usb 3-1: USB disconnect, device number 15 [ 1184.780088][ T5923] usb 6-1: Product: syz [ 1184.780109][ T5923] usb 6-1: Manufacturer: syz [ 1184.780127][ T5923] usb 6-1: SerialNumber: syz [ 1184.837921][T20363] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1184.865058][T20366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1185.069252][T20369] FAULT_INJECTION: forcing a failure. [ 1185.069252][T20369] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.119231][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3677'. [ 1185.137634][T20369] CPU: 1 UID: 0 PID: 20369 Comm: syz.2.3679 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.137674][T20369] Tainted: [L]=SOFTLOCKUP [ 1185.137682][T20369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1185.137696][T20369] Call Trace: [ 1185.137706][T20369] [ 1185.137716][T20369] dump_stack_lvl+0xe8/0x150 [ 1185.137748][T20369] should_fail_ex+0x414/0x560 [ 1185.137785][T20369] should_failslab+0xa8/0x100 [ 1185.137813][T20369] kmem_cache_alloc_noprof+0x88/0x710 [ 1185.137843][T20369] ? preempt_schedule_common+0x83/0xd0 [ 1185.137863][T20369] ? alloc_empty_file+0x55/0x1d0 [ 1185.137887][T20369] ? preempt_schedule_thunk+0x16/0x30 [ 1185.137908][T20369] alloc_empty_file+0x55/0x1d0 [ 1185.137936][T20369] alloc_file_pseudo+0x13d/0x210 [ 1185.137967][T20369] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1185.138000][T20369] ? alloc_fd+0x64c/0x6c0 [ 1185.138030][T20369] sock_alloc_file+0xb8/0x2e0 [ 1185.138059][T20369] ? __sys_socket+0x12c/0x1b0 [ 1185.138092][T20369] __sys_socket+0x13d/0x1b0 [ 1185.138128][T20369] __ia32_compat_sys_socketcall+0x6df/0x9d0 [ 1185.138159][T20369] ? __fget_files+0x3a0/0x420 [ 1185.138190][T20369] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 1185.138219][T20369] ? fput+0xa0/0xd0 [ 1185.138245][T20369] ? ksys_write+0x22a/0x250 [ 1185.138268][T20369] ? __pfx_ksys_write+0x10/0x10 [ 1185.138298][T20369] __do_fast_syscall_32+0x1dc/0x570 [ 1185.138323][T20369] ? lockdep_hardirqs_on+0x7b/0x110 [ 1185.138343][T20369] ? do_fast_syscall_32+0x34/0x80 [ 1185.138366][T20369] ? irqentry_exit+0x10f/0x670 [ 1185.138392][T20369] do_fast_syscall_32+0x34/0x80 [ 1185.138416][T20369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1185.138443][T20369] RIP: 0023:0xf70ad539 [ 1185.138461][T20369] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1185.138481][T20369] RSP: 002b:00000000f549c3c0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1185.138503][T20369] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f549c3d0 [ 1185.138519][T20369] RDX: 00000000f7446ff4 RSI: 0000000080000c40 RDI: 00000000f549c42c [ 1185.138534][T20369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1185.138548][T20369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1185.138561][T20369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1185.138592][T20369] [ 1185.153025][T20358] veth0_virt_wifi: entered promiscuous mode [ 1185.397246][T20358] veth0_virt_wifi: entered allmulticast mode [ 1185.469529][ T5923] usbtest 6-1:254.235: couldn't get endpoints, -71 [ 1185.476182][ T5923] usbtest 6-1:254.235: probe with driver usbtest failed with error -71 [ 1185.508523][ T5923] usb 6-1: USB disconnect, device number 111 [ 1185.927005][ T6440] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1186.096883][ T6440] usb 2-1: Using ep0 maxpacket: 16 [ 1186.106574][ T6440] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.120814][ T6440] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1186.133674][ T6440] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1186.144748][ T6440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.162820][ T6440] usb 2-1: Product: syz [ 1186.171761][ T6440] usb 2-1: Manufacturer: syz [ 1186.180992][ T6440] usb 2-1: SerialNumber: syz [ 1186.478821][ T6440] usb 2-1: 0:2 : does not exist [ 1186.509884][ T6440] usb 2-1: USB disconnect, device number 5 [ 1186.520192][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3688'. [ 1186.555446][T10254] udevd[10254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1187.156894][ T6573] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1187.246976][ T6440] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1187.327040][T18755] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1187.348338][ T6573] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1187.361878][ T6573] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1187.377560][ T6440] usb 6-1: device descriptor read/64, error -71 [ 1187.377657][ T6573] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1187.393250][ T6573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.469127][ T5949] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1187.479514][T18755] usb 2-1: Using ep0 maxpacket: 32 [ 1187.489683][T18755] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1187.501131][T18755] usb 2-1: config 0 has no interface number 0 [ 1187.510160][T18755] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1187.520714][T18755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.527791][T20417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1187.533401][T18755] usb 2-1: Product: syz [ 1187.543702][T18755] usb 2-1: Manufacturer: syz [ 1187.550523][T18755] usb 2-1: SerialNumber: syz [ 1187.560994][T18755] usb 2-1: config 0 descriptor?? [ 1187.573870][T18755] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1187.586274][T18755] usb 2-1: selecting invalid altsetting 1 [ 1187.593411][T18755] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1187.605797][T18755] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1187.616786][ T6440] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1187.626429][ T6573] usb 5-1: usb_control_msg returned -32 [ 1187.630828][T18755] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1187.640583][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 1187.640657][ T6573] usbtmc 5-1:16.0: can't read capabilities [ 1187.660696][T20418] gretap1: entered promiscuous mode [ 1187.669026][ T5949] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1187.682245][ T5949] usb 3-1: config 0 has no interface number 0 [ 1187.694034][T18755] usb 2-1: media controller created [ 1187.724796][T18755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1187.733332][ T5949] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1187.743388][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.754183][ T5949] usb 3-1: Product: syz [ 1187.766947][ T5949] usb 3-1: Manufacturer: syz [ 1187.772265][ T5949] usb 3-1: SerialNumber: syz [ 1187.784457][ T5949] usb 3-1: config 0 descriptor?? [ 1187.796988][ T6440] usb 6-1: device descriptor read/64, error -71 [ 1187.804140][T18755] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1187.815021][ T5949] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1187.821449][T18755] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1187.830278][T18755] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1187.869443][T18755] usb 2-1: USB disconnect, device number 6 [ 1187.907342][ T6440] usb usb6-port1: attempt power cycle [ 1187.916928][ T6573] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1187.995504][ T5949] gspca_spca1528: reg_w err -71 [ 1188.016897][ T5949] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1188.034471][ T5949] usb 3-1: USB disconnect, device number 16 [ 1188.087599][ T6573] usb 4-1: Using ep0 maxpacket: 16 [ 1188.104919][ T6573] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 1188.113968][ T6573] usb 4-1: config 254 has no interface number 0 [ 1188.123272][ T6573] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1188.134987][ T6573] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1188.147501][ T6573] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1188.161884][ T6573] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1188.172603][ T6573] usb 4-1: config 254 interface 235 has no altsetting 0 [ 1188.182215][ T6573] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1188.192203][ T6573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.202249][ T6573] usb 4-1: Product: syz [ 1188.206518][ T6573] usb 4-1: Manufacturer: syz [ 1188.211624][ T6573] usb 4-1: SerialNumber: syz [ 1188.220648][T20419] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1188.246882][ T6440] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1188.278115][ T6440] usb 6-1: device descriptor read/8, error -71 [ 1188.445992][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1188.468757][T20417] bond_slave_0: entered promiscuous mode [ 1188.474619][T20417] bond_slave_1: entered promiscuous mode [ 1188.480449][T20417] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1188.489101][T20417] macvtap4: entered promiscuous mode [ 1188.494974][T20417] bond0: entered promiscuous mode [ 1188.504752][T20417] macvtap4: entered allmulticast mode [ 1188.511451][T20417] bond0: entered allmulticast mode [ 1188.516967][ T6440] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1188.524180][T20417] bond_slave_0: entered allmulticast mode [ 1188.532107][T20417] bond_slave_1: entered allmulticast mode [ 1188.539293][T20417] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1188.551962][T20417] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1188.561635][ T6440] usb 6-1: device descriptor read/8, error -71 [ 1188.608086][T20418] bond0: left allmulticast mode [ 1188.618000][T20418] bond_slave_0: left allmulticast mode [ 1188.637300][T20418] bond_slave_1: left allmulticast mode [ 1188.653064][T20418] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1188.670599][T20418] bond0: left promiscuous mode [ 1188.689974][ T6440] usb usb6-port1: unable to enumerate USB device [ 1188.703863][T20418] bond_slave_0: left promiscuous mode [ 1188.709442][T20418] bond_slave_1: left promiscuous mode [ 1188.714964][T20418] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1188.759244][ T6573] usbtest 4-1:254.235: couldn't get endpoints, -71 [ 1188.777056][ T6573] usbtest 4-1:254.235: probe with driver usbtest failed with error -71 [ 1188.799197][ T6573] usb 4-1: USB disconnect, device number 46 [ 1189.830208][ T5838] usb 5-1: USB disconnect, device number 47 [ 1190.607610][ T5838] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1190.759565][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.779285][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.807946][ T5838] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1190.817087][ T6440] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1190.829914][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.976838][ T6440] usb 6-1: Using ep0 maxpacket: 8 [ 1190.987552][ T6440] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1190.996113][ T6440] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1191.026415][ T6440] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1191.041622][ T5838] usb 5-1: config 0 descriptor?? [ 1191.072888][T20459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1191.092293][ T6440] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1191.111573][ T6440] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1191.194564][ T6440] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1191.207281][ T6440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.506299][ T6440] usb 6-1: usb_control_msg returned -32 [ 1191.520285][ T6440] usbtmc 6-1:16.0: can't read capabilities [ 1191.607949][ T5838] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1191.803713][ T5838] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE [ 1191.863012][T20472] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 1191.975229][T20465] usbtmc 6-1:16.0: control status returned 0 [ 1192.180493][ T5885] usb 6-1: USB disconnect, device number 116 [ 1192.413939][T20450] cp2112 0003:10C4:EA90.0025: Unsupported transaction 0 [ 1192.425042][T20450] cp2112 0003:10C4:EA90.0025: Error starting transaction: -38 [ 1192.440574][ T5838] cp2112 0003:10C4:EA90.0025: error reading lock byte: -71 [ 1192.462520][ T5838] usb 5-1: USB disconnect, device number 48 [ 1193.031419][T20486] usb usb8: usbfs: process 20486 (syz.3.3713) did not claim interface 0 before use [ 1193.253580][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'. [ 1193.418417][ T5838] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1193.579170][ T5838] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1193.601452][ T5838] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.652056][ T5838] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1193.739811][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.762476][T20501] fuse: blksize only supported for fuseblk [ 1193.947360][ T5885] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1194.022385][ T5838] usb 6-1: usb_control_msg returned -32 [ 1194.034391][ T5838] usbtmc 6-1:16.0: can't read capabilities [ 1194.109931][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.123496][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1194.141238][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.197696][ T5885] usb 2-1: config 0 descriptor?? [ 1195.850084][ T5949] usb 6-1: USB disconnect, device number 117 [ 1196.101469][T20534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1196.124093][T20534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1196.144357][T20534] bridge0: entered promiscuous mode [ 1196.155816][T20534] ip6gretap0: entered promiscuous mode [ 1196.168334][T20534] debugfs: 'hsr1' already exists in 'hsr' [ 1196.174293][T20534] Cannot create hsr debugfs directory [ 1196.362550][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3726'. [ 1196.721875][ T30] audit: type=1326 audit(1767643077.754:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1196.769784][ T30] audit: type=1326 audit(1767643077.754:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1196.829129][ T30] audit: type=1326 audit(1767643077.784:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1196.829503][ T5949] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1196.895157][ T30] audit: type=1326 audit(1767643077.784:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1196.962361][ T30] audit: type=1326 audit(1767643077.784:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1196.988382][ T30] audit: type=1326 audit(1767643077.784:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1197.023414][ T30] audit: type=1326 audit(1767643077.794:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1197.054648][ T30] audit: type=1326 audit(1767643077.794:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1197.227174][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 1197.292728][ T5949] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 1197.301494][ T5949] usb 5-1: config 254 has no interface number 0 [ 1197.307938][ T5949] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1197.355142][ T5949] usb 5-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1197.367120][ T5949] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1197.401335][ T30] audit: type=1326 audit(1767643077.794:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1197.484422][T20555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1197.523684][ T5949] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1197.577557][ T30] audit: type=1326 audit(1767643077.794:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.2.3728" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1197.581717][ T5949] usb 5-1: config 254 interface 235 has no altsetting 0 [ 1197.716506][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1197.736542][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.156849][ T5949] usb 5-1: Product: syz [ 1198.165561][T20561] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1198.194775][T20561] netlink: 'syz.2.3732': attribute type 7 has an invalid length. [ 1198.206647][T20561] netlink: 'syz.2.3732': attribute type 8 has an invalid length. [ 1198.217635][ T5949] usb 5-1: Manufacturer: syz [ 1198.222276][ T5949] usb 5-1: SerialNumber: syz [ 1198.390811][T20540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1198.451451][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 1198.468815][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1198.496596][ T5885] usb 2-1: USB disconnect, device number 7 [ 1198.635871][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3726'. [ 1198.686323][T20539] macvtap1: entered promiscuous mode [ 1198.717860][T20539] .`: entered promiscuous mode [ 1198.722853][T20539] bond_slave_0: entered promiscuous mode [ 1198.730246][T20539] bond_slave_1: entered promiscuous mode [ 1198.937915][T20539] macvtap1: entered allmulticast mode [ 1198.943406][T20539] .`: entered allmulticast mode [ 1199.027431][T20539] bond_slave_0: entered allmulticast mode [ 1199.033287][T20539] bond_slave_1: entered allmulticast mode [ 1199.040596][T20539] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1199.071966][T20540] .`: left allmulticast mode [ 1199.086585][T20540] bond_slave_0: left allmulticast mode [ 1199.097523][T20540] bond_slave_1: left allmulticast mode [ 1199.113521][T20540] .`: left promiscuous mode [ 1199.125090][T20540] bond_slave_0: left promiscuous mode [ 1199.173148][T20540] bond_slave_1: left promiscuous mode [ 1199.270902][ T5949] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 1199.280276][ T5949] usbtest 5-1:254.235: probe with driver usbtest failed with error -71 [ 1199.315861][ T5949] usb 5-1: USB disconnect, device number 49 [ 1199.738270][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801aeab000: rx timeout, send abort [ 1199.747102][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801aeaac00: rx timeout, send abort [ 1199.756065][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801aeab000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1199.770593][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801aeaac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1199.886851][ T5949] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1200.113598][ T5949] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1200.126633][ T5949] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.147991][ T5949] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1200.164291][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.186912][T20420] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1200.343133][T20420] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1200.353542][T20420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.361721][T20420] usb 5-1: Product: syz [ 1200.366448][T20420] usb 5-1: Manufacturer: syz [ 1200.381486][T20420] usb 5-1: SerialNumber: syz [ 1200.403137][ T5949] usb 6-1: usb_control_msg returned -32 [ 1200.414754][T20420] usb 5-1: config 0 descriptor?? [ 1200.427391][ T5949] usbtmc 6-1:16.0: can't read capabilities [ 1200.641907][T20420] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1201.720154][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1202.192401][T20420] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1202.205616][T20420] usb 5-1: USB disconnect, device number 50 [ 1202.560625][ T5885] usb 6-1: USB disconnect, device number 118 [ 1202.863430][T20615] syzkaller0: entered promiscuous mode [ 1202.873929][T20615] syzkaller0: entered allmulticast mode [ 1203.161453][T20624] netlink: 'syz.1.3748': attribute type 13 has an invalid length. [ 1203.926025][T20624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1205.329084][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3752'. [ 1206.359047][T20669] fuse: Invalid gid '0x0000000000000004' [ 1206.385610][T20664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.536836][ T5949] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1206.611106][T20675] xt_connbytes: Forcing CT accounting to be enabled [ 1206.737406][ T5949] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1206.760421][ T5949] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1206.790348][ T5949] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1206.804325][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.895781][T20678] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1207.060123][ T5949] usb 2-1: usb_control_msg returned -32 [ 1207.065787][ T5949] usbtmc 2-1:16.0: can't read capabilities [ 1209.091946][ T5838] usb 2-1: USB disconnect, device number 8 [ 1209.222940][T20703] usb usb1: check_ctrlrecip: process 20703 (syz.1.3768) requesting ep 01 but needs 81 [ 1209.235681][T20703] usb usb1: usbfs: process 20703 (syz.1.3768) did not claim interface 0 before use [ 1209.548153][ T5838] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1209.701783][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1209.731667][ T5838] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1209.771385][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1209.805308][ T5838] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1209.862971][ T5838] usb 2-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 1209.899496][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.917830][ T6573] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1209.936011][ T5838] usb 2-1: Product: syz [ 1209.951756][ T5838] usb 2-1: Manufacturer: syz [ 1209.978039][ T5838] usb 2-1: SerialNumber: syz [ 1209.999405][ T5838] usb 2-1: config 0 descriptor?? [ 1210.032323][ T5838] ti_usb_3410_5052 2-1:0.0: TI USB 3410 1 port adapter converter detected [ 1210.067746][ T6573] usb 3-1: Using ep0 maxpacket: 16 [ 1210.090379][T20710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3771'. [ 1210.101161][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1210.101174][ T30] audit: type=1326 audit(1767643091.124:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20706 comm="syz.4.3770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1210.139989][ T5838] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1210.158789][ T6573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1210.176572][T20707] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1210.186083][ T6573] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1210.212298][ T30] audit: type=1326 audit(1767643091.194:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20706 comm="syz.4.3770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1210.245051][ T6573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.285578][ T6573] usb 3-1: Product: syz [ 1210.292053][ T5838] usb 2-1: USB disconnect, device number 9 [ 1210.309871][ T6573] usb 3-1: Manufacturer: syz [ 1210.315867][ T6573] usb 3-1: SerialNumber: syz [ 1210.326382][ T5838] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1210.338947][ T30] audit: type=1326 audit(1767643091.194:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20706 comm="syz.4.3770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1210.390757][ T6573] usb 3-1: config 0 descriptor?? [ 1210.401195][ T5838] ti_usb_3410_5052 2-1:0.0: device disconnected [ 1210.411786][ T6573] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1210.454373][ T30] audit: type=1326 audit(1767643091.204:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20706 comm="syz.4.3770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1210.489183][ T6573] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1210.559681][ T30] audit: type=1326 audit(1767643091.204:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20706 comm="syz.4.3770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1210.604231][ T30] audit: type=1326 audit(1767643091.204:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20706 comm="syz.4.3770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1210.723931][T20714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1210.734374][ T30] audit: type=1326 audit(1767643091.274:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20706 comm="syz.4.3770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1210.768150][ T30] audit: type=1326 audit(1767643091.274:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20706 comm="syz.4.3770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1210.844585][T20717] kvm: user requested TSC rate below hardware speed [ 1211.053729][ T6573] em28xx 3-1:0.0: chip ID is em2765 [ 1211.182796][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 1211.438415][ T5838] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1211.471282][T20705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.507887][T20705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.548428][ T5885] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1211.563664][T20705] netlink: 'syz.2.3769': attribute type 4 has an invalid length. [ 1211.603780][ T5838] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1211.615686][ T5838] usb 2-1: config 0 has no interface number 0 [ 1211.626430][ T5838] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1211.643796][T20739] netlink: 'syz.2.3769': attribute type 4 has an invalid length. [ 1211.659260][ T5838] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1211.669061][ T5838] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1211.679513][ T5838] usb 2-1: Manufacturer: syz [ 1211.692201][ T5838] usb 2-1: config 0 descriptor?? [ 1211.710490][ T5838] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input48 [ 1211.721555][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 1211.733463][ T5885] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 1211.750065][ T5885] usb 5-1: config 254 has no interface number 0 [ 1211.774883][ T5885] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1211.793493][ T5885] usb 5-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1211.814706][T20743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.873049][ T5885] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1211.890092][ T5885] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1211.929439][ T5885] usb 5-1: config 254 interface 235 has no altsetting 0 [ 1211.943235][T20743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.014250][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1212.286605][T20747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3783'. [ 1212.369302][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.397747][ T5885] usb 5-1: Product: syz [ 1212.410501][ T5885] usb 5-1: Manufacturer: syz [ 1212.430815][ T5885] usb 5-1: SerialNumber: syz [ 1212.461663][T20729] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1212.493694][ T6573] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1212.503072][ T6573] em28xx 3-1:0.0: board has no eeprom [ 1212.568394][ T6573] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1212.576364][ T6573] em28xx 3-1:0.0: dvb set to bulk mode. [ 1212.592430][ T5838] em28xx 3-1:0.0: Binding DVB extension [ 1212.624971][ T6573] usb 3-1: USB disconnect, device number 17 [ 1212.699254][ T6573] em28xx 3-1:0.0: Disconnecting em28xx [ 1212.751696][T20728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3779'. [ 1212.828832][ T5838] em28xx 3-1:0.0: Registering input extension [ 1212.845441][ T6573] em28xx 3-1:0.0: Closing input extension [ 1212.908386][ T6573] em28xx 3-1:0.0: Freeing device [ 1212.921955][T20728] macvtap2: entered promiscuous mode [ 1212.953097][T20728] .`: entered promiscuous mode [ 1212.970581][T20728] bond_slave_0: entered promiscuous mode [ 1212.992879][T20728] bond_slave_1: entered promiscuous mode [ 1213.015620][T20728] macvtap2: entered allmulticast mode [ 1213.037182][T20728] .`: entered allmulticast mode [ 1213.054424][T20728] bond_slave_0: entered allmulticast mode [ 1213.076777][T20728] bond_slave_1: entered allmulticast mode [ 1213.102271][T20728] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1213.125640][T20754] input: syz1 as /devices/virtual/input/input50 [ 1213.162351][ T5885] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 1213.188250][ T5885] usbtest 5-1:254.235: probe with driver usbtest failed with error -71 [ 1213.246492][ T5885] usb 5-1: USB disconnect, device number 51 [ 1214.166259][ T5203] Dev loop6: unable to read RDB block 7 [ 1214.171533][T18755] usb 2-1: USB disconnect, device number 10 [ 1214.200410][ T5203] loop6: unable to read partition table [ 1214.359532][ T6573] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1214.398343][ T5203] loop6: partition table beyond EOD, truncated [ 1214.630915][ T6573] usb 5-1: Using ep0 maxpacket: 16 [ 1214.645354][ T6573] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1214.678582][ T6573] usb 5-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 1214.701084][ T6573] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1214.732493][ T6573] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1214.753040][T20774] FAULT_INJECTION: forcing a failure. [ 1214.753040][T20774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1214.848478][T20774] CPU: 1 UID: 0 PID: 20774 Comm: syz.1.3791 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.848505][T20774] Tainted: [L]=SOFTLOCKUP [ 1214.848511][T20774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1214.848521][T20774] Call Trace: [ 1214.848528][T20774] [ 1214.848535][T20774] dump_stack_lvl+0xe8/0x150 [ 1214.848560][T20774] should_fail_ex+0x414/0x560 [ 1214.848589][T20774] prepare_alloc_pages+0x22b/0x650 [ 1214.848612][T20774] __alloc_frozen_pages_noprof+0x123/0x370 [ 1214.848634][T20774] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1214.848657][T20774] ? af_alg_wait_for_data+0x1a5/0x6a0 [ 1214.848674][T20774] ? policy_nodemask+0x27c/0x720 [ 1214.848697][T20774] alloc_pages_mpol+0x232/0x4a0 [ 1214.848719][T20774] vma_alloc_folio_noprof+0xe4/0x200 [ 1214.848740][T20774] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1214.848768][T20774] folio_prealloc+0x30/0x180 [ 1214.848794][T20774] do_wp_page+0x1231/0x5810 [ 1214.848830][T20774] ? __pfx_do_wp_page+0x10/0x10 [ 1214.848850][T20774] ? do_raw_spin_lock+0x121/0x290 [ 1214.848874][T20774] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1214.848909][T20774] handle_mm_fault+0x14c5/0x32b0 [ 1214.848942][T20774] ? handle_mm_fault+0xdb/0x32b0 [ 1214.848971][T20774] ? __pfx_handle_mm_fault+0x10/0x10 [ 1214.848992][T20774] ? lock_vma_under_rcu+0x42c/0x4a0 [ 1214.849028][T20774] ? ksys_write+0x22a/0x250 [ 1214.849049][T20774] do_user_addr_fault+0xa7c/0x1380 [ 1214.849070][T20774] ? rcu_is_watching+0x15/0xb0 [ 1214.849090][T20774] ? trace_page_fault_user+0x84/0x1c0 [ 1214.849108][T20774] exc_page_fault+0x71/0xd0 [ 1214.849125][T20774] asm_exc_page_fault+0x26/0x30 [ 1214.849141][T20774] RIP: 0023:0xf72291c2 [ 1214.849154][T20774] Code: c7 5d de 26 00 56 53 83 ec 1c 8b 6c 24 30 8b 55 1c 65 a1 68 00 00 00 39 c2 0f 84 11 01 00 00 80 7d 18 02 74 2b b8 08 00 00 00 0f c1 45 00 83 c0 08 85 c0 0f 88 0e 01 00 00 a8 01 75 7a 31 d2 [ 1214.849169][T20774] RSP: 002b:00000000f54ec350 EFLAGS: 00010293 [ 1214.849183][T20774] RAX: 0000000000000008 RBX: 00000000f7496ff4 RCX: 00000000ffffffff [ 1214.849194][T20774] RDX: 0000000000000000 RSI: 00000000f7325176 RDI: 00000000f7496ff4 [ 1214.849204][T20774] RBP: 00000000f7ff6e40 R08: 0000000000000000 R09: 0000000000000000 [ 1214.849214][T20774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1214.849224][T20774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1214.849246][T20774] [ 1214.849435][T20774] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1215.160611][ T6573] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.170903][ T6573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.447773][ T6573] usb 5-1: Product: syz [ 1215.452026][ T6573] usb 5-1: Manufacturer: syz [ 1215.481344][ T6573] usb 5-1: SerialNumber: syz [ 1215.729475][ T6573] usb 5-1: USB disconnect, device number 52 [ 1215.943369][T20781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1216.723599][T20786] bridge0: port 3(gretap0) entered blocking state [ 1216.730407][T20786] bridge0: port 3(gretap0) entered disabled state [ 1216.778599][T20786] gretap0: entered allmulticast mode [ 1216.818205][T20798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3797'. [ 1216.932204][T20786] gretap0: entered promiscuous mode [ 1217.398939][T20786] bridge0: port 3(gretap0) entered blocking state [ 1217.405617][T20786] bridge0: port 3(gretap0) entered forwarding state [ 1218.828496][T20829] usb usb8: usbfs: process 20829 (syz.3.3806) did not claim interface 0 before use [ 1219.735175][T20841] ptrace attach of "./syz-executor exec"[17364] was attempted by "./syz-executor exec"[20841] [ 1219.855480][T20842] fuse: Unknown parameter '' [ 1221.669180][T20863] FAULT_INJECTION: forcing a failure. [ 1221.669180][T20863] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.693488][T20863] CPU: 1 UID: 0 PID: 20863 Comm: syz.1.3814 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.693525][T20863] Tainted: [L]=SOFTLOCKUP [ 1221.693533][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1221.693547][T20863] Call Trace: [ 1221.693555][T20863] [ 1221.693565][T20863] dump_stack_lvl+0xe8/0x150 [ 1221.693598][T20863] should_fail_ex+0x414/0x560 [ 1221.693638][T20863] should_failslab+0xa8/0x100 [ 1221.693665][T20863] __kmalloc_noprof+0xdf/0x800 [ 1221.693686][T20863] ? sock_kmalloc+0xd6/0x160 [ 1221.693717][T20863] sock_kmalloc+0xd6/0x160 [ 1221.693747][T20863] hash_recvmsg+0x1d4/0x840 [ 1221.693771][T20863] ? hash_check_key+0x173/0x1e0 [ 1221.693795][T20863] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 1221.693822][T20863] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 1221.693848][T20863] sock_recvmsg_nosec+0x186/0x1c0 [ 1221.693885][T20863] ____sys_recvmsg+0x3aa/0x460 [ 1221.693921][T20863] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1221.693946][T20863] ? get_compat_msghdr+0x37e/0x4a0 [ 1221.693985][T20863] ? rcu_is_watching+0x15/0xb0 [ 1221.694011][T20863] ? ___sys_recvmsg+0x1c4/0x510 [ 1221.694046][T20863] ___sys_recvmsg+0x1b5/0x510 [ 1221.694071][T20863] ? _parse_integer_limit+0x1ae/0x1f0 [ 1221.694109][T20863] ? __pfx____sys_recvmsg+0x10/0x10 [ 1221.694134][T20863] ? kstrtoull+0x12f/0x1d0 [ 1221.694169][T20863] ? __fget_files+0x2a/0x420 [ 1221.694230][T20863] do_recvmmsg+0x36a/0x770 [ 1221.694267][T20863] ? __pfx_do_recvmmsg+0x10/0x10 [ 1221.694295][T20863] ? ksys_write+0x1cb/0x250 [ 1221.694334][T20863] ? __fget_files+0x3a0/0x420 [ 1221.694378][T20863] __sys_recvmmsg+0x19d/0x280 [ 1221.694407][T20863] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1221.694439][T20863] ? __pfx_ksys_write+0x10/0x10 [ 1221.694466][T20863] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1221.694501][T20863] __do_fast_syscall_32+0x1dc/0x570 [ 1221.694525][T20863] ? lockdep_hardirqs_on+0x7b/0x110 [ 1221.694546][T20863] ? do_fast_syscall_32+0x34/0x80 [ 1221.694569][T20863] ? irqentry_exit+0x10f/0x670 [ 1221.694595][T20863] do_fast_syscall_32+0x34/0x80 [ 1221.694620][T20863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1221.694647][T20863] RIP: 0023:0xf70fd539 [ 1221.694666][T20863] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1221.694686][T20863] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1221.694710][T20863] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800053c0 [ 1221.694726][T20863] RDX: 0000000000000a32 RSI: 0000000000000060 RDI: 0000000000000000 [ 1221.694740][T20863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1221.694754][T20863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1221.694768][T20863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1221.694800][T20863] [ 1222.646834][T20420] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1222.966792][T20420] usb 3-1: Using ep0 maxpacket: 16 [ 1222.984019][T20420] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1222.992273][T20420] usb 3-1: config 0 has no interface number 0 [ 1223.021422][T20420] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1223.030744][T20420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.038852][T20420] usb 3-1: Product: syz [ 1223.043102][T20420] usb 3-1: Manufacturer: syz [ 1223.048172][T20420] usb 3-1: SerialNumber: syz [ 1223.055040][T20420] usb 3-1: config 0 descriptor?? [ 1223.065742][T20420] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1224.323696][T20878] input: syz1 as /devices/virtual/input/input52 [ 1224.386528][T20897] sock: sock_timestamping_bind_phc: sock not bind to device [ 1224.798614][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1225.208477][T20911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1225.278253][T18694] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1225.365482][T20917] fuse: Unknown parameter '' [ 1225.448124][T18694] usb 5-1: Using ep0 maxpacket: 16 [ 1225.456408][T18694] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 1225.474483][T18694] usb 5-1: config 254 has no interface number 0 [ 1225.488173][T18694] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1225.530238][T18694] usb 5-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1225.551846][T18694] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1225.572722][T18694] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1225.605405][T18694] usb 5-1: config 254 interface 235 has no altsetting 0 [ 1225.631633][ T5885] usb 3-1: USB disconnect, device number 18 [ 1225.681690][T18694] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1225.729458][T18694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.869715][T18694] usb 5-1: Product: syz [ 1225.902916][T18694] usb 5-1: Manufacturer: syz [ 1225.916312][T18694] usb 5-1: SerialNumber: syz [ 1225.945963][T20909] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1226.033091][T20921] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1226.046481][T20921] input: syz1 as /devices/virtual/input/input53 [ 1226.388244][T20924] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 1226.572945][T18694] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 1226.630003][T20924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1226.651322][T18694] usbtest 5-1:254.235: probe with driver usbtest failed with error -71 [ 1226.697940][ T6440] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1226.740960][T18694] usb 5-1: USB disconnect, device number 53 [ 1226.757381][T20928] gretap1: entered promiscuous mode [ 1226.818156][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1226.865749][T20928] bond1: (slave gretap1): making interface the new active one [ 1226.903959][ T6440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.936556][ T6440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.958568][T20928] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1226.987762][ T6440] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1226.988768][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 1227.082298][ T6440] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1227.123488][ T6440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.140405][ T5885] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 1227.157972][ T5885] usb 3-1: config 254 has no interface number 0 [ 1227.160080][ T6440] usb 2-1: config 0 descriptor?? [ 1227.174595][ T5885] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1227.208035][ T5885] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1227.286106][ T5885] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1227.385814][ T5885] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1227.521811][ T5885] usb 3-1: config 254 interface 235 has no altsetting 0 [ 1227.541613][ T5885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1227.552250][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.727124][T20420] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1227.730317][ T5885] usb 3-1: Product: syz [ 1227.743188][ T5885] usb 3-1: Manufacturer: syz [ 1227.749288][ T5885] usb 3-1: SerialNumber: syz [ 1227.771954][ T6440] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 1227.773866][T20929] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1227.840448][ T6440] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1227.898882][ T6440] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1228.036263][T18694] usb 2-1: USB disconnect, device number 11 [ 1228.047229][T18755] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1228.082832][T20420] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1228.140934][T20420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.159459][T20924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3826'. [ 1228.175833][T20420] usb 4-1: Product: syz [ 1228.180240][T20924] bond1: entered promiscuous mode [ 1228.190223][T20420] usb 4-1: Manufacturer: syz [ 1228.194882][T20420] usb 4-1: SerialNumber: syz [ 1228.200601][T20924] bond1: entered allmulticast mode [ 1228.205770][T20924] gretap1: entered allmulticast mode [ 1228.254922][T20420] usb 4-1: config 0 descriptor?? [ 1228.279102][T18755] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.302556][T20420] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 1228.329521][T18755] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1228.345037][T20420] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1228.380885][T18755] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1228.395047][T20420] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1228.419675][T18755] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1228.433031][ T5885] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 1228.444937][T18755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.484258][T18755] usb 5-1: Product: syz [ 1228.498950][T18755] usb 5-1: Manufacturer: syz [ 1228.507641][ T5885] usbtest 3-1:254.235: probe with driver usbtest failed with error -71 [ 1228.529432][T18755] usb 5-1: SerialNumber: syz [ 1228.572035][T20942] fido_id[20942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1228.598479][ T5885] usb 3-1: USB disconnect, device number 19 [ 1229.246295][T20939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.308749][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3833'. [ 1229.337708][T20939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.562882][T18694] usb 4-1: USB disconnect, device number 47 [ 1231.192035][T18755] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1231.208230][T18755] uvcvideo 5-1:220.0: No valid video chain found. [ 1231.229571][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1231.244989][T18755] usb 5-1: USB disconnect, device number 54 [ 1231.679646][T20980] xfrm0: entered promiscuous mode [ 1231.684860][T20980] xfrm0: entered allmulticast mode [ 1232.256781][T18755] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1232.491067][T18755] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1232.509403][T18755] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1232.510106][ T30] audit: type=1326 audit(1767643113.524:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1232.719956][ T30] audit: type=1326 audit(1767643113.584:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1232.730259][T18755] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1232.893281][ T30] audit: type=1326 audit(1767643113.584:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1232.932923][ T30] audit: type=1326 audit(1767643113.584:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1232.966802][T18755] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1233.004700][ T30] audit: type=1326 audit(1767643113.584:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1233.070002][T18755] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1233.323661][T18755] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1233.336178][T18755] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1233.360387][T18755] usb 5-1: Product: syz [ 1233.364809][T18755] usb 5-1: Manufacturer: syz [ 1233.519288][ T30] audit: type=1326 audit(1767643113.584:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1233.544575][ T30] audit: type=1326 audit(1767643113.584:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1233.572461][ T30] audit: type=1326 audit(1767643113.584:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1233.598047][ T30] audit: type=1326 audit(1767643113.584:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1233.601152][T18755] cdc_wdm 5-1:1.0: skipping garbage [ 1233.980774][T20982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.001905][T20982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.067374][T20982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.096784][T18755] cdc_wdm 5-1:1.0: skipping garbage [ 1234.102648][T20982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.110498][ T30] audit: type=1326 audit(1767643113.584:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20986 comm="syz.2.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1234.143075][T18755] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1234.218179][T18755] cdc_wdm 5-1:1.0: Unknown control protocol [ 1234.289629][T18755] usb 5-1: USB disconnect, device number 55 [ 1234.449895][T21004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1234.529073][T21004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1234.536347][T21004] IPv6: NLM_F_CREATE should be set when creating new route [ 1235.191654][T21013] fuse: Bad value for 'fd' [ 1235.926771][T18755] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 1236.250277][T18755] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.262357][T18755] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.288383][T18755] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1236.306250][T18755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.643878][T18755] usb 6-1: usb_control_msg returned -32 [ 1236.672942][T18755] usbtmc 6-1:16.0: can't read capabilities [ 1237.800968][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3860'. [ 1237.940756][T21052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1237.948066][T21052] IPv6: NLM_F_CREATE should be set when creating new route [ 1238.636347][ T5949] usb 6-1: USB disconnect, device number 119 [ 1238.935790][T21057] FAULT_INJECTION: forcing a failure. [ 1238.935790][T21057] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.047572][T21057] CPU: 0 UID: 0 PID: 21057 Comm: syz.3.3861 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.047609][T21057] Tainted: [L]=SOFTLOCKUP [ 1239.047618][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1239.047632][T21057] Call Trace: [ 1239.047641][T21057] [ 1239.047651][T21057] dump_stack_lvl+0xe8/0x150 [ 1239.047685][T21057] should_fail_ex+0x414/0x560 [ 1239.047726][T21057] should_failslab+0xa8/0x100 [ 1239.047756][T21057] kmem_cache_alloc_noprof+0x88/0x710 [ 1239.047801][T21057] ? skb_clone+0x212/0x3a0 [ 1239.047834][T21057] skb_clone+0x212/0x3a0 [ 1239.047869][T21057] __netlink_deliver_tap+0x404/0x850 [ 1239.047899][T21057] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.047921][T21057] netlink_deliver_tap+0x19c/0x1b0 [ 1239.047942][T21057] netlink_sendskb+0x68/0x140 [ 1239.047961][T21057] netlink_unicast+0x397/0x9e0 [ 1239.047977][T21057] ? __asan_memcpy+0x40/0x70 [ 1239.048008][T21057] ? __pfx_netlink_unicast+0x10/0x10 [ 1239.048032][T21057] netlink_rcv_skb+0x28c/0x470 [ 1239.048052][T21057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1239.048077][T21057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1239.048095][T21057] ? genl_rcv+0x19/0x40 [ 1239.048130][T21057] ? down_read+0x274/0x2e0 [ 1239.048147][T21057] ? genl_rcv+0xd/0x40 [ 1239.048172][T21057] genl_rcv+0x28/0x40 [ 1239.048194][T21057] netlink_unicast+0x82f/0x9e0 [ 1239.048217][T21057] ? __pfx_netlink_unicast+0x10/0x10 [ 1239.048234][T21057] ? __alloc_skb+0x198/0x3a0 [ 1239.048250][T21057] ? netlink_sendmsg+0x642/0xb30 [ 1239.048269][T21057] ? skb_put+0x11b/0x210 [ 1239.048288][T21057] netlink_sendmsg+0x805/0xb30 [ 1239.048315][T21057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.048337][T21057] ? __import_iovec+0x5d4/0x7f0 [ 1239.048355][T21057] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1239.048376][T21057] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1239.048392][T21057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.048413][T21057] __sock_sendmsg+0x21c/0x270 [ 1239.048438][T21057] ____sys_sendmsg+0x505/0x820 [ 1239.048462][T21057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.048484][T21057] ? kstrtouint+0x6e/0xe0 [ 1239.048513][T21057] ___sys_sendmsg+0x21f/0x2a0 [ 1239.048533][T21057] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.048552][T21057] ? get_pid_task+0x20/0x1f0 [ 1239.048572][T21057] ? get_pid_task+0x20/0x1f0 [ 1239.048590][T21057] ? get_pid_task+0x20/0x1f0 [ 1239.048632][T21057] ? __fget_files+0x2a/0x420 [ 1239.048651][T21057] ? __fget_files+0x3a0/0x420 [ 1239.048678][T21057] __sys_sendmsg+0x164/0x220 [ 1239.048698][T21057] ? __pfx___sys_sendmsg+0x10/0x10 [ 1239.048724][T21057] ? __pfx_ksys_write+0x10/0x10 [ 1239.048747][T21057] __do_fast_syscall_32+0x1dc/0x570 [ 1239.048764][T21057] ? lockdep_hardirqs_on+0x7b/0x110 [ 1239.048779][T21057] ? do_fast_syscall_32+0x34/0x80 [ 1239.048802][T21057] ? irqentry_exit+0x10f/0x670 [ 1239.048820][T21057] do_fast_syscall_32+0x34/0x80 [ 1239.048838][T21057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.048858][T21057] RIP: 0023:0xf702d539 [ 1239.048872][T21057] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1239.048887][T21057] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1239.048904][T21057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 1239.048915][T21057] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.048925][T21057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.048935][T21057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1239.048944][T21057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.048966][T21057] [ 1239.882395][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1239.882422][ T30] audit: type=1326 audit(1767643120.844:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1239.951455][ T30] audit: type=1326 audit(1767643120.844:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1240.355573][ T30] audit: type=1326 audit(1767643120.844:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1240.418143][T13422] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1240.561159][ T30] audit: type=1326 audit(1767643120.844:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1240.606097][T13422] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1240.662903][ T30] audit: type=1326 audit(1767643120.844:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1240.685108][T13422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.685139][T13422] usb 2-1: Product: syz [ 1240.685156][T13422] usb 2-1: Manufacturer: syz [ 1240.685172][T13422] usb 2-1: SerialNumber: syz [ 1240.902722][T21086] binder: 21085:21086 ioctl c0306201 800003c0 returned -14 [ 1240.933173][T13422] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1241.041206][ T6573] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1241.056936][ T30] audit: type=1326 audit(1767643120.844:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1241.187065][ T30] audit: type=1326 audit(1767643120.844:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1241.254482][T21088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3871'. [ 1241.377842][ T30] audit: type=1326 audit(1767643120.844:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1241.486187][ T30] audit: type=1326 audit(1767643120.844:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1241.578194][T13422] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1241.594220][T21076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3867'. [ 1241.607532][ T5949] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1241.642671][ T30] audit: type=1326 audit(1767643120.844:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21068 comm="syz.3.3866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1241.669215][T21076] usb usb8: usbfs: process 21076 (syz.1.3867) did not claim interface 0 before use [ 1241.711308][T18755] usb 2-1: USB disconnect, device number 12 [ 1241.770211][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1241.803833][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.838135][ T5949] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1241.960720][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.994581][ T5949] usb 5-1: config 0 descriptor?? [ 1242.213182][ T6573] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1242.223311][ T6573] ath9k_htc: Failed to initialize the device [ 1242.246957][T18755] usb 2-1: ath9k_htc: USB layer deinitialized [ 1242.474484][T21088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.631507][T21088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.995325][ T5949] usbhid 5-1:0.0: can't add hid device: -71 [ 1243.009972][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1243.026605][ T5949] usb 5-1: USB disconnect, device number 56 [ 1243.970305][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.977991][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.992789][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1244.992809][ T30] audit: type=1326 audit(1767643125.994:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.139157][ T30] audit: type=1326 audit(1767643125.994:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.231974][ T30] audit: type=1326 audit(1767643125.994:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.610633][ T30] audit: type=1326 audit(1767643125.994:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.633408][ T30] audit: type=1326 audit(1767643125.994:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.714262][ T30] audit: type=1326 audit(1767643125.994:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.739047][ T30] audit: type=1326 audit(1767643125.994:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.787321][ T30] audit: type=1326 audit(1767643125.994:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.814483][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1245.823799][T21136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1245.838851][T13422] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1245.914960][ T30] audit: type=1326 audit(1767643125.994:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.953338][ T30] audit: type=1326 audit(1767643126.004:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1245.997721][T13422] usb 3-1: Using ep0 maxpacket: 16 [ 1246.032748][T13422] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.093133][T13422] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.105129][T13422] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1246.115781][T13422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.543796][T13422] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1246.586761][ T5949] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1246.615276][T21149] loop5: detected capacity change from 0 to 7 [ 1246.638076][T10254] Dev loop5: unable to read RDB block 7 [ 1246.646925][T10254] loop5: AHDI p1 p2 p3 [ 1246.651515][T10254] loop5: partition table partially beyond EOD, truncated [ 1246.674150][T10254] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1246.684234][T10254] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1246.695754][T21150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1246.708609][T21149] Dev loop5: unable to read RDB block 7 [ 1246.734084][ T5949] usb 6-1: device descriptor read/64, error -71 [ 1246.745910][ T6440] usb 3-1: USB disconnect, device number 20 [ 1246.762124][T21149] loop5: AHDI p1 p2 p3 [ 1246.793349][T21149] loop5: partition table partially beyond EOD, truncated [ 1246.838292][T21149] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1246.855927][T21149] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1246.949228][ T6007] wlan0: Trigger new scan to find an IBSS to join [ 1246.977146][ T5949] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1247.106939][T21153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3888'. [ 1247.138644][ T5949] usb 6-1: device descriptor read/64, error -71 [ 1247.260264][ T5949] usb usb6-port1: attempt power cycle [ 1247.540078][T21159] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1247.571795][T21159] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1247.617384][ T5949] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1247.659036][ T5949] usb 6-1: device descriptor read/8, error -71 [ 1247.708473][T21169] binder: 21163:21169 ioctl c0306201 80000080 returned -14 [ 1247.715885][T21165] binder: 21163:21165 ioctl c0306201 80000080 returned -14 [ 1247.833824][T21169] binder: 21163:21169 ioctl d000941e 0 returned -22 [ 1247.876640][T21177] netlink: 'syz.3.3897': attribute type 62 has an invalid length. [ 1247.876859][T18755] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 1247.899379][ T5949] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1247.938057][ T5949] usb 6-1: device descriptor read/8, error -71 [ 1248.053449][ T5949] usb usb6-port1: unable to enumerate USB device [ 1248.147630][T13422] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1248.169796][T21181] xt_policy: neither incoming nor outgoing policy selected [ 1248.312846][T13422] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1248.338124][T13422] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 65535, setting to 64 [ 1248.388150][T13422] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1248.400954][T13422] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1248.549873][T13422] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1248.598261][T13422] usb 4-1: Product: syz [ 1248.602525][T13422] usb 4-1: Manufacturer: syz [ 1248.618625][T13422] usb 4-1: SerialNumber: syz [ 1248.640262][T13422] usb 4-1: config 0 descriptor?? [ 1248.660904][T13422] hub 4-1:0.0: bad descriptor, ignoring hub [ 1248.669257][T13422] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1248.710482][T13422] usb 4-1: selecting invalid altsetting 0 [ 1249.171903][T21177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.186009][T21177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.459711][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3903'. [ 1249.472634][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3903'. [ 1249.485042][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3903'. [ 1249.501344][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3903'. [ 1249.749003][T13422] usb 4-1: USB disconnect, device number 48 [ 1250.330481][T21213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1250.402246][T21208] tipc: Enabled bearer , priority 0 [ 1250.430664][T21217] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 8, id = 0 [ 1250.431028][T21212] IPVS: stopping backup sync thread 21217 ... [ 1250.502625][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3910'. [ 1250.539924][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3910'. [ 1250.595814][T21219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.684000][T21219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.128250][T13422] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1251.161645][T18755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1251.178768][T18755] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1251.188436][T18755] usb 3-1: can't read configurations, error -71 [ 1251.297776][T13422] usb 2-1: Using ep0 maxpacket: 32 [ 1251.305274][T13422] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.527802][T18694] tipc: Node number set to 1045435318 [ 1251.948465][T13422] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1251.983011][ T6399] wlan0: Trigger new scan to find an IBSS to join [ 1252.126652][T13422] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1252.247808][T13422] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1252.323178][T13422] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1252.415126][T13422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.471003][T13422] usb 2-1: Product: syz [ 1252.478228][T13422] usb 2-1: Manufacturer: syz [ 1252.484105][T13422] usb 2-1: SerialNumber: syz [ 1252.913340][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1252.913358][ T30] audit: type=1326 audit(1767643133.934:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1252.956191][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1252.966892][T18755] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1253.005048][T13422] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input55 [ 1253.018377][ T30] audit: type=1326 audit(1767643133.934:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.018434][ T30] audit: type=1326 audit(1767643133.934:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.018481][ T30] audit: type=1326 audit(1767643133.934:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.018527][ T30] audit: type=1326 audit(1767643133.934:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.018574][ T30] audit: type=1326 audit(1767643133.934:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.018621][ T30] audit: type=1326 audit(1767643133.944:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.018668][ T30] audit: type=1326 audit(1767643133.944:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.018717][ T30] audit: type=1326 audit(1767643133.944:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.018764][ T30] audit: type=1326 audit(1767643133.944:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.5.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1253.303440][T18755] usb 3-1: Using ep0 maxpacket: 16 [ 1253.386765][T18755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.398335][T18755] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1253.425902][T21229] SET target dimension over the limit! [ 1253.431835][T18755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.450577][T18755] usb 3-1: config 0 descriptor?? [ 1253.619351][T13422] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1253.632948][T13422] (id 0x00) [ 1253.821134][T17691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.853367][T21252] vlan0: entered promiscuous mode [ 1253.868939][T21252] vlan0: entered allmulticast mode [ 1253.887027][T21252] hsr_slave_1: entered allmulticast mode [ 1253.935502][ C1] ------------[ cut here ]------------ [ 1253.941167][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1253.951075][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: modprobe/21249 [ 1253.961725][ C1] Modules linked in: [ 1253.965666][ C1] CPU: 1 UID: 0 PID: 21249 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.976507][ C1] Tainted: [L]=SOFTLOCKUP [ 1253.980909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1253.991063][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1253.997396][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1254.017112][ C1] RSP: 0018:ffffc90000a08858 EFLAGS: 00010246 [ 1254.023222][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1254.031462][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92e440 [ 1254.039519][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1254.047584][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88807a56bde8 [ 1254.055603][ C1] R13: 0000000000000000 R14: ffffffff8f92e440 R15: ffff8880625b3138 [ 1254.063652][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1254.072650][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1254.079305][ C1] CR2: 00007f703e03a6b0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1254.087372][ C1] DR0: ffffffffffffffff DR1: 00000000000001f4 DR2: 0400000000000083 [ 1254.095398][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1254.103455][ C1] Call Trace: [ 1254.106802][ C1] [ 1254.109693][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1254.115029][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1254.120400][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 1254.126268][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1254.132687][ C1] ? __alloc_skb+0x27e/0x3a0 [ 1254.137351][ C1] ? __ieee80211_beacon_get+0xce1/0x1880 [ 1254.143029][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 1254.148582][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1254.154185][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1254.159724][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1254.164706][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1254.170857][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 1254.176464][ C1] __iterate_interfaces+0x2ab/0x590 [ 1254.181739][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1254.187925][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1254.195171][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1254.201330][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1254.208633][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 1254.213871][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1254.219770][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 1254.225177][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1254.230971][ C1] ? read_tsc+0x9/0x20 [ 1254.235105][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1254.240297][ C1] handle_softirqs+0x22b/0x7c0 [ 1254.245112][ C1] ? __irq_exit_rcu+0x60/0x150 [ 1254.249963][ C1] __irq_exit_rcu+0x60/0x150 [ 1254.254591][ C1] irq_exit_rcu+0x9/0x30 [ 1254.258941][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1254.264622][ C1] [ 1254.267637][ C1] [ 1254.270643][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1254.276716][ C1] RIP: 0010:free_swap_cache+0x229/0x300 [ 1254.282319][ C1] Code: bd af a2 ff 40 84 ed 75 30 e8 b3 ac a2 ff eb 19 ff c5 e8 aa ac a2 ff 31 ff 89 ee e8 e1 b0 a2 ff 85 ed 7e 34 e8 98 ac a2 ff 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 83 ac a2 ff 48 89 [ 1254.302243][ C1] RSP: 0018:ffffc9000cb47770 EFLAGS: 00000293 [ 1254.308365][ C1] RAX: ffffffff821e499b RBX: ffff8880345e73b8 RCX: ffff88807d97db80 [ 1254.316356][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1254.324414][ C1] RBP: 0000000000000000 R08: ffffea00004971c7 R09: 1ffffd4000092e38 [ 1254.332453][ C1] R10: dffffc0000000000 R11: fffff94000092e39 R12: dffffc0000000000 [ 1254.340623][ C1] R13: 1ffffd4000092e39 R14: ffffea00004971c8 R15: 1ffffd4000092e38 [ 1254.348709][ C1] ? free_swap_cache+0x9b/0x300 [ 1254.353633][ C1] free_pages_and_swap_cache+0x17a/0x520 [ 1254.359360][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1254.365585][ C1] ? call_rcu+0x644/0x890 [ 1254.370003][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1254.375278][ C1] tlb_flush_mmu+0x3a0/0x680 [ 1254.379942][ C1] ? __pfx_down_write+0x10/0x10 [ 1254.384855][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 1254.389522][ C1] exit_mmap+0x439/0xb10 [ 1254.393804][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1254.399154][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1254.403978][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1254.409726][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1254.414456][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1254.419756][ C1] __mmput+0x118/0x430 [ 1254.423867][ C1] exit_mm+0x169/0x230 [ 1254.428010][ C1] do_exit+0x627/0x22f0 [ 1254.432218][ C1] ? __pfx_do_exit+0x10/0x10 [ 1254.436889][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1254.441990][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1254.447354][ C1] do_group_exit+0x21c/0x2d0 [ 1254.452019][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1254.457104][ C1] x64_sys_call+0x2210/0x2210 [ 1254.461846][ C1] do_syscall_64+0xec/0xf80 [ 1254.466384][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.472537][ C1] ? trace_irq_disable+0x37/0x100 [ 1254.477626][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1254.482343][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.488295][ C1] RIP: 0033:0x7f703e03a6c5 [ 1254.492746][ C1] Code: Unable to access opcode bytes at 0x7f703e03a69b. [ 1254.499824][ C1] RSP: 002b:00007ffeaa23a1b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1254.508303][ C1] RAX: ffffffffffffffda RBX: 00007f703e13bfe8 RCX: 00007f703e03a6c5 [ 1254.516316][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 1254.524363][ C1] RBP: 0000000000000001 R08: 00007ffeaa23a148 R09: 0000000000000000 [ 1254.532394][ C1] R10: 00007ffeaa239fe0 R11: 0000000000000206 R12: 0000000000000000 [ 1254.540548][ C1] R13: 0000000000000001 R14: 00007f703e13a680 R15: 00007f703e13c000 [ 1254.548587][ C1] [ 1254.551703][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1254.559006][ C1] CPU: 1 UID: 0 PID: 21249 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 1254.569822][ C1] Tainted: [L]=SOFTLOCKUP [ 1254.574168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1254.584342][ C1] Call Trace: [ 1254.587650][ C1] [ 1254.590525][ C1] vpanic+0x1e0/0x670 [ 1254.594555][ C1] panic+0xb9/0xc0 [ 1254.598316][ C1] ? __pfx_panic+0x10/0x10 [ 1254.602799][ C1] __warn+0x317/0x4b0 [ 1254.606815][ C1] ? __rate_control_send_low+0x524/0x800 [ 1254.612478][ C1] ? __rate_control_send_low+0x524/0x800 [ 1254.618147][ C1] __report_bug+0x288/0x500 [ 1254.622693][ C1] ? unwind_get_return_address+0x4d/0x90 [ 1254.628369][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1254.634563][ C1] ? __rate_control_send_low+0x524/0x800 [ 1254.640242][ C1] ? __pfx___report_bug+0x10/0x10 [ 1254.645306][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1254.650733][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1254.656253][ C1] report_bug_entry+0x19a/0x290 [ 1254.661141][ C1] ? __rate_control_send_low+0x5bb/0x800 [ 1254.666804][ C1] ? __rate_control_send_low+0x5c0/0x800 [ 1254.672470][ C1] handle_bug+0xca/0x200 [ 1254.676761][ C1] exc_invalid_op+0x1a/0x50 [ 1254.681298][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1254.686174][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1254.692464][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1254.712097][ C1] RSP: 0018:ffffc90000a08858 EFLAGS: 00010246 [ 1254.718201][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1254.726195][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92e440 [ 1254.734215][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1254.742208][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88807a56bde8 [ 1254.750203][ C1] R13: 0000000000000000 R14: ffffffff8f92e440 R15: ffff8880625b3138 [ 1254.758233][ C1] ? __rate_control_send_low+0x58d/0x800 [ 1254.764004][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1254.769346][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1254.774668][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 1254.780515][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1254.786898][ C1] ? __alloc_skb+0x27e/0x3a0 [ 1254.791528][ C1] ? __ieee80211_beacon_get+0xce1/0x1880 [ 1254.797203][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 1254.802718][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1254.808336][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1254.813850][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1254.818824][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1254.824943][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 1254.830547][ C1] __iterate_interfaces+0x2ab/0x590 [ 1254.835810][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1254.841966][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1254.849203][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1254.855313][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1254.862394][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 1254.867637][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1254.873488][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 1254.878766][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1254.884555][ C1] ? read_tsc+0x9/0x20 [ 1254.888698][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1254.893860][ C1] handle_softirqs+0x22b/0x7c0 [ 1254.898688][ C1] ? __irq_exit_rcu+0x60/0x150 [ 1254.903517][ C1] __irq_exit_rcu+0x60/0x150 [ 1254.908145][ C1] irq_exit_rcu+0x9/0x30 [ 1254.912420][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1254.918098][ C1] [ 1254.921060][ C1] [ 1254.924035][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1254.930044][ C1] RIP: 0010:free_swap_cache+0x229/0x300 [ 1254.935647][ C1] Code: bd af a2 ff 40 84 ed 75 30 e8 b3 ac a2 ff eb 19 ff c5 e8 aa ac a2 ff 31 ff 89 ee e8 e1 b0 a2 ff 85 ed 7e 34 e8 98 ac a2 ff 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 83 ac a2 ff 48 89 [ 1254.955309][ C1] RSP: 0018:ffffc9000cb47770 EFLAGS: 00000293 [ 1254.961427][ C1] RAX: ffffffff821e499b RBX: ffff8880345e73b8 RCX: ffff88807d97db80 [ 1254.969440][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1254.977434][ C1] RBP: 0000000000000000 R08: ffffea00004971c7 R09: 1ffffd4000092e38 [ 1254.985430][ C1] R10: dffffc0000000000 R11: fffff94000092e39 R12: dffffc0000000000 [ 1254.993438][ C1] R13: 1ffffd4000092e39 R14: ffffea00004971c8 R15: 1ffffd4000092e38 [ 1255.001480][ C1] ? free_swap_cache+0x9b/0x300 [ 1255.006374][ C1] free_pages_and_swap_cache+0x17a/0x520 [ 1255.012076][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1255.018293][ C1] ? call_rcu+0x644/0x890 [ 1255.022688][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1255.027937][ C1] tlb_flush_mmu+0x3a0/0x680 [ 1255.032549][ C1] ? __pfx_down_write+0x10/0x10 [ 1255.037454][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 1255.042080][ C1] exit_mmap+0x439/0xb10 [ 1255.046360][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1255.051591][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1255.056411][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1255.062093][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1255.066819][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1255.072061][ C1] __mmput+0x118/0x430 [ 1255.076157][ C1] exit_mm+0x169/0x230 [ 1255.080261][ C1] do_exit+0x627/0x22f0 [ 1255.084535][ C1] ? __pfx_do_exit+0x10/0x10 [ 1255.089183][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1255.094258][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1255.099608][ C1] do_group_exit+0x21c/0x2d0 [ 1255.104259][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1255.109335][ C1] x64_sys_call+0x2210/0x2210 [ 1255.114061][ C1] do_syscall_64+0xec/0xf80 [ 1255.118606][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.124803][ C1] ? trace_irq_disable+0x37/0x100 [ 1255.129966][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1255.134682][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.140610][ C1] RIP: 0033:0x7f703e03a6c5 [ 1255.145071][ C1] Code: Unable to access opcode bytes at 0x7f703e03a69b. [ 1255.152106][ C1] RSP: 002b:00007ffeaa23a1b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1255.160560][ C1] RAX: ffffffffffffffda RBX: 00007f703e13bfe8 RCX: 00007f703e03a6c5 [ 1255.168559][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 1255.176553][ C1] RBP: 0000000000000001 R08: 00007ffeaa23a148 R09: 0000000000000000 [ 1255.184546][ C1] R10: 00007ffeaa239fe0 R11: 0000000000000206 R12: 0000000000000000 [ 1255.192537][ C1] R13: 0000000000000001 R14: 00007f703e13a680 R15: 00007f703e13c000 [ 1255.200539][ C1] [ 1255.204189][ C1] Kernel Offset: disabled [ 1255.208526][ C1] Rebooting in 86400 seconds..