last executing test programs: 10.594005702s ago: executing program 1 (id=523): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0xffff, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48) 9.051027731s ago: executing program 2 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007060500fcd406b405cf76f6010000070500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b000100697036746e6c000014000280080007000900000008000100", @ANYRES32=r5, @ANYBLOB="1aa7e2709ca9ec34c8620e37d2", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 8.848401679s ago: executing program 1 (id=527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1c044) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x80, 0x48001059, 0xffffffffffffff9c, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1f, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) wait4(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)) memfd_create(0x0, 0x3) fcntl$getownex(r2, 0x10, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) 8.719225631s ago: executing program 4 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private1, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x8}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400500, 0x5, 0x20385655, 0xb5315258, 0x3, [{0x0, 0xfffffffe}, {}, {0x3, 0x8}, {0x1, 0xfffffffc}, {}, {0x0, 0x1}, {0xfffffffc}, {0x200}], 0x3, 0xfc, 0x0, 0x0, 0x5}}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f0000002fc0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0x2, 0x3, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 7.969728729s ago: executing program 2 (id=531): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = epoll_create1(0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x50d402, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x20002001}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="cd046a6395deaaaaaa24"], 0xa) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000ac0), 0x90) unshare(0x22020600) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fdffffff00000000000000000000000000840600", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x1c) sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) lseek(0xffffffffffffffff, 0xd587, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000, 0x1, 0xfffffffe, 0x81}, 0x10) r7 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r10, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r7, 0x5d62, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 7.419948716s ago: executing program 1 (id=533): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) 7.32529s ago: executing program 2 (id=534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000001400"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r3, &(0x7f0000000380)=""/55, 0x37) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x3) r6 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r6, 0x0, 0x0, 'syz1\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000400"/26, @ANYRES32=r7, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './cgroup/pids.max\x00'}) close(r5) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x20c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) socketpair$unix(0x1, 0x636d0c5993466ace, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)}, 0x40c0) 7.265919657s ago: executing program 1 (id=535): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @random="fc1eeef07a31"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001400050a28bd7000fddbdf251100002001008f88ab"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) semget$private(0x0, 0x4000, 0x48) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) getsockname$unix(r5, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc0000001900010000000000000000000000004000000000000000000000000000000000000000000000ffff0a01010200000000000000000200800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000005000000000000000000000000000000ffffff7f000000000000000000000000feffffffffffffff00000000000000000000000000000000feffffffffffffffffffffffff8700e7bbfffffffeffffffffffffff000000000000000000000000000000000100000308000b00"], 0xbc}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r0, &(0x7f0000001180)=[{{&(0x7f0000001200)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)="6fb6dc23ae86653bf198155f1419c1d7f082cf0283a5d649f83f1a378a86da30cdabb480c2ba0181cdab162996822f8aabdec3bf137d22bda8b5fef1d0299a29cb2b57961e80e851c05bfb0397095f8e600abc707bd2e05f6d8f405bac04bf644d2d2373b1127a295b54ad8422f3d227d30732419c5adb0cf5b4648961ee787585f983a5b26a25998bb19a1856cbd3a40a0732d6077c718375f12fb089a2daa020026220b25be0f351193fc235886693832ebb411c7dda4825ca7cbe38b65544c2ff974861c3b0529b4adcccd10c1d52328daf3c4e95e7c48bfe0847afbc845451043706922bd5832747d8e17e561be5d1c1840e4a3863", 0xf7}, {&(0x7f00000001c0)="d14da4c40064869fd2c9c34e5b77714e", 0x10}, {&(0x7f0000001540)="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", 0x1000}], 0x3}}, {{&(0x7f0000000640)=@rc={0x1f, @none, 0x7f}, 0x80, &(0x7f0000000400)=[{&(0x7f00000006c0)="db8f7e12d229f4bbd96762f8a6380e4e08ac446b82d0928563935adc4d2e34ea15a78a4d6eb83fbbd9ed06b9af5cd70914f5e6a995d04e23545024c3d7bb862a77073bd730c87efd1a5f7146a3460a6a6f5d5ccb8cbcfb76e1be682d60ad852fe8ce03fe4c03c39a29918fb2f81b12674e4f185b40be666092d1692d84a0c9f42c0deb36713c00f47fd51d5a096291b470515e80fe730cb46c2bb310cdf81eb8b9495244434e0a69284198f8cdbaab05d31c5797", 0xb4}], 0x1}}, {{&(0x7f0000000780)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)="157ca216688d3923fab727", 0xb}, {&(0x7f0000000840)="35124d41aa11b74ef117197c5d1df4e1b8c5bfc3ef770c6878723c89a0c61f9c3996a1b8e74bcf28a5df774b37204640cc107b6c676243bba38a754eaa025edac037362283536318a5d35cee6777cc5b8c1bb0058211a975f08bf87d99880a", 0x5f}, {&(0x7f00000008c0)="21d1ba21fdcc33dbfe5b5c42bf078611265b03e3685c981acb8ac00d9dd0f71112649796742cda710ffb5d29a6fab10ad50d1d85893371507272d9cf646904c7b4db2ef163383924eb3350ea6ee37865968656c3daae02a611f31ba30c59b6bcab1406d04ec68d7d1985f5a9f73e2ee6216245737e5b83b35725e667404c74405f1717353552f459ffb8321abfdc1532431f8efa0e2f2243383c7a57df048b8193f29af8b0277f493344ff86aa0a9782d03bf49b01442ddf06bdc17d7c0545372fb1286ec3747cf7a4df13456a7f43fdbbffcd9ff035cfaa48fb165f463212c6fba4d30a3660fc3491bb55d043270a791ae560511c4f04f5682bb24200", 0xfd}, {&(0x7f00000009c0)="da357e4002e57e8f2f2967fa257d43b4e5d5c12ebbd0f5fdd772b31b3668f5757084620e9743eb162c9db3b5c876375909b99da5e57dd91edc92ccefae0a8e0be6223c516f9edafc9de12a198b3d570a80633705fa782d1fce", 0x59}, {&(0x7f0000000a40)="0dc3349d296d42ddee52b63d7d42bc9aa027b827024e5b113abe24e949a641f11fd9fd96148210caa2662986b1a429a9026add03f25832299d83a20db44076987a52ad7e5fc8c057ee3a3c0e79a9787a4c5edaa8db9d542bac2179dec931b70b3a17364a929d331353ba8e80244a0ccce6a547dd2ffd6bd3739790d48ee605e85494079ab72489ba28fedb8046c094505cae3e28429dbb3c977083f7ecb94d", 0x9f}], 0x5, &(0x7f0000002540)=[{0xd4, 0x29, 0x3ff, "49a623b832211dcaad8aa97a57bb19cfef86965f13e46ccc20915660b06c490f93fa5c027971e1d7e7a5ca3bce6165d6a0128f89ad6e7c8d0c00be8a51350c4309994b3b253e106933e5c75f2ad279376935fde23a78dc3b8534d22e532c7a2ac3c3a693d55af92d51ab3a866c81c83d505a6b9738cb8c9ae5d03d142f33e5a6cfe8ebd1e3d2a4310799fd13b69cf88b748d13073191df204a9662d6a88d41052ae57bf3b84405b68c9a06f1e04e01954c85d4021a86bde16da3f2399e9363bedaaf4a69fe57"}, {0x100c, 0x107, 0x7ff, "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"}, {0x34, 0x118, 0x2, "cff8baf9957c2a9db7b724052b3dd1abe5a3c45fe25b9f128c7fc93c6b879667077c1ceb8705c3b2"}, {0x70, 0x110, 0xfff, "cacb63a5ef0a284870035db7324d5095600bba25ec1af3e20821204e2e2719e7c4dc5442202e2724dedc14a59aaf193ff16d9f983d2c50258e1bc724939fa6b395b3508d18fb4d934f6a8b42832b893735c81a58b283c787b14103f2b5c4b5b482"}, {0x98, 0x10e, 0x2, "ce37f3c99f9451f62953b357cdcf0063c49261046e02aab57c10e69c3e4891a02a318e4c4914f4e5ac2faca431edc086086aba2871f6fb709f838699d558300436b30f2a6e94d0661ab29a6d9761b14b6a9506548a8dc98b7cc4f454020dc347463250f6d6165ef3f2e52c0e281b6d68669d4458ad4464bbebbad10e8fa005bafb04eb4ad122cf3fce2c7588"}], 0x121c}}, {{&(0x7f0000000b40)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000bc0)="998e3399c3624a3b03ed1a0b7a22af58225a978c428f006ceb34b995b0ec3c36b910822335280d046aad6c63dcd0db8778c9954b37a70d766e9590acb33cc53a3d8ea76934fa2c2d78ac98d6f9cc493d1f215024f25b11945813550b1b1bb01c9859d0d35ce169b264a60475d4629b9cac", 0x71}, {&(0x7f0000000c40)="f392b96bbfa0aee79506", 0xa}, {&(0x7f0000000c80)="ebaeb50424322e3a7e91ea4caf5e0f032ebab162246b07a4e7100c13810c5716da329d40f1cfb85ccf5df33ca9a838f18e737ad870fa28659f83e07bb84cb4a74467433027cf132b52609e4d02657d690d0dee8c", 0x54}, {&(0x7f0000000d00)="11827576112bbd1b336f3bfefd2cab81838e89b345381c88a5153df6422b79a7026c3db7356f8be37db5f27837c39e7d3bf45b659efea4da09d024e42e05825b4ccc87", 0x43}, {&(0x7f0000000d80)="b7af5a4a298f473b257c9689eb70bab517790864f625e8950a69a37d3aec2c193b621ee0d11268222e123a21afce8cc0444bb389e42aca95c5f7911e9ba2ff423d4d9ad7549d7488bb1d4f7eff6ffffd23d23de787f8ec44a54607a7c6339cf94178b1526768243284270b58dedb37ba9400fc797e4d5cb8b9e67fc7978c37dffec99b46b2e63a995a3421fc9993d39b324e5a08", 0x94}, {&(0x7f0000000e40)="f5740bb4b5ade3800de460c5bfc6664478054b1f8ff3373748874c186bd6c9479e297ac9a763463a8c4bf61d933e9b3bd651dc29beb1211b42187ea23cd9f5276f22a7f22311104d1a904d8cdcc94c21b1c049", 0x53}, {&(0x7f0000000ec0)="d725ccd03d2fe84af8cdc2506809b7b850b9a00c67224f0374db051be14e3f", 0x1f}, {&(0x7f0000000f00)}], 0x8, &(0x7f0000000f80)=[{0x44, 0x97a60ec062064632, 0x5, "8243bd7e49561d340469e16fb9b8daa872aaaf74200d2a47635eb55cee91540e32d8ba8eed31dedae622a88d14d0c9e5ab2a16c5af9a60a7"}, {0x48, 0x1, 0x8, "34dde3bf0bbd21f94910f3730aa3037780ba41479e9e0f31a9f2bc9b059118fcf5d18fa4e3b24889e53292179e9159801c1debeb6aa4414c2db247"}, {0xe8, 0x101, 0x0, "ecd8bca7d8b1b82b82461caa912d7dcab9f9fde3c4ecce77883d1c7ddc37c621dbed7acd64f85a91aff5999b4f25d844a1bfa6def6c33acac4a228992f58d4d91ae7f7277f764f164eb9f55381dcff56a1bd1bda26e991fc9a9071817881962b7b209cd57bbb695606521e1d75742f3d8fb1c3492d63c3b6c3dfbd2ae39553bfe69a92760319c13688f59bd2fb3272fbac0de961ba47e529df1f00048bdf3adc9578fb6ccc496a9776b833c83aaefecb51ad106f1d966c9d10aa7d5ef5aad1c1acd253f18b303d79cd6574b53d41d9e5f3532c63ed8e2d5f37bc3e"}, {0x78, 0x6, 0x1ff, "6992515c48a95a73cfad480e8176502eb99ed397ceb7f53f89df2dfd697c3047e707b2d256f4b22f23c8317d03ae7f78ebc87b87945be395e6eeeb7d24ef1ccaa9ae43d11d7a55b6147e93a7604c2b90e7c88ef4633795d7be7f3a19dbfff25dce9d60d476f338e8cb2c0f5b"}], 0x1ec}}], 0x4, 0xd3) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 6.475847278s ago: executing program 4 (id=537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0xfc0, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "36e650a885fbac500bd0f05081b1f211edbb87f21a0156f1130e488bc9e2ceb7215ec06b0dfc375aa4c1a93dd51783f9c9987b903d884a033f871c730788699be13dedeaf350e1d2b78f5ca818cfd2c4726db5daeda1cc6c42767a3435fd6ec26fe199676d6531c6c6e9c85de8f4fd2336089f4bbcc3cdb25b9c49c640bac466127b9d6284dbd08e1ac9834163cbfcd31b17684511327803d71638b2d3a8ab5da11b0b35774be213bd1a7628efb88b34c24d3ee35e0f373b3ba888328f66cbb798611a5247a682e1262595f7d1d4b2be60c2316f0edbee68c4d429b3d48dcf6ec0a092ec91477dc030e32dd4e1106064799372ee76a2e7991df45a61fd7264ce5aacc437c22197a97cdeb772ca3e401d826f5cc46c94d14a191102f1fc44ba55df63eba610aee1a510ef35e61f6f72457b6d9222f211906d1a60c7ce70142c860b726e167320c3038f1b53a740f418a231ab1a2f0f181d17c84e263c4811cf188a0d90c6440be4cac8fa250cd8d7e4e250f8552045beb96cbd2c8dafa611277f10ba97bcbe3420611459c296b2dd7f65e5f71bbf902d3db8900436037e6dabf37931439ae9bd06d48baed951b1ecd6c6b2929fdacd7b8fa09e891ff1f8d47ed6a5eccaedf8dd1f35a83d1982ba4d56da8394f0cfc13e52ff61d74d2cbcd59f8491da3c32dc5941a5f93153fb6e85fc993f459fc21975ae7f69b6ae9c035c4c1b4711ffe2951788382ef91890990c6613e0f175034df44c48e34fa636d9eca78a7b2a872c41509075a5dcc126ec7e5e67b53ec02574def5f2a0f0be0b59cbdf164d7bd51eb9c57f122289ff252589cc6cbdf8e43168717492aea9d2fd42c3d94e898154a02abc6829e8b89ea7ee3b23bcd31200aac89afdf8d81086eeeea78e06401164621d7d195e2d666963c72a0af1178b4ad44509375fe931ccca1e1c7861a3d3e20e0f7200f548ecac4ed250321d612f0c313cb629484a06e30f4e20ae46a74bf90d40fe42568a66e708e6f5f8b4de453786b1c58f7ad2f1035a3d7fb4685521f674ab92cd6cc9e418b0f7b8a9bb9cfa1f4d64555d19bc32e427a31ae29eb44a7b160dfc896b9ae0de9d548e910e6885f45ef2cc52c4e1b62ba8f664c4fe74fb43bda9d0d6736d7846780b8cab074cac9996072fb85449ce8f96b4bbed1e07472b516df29e25d6cdc49f1bba3058aac0694bc1a15f9c077ceafc988a582619822fa752ff1bf170651b9d3c82e15bbde546c034fb06823aeaaa9aeba9900320bfb81159a93f0de80df7a55e61ec0974d3335673aeea33bef534da77f3b0156486a1bef4080cc67b3cd90dbe36bea90cbe03f1272c89c8436e29f460a169bc2af2f6503c2180f1437013bbe63303ff3efc6c3fccfa6bff8217168e190d74086f7502f6bbd127a4d39588b637bde59a5f70e087a2e84b5e70ffe8971ea2ac23ecdf95090a6b2ae8c7958496137ae09430542548919d9c27f5bad1d671d36537fa3373ec3b1102fb02fa39e6f64d3e489365ca05fcfbd0374bbba5034eaa113ce288de76ef49d5b2869dcafe1bb0542c64a60944c71b7108db8469c8fc68d5776aaaa3fe634ad98d961f0d8309fe9d38178f867d9b9f47fe40179cf589e30d5c8645128711c471ab5efc1096194a104542e0e42def4e9bdffea61950703d78398449f2ed1cf2c00cbcbd1a596443606e0d48b70930689bba704d3a1bd19784472b615e2dae90567180e116172f845e3ccf2b9cbeea3a195801ca5e0263743a4410a25f89bce5589865ec7addb824ff8c94b94947fff23011d6a05fa6d2b01e896d427feff9a2dd934b1d4ebbe851bf0e53f811d1c033b375efaaa5d3b6c2c088e02a616547d4f3268edcc3b7cc6988437d32b924b2cb8cd5ec06557666aab5946989d97598c968991c646c9dbbf765ad3702d643cc4d6292e56ac46d18fe4f0977dfbd174150870ce8b922be578e763efd5f0895cbb50ebb43c1c804e8cefd12335b4c304d7112b577878fa88134ea5a0820db1ab7c919bb7aee92c4510668178d6d31511f8d7471adc246340aa19623f9ee95b38e7b8fc889a7bab2e4bc6a7af13df00a094b5a0b208cea769eb2f3422d71229229b412905c2a7b02c0c0877efb883cf6682a470266f96fbc644f7eae1744f9d237a718178e9ac7f2d16939631335773e500cb9ab4eafad1edd915a2b477134a71c836a20027412ae5d510eea0049494df24024f7e502668b07b9c1ff854c692d5fb2d3763ea46bddc54172f7b87f2875f5da6f5f6b74bd8d334b4415044a117b5de428d89905fb8a40681b528dcc0ce1aef6352a286901d8e8f9927f5d9c284fb5de777dc6b9909492bcc57171704c44a7cdb111b67da8be5127169078fe61482c1da95d701d8ade539371cde3e696cb638c7b9f5844ecad75a633cdbe97b2f86d91954ff6178a429de01800cd9cecf8fd680926e7972ac4b182f5810977bb8caa504a9a22bc817459ac0e79873ff833579a60718c6dc1944cd006c95ee0b52b44030a45a97f49e0fadc8903f7093215c5f8b4d5d5a8f42b3532d747accb3fa7a7ebc72af988ca7eb562d9858ca59ee23772f5eb01198b4233bb8ddd169d0833870c9926c14305ca0041fdd1a2e4d62613b84b3962b9812301c4ce06b002c7286726eb45ffcb1b8f3e51d4b257843a0b1e3a7873f6e8c0e3dc00766e4a9e9ecc14626b25d5cd3cb79aa98273a9bf016f23a805055a89705dfe1aff42a32b95fe0f34a29d180bf30e6906bb801a5173f91294b7c6c1ddba46d5b840a8cfb9296318c61f600a1cb105abc4afaaac7caff449f59d7d0918d6e2d1141e155fd532b8ae0c244de8b09b1392af9429dd56a708fdbd06c221b26503a8440616996259affc7055da601f31139bb5e893379032d5b9b875b808efb45481900083f18dbdc19155c03e7c8f5bd8e89facc8849dd549f301f7e7b6e3fe6930a8a406f6ae38c8974a0351167d1b4c02ba3989655293705ecf0fff1f300069197eef15159bb70ecd2bcfd9d429ab538c3a28e13c2840173421d139f4ade9f821987d1b238c2b568e885b7ae708971d34eaeb77b893ec900d395950283c5943715ba907c013ed6122f61e43a9c566359f7012b8c2cca08bd97e930d12d5992759ad1cc0ca2ccdd1de3b6d51cbbc68faaef10bce75db9ad7594ef047ca0bf49aff3e440d46d4cb64d2c07264369aac689e96858f86ab19da855f1ddaca906eec3aa93f0c273e9fd326a71b77dfac90b8961a11e9fc302ebd3c780fae1e4dcda7b9ce82a72aea899f674e086ccf933251349a91cd20de85ba299a7ba8d5a7540d5add21b63f3f29809a3d9b19a4375858153e222c46efe28f63f7bc90bed712681c0884986a1b7ed7746915b87f6911fa46a382e71f47b17d068101a482c854e1866381d5ac7ccfe703fb4bcbc2bf2b9f5bfa1d09c1c26e63c984745c93734bcad8c1c80114c0c7749da6601a942d0659846f2d4bec963900196e3080fc2be867f96d77c2bb89f408b1c4c493d82d65d7792e6073440437eb0c56ae63398ca044fb255f566c13a8af39c473c61506c38f4381b2edcc4844ee0cd7c6cceda7f8aa829ed928bb1baa290e28fd35e5bd9ed7f3f5295a5e9b38b268de6edc5499f26671d7c3e1a3269346835bd81acbd052796c69792f23dadfd29404cc1284a675036553aff1a3539633c74de7635870bae7bcef06fe0de748273da000bdcb093b019c1c55bb8f9f9fdeffb9d11caff0eaad1d059cbc299cf03790ea221da834bd938b46267474dc0942d2c7bf7d34dea13d81332c067282c5c2e9fae302afc0295b47000114b8f98b05adccd58ad9afbf4d84124b2d54a7312643aca6804b959620d8748543e7a4a4062ce94704aaa87f75a2224eb3ebfca1292983feb940c226866ff64a8300705bc67467d0966cd0a9d42fe69c18ea59a4b5e993159b026e4a35eaec897201baa967e52b1b6f9154dd971b94569cf55ba683a7a2360f0a7fe5f8850fb5f4862c6c16edd52f3a99bc94a1577ca538bd3efeec9474a3a325bf6a51b8b077bf04ef3eb193076803ac310e139aebe2359dbc2d1c93e428b1f3c75cf590fcfc2e3dadbb6fce5818df695cc1d11bae0652ebbd5ddb570f67ef697c98a47ca0acc7a7b23b57869856f1b0da85f22d1c144753fa9732dc4e70942588ebfc1aa2ea6c469b025f008414873907193e9a692c47039a88eefc695d9462eb17dc5609abb548d27ea690596425e95c90ddc35b5ba48a9921ab882d8dcacdff8905d924f7fb30bae3a425754ec0786c6181818cff0b466ed3244ae8c36409b79a8296f7e7b0d9b2cd425b49adaac909c8cfa5173875093abac3d515ac179b7abbd60592571225ea6357486c360f3c6f565e26e583faf8be18786c9c3869c63a018fc6b7d2124c65ee38b1073bb8a9e94faed36a9e440848dd4b8859d356aaa5dc90b174139e5147e53c45901a0d6e929f4febba565bc9755f234d3d356c795bc232a9df90aa787f03e037302932bfbcf5040ef5cfd0a18685d05c52aadb9826deeb45dd0db79ae92e5e80c3b2c905e070a7ec21a1f7538fc240000042e0917508b65bef25bce7a27988a7ce850c844d9935e1f2c5d551390a0f90b2760c59a7f01b24eacfd08094dbf47348abc2a86f3c0a38052a697df57dcd9f0877fd81a1c8a98182a1b805d17480f120739d13c9041f95e1243b570ad811ee01caf83f5f29a1442a5a2019ae41e7ac1d1a56c01af05ef95446420ec6138ddb472577d162f6c5547069836a54848cdf3d32a4396f0e307562cfbc6cf11bd7cbc7a33e27f41e399a5cdd9ffeb2afc376a3c965aa873cf725081009f9f7cb8ddf7c9f258d548a255ea1aedd87358c4df87d77cf290dfd19ae4e174de9766b9855dbd34ef22a0eadb585b5d3bfdf3718d8c455570ca63979d62812aa74c806c142a974a69161d501a3e850dfa40ffe919818e0ab3c524724646141117a447ed1970fbdef891cf115d58eba6d878d9090a7e7a427e7df9a1e38383122ca18c7b842e3ddd04b936b57ad2271710480557e51b390b1059ae06212aecaa4538dbf71ea4eb4d5892ba55b2840976d0ed6b0696b5327b355cf3dedfca0cee5b93b5aca143ae7e7554920c982f04f76fdf26b390229079de333e47752547caff13d78cf75a3a13c5bd4f2a4285d12a86e3933762178716c47efc4c351d3d2e6dab97584d822bb64e0665e428a7d1a36f35c4f14f9158bdc95e3b2b10ae19ba79b9faef8e931e63d092b9dc3d1816164b3d7af1da090937d3741d8e11854cabd1c9d2ac072ac1b00fce837ebedeac663f259054c525db7e33830b1c0bcfa43195504324ccece855907ff85f003f50bba907e25b601c0427dab7f21000ba45f5bf30d5eede252c23c4ec6cadffb45efcb0cf976477cf5ace2b0bb3b57794f19c500c7c0557f949421260e503b52386bb146cd15673f705b39222360874eee15e8a618e5411be260805b46eb61d7cc704f79952fcd12bffc8f57925458cfad59cc6c7bbf0a417a27893fabdc65faf30c818065be6aefe841b50560f387854d996ab3474b2178eb71b1cc719008edacf3ec951ba022a1f3797b7fd0c45796d0c028fc07e92a5b1e8c5d3e8ba90622736405fb202c8d361cd620ad175b1325a13ecd55ceaf7a"}}}}, 0xfce) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x157) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000440)=""/252) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000100)=0x21) r6 = gettid() syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6], 0x1}, 0x58) timer_create(0x3, &(0x7f0000000000)={0x0, 0xa, 0x0, @tid=r6}, &(0x7f0000000040)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000006b010000feffffff00000000e6", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x940c, 0x3002, 0xc8, 0x2c0, 0x1f8, 0x3d8, 0x3d8, 0x1f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xe}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x4, 0x4, 0x6, 'syz1\x00', 'syz0\x00', {0x1a0000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram8', 0x80400, 0x100) 6.280520482s ago: executing program 3 (id=539): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2fb309ec2a3d0e7a}, 0x20000880) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x4, 0x2, 0x18, 0x2, 0x2, 0x400, 0x6, 0x0, 0x8, 0x0, 0x6, 0x3, 0xfffffffb, 0x37, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x3, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x5, 0xe, 0x4623f, 0x0, 0x8, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x1, 0x2, 0x6f, 0x8, 0x9, 0xfffffffc, 0x599d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x2, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x800, 0x7fff, 0x72c, 0xc, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x2000003, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x2, 0x7, 0x6, 0xffffffff, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xa, 0x7, 0x1f, 0x404, 0x4, 0x4028, 0x200, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x3, 0x3f, 0x1002, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x2, 0x80040101, 0x5, 0x4, 0x5, 0x200006, 0x1, 0x5, 0x80, 0x5, 0x8101, 0x10000, 0x0, 0x0, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x10, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x8, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x400401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0xf80, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x6, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2855, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0xe0880) openat$ppp(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x402) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x1000002, 0x20010, r5, 0xffffe000) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.198565445s ago: executing program 2 (id=540): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x7f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 5.784412395s ago: executing program 3 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007060500fcd406b405cf76f6010000070500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b000100697036746e6c000014000280080007000900000008000100", @ANYRES32=r5, @ANYBLOB="1aa7e2709ca9ec34c8620e37d2", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 5.312433671s ago: executing program 0 (id=542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0xfc0, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "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"}}}}, 0xfce) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x157) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000440)=""/252) r4 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0x21) r5 = gettid() syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r5], 0x1}, 0x58) timer_create(0x3, &(0x7f0000000000)={0x0, 0xa, 0x0, @tid=r5}, &(0x7f0000000040)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000006b010000feffffff00000000e6", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x940c, 0x3002, 0xc8, 0x2c0, 0x1f8, 0x3d8, 0x3d8, 0x1f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xe}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x4, 0x4, 0x6, 'syz1\x00', 'syz0\x00', {0x1a0000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram8', 0x80400, 0x100) 5.031589912s ago: executing program 1 (id=543): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdb7d, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44050}, 0xc080) (async, rerun: 64) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f0000000cc0)={0x5, 0x2, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0xfb, 0x1, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x38}, 0x2}, 0x20000080) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905"], 0x0) 4.607910539s ago: executing program 3 (id=544): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @remote, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) (fail_nth: 12) 4.468835521s ago: executing program 4 (id=545): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) 3.877240935s ago: executing program 3 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r6, 0x29, 0x1e, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 3.872218041s ago: executing program 4 (id=547): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000200)='([-{:.+\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x108, 0x4) read$dsp(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000001280)={0x1, @pix_mp={0x10000, 0x802, 0x20303159, 0x3, 0x5, [{0xff, 0x3}, {0x4944, 0x8bbc043}, {0x8, 0xc}, {0xe, 0x7fffffff}, {0x1, 0xfffffffd}, {0x39, 0x4}, {0x9, 0x2}, {0x400, 0x501}], 0x2, 0x3, 0x8, 0x2, 0x1}}) r7 = gettid() prctl$PR_MCE_KILL(0x29, 0x1, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000005300)={0x1694, 0x21, 0x400, 0x70bd29, 0x25dfdbfc, "", [@nested={0x181, 0x130, 0x0, 0x1, [@nested={0xd8, 0xd4, 0x0, 0x1, [@generic="a7f9a1a1e63a39e2dd77368b027a1b43c840d55963c3f2eaa5d1d1ed0737b62a540b200459648e4df64cd6086a6efbed344818e3276a8f0658c7c90320230f5f3f0b3436a2b731fab8118eb248a9ce46177fb5f37782b6c955391962f025c937024abf5e8639d858b2547a2996c8809e2ecd14b2af9cc5aecce37096a680c8851155ce67a94989589f33cf472e70d09f78624d61a4bf8158d1ce607d71411aac33f5dac122b387931308c426331dea3cac5e3a12f9d9cffd156af9002da92295bd3c30c8f8bdc1dda6882c56063a9064064c3fc9"]}, @nested={0x4, 0x4a}, @generic="2829ee961ee3b19721fd5501a342cd1f9aa525e49430dfcafed6e03dbc3f9f27d3dedd7fcafa6cb29cebf485d32bf955bd902202401e33e4b2aaddd2d0c467ef8f38b1b80c534c03638c609c9369b23636e4592afc4f315fe69f18982762714775ae8e81b87daf5f775a618c437019afab0505ea21a829c2f563645d0efc6e8cd57287db49ec8eb4acd9960381245fd1105c93457b", @nested={0x4, 0xc8}, @typed={0x8, 0x114, 0x0, 0x0, @uid}]}, @nested={0x14f7, 0x48, 0x0, 0x1, [@typed={0x4, 0xef}, @nested={0x4, 0x6d}, @nested={0x4d1, 0xfe, 0x0, 0x1, [@nested={0x3ab, 0x32, 0x0, 0x1, [@nested={0x144, 0x135, 0x0, 0x1, [@nested={0x4, 0x27}, @generic, @nested={0x4, 0x14f}, @generic="ef066de45a4d631d7ed8563896b63f5b41d6b09de958b773abdc360adb2daaf0a2346a0d42c698c32df8e8c97110255306c9298482f974697e3da6cd79461cc21c9203a140f9b85fee2b7c", @generic="7f3a5777b9cd436ec5d2191f27ec40c3488e981caa250ab12a8a66dd7e34e8c92c3eb3ddce4629a4d13d830d83dc5a9a872048f8589abd55c6f18b4bc2f40ac51c2d3797c84af33bae4ac581ea51c9de8f0161bbfbadced3f7f09158fd180e4393fec79a8c277b8302a4b51b91826034353b68ec8c4dea97805a33d8b413eed8f05ff87af4441487526a927a0c04f92aa9ea8f1584b27944dcc8b9d1959fe6d04e3a81ae1d427a26298d4cd97c357437c0017e74f9718a579cb11c88406a4287fb38b506c67aa3b86c3cf41c97ed03ee043947171c58078453fd69765c18ae0f39941ac994", @nested={0x4, 0x137}, @typed={0x4, 0x77}]}, @nested={0x22c, 0xb4, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @fd=r2}, @generic, @generic="583b67c8d6b218713d2ebd5f", @nested={0x4, 0x73}, @nested={0x4, 0x11d}, @generic="ae132c3cc5fc9c8b026449a27594bcc219f6326bde9423e863414704d0d23f21c31f2c4487d53ad2c57ecfc3ff7144eb5c3bfe2614a149d1c0335c2d83c2c924c388a23fe0b8dcf59d04185249d9d1866201dfddf05621d16462dda3066ae62eb9f88e501a13b52fca521ba1e15a01b260e4729248c61dafda555fec87c2e7d8f473ac3e458f1a3b52c6274a34899efb6d72443a36ab86b40aee81132c6b64fce164b3fe3f041b208a8f3c13ed450514ddb6d58208a0d8f48ca337f033ee55da0a2e17acc65ee240", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="000000160000000000000029810214000000000000f21f936b88bd97fb607c556e83d773f795fd96824419cfaf92893066ca1d2f44080000", @generic="1b9d169e5aebc974f876e79c3f205613f0a035f0699e53bb0e1ba44a0b50f0fef183985e1922c16124f7b62ea0590cbfecce023979a510b4322593a0277ebf6c411bf6d94ec576272be02b47ad2cfd5c5109e4f50552bba7658ec6a571ac6bf01dc34e0851a69a0f93782ca03589e3d9610a826deeab921e3a88d556d345e0807a2210f7d122817d38eed3e28c2d0f2d2a7b3e7328805bde8f04fbd9f9e80edf9c77140de45db8656450eea0dd5542604b2abd955ef99bd3d9c050d847a2525b62356fe6f4017149aaf297457a031e7a778c4befff414b474295dcbd1cf5e36c676e65a49f6582dc46b9b0120b06164f94de89ae72952b2d"]}, @generic="3c3b8605365644a507287c23c45e80310fe802a1a6f59b2b68ce1edd4ec86d2abacb4461397926550748f9d60605a4d62105aa94686235"]}, @generic="8029e4490c65f5428f09c7b1baf61ca1e71118fac3bf58a11992efd20af2b1531fc6bd723d2f", @generic="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"]}, @typed={0xa, 0xe9, 0x0, 0x0, @str='lblcr\x00'}, @generic="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", @typed={0x8, 0x139, 0x0, 0x0, @uid}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r7}]}, @typed={0x8, 0xed, 0x0, 0x0, @uid}]}, 0x1694}, {&(0x7f0000002a00)={0x7b4, 0x2b, 0x200, 0x70bd25, 0x25dfdbfd, "", [@generic="c5739c8ce7947d98111cf557716e27808c7180db82dbfb7c4f36ad54bbc1440b215fca887b69baad43c037ecd5e984d8f6e564410b89e287e508ba889d51c257eb1e7fb0c70445caa0b867c22c472b52b0facdffe6e157e071fdc7ac3d3cb06c87d511ed93f989f5a09a418afc749a650b549cced4671f8fdf1220387cfdd44cfede717dd67c4499177e949d50860f450586c798c574441ce2c868b7c3779bf9e60710167f66bc752a3b47371754ac475fe2f6523d5ae693c348a03df4", @nested={0x6d8, 0x7b, 0x0, 0x1, [@typed={0x9, 0xe1, 0x0, 0x0, @str='&$&\'\x00'}, @nested={0x6c4, 0xf6, 0x0, 0x1, [@nested={0x2a1, 0xe, 0x0, 0x1, [@generic="389c60b9194d1d390f27c4d55dbce1f2aca1e21b8f2bff87e2", @typed={0xf8, 0xbd, 0x0, 0x0, @binary="65a5c20dbeb12a30a65c0c63a14036ec4f0957097d1164bb3623819742ac9f3ab53a9994a69dba2c57f9240253342255b75515543a2bc94889cf2136e760e4284e93406a03d2038339254a0a2d63d3dda81a5823b2d4ea33d39c3788d62c049b831b17a3153850a8cd05c459b690f93e150d91a3040302c962d876f5c3f7a7c43065c3b6ae007ffed597e15db79fb863a0ea5106b5cdd63a86433825bbf30b6df58aa545448e375b65dc64a38f0cd3a25e7787c5cbdc1a4c96acf786cb67dfde00865f5026a931ed459e363384257ae5a67f7f3893551ee1bb894b563b8069ce0f2953d6808f36441a473271a7667866d77284ed"}, @nested={0x48, 0x13c, 0x0, 0x1, [@generic="70e9558052721ff9e19f0b9beb9c075e865e9b65d42cbfc409dc758f930efb1d9f727fc4f7041ca757202376c6ba38a23e397fd872196f86549888c1de09e175", @nested={0x4, 0x52}]}, @nested={0x141, 0x8c, 0x0, 0x1, [@generic="a74f45ae60bddee26cebebb8d3dc33cbba2d659b245331d93315caa6facfa839720c241a21eb7f5510dac2bdbb8f8083c5f936362b724cca97a8cfa036d832eb6aefc191538b7bee1aa343374583f0fd847d5f796ef868e6889585cddbac2bb6bd546af97632e488185110bdbc698b7924ac616dcd6f1018931288e04da6e7b2f9876c1dc12dca513e599467f9e0e9", @nested={0x4, 0xda}, @nested={0x4, 0x2e}, @typed={0xc, 0x43, 0x0, 0x0, @u64=0x4a}, @generic="36985b3ebd48fbd0708f5642946779db7dd809d87f6a5032a436b80a68ef19fbaaeb642ddca36ab056eec499ae1d9547a853b30c19d0a6275a07d068ba4646e6b02bf3cba76c33f7a1bd1268ee0bf5a4eda58979c6d948bd0761899e7438610b0c8f77776cff50731c523f2252242bc9112d7aae38a9b8b456dfb688a5b3480836a8af897ed3156acaca24d9a2599a73c21852e257475493d7a3"]}]}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x10a, 0x0, 0x0, @pid=r7}, @nested={0x298, 0x5c, 0x0, 0x1, [@nested={0xa7, 0x136, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @pid=r7}, @typed={0x4, 0xc3}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r2}, @generic="6ca9b9ae53fc412d4d3a560f4892373e1b8fa4637d6acdd50feae8a3e45e7052f7c45530abff9e5c6cd825c72b18ac4250fc1973249e78375b7d1e189b96e38d38bfbe7290d7b6ac25517894eb2a06d83f474125eee91f2341140e36c24dcce266758358a56a90320fe095558b51270fa67728c46e72c9108501eeefe8a237f59c9443", @typed={0x8, 0x5c, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x19}]}, @typed={0x8, 0xcd, 0x0, 0x0, @uid}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r1}, @nested={0x8b, 0x17, 0x0, 0x1, [@typed={0x8, 0x118, 0x0, 0x0, @uid}, @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@loopback}, @generic="11f72254cb4d739f25d0c3ac4dde7511ca9486ad2aedf37d714fbc35a9e7cc05a36ce40081f80898baf66502bfff121b", @generic="530ab40475cdc4aa83817692001ba9df2e1468d621259bf3aa7345b817769cda612195ab5f468c33865fc9de273fc7b02f11c945e18cac41c65803"]}, @generic="7ea1bee43c0bac1a661b2e558fca8d564ad6b8c453acc7836e1529dc58fd865c259014d1f7352c83146244a6b28812faba5179f71e5dc0d541b7834a0a00b9587c1117e4d602c500ced56ae3abce62f924e1a3580b422033a2477871bb9b8587ed1eb400b5dbbcf4d041f6cd0d0e888e75844db1c6418264", @nested={0xd8, 0x8d, 0x0, 0x1, [@nested={0xaf, 0x26, 0x0, 0x1, [@generic="12ec75be7f56d8bf47f2c291921a7fa8c9800389c017ac921d43cd7fed8117e8774e972f97905ee8dd2c5b54d5059fe5fae190fb2f45920b8f6d25a5225b031632c88ca3b588c6f6b15665c4365f65fae4b5dd2c407890e7c96fdfcec946ff756f2199ce04c3e36f05f994aa737a5f21a2370a595ff8bced4852639ef39b868489a82885400eae186ac679945ba143a94859fc787d66faff19f2f7", @typed={0x4, 0x56}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x6}]}, @nested={0x24, 0xfc, 0x0, 0x1, [@typed={0xc, 0xf5, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x13}, @typed={0xf, 0x74, 0x0, 0x0, @str='syzkaller0\x00'}, @generic]}]}]}, @typed={0x8, 0x3, 0x0, 0x0, @pid=r4}, @nested={0x74, 0x109, 0x0, 0x1, [@typed={0x70, 0x77, 0x0, 0x0, @binary="3b782a26a4868985d1317182422f057e412df82705f3ca8b9535cf99441b571ea92ee0eff45e8ba769143cb89eca986cf5967743312d73edf611ea52556f0b5e8bd22a7231beec440c03a62315eb328639b7fc8adf598e7f87792587cc0d7524789cc6922f2826aeff656ed3"}]}, @generic="dfb73b69d4a2782f21987668e7d8053effc58259b5df513d7188e87e9f6deecb049c76375545371398a556de27f05cda653d986847fea15966cb84ab5ba843e21f55b14c9cebf02881c34ff6bec8824ea0d6d58d8f65ce0f7418693814b1d849bd0762705c4f238df2579d2113a78958fb8ed3c2ed54855b", @generic="e50c2100e380cf2b4f2b612ed141526dfb", @typed={0x8, 0x127, 0x0, 0x0, @pid=r7}, @generic="d1099ee716d8230a5429c0cfbb241685c6c90c42197fd99afd73d430c112b7f1ba5f5a7dd3f7e88600c4bd4d99ef8386526116356e83a5eedbf6f97c3fd3e04dedb2bc8502d0b3329e7aa70a8768c3cb61be75864d5123b8eae851"]}, @nested={0x4, 0x46}]}, @nested={0xc, 0xf4, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x4, 0xb3}]}]}, 0x7b4}, {&(0x7f0000003800)=ANY=[], 0xcc}, {&(0x7f0000000440)=ANY=[@ANYBLOB="100000003200000a2bda7000fbdbdf2515c935c756cf27821c7089eaa4f5a798f6f1a9555bd77d0deeb52ad9148a45f5c4919a99381e02a0de87d333ea46a267d89cf13069b754a16be924b15eaa05957b7d7835784428b41a2b3783c914d824c130fef7f6becdcf199785b4"], 0x10}, {&(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x1ec}, {&(0x7f0000004e00)={0x4c8, 0x2c, 0x2, 0x70bd2a, 0xfffffffc, "", [@typed={0xe, 0x12b, 0x0, 0x0, @str='/dev/ptp0\x00'}, @nested={0x199, 0xf7, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @pid=r4}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0xfd}, @nested={0x6b, 0x8, 0x0, 0x1, [@nested={0x4, 0x15a}, @generic="0449c4cb266f45f24afe86ffbc826b3e7443cfe2b19008b09dac94334b75aea34c8e12f1bbf41222b11872725f219027adcdae3f62265649e21bdd1c3cc1a982228016941ef54352235e933b223c207df893784184fe0e7deeff1f50c816fc3c5db422"]}, @generic="5635e844178a50aedeaeb0d669aed15de54a62aa84", @typed={0x8, 0xb, 0x0, 0x0, @pid=r7}, @nested={0xf5, 0x13f, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @uid}, @generic="93b3085e576638963a016229fe42f9447d881875743421053536cb37a192d3d8d16d436c0e19399aa66f3fa6e4df355c1f92bcec5d70b6a9ea44a7e103a25496c9e32348e3a17ba944b9579dfa040497eb75c23e7c9d94aecb186639948c1fc4465794263315265c411fe04d8a9937787fc067da345773feddba87243372282ab6f5fbe8701d8d36daabdc55e50dcc9dbba35a1d6dc7b5039b6b34be78197a2dbbbe3eacaa679d881fd9b8464c8f4ad79d686ecb2716713f67418e801f6fe6cd2e7660f65e8398255017af069f02c79df1f1d4e884ba8e8d0889100f866d5d905a8b142c395d894b0d"]}]}, @typed={0x8, 0xc3, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x148, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x8, 0x2e, 0x0, 0x1, [@nested={0x4, 0x1e}]}, @nested={0x2de, 0x9, 0x0, 0x1, [@generic="52a3dbe472645f3d0068f3d066d3c794af54c1", @nested={0x1b1, 0x11e, 0x0, 0x1, [@generic="33dbfede137ce437dc8e7ac2f8d6bead48bdfc79900d4ffc93a6d8d64a2af3c0748382f3dcb294e4842dc62a030bcb4a051f61db6b03600675cc826775c130b68363c7a45cfeda8b45e7e83b179a6fb9b79ee51fd20c01c8cd0ab44f59e5ca5a433d05fa81d7b95136eef2a5f658fed539f7ee3e42ab44ca1835aa129eab73cf147855685691aac1e7e315ef690ca334cd0b2e55bfdb6dd4484da4ac05d2786fdfb87715968e2dc25fcd6c38a1d3323ae88bb57d13ac9c06156f7423ad6f406b4482bbc9c1496f75599ac51a8f670cf7ec77fa19343480a22e6c2a308194", @generic="5392ff849671da8ae1cd32fd50b98661eb925e6ac4c675726feb98be42cac011ef27a202cb10e37e496deefd522006e9bb43c2a9753b59be2a", @generic="e2bf0f14eba4af6df5b2110a51570207f187002415c4b9df2cbcebed013e2ae6392f4de248cc0016203ef99a1c6a3d93cdbb55b8d798e9fa1453efe07f12b284a16a90ef9efeca4720a04232d0dcb8d2930b146570a0d9d82af21275e9c2ddd9caf5365e1024f2d9c6c75b6d2d6dfbbb6cb13729cb094fa66c9e", @typed={0x14, 0x9ce, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x135, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @typed={0x8, 0x10a, 0x0, 0x0, @u32=0x200}, @generic="3b2576df662613037eb8ded9f834badff255165c1dc632e917bd790de42a15f0121d37eb14b8d905dd9d6bfc2c79ed1a4cf3ff22dcd889fd32b8559f08d93d95d175ce80d1346edcdbec6ab1793f618e04141076dc89eb518f5c7f80c1ee02c1e855c8a6f7d004d9a300fa361e3f6abd54e0d1a5feaecedfa2a4fdaa5e3d1a8596d5e61de4f2abef30b7b5ac66de4c2f7e5a420a88424eb24eeb188ed7961d33e80ba726e2c6547f97e7637d8c6d0e763f3c13c5e9a514fb55bfeb90f63acc3d27f094e3bcec22349bf06f654d81f7e3224d27ffb128859bb80fb0d5e21bb80e3a3f45a7097435ac97d291d9073288af6dbbba919a71fe", @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@private1}]}]}, 0x4c8}], 0x6, &(0x7f0000004d80)=[@cred={{0x18, 0x1, 0x2, {r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, r3]}}], 0x30, 0x4008800}, 0x40c04) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r8, 0x1000000, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$key(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2, 0xc, 0x3, 0x8, 0x1c, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1d, 0x16, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd28, 0x3505}, @sadb_x_sec_ctx={0x11, 0x18, 0x5, 0x6, 0x7f, "f1b36f3cd5e619192836ebd522da6bc3eaa9721212c4e95ea14959d751d9290b91376f0ab3f4e38f5571bb468cce77539f0b084febbbd9baac89152f88358b6da92d98eae805e783a0a1ddfe29fbbd182039e15b8cee7ddf289859bacd4ab6bdfcb3bb3b71a886ea1b610169f982856b1859c86763fa7a5ccb530a35b96439"}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}]}, 0xe0}}, 0x40040) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f917", 0x11}], 0x1}, 0x0) 3.765159023s ago: executing program 2 (id=548): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba1c12}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75", 0xe}], 0x1) 3.644302227s ago: executing program 0 (id=549): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x480180, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 3.530988311s ago: executing program 1 (id=550): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0xb6, 0x65, 0x20, 0x413, 0x6023, 0x31ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x40, [{{0x9, 0x4, 0xa1, 0x7, 0x2, 0xb8, 0x3b, 0xfc, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x7, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3.310116812s ago: executing program 0 (id=551): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2fb309ec2a3d0e7a}, 0x20000880) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x4, 0x2, 0x18, 0x2, 0x2, 0x400, 0x6, 0x0, 0x8, 0x0, 0x6, 0x3, 0xfffffffb, 0x37, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x3, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x5, 0xe, 0x4623f, 0x0, 0x8, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x1, 0x2, 0x6f, 0x8, 0x9, 0xfffffffc, 0x599d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x2, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x800, 0x7fff, 0x72c, 0xc, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x2000003, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x2, 0x7, 0x6, 0xffffffff, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xa, 0x7, 0x1f, 0x404, 0x4, 0x4028, 0x200, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x3, 0x3f, 0x1002, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x2, 0x80040101, 0x5, 0x4, 0x5, 0x200006, 0x1, 0x5, 0x80, 0x5, 0x8101, 0x10000, 0x0, 0x0, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x10, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x8, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x400401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0xf80, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x6, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2855, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0xe0880) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0x4) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x402) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x1000002, 0x20010, r5, 0xffffe000) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.111477485s ago: executing program 3 (id=552): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0x0, 0xfffc}, {@in, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd160\x00'}}}]}, 0x19c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\''}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc, 0x10000}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) close(0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0x305bd, 0x4) write$sndseq(r3, &(0x7f0000000100)=[{0xd, 0xa, 0x6, 0x1, @tick=0x8, {0x9, 0x4}, {0x2a, 0x3}, @raw8={"d04923a0cf61ca308db667fb"}}, {0x6, 0x5, 0x9f, 0x6, @time={0x5, 0xa8a}, {0x7, 0x4}, {0x80, 0xf7}, @time=@time={0xffffffff, 0x101}}, {0xf9, 0x3, 0x55, 0x7, @tick, {0x8, 0x5}, {0x0, 0xfd}, @time=@time={0x9, 0x4}}], 0x54) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000003340)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000440)="c7ed", 0x2}], 0x1, &(0x7f0000000640)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x2, 0x1, 0xe7, 0xfffffff8, 0x9a, 0x6, 0x8}}], 0x2c, 0x8000}], 0x1, 0x8040) 2.571988817s ago: executing program 0 (id=553): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cd", 0x5) accept4$alg(r0, 0x0, 0x0, 0x0) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0xc, 0x117, 0x2}], 0xc}}], 0x2, 0x20004041) io_uring_setup(0x38b5, &(0x7f00000000c0)={0x0, 0xc5af, 0x100, 0x0, 0x261}) (async) r2 = io_uring_setup(0x38b5, &(0x7f00000000c0)={0x0, 0xc5af, 0x100, 0x0, 0x261}) r3 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x0, 0x17b, 0x0, r2}, &(0x7f0000000000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) 2.307807268s ago: executing program 0 (id=554): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007060500fcd406b405cf76f6010000070500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b000100697036746e6c000014000280080007000900000008000100", @ANYRES32=r5, @ANYBLOB="1aa7e2709ca9ec34c8620e37d2", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 1.808288952s ago: executing program 4 (id=555): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa8, 0x5, &(0x7f0000000000)) io_setup(0x10, &(0x7f0000000040)=0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100) io_pgetevents(r0, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x0, 0x3938700}, 0x0) 1.208155992s ago: executing program 0 (id=556): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x5d8, 0x2a4, 0x0, 0x148, 0x0, 0x148, 0x544, 0x240, 0x240, 0x544, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x284, 0x2a4, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x9, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xbb04, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x634) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40085503, &(0x7f0000000540)=0x800018) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 1.116335054s ago: executing program 4 (id=557): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r3, &(0x7f0000000380)=""/55, 0x37) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x3) r6 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r6, 0x0, 0x0, 'syz1\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000400"/26, @ANYRES32=r7, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './cgroup/pids.max\x00'}) close(r5) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x20c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) socketpair$unix(0x1, 0x636d0c5993466ace, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)}, 0x40c0) 1.030008123s ago: executing program 2 (id=558): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0xc0, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffff04, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x3ff, 0x2, 0x1, 0x29}, 0xffffffff}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf47d}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e11400cfc26dd7c500f04cd85f2a70f5e9930e3c5db45a5500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb4827"], 0x230) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) close(r0) 0s ago: executing program 3 (id=559): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xe31, 0x0, 0x9, 0x4f, 0x6, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000301010100000000ecffffff0a0000010c0019800800"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket(0x40000000015, 0x80000, 0x0) connect$inet6(r3, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x40000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="50d6f5009c00000000000a0000000c00a9d659868f931acb4bcdfacfd608000200070500dd2f0002800500"/52], 0x50}}, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000380)) syz_usb_connect(0x5, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b010203010902480001"], 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) kernel console output (not intermixed with test programs): usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.010010][ T5873] usb 2-1: Product: syz [ 162.016634][ T5873] usb 2-1: Manufacturer: syz [ 162.029381][ T5873] usb 2-1: SerialNumber: syz [ 162.063310][ T5873] usb 2-1: config 0 descriptor?? [ 162.475384][ T6731] netlink: 40 bytes leftover after parsing attributes in process `syz.4.184'. [ 162.530662][ T6718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.541867][ T6718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.552329][ T6718] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526 [ 162.704479][ T796] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.867665][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 162.875591][ T5873] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max [ 162.915430][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 162.934896][ T6748] lo: Caught tx_queue_len zero misconfig [ 162.941262][ T6748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.186'. [ 162.941681][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 162.973070][ T796] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.988865][ T796] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.000413][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 163.013364][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 163.021693][ T796] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.039493][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 163.047170][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.062686][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 163.070545][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 163.080562][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 163.097474][ T6733] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.113100][ T796] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.123861][ T5873] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 163.338536][ T5833] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 163.356865][ T6750] fido_id[6750]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 163.378709][ T5833] usb 1-1: device reset changed ep0 maxpacket size! [ 163.414609][ T5901] usb 1-1: USB disconnect, device number 10 [ 163.592667][ T796] usb 3-1: USB disconnect, device number 8 [ 163.604586][ T5901] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.764467][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 163.779037][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 163.803566][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.864728][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.906351][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.924206][ T5901] usb 1-1: Product: syz [ 163.931204][ T5901] usb 1-1: Manufacturer: syz [ 163.938358][ T5901] usb 1-1: SerialNumber: syz [ 163.952756][ T5901] usb 1-1: config 0 descriptor?? [ 163.973879][ T5901] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 163.984699][ T5901] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 164.180487][ T6755] binder_alloc: 6754: pid 6754 spamming oneway? 1 buffers allocated for a total size of 4096 [ 164.194051][ T6755] binder_alloc: 6754: pid 6754 spamming oneway? 2 buffers allocated for a total size of 5120 [ 164.419612][ T5932] usb 2-1: USB disconnect, device number 6 [ 164.484583][ T797] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.600023][ T5901] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 164.615958][ T5901] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 164.915332][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 164.992801][ T797] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 165.002574][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.010985][ T797] usb 5-1: Product: syz [ 165.015976][ T797] usb 5-1: Manufacturer: syz [ 165.020993][ T797] usb 5-1: SerialNumber: syz [ 165.664957][ T5901] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 165.754293][ T5901] em28xx 1-1:0.0: No AC97 audio processor [ 165.765643][ T797] usb 5-1: config 0 descriptor?? [ 165.800285][ T797] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 165.809652][ T797] usb 5-1: Detected FT232H [ 165.890351][ T5932] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 166.045479][ T797] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 166.055601][ T5932] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 166.066140][ T6770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.191'. [ 166.291067][ T6771] fido_id[6771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.480125][ T797] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.550876][ T6776] netlink: 140 bytes leftover after parsing attributes in process `syz.2.192'. [ 166.645527][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 166.645573][ T30] audit: type=1326 audit(1771508413.260:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 166.743285][ T30] audit: type=1326 audit(1771508413.260:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 166.858699][ T30] audit: type=1326 audit(1771508413.260:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 166.916276][ T30] audit: type=1326 audit(1771508413.330:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 166.948361][ T30] audit: type=1326 audit(1771508413.330:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 166.974864][ T30] audit: type=1326 audit(1771508413.410:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 166.984738][ T6777] capability: warning: `syz.2.192' uses 32-bit capabilities (legacy support in use) [ 167.006671][ T30] audit: type=1326 audit(1771508413.410:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 167.031955][ T30] audit: type=1326 audit(1771508413.410:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 167.141957][ T5901] usb 1-1: USB disconnect, device number 11 [ 167.162461][ T5901] em28xx 1-1:0.0: Disconnecting em28xx [ 167.184603][ T30] audit: type=1326 audit(1771508413.420:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 167.207487][ T30] audit: type=1326 audit(1771508413.420:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 167.338322][ T5901] em28xx 1-1:0.0: Freeing device [ 167.649320][ T6788] netlink: 67 bytes leftover after parsing attributes in process `syz.3.196'. [ 167.709537][ T6788] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.196' sets config #0 [ 168.247028][ T5932] IPVS: starting estimator thread 0... [ 168.384211][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 168.397711][ T6799] IPVS: using max 37 ests per chain, 88800 per kthread [ 168.629298][ T5932] usb 5-1: USB disconnect, device number 9 [ 168.697306][ T5932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 168.734112][ T5932] ftdi_sio 5-1:0.0: device disconnected [ 168.912315][ T6793] team_slave_1: Caught tx_queue_len zero misconfig [ 169.164603][ T796] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.342330][ T796] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 169.376810][ T796] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 169.428809][ T796] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.479776][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.000925][ T6818] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 170.147438][ T5901] usb 3-1: USB disconnect, device number 9 [ 170.193532][ T6826] syzkaller0: entered promiscuous mode [ 170.219963][ T6826] syzkaller0: entered allmulticast mode [ 170.240787][ T6828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.205'. [ 170.444804][ T796] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.607163][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 170.616483][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.631706][ T796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 170.645296][ T796] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 170.656704][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.702635][ T796] usb 2-1: config 0 descriptor?? [ 171.351413][ T6845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.375267][ T6827] netlink: 'syz.1.207': attribute type 3 has an invalid length. [ 171.382008][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 171.394440][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 171.410083][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.436906][ T796] usb 2-1: USB disconnect, device number 7 [ 171.997631][ T6857] program syz.1.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.415888][ T6868] FAULT_INJECTION: forcing a failure. [ 172.415888][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.419596][ T5873] hid_parser_main: 21 callbacks suppressed [ 172.419656][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.442119][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.3.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.442212][ T6868] Tainted: [L]=SOFTLOCKUP [ 172.442226][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.442258][ T6868] Call Trace: [ 172.442280][ T6868] [ 172.442301][ T6868] dump_stack_lvl+0xe8/0x150 [ 172.442389][ T6868] should_fail_ex+0x412/0x560 [ 172.442471][ T6868] _copy_from_user+0x2d/0xb0 [ 172.442558][ T6868] kvm_vm_ioctl+0x2c2/0xd50 [ 172.442643][ T6868] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 172.442717][ T6868] ? kasan_save_free_info+0x46/0x50 [ 172.442794][ T6868] ? __kasan_slab_free+0x5c/0x80 [ 172.442847][ T6868] ? kfree+0x1c1/0x630 [ 172.442921][ T6868] ? tomoyo_path_number_perm+0x501/0x630 [ 172.442974][ T6868] ? security_file_ioctl_compat+0xc3/0x2a0 [ 172.443029][ T6868] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 172.443124][ T6868] ? __do_fast_syscall_32+0x20d/0x640 [ 172.443208][ T6868] ? do_fast_syscall_32+0x33/0x70 [ 172.443262][ T6868] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.443360][ T6868] ? kvm_arch_vm_compat_ioctl+0x169/0x2b0 [ 172.443444][ T6868] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 172.443591][ T6868] ? kasan_quarantine_put+0xbb/0x1f0 [ 172.443666][ T6868] ? tomoyo_path_number_perm+0x219/0x630 [ 172.443721][ T6868] ? tomoyo_path_number_perm+0x219/0x630 [ 172.443795][ T6868] ? do_vfs_ioctl+0x1166/0x1530 [ 172.443867][ T6868] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 172.443995][ T6868] kvm_vm_compat_ioctl+0x2b4/0x3a0 [ 172.444083][ T6868] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 172.444174][ T6868] ? __fget_files+0x3a0/0x420 [ 172.444251][ T6868] ? __fget_files+0x2a/0x420 [ 172.444333][ T6868] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 172.444410][ T6868] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 172.444491][ T6868] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 172.444578][ T6868] ? __fget_files+0x3a0/0x420 [ 172.444680][ T6868] ? fput+0xa0/0xd0 [ 172.444756][ T6868] ? ksys_write+0x242/0x270 [ 172.444848][ T6868] __do_fast_syscall_32+0x20d/0x640 [ 172.444905][ T6868] ? do_fast_syscall_32+0x33/0x70 [ 172.444950][ T6868] ? asm_int80_emulation+0x1a/0x20 [ 172.445003][ T6868] ? do_int80_emulation+0x274/0x4d0 [ 172.445055][ T6868] ? trace_irq_disable+0x3b/0x150 [ 172.445141][ T6868] do_fast_syscall_32+0x33/0x70 [ 172.445195][ T6868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.445265][ T6868] RIP: 0023:0xf7fd6f6c [ 172.445309][ T6868] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 172.445353][ T6868] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 172.445413][ T6868] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae76 [ 172.445446][ T6868] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.445478][ T6868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.445513][ T6868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.445545][ T6868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.445620][ T6868] [ 172.785304][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.792923][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.804233][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.814957][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.864267][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.885304][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.895025][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.216'. [ 172.926522][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.934168][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.943418][ T5873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x3 [ 172.956194][ T5873] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 173.210224][ T6873] fido_id[6873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.631173][ T796] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.706046][ T6893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.223'. [ 174.162857][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 174.193375][ T796] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.221698][ T796] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.282339][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.314474][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.414426][ T796] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.924154][ T796] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.958778][ T796] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.977127][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.998292][ T796] usb 3-1: config 0 descriptor?? [ 175.324183][ T796] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 175.388201][ T796] usb 3-1: USB disconnect, device number 10 [ 175.425211][ T796] usblp0: removed [ 175.804932][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 175.815532][ T796] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.004743][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 176.033402][ T796] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.076133][ T796] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.114472][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.136827][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.150897][ T796] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.161335][ T796] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.187017][ T797] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.208619][ T796] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.241830][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.278926][ T796] usb 3-1: config 0 descriptor?? [ 176.326853][ T797] usb 2-1: device descriptor read/64, error -71 [ 176.538548][ T796] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 176.576351][ T797] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.616130][ T796] usb 3-1: USB disconnect, device number 11 [ 176.651067][ T796] usblp0: removed [ 176.664586][ T5901] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 176.754453][ T797] usb 2-1: device descriptor read/64, error -71 [ 176.827167][ T5901] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.846662][ T5901] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 176.874420][ T5901] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 176.894707][ T797] usb usb2-port1: attempt power cycle [ 176.904419][ T5901] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 176.923888][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.947904][ T6915] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 177.024967][ T796] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.188807][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 177.199902][ T6915] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 177.216468][ T796] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 177.231219][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.252891][ T796] usb 4-1: Product: syz [ 177.263088][ T796] usb 4-1: Manufacturer: syz [ 177.264693][ T797] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.279155][ T796] usb 4-1: SerialNumber: syz [ 177.307531][ T796] usb 4-1: config 0 descriptor?? [ 177.336773][ T797] usb 2-1: device descriptor read/8, error -71 [ 177.606013][ T797] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.639499][ T797] usb 2-1: device descriptor read/8, error -71 [ 177.772311][ T797] usb usb2-port1: unable to enumerate USB device [ 177.949952][ T796] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 156903169 serial 508AC46E.116F7A03 (2 channels) [ 177.973588][ T796] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 177.989702][ T796] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 178.068809][ T796] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 178.195810][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.217905][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.229562][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.248004][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.260394][ T796] usb 4-1: USB disconnect, device number 8 [ 178.420282][ T5901] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 178.428593][ T6915] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 178.442279][ T5901] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input8 [ 178.546911][ T5901] usb 1-1: USB disconnect, device number 12 [ 178.552940][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 179.507554][ T6936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.596165][ T6931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.650026][ T796] hid_parser_main: 22 callbacks suppressed [ 179.650045][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x7 [ 179.700468][ T796] hid-generic 0000:0000:0000.0009: ignoring exceeding usage max [ 179.795311][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.236'. [ 179.832768][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 179.852879][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x3 [ 179.883945][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x3 [ 180.066126][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x3 [ 180.073615][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x3 [ 180.081386][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x3 [ 180.089213][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x3 [ 180.097042][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x3 [ 180.104538][ T796] hid-generic 0000:0000:0000.0009: unknown main item tag 0x3 [ 180.170074][ T796] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 180.563820][ T6946] fido_id[6946]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 181.243663][ T796] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 182.058019][ T6965] fido_id[6965]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 182.072283][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 182.287152][ T6977] tipc: Started in network mode [ 182.292130][ T6977] tipc: Node identity e0000002, cluster identity 4711 [ 182.474724][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 182.601985][ T6977] tipc: Enabling of bearer rejected, failed to enable media [ 182.726431][ T5901] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 182.804492][ T5902] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 182.897408][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.935058][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 182.965290][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 182.975479][ T5901] usb 3-1: Product: syz [ 182.979686][ T5901] usb 3-1: Manufacturer: syz [ 182.986484][ T5901] usb 3-1: SerialNumber: syz [ 183.014799][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 183.027625][ T5902] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 183.044421][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.060376][ T5902] usb 5-1: Product: syz [ 183.074439][ T5902] usb 5-1: Manufacturer: syz [ 183.079517][ T5902] usb 5-1: SerialNumber: syz [ 183.216676][ T5902] usb 5-1: config 0 descriptor?? [ 183.274938][ T5901] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 183.798194][ T6981] xt_hashlimit: size too large, truncated to 1048576 [ 183.806849][ T6981] xt_hashlimit: max too large, truncated to 1048576 [ 183.879490][ T5902] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 156903169 serial 508AC46E.116F7A03 (2 channels) [ 183.891315][ T5902] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 183.899153][ T5902] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 183.949895][ T5873] hid-generic 0000:0000:0000.000B: ignoring exceeding usage max [ 183.986522][ T5873] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 184.012383][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.251'. [ 184.026626][ T5902] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 184.169633][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.180615][ T7013] input: syz0 as /devices/virtual/input/input9 [ 184.198289][ T7011] fido_id[7011]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.224317][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.268587][ T5902] usb 5-1: USB disconnect, device number 10 [ 184.524181][ T5902] usb 3-1: USB disconnect, device number 12 [ 184.556880][ T5902] usblp0: removed [ 184.827407][ T7022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.934113][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 185.108279][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 185.219038][ T7035] FAULT_INJECTION: forcing a failure. [ 185.219038][ T7035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.237986][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.1.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.238019][ T7035] Tainted: [L]=SOFTLOCKUP [ 185.238025][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.238034][ T7035] Call Trace: [ 185.238059][ T7035] [ 185.238068][ T7035] dump_stack_lvl+0xe8/0x150 [ 185.238105][ T7035] should_fail_ex+0x412/0x560 [ 185.238136][ T7035] _copy_to_user+0x31/0xb0 [ 185.238167][ T7035] simple_read_from_buffer+0xe1/0x170 [ 185.238201][ T7035] proc_fail_nth_read+0x1bb/0x230 [ 185.238232][ T7035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.238274][ T7035] ? rw_verify_area+0x2a6/0x4d0 [ 185.238293][ T7035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.238325][ T7035] vfs_read+0x20c/0xa70 [ 185.238339][ T7035] ? fdget_pos+0x246/0x320 [ 185.238364][ T7035] ? __pfx___mutex_lock+0x10/0x10 [ 185.238379][ T7035] ? __pfx_vfs_read+0x10/0x10 [ 185.238394][ T7035] ? __fget_files+0x2a/0x420 [ 185.238419][ T7035] ? __fget_files+0x3a0/0x420 [ 185.238439][ T7035] ? __fget_files+0x2a/0x420 [ 185.238466][ T7035] ksys_read+0x150/0x270 [ 185.238483][ T7035] ? __pfx_ksys_read+0x10/0x10 [ 185.238501][ T7035] ? asm_int80_emulation+0x1a/0x20 [ 185.238521][ T7035] do_int80_emulation+0x173/0x4d0 [ 185.238536][ T7035] ? trace_irq_disable+0x3b/0x150 [ 185.238558][ T7035] ? asm_int80_emulation+0x1a/0x20 [ 185.238571][ T7035] ? clear_bhb_loop+0x40/0x90 [ 185.238587][ T7035] ? clear_bhb_loop+0x40/0x90 [ 185.238605][ T7035] asm_int80_emulation+0x1a/0x20 [ 185.238620][ T7035] RIP: 0023:0xf7155b6b [ 185.238633][ T7035] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 185.238646][ T7035] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 185.238661][ T7035] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f540d5d0 [ 185.238672][ T7035] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 185.238680][ T7035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.238688][ T7035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 185.238697][ T7035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.238717][ T7035] [ 186.359469][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 186.369885][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 186.404525][ T5932] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.556515][ T5932] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 186.566033][ T5932] usb 2-1: config 0 has no interface number 0 [ 186.572472][ T5932] usb 2-1: config 0 interface 130 altsetting 0 endpoint 0x5 has invalid maxpacket 1007, setting to 64 [ 186.588394][ T5932] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=d1.5f [ 186.624272][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.643503][ T5932] usb 2-1: config 0 descriptor?? [ 186.656780][ T5932] keyspan 2-1:0.130: Keyspan 1 port adapter converter detected [ 186.666413][ T5932] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 87 [ 186.675037][ T5932] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 7 [ 186.686325][ T5932] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 81 [ 186.696123][ T5932] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 1 [ 187.116712][ T5932] keyspan 2-1:0.130: unsupported endpoint type 0 [ 187.124953][ T5932] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 85 [ 187.132943][ T5932] keyspan 2-1:0.130: unsupported endpoint type 0 [ 187.193307][ T5932] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 187.251152][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.290372][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.335727][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.367628][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.396566][ T7059] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.263'. [ 187.475753][ T7066] Invalid option length (135) for dns_resolver key [ 187.565312][ T7059] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 187.855027][ T5932] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 187.891025][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 187.955250][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 187.996105][ T5932] usb 1-1: device descriptor read/64, error -71 [ 188.304535][ T5932] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 188.454529][ T5932] usb 1-1: device descriptor read/64, error -71 [ 188.564791][ T5932] usb usb1-port1: attempt power cycle [ 188.833032][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 188.873468][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 188.925589][ T5932] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 188.967383][ T5932] usb 1-1: device descriptor read/8, error -71 [ 188.994664][ T7092] input: syz0 as /devices/virtual/input/input10 [ 189.262614][ T796] usb 2-1: USB disconnect, device number 13 [ 189.298111][ T796] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 189.344469][ T5932] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 189.357388][ T796] keyspan 2-1:0.130: device disconnected [ 189.391196][ T5932] usb 1-1: device descriptor read/8, error -71 [ 189.514731][ T5932] usb usb1-port1: unable to enumerate USB device [ 189.541188][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.278'. [ 189.650640][ T7103] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 190.182034][ T7121] FAULT_INJECTION: forcing a failure. [ 190.182034][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 190.514471][ T796] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.651264][ T7121] CPU: 0 UID: 0 PID: 7121 Comm: syz.2.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.651291][ T7121] Tainted: [L]=SOFTLOCKUP [ 190.651297][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.651306][ T7121] Call Trace: [ 190.651312][ T7121] [ 190.651319][ T7121] dump_stack_lvl+0xe8/0x150 [ 190.651345][ T7121] should_fail_ex+0x412/0x560 [ 190.651368][ T7121] should_failslab+0xa8/0x100 [ 190.651388][ T7121] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 190.651415][ T7121] ? __alloc_skb+0x186/0x7d0 [ 190.651434][ T7121] ? __alloc_skb+0x1d0/0x7d0 [ 190.651452][ T7121] ? __local_bh_enable_ip+0xd0/0x130 [ 190.651475][ T7121] __alloc_skb+0x1d0/0x7d0 [ 190.651497][ T7121] netlink_sendmsg+0x5d4/0xb40 [ 190.651524][ T7121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.651545][ T7121] ? aa_sock_msg_perm+0xf1/0x1b0 [ 190.651563][ T7121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.651581][ T7121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.651599][ T7121] ____sys_sendmsg+0xa68/0xad0 [ 190.651627][ T7121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.651652][ T7121] ? kstrtoull+0x12f/0x1d0 [ 190.651674][ T7121] ___sys_sendmsg+0x2a5/0x360 [ 190.651700][ T7121] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.651723][ T7121] ? get_pid_task+0x20/0x1f0 [ 190.651737][ T7121] ? get_pid_task+0x20/0x1f0 [ 190.651749][ T7121] ? get_pid_task+0x20/0x1f0 [ 190.651781][ T7121] ? __fget_files+0x2a/0x420 [ 190.651803][ T7121] ? __fget_files+0x3a0/0x420 [ 190.651838][ T7121] __sys_sendmsg+0x183/0x260 [ 190.651862][ T7121] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.651899][ T7121] __do_fast_syscall_32+0x20d/0x640 [ 190.651916][ T7121] ? do_fast_syscall_32+0x33/0x70 [ 190.651929][ T7121] ? asm_int80_emulation+0x1a/0x20 [ 190.651944][ T7121] ? do_int80_emulation+0x274/0x4d0 [ 190.651957][ T7121] ? trace_irq_disable+0x3b/0x150 [ 190.651983][ T7121] do_fast_syscall_32+0x33/0x70 [ 190.651997][ T7121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.652016][ T7121] RIP: 0023:0xf7f24f6c [ 190.652030][ T7121] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 190.652043][ T7121] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 190.652060][ T7121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 190.652070][ T7121] RDX: 0000000024040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.652080][ T7121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.652088][ T7121] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.652098][ T7121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.652118][ T7121] [ 191.073480][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 191.101419][ T796] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 191.118772][ T7128] netlink: 72 bytes leftover after parsing attributes in process `syz.0.286'. [ 191.129015][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.142058][ T7128] netlink: 72 bytes leftover after parsing attributes in process `syz.0.286'. [ 191.154094][ T796] usb 4-1: Product: syz [ 191.172334][ T796] usb 4-1: Manufacturer: syz [ 191.182497][ T796] usb 4-1: SerialNumber: syz [ 191.218816][ T796] usb 4-1: config 0 descriptor?? [ 191.252180][ T796] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 191.329538][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.288'. [ 191.348572][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 191.383496][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 191.407972][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 191.454474][ T7136] FAULT_INJECTION: forcing a failure. [ 191.454474][ T7136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.471363][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.1.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.471396][ T7136] Tainted: [L]=SOFTLOCKUP [ 191.471403][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.471416][ T7136] Call Trace: [ 191.471424][ T7136] [ 191.471433][ T7136] dump_stack_lvl+0xe8/0x150 [ 191.471467][ T7136] should_fail_ex+0x412/0x560 [ 191.471496][ T7136] _copy_from_user+0x2d/0xb0 [ 191.471527][ T7136] video_usercopy+0x36f/0x14b0 [ 191.471558][ T7136] ? __pfx___video_do_ioctl+0x10/0x10 [ 191.471585][ T7136] ? __pfx_video_usercopy+0x10/0x10 [ 191.471626][ T7136] ? __fget_files+0x2a/0x420 [ 191.471651][ T7136] v4l2_ioctl+0x18d/0x1e0 [ 191.471670][ T7136] v4l2_compat_ioctl32+0x1d7/0x280 [ 191.471696][ T7136] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 191.471716][ T7136] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 191.471736][ T7136] ? __fget_files+0x3a0/0x420 [ 191.471762][ T7136] ? fput+0xa0/0xd0 [ 191.471783][ T7136] ? ksys_write+0x242/0x270 [ 191.471808][ T7136] __do_fast_syscall_32+0x20d/0x640 [ 191.471825][ T7136] ? do_fast_syscall_32+0x33/0x70 [ 191.471838][ T7136] ? asm_int80_emulation+0x1a/0x20 [ 191.471853][ T7136] ? do_int80_emulation+0x274/0x4d0 [ 191.471866][ T7136] ? trace_irq_disable+0x3b/0x150 [ 191.471891][ T7136] do_fast_syscall_32+0x33/0x70 [ 191.471905][ T7136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.471924][ T7136] RIP: 0023:0xf701ef6c [ 191.471938][ T7136] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 191.471951][ T7136] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 191.471968][ T7136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 191.471978][ T7136] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.471988][ T7136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.471996][ T7136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.472005][ T7136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.472026][ T7136] [ 191.545631][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 191.623005][ T7139] input: syz0 as /devices/virtual/input/input12 [ 192.039002][ T7147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.053487][ T7146] FAULT_INJECTION: forcing a failure. [ 192.053487][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 192.053549][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.0.293 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.053570][ T7146] Tainted: [L]=SOFTLOCKUP [ 192.053575][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.053585][ T7146] Call Trace: [ 192.053590][ T7146] [ 192.053596][ T7146] dump_stack_lvl+0xe8/0x150 [ 192.053622][ T7146] should_fail_ex+0x412/0x560 [ 192.053644][ T7146] should_failslab+0xa8/0x100 [ 192.053695][ T7146] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 192.053732][ T7146] ? __alloc_skb+0x1d0/0x7d0 [ 192.053759][ T7146] ? __local_bh_enable_ip+0xd0/0x130 [ 192.053791][ T7146] __alloc_skb+0x1d0/0x7d0 [ 192.053820][ T7146] ? __lock_acquire+0x6b5/0x2cf0 [ 192.053842][ T7146] __pskb_copy_fclone+0xaa/0xff0 [ 192.053864][ T7146] ? __alloc_skb+0x27d/0x7d0 [ 192.053883][ T7146] ? tipc_sendmsg+0x55/0x70 [ 192.053903][ T7146] ? ____sys_sendmsg+0xa68/0xad0 [ 192.053924][ T7146] ? __sys_sendmsg+0x183/0x260 [ 192.053944][ T7146] ? __do_fast_syscall_32+0x20d/0x640 [ 192.053958][ T7146] ? do_fast_syscall_32+0x33/0x70 [ 192.053971][ T7146] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.053999][ T7146] tipc_msg_reassemble+0x10b/0x3b0 [ 192.054027][ T7146] tipc_mcast_xmit+0x254/0x19e0 [ 192.054053][ T7146] ? __might_fault+0xaf/0x130 [ 192.054076][ T7146] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 192.054096][ T7146] ? _copy_from_iter+0x2d3/0x1670 [ 192.054118][ T7146] ? rcu_is_watching+0x15/0xb0 [ 192.054143][ T7146] ? __pfx__copy_from_iter+0x10/0x10 [ 192.054168][ T7146] ? tipc_msg_build+0x40d/0xd60 [ 192.054193][ T7146] ? tipc_msg_build+0x485/0xd60 [ 192.054220][ T7146] ? net_generic+0x1e/0x240 [ 192.054249][ T7146] ? net_generic+0x1e/0x240 [ 192.054266][ T7146] ? net_generic+0x1e/0x240 [ 192.054286][ T7146] ? tipc_group_bc_cong+0x16b/0x210 [ 192.054304][ T7146] tipc_send_group_bcast+0x80d/0xad0 [ 192.054367][ T7146] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 192.054406][ T7146] ? __pfx_woken_wake_function+0x10/0x10 [ 192.054428][ T7146] ? tipc_dest_list_purge+0x167/0x190 [ 192.054449][ T7146] __tipc_sendmsg+0x1f20/0x2bf0 [ 192.054484][ T7146] ? __pfx___tipc_sendmsg+0x10/0x10 [ 192.054503][ T7146] ? tomoyo_check_open_permission+0x38e/0x470 [ 192.054521][ T7146] ? aa_label_sk_perm+0x529/0x6d0 [ 192.054541][ T7146] ? __lock_acquire+0x6b5/0x2cf0 [ 192.054561][ T7146] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 192.054580][ T7146] ? __lock_acquire+0x6b5/0x2cf0 [ 192.054601][ T7146] ? __lock_acquire+0x6b5/0x2cf0 [ 192.054622][ T7146] ? __lock_acquire+0x6b5/0x2cf0 [ 192.054651][ T7146] ? __lock_acquire+0x6b5/0x2cf0 [ 192.054683][ T7146] ? tipc_sendmsg+0x47/0x70 [ 192.054706][ T7146] ? __local_bh_enable_ip+0xd0/0x130 [ 192.054729][ T7146] tipc_sendmsg+0x55/0x70 [ 192.054753][ T7146] ? __pfx_tipc_sendmsg+0x10/0x10 [ 192.054777][ T7146] ____sys_sendmsg+0xa68/0xad0 [ 192.054808][ T7146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.054854][ T7146] ? kstrtoull+0x12f/0x1d0 [ 192.054885][ T7146] ___sys_sendmsg+0x2a5/0x360 [ 192.054927][ T7146] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.054953][ T7146] ? get_pid_task+0x20/0x1f0 [ 192.054966][ T7146] ? get_pid_task+0x20/0x1f0 [ 192.054979][ T7146] ? get_pid_task+0x20/0x1f0 [ 192.055016][ T7146] ? __fget_files+0x2a/0x420 [ 192.055038][ T7146] ? __fget_files+0x3a0/0x420 [ 192.055067][ T7146] __sys_sendmsg+0x183/0x260 [ 192.055091][ T7146] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.055129][ T7146] __do_fast_syscall_32+0x20d/0x640 [ 192.055145][ T7146] ? do_fast_syscall_32+0x33/0x70 [ 192.055158][ T7146] ? asm_int80_emulation+0x1a/0x20 [ 192.055173][ T7146] ? do_int80_emulation+0x274/0x4d0 [ 192.055186][ T7146] ? trace_irq_disable+0x3b/0x150 [ 192.055213][ T7146] do_fast_syscall_32+0x33/0x70 [ 192.055227][ T7146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.055246][ T7146] RIP: 0023:0xf701ef6c [ 192.055260][ T7146] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 192.055274][ T7146] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 192.055290][ T7146] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 192.055301][ T7146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.055309][ T7146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.055318][ T7146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.055327][ T7146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.055348][ T7146] [ 192.503250][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.294'. [ 192.783251][ T7160] FAULT_INJECTION: forcing a failure. [ 192.783251][ T7160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.783291][ T7160] CPU: 1 UID: 0 PID: 7160 Comm: syz.1.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.783319][ T7160] Tainted: [L]=SOFTLOCKUP [ 192.783327][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.783340][ T7160] Call Trace: [ 192.783348][ T7160] [ 192.783356][ T7160] dump_stack_lvl+0xe8/0x150 [ 192.783390][ T7160] should_fail_ex+0x412/0x560 [ 192.783419][ T7160] _copy_from_user+0x2d/0xb0 [ 192.783451][ T7160] inet6_compat_ioctl+0x102/0x3c0 [ 192.783479][ T7160] ? __pfx_inet6_compat_ioctl+0x10/0x10 [ 192.783521][ T7160] compat_sock_ioctl+0x17a/0xcb0 [ 192.783549][ T7160] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 192.783574][ T7160] ? __fget_files+0x3a0/0x420 [ 192.783602][ T7160] ? __fget_files+0x2a/0x420 [ 192.783634][ T7160] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 192.783665][ T7160] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 192.783693][ T7160] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 192.783721][ T7160] ? __fget_files+0x3a0/0x420 [ 192.783756][ T7160] ? fput+0xa0/0xd0 [ 192.783784][ T7160] ? ksys_write+0x242/0x270 [ 192.783818][ T7160] __do_fast_syscall_32+0x20d/0x640 [ 192.783840][ T7160] ? do_fast_syscall_32+0x33/0x70 [ 192.783859][ T7160] ? asm_int80_emulation+0x1a/0x20 [ 192.783878][ T7160] ? do_int80_emulation+0x274/0x4d0 [ 192.783905][ T7160] ? trace_irq_disable+0x3b/0x150 [ 192.783939][ T7160] do_fast_syscall_32+0x33/0x70 [ 192.783959][ T7160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.783984][ T7160] RIP: 0023:0xf701ef6c [ 192.784003][ T7160] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 192.784022][ T7160] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 192.784044][ T7160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890b [ 192.784058][ T7160] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.784071][ T7160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.784084][ T7160] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.784096][ T7160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.784126][ T7160] [ 193.105787][ T7166] FAULT_INJECTION: forcing a failure. [ 193.105787][ T7166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.105828][ T7166] CPU: 0 UID: 0 PID: 7166 Comm: syz.2.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.105855][ T7166] Tainted: [L]=SOFTLOCKUP [ 193.105864][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.105876][ T7166] Call Trace: [ 193.105884][ T7166] [ 193.105894][ T7166] dump_stack_lvl+0xe8/0x150 [ 193.105928][ T7166] should_fail_ex+0x412/0x560 [ 193.105959][ T7166] _copy_from_iter+0x1d3/0x1670 [ 193.105987][ T7166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.106017][ T7166] ? __pfx_policy_nodemask+0x10/0x10 [ 193.106047][ T7166] ? __pfx__copy_from_iter+0x10/0x10 [ 193.106080][ T7166] ? set_page_refcounted+0xa0/0x1e0 [ 193.106106][ T7166] ? page_copy_sane+0x4e/0x270 [ 193.106134][ T7166] copy_page_from_iter+0xdd/0x170 [ 193.106166][ T7166] tun_get_user+0x1d4b/0x3dd0 [ 193.106192][ T7166] ? tun_get_user+0x6ff/0x3dd0 [ 193.106236][ T7166] ? aa_file_perm+0x440/0x1630 [ 193.106262][ T7166] ? __pfx_tun_get_user+0x10/0x10 [ 193.106306][ T7166] ? ref_tracker_alloc+0x363/0x4d0 [ 193.106335][ T7166] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 193.106365][ T7166] ? tun_get+0x1c/0x2f0 [ 193.106396][ T7166] ? tun_get+0x1c/0x2f0 [ 193.106421][ T7166] ? tun_get+0x1c/0x2f0 [ 193.106451][ T7166] tun_chr_write_iter+0x113/0x200 [ 193.106480][ T7166] vfs_write+0x61d/0xb90 [ 193.106507][ T7166] ? __pfx_vfs_write+0x10/0x10 [ 193.106536][ T7166] ? __fget_files+0x2a/0x420 [ 193.106575][ T7166] ksys_write+0x150/0x270 [ 193.106598][ T7166] ? __pfx_ksys_write+0x10/0x10 [ 193.106623][ T7166] ? asm_int80_emulation+0x1a/0x20 [ 193.106655][ T7166] do_int80_emulation+0x173/0x4d0 [ 193.106677][ T7166] ? asm_int80_emulation+0x1a/0x20 [ 193.106696][ T7166] ? clear_bhb_loop+0x40/0x90 [ 193.106716][ T7166] ? clear_bhb_loop+0x40/0x90 [ 193.106819][ T7166] asm_int80_emulation+0x1a/0x20 [ 193.106904][ T7166] RIP: 0023:0xf7125b6b [ 193.106965][ T7166] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 193.107016][ T7166] RSP: 002b:00000000f53e644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 193.107071][ T7166] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000440 [ 193.107105][ T7166] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.107137][ T7166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.107168][ T7166] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.107200][ T7166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.107274][ T7166] [ 193.215529][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.301'. [ 193.235874][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 193.479213][ T7176] FAULT_INJECTION: forcing a failure. [ 193.479213][ T7176] name failslab, interval 1, probability 0, space 0, times 0 [ 193.479292][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.1.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.479321][ T7176] Tainted: [L]=SOFTLOCKUP [ 193.479329][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.479342][ T7176] Call Trace: [ 193.479351][ T7176] [ 193.479359][ T7176] dump_stack_lvl+0xe8/0x150 [ 193.479394][ T7176] should_fail_ex+0x412/0x560 [ 193.479424][ T7176] should_failslab+0xa8/0x100 [ 193.479453][ T7176] __kvmalloc_node_noprof+0x178/0x8a0 [ 193.479479][ T7176] ? seq_read_iter+0x202/0xe10 [ 193.479512][ T7176] seq_read_iter+0x202/0xe10 [ 193.479546][ T7176] ? __asan_memset+0x22/0x50 [ 193.479585][ T7176] seq_read+0x367/0x480 [ 193.479619][ T7176] ? __pfx_seq_read+0x10/0x10 [ 193.479642][ T7176] ? __pfx___mutex_trylock_common+0x10/0x10 [ 193.479682][ T7176] ? apparmor_file_permission+0x17f/0x1f0 [ 193.479724][ T7176] ? __pfx_seq_read+0x10/0x10 [ 193.479745][ T7176] proc_reg_read+0x1e9/0x2e0 [ 193.479777][ T7176] ? __pfx_proc_reg_read+0x10/0x10 [ 193.479819][ T7176] vfs_read+0x20c/0xa70 [ 193.479839][ T7176] ? fdget_pos+0x246/0x320 [ 193.479874][ T7176] ? __pfx___mutex_lock+0x10/0x10 [ 193.479895][ T7176] ? __pfx_vfs_read+0x10/0x10 [ 193.479918][ T7176] ? __fget_files+0x2a/0x420 [ 193.479952][ T7176] ? __fget_files+0x3a0/0x420 [ 193.479980][ T7176] ? __fget_files+0x2a/0x420 [ 193.480018][ T7176] ksys_read+0x150/0x270 [ 193.480042][ T7176] ? __pfx_ksys_read+0x10/0x10 [ 193.480074][ T7176] __do_fast_syscall_32+0x20d/0x640 [ 193.480097][ T7176] ? do_fast_syscall_32+0x33/0x70 [ 193.480116][ T7176] ? asm_int80_emulation+0x1a/0x20 [ 193.480136][ T7176] ? do_int80_emulation+0x274/0x4d0 [ 193.480154][ T7176] ? trace_irq_disable+0x3b/0x150 [ 193.480189][ T7176] do_fast_syscall_32+0x33/0x70 [ 193.480210][ T7176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.480237][ T7176] RIP: 0023:0xf701ef6c [ 193.480256][ T7176] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 193.480274][ T7176] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 193.480296][ T7176] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002480 [ 193.480311][ T7176] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.480323][ T7176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.480335][ T7176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.480348][ T7176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.480379][ T7176] [ 193.750300][ T7183] input: syz0 as /devices/virtual/input/input13 [ 194.544489][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544572][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.685606][ T5833] hid_parser_main: 52 callbacks suppressed [ 194.685662][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 194.915806][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 194.923291][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 194.931611][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 194.940113][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 194.948329][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 194.955862][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 194.963971][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 194.996833][ T5873] usb 4-1: USB disconnect, device number 9 [ 195.004926][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 195.012865][ T5833] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 195.054115][ T5833] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 195.273528][ T7212] fido_id[7212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.756304][ T7235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.904428][ T5873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 196.114488][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 196.235334][ T5873] usb 1-1: config 0 has no interfaces? [ 196.241194][ T5873] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 196.250392][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.326908][ T5873] usb 1-1: config 0 descriptor?? [ 197.081713][ T796] usb 1-1: USB disconnect, device number 17 [ 197.208729][ T7249] FAULT_INJECTION: forcing a failure. [ 197.208729][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 197.231085][ T7249] CPU: 0 UID: 0 PID: 7249 Comm: syz.2.324 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.231125][ T7249] Tainted: [L]=SOFTLOCKUP [ 197.231130][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.231140][ T7249] Call Trace: [ 197.231146][ T7249] [ 197.231154][ T7249] dump_stack_lvl+0xe8/0x150 [ 197.231180][ T7249] should_fail_ex+0x412/0x560 [ 197.231202][ T7249] should_failslab+0xa8/0x100 [ 197.231223][ T7249] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 197.231250][ T7249] ? __alloc_skb+0x1d0/0x7d0 [ 197.231274][ T7249] __alloc_skb+0x1d0/0x7d0 [ 197.231297][ T7249] tcp_stream_alloc_skb+0x3f/0x580 [ 197.231325][ T7249] tcp_sendmsg_locked+0x1375/0x5490 [ 197.231378][ T7249] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 197.231399][ T7249] ? tcp_sendmsg+0x21/0x50 [ 197.231415][ T7249] ? __local_bh_enable_ip+0xd0/0x130 [ 197.231438][ T7249] tcp_sendmsg+0x2f/0x50 [ 197.231453][ T7249] __sys_sendto+0x627/0x7a0 [ 197.231475][ T7249] ? __pfx___sys_sendto+0x10/0x10 [ 197.231513][ T7249] ? fput+0xa0/0xd0 [ 197.231534][ T7249] ? ksys_write+0x242/0x270 [ 197.231554][ T7249] __ia32_sys_sendto+0xdd/0x100 [ 197.231577][ T7249] __do_fast_syscall_32+0x20d/0x640 [ 197.231600][ T7249] ? do_fast_syscall_32+0x33/0x70 [ 197.231613][ T7249] ? asm_int80_emulation+0x1a/0x20 [ 197.231628][ T7249] ? do_int80_emulation+0x274/0x4d0 [ 197.231641][ T7249] ? trace_irq_disable+0x3b/0x150 [ 197.231666][ T7249] do_fast_syscall_32+0x33/0x70 [ 197.231690][ T7249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.231709][ T7249] RIP: 0023:0xf7f24f6c [ 197.231723][ T7249] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 197.231736][ T7249] RSP: 002b:00000000f53c550c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 197.231753][ T7249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 197.231764][ T7249] RDX: 00000000ffffff94 RSI: 0000000000000012 RDI: 0000000000000000 [ 197.231773][ T7249] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 197.231782][ T7249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 197.231791][ T7249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.231813][ T7249] [ 197.629436][ T7251] input: syz0 as /devices/virtual/input/input14 [ 197.989901][ T7258] __nla_validate_parse: 10 callbacks suppressed [ 197.989922][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 198.078874][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.328'. [ 198.219669][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 198.246645][ T7264] tipc: Enabled bearer , priority 0 [ 198.558004][ T7264] syzkaller0: entered promiscuous mode [ 198.563653][ T7264] syzkaller0: entered allmulticast mode [ 199.158244][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.331'. [ 199.366140][ T5932] tipc: Node number set to 3758096386 [ 199.787898][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.333'. [ 200.161315][ T7295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.337'. [ 200.353050][ T7301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.373438][ T7300] netlink: 48 bytes leftover after parsing attributes in process `syz.2.337'. [ 200.616567][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 200.784700][ T5901] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.047717][ T7308] input: syz0 as /devices/virtual/input/input15 [ 201.078533][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.088882][ T5901] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.098254][ T5901] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.168430][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'. [ 201.196055][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.218512][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 201.356198][ T5901] usb 5-1: config 0 descriptor?? [ 202.045165][ T7326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.370555][ T7337] syzkaller1: entered promiscuous mode [ 202.377338][ T7337] syzkaller1: entered allmulticast mode [ 203.026555][ T7349] __nla_validate_parse: 2 callbacks suppressed [ 203.026572][ T7349] netlink: 196 bytes leftover after parsing attributes in process `syz.2.350'. [ 203.136605][ T7349] netlink: 'syz.2.350': attribute type 8 has an invalid length. [ 203.210043][ T5873] usb 5-1: USB disconnect, device number 11 [ 203.452874][ T7354] input: syz0 as /devices/virtual/input/input16 [ 203.460495][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.352'. [ 203.473333][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 203.631485][ T7357] netlink: 48 bytes leftover after parsing attributes in process `syz.3.351'. [ 203.643837][ T7357] netlink: 48 bytes leftover after parsing attributes in process `syz.3.351'. [ 203.948682][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.354'. [ 204.264854][ T7370] input: syz0 as /devices/virtual/input/input17 [ 205.155915][ T7382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.299840][ T7385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.693895][ T5873] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 205.962284][ T7393] FAULT_INJECTION: forcing a failure. [ 205.962284][ T7393] name failslab, interval 1, probability 0, space 0, times 0 [ 205.981085][ T7393] CPU: 0 UID: 0 PID: 7393 Comm: syz.4.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.981111][ T7393] Tainted: [L]=SOFTLOCKUP [ 205.981116][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.981126][ T7393] Call Trace: [ 205.981132][ T7393] [ 205.981140][ T7393] dump_stack_lvl+0xe8/0x150 [ 205.981166][ T7393] should_fail_ex+0x412/0x560 [ 205.981189][ T7393] should_failslab+0xa8/0x100 [ 205.981207][ T7393] ? ptlock_alloc+0x20/0x70 [ 205.981235][ T7393] kmem_cache_alloc_noprof+0x87/0x650 [ 205.981267][ T7393] ptlock_alloc+0x20/0x70 [ 205.981289][ T7393] pte_alloc_one+0x7a/0x370 [ 205.981311][ T7393] ? __pte_alloc+0x1d/0x430 [ 205.981329][ T7393] __pte_alloc+0x25/0x430 [ 205.981345][ T7393] ? mm_alloc_pmd+0x246/0x400 [ 205.981365][ T7393] mfill_atomic_poison+0x8f7/0x1340 [ 205.981383][ T7393] ? unwind_get_return_address+0x4d/0x90 [ 205.981405][ T7393] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.981435][ T7393] ? __pfx_mfill_atomic_poison+0x10/0x10 [ 205.981462][ T7393] userfaultfd_ioctl+0x266f/0x5130 [ 205.981485][ T7393] ? kasan_save_track+0x4f/0x80 [ 205.981499][ T7393] ? kasan_save_track+0x3e/0x80 [ 205.981517][ T7393] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.981544][ T7393] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 205.981587][ T7393] ? kasan_quarantine_put+0xbb/0x1f0 [ 205.981608][ T7393] ? tomoyo_path_number_perm+0x219/0x630 [ 205.981672][ T7393] ? tomoyo_path_number_perm+0x219/0x630 [ 205.981690][ T7393] ? do_vfs_ioctl+0x1166/0x1530 [ 205.981710][ T7393] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.981753][ T7393] ? __fget_files+0x2a/0x420 [ 205.981778][ T7393] ? __fget_files+0x3a0/0x420 [ 205.981799][ T7393] ? __fget_files+0x2a/0x420 [ 205.981823][ T7393] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 205.981844][ T7393] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 205.981865][ T7393] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 205.981885][ T7393] ? __fget_files+0x3a0/0x420 [ 205.981912][ T7393] ? fput+0xa0/0xd0 [ 205.981934][ T7393] ? ksys_write+0x242/0x270 [ 205.981958][ T7393] __do_fast_syscall_32+0x20d/0x640 [ 205.981975][ T7393] ? do_fast_syscall_32+0x33/0x70 [ 205.981988][ T7393] ? asm_int80_emulation+0x1a/0x20 [ 205.982003][ T7393] ? do_int80_emulation+0x274/0x4d0 [ 205.982016][ T7393] ? trace_irq_disable+0x3b/0x150 [ 205.982041][ T7393] do_fast_syscall_32+0x33/0x70 [ 205.982056][ T7393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.982075][ T7393] RIP: 0023:0xf704ef6c [ 205.982089][ T7393] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 205.982103][ T7393] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 205.982120][ T7393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa08 [ 205.982131][ T7393] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.982140][ T7393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.982149][ T7393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.982158][ T7393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.982180][ T7393] [ 205.987457][ T5873] usb 1-1: device descriptor read/64, error -71 [ 206.494519][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 206.588715][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 206.641251][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 206.660315][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 206.661196][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.683130][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.694497][ T5873] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 206.696360][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.736882][ T7401] process 'syz.4.363' launched './file1' with NULL argv: empty string added [ 206.831405][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 206.834755][ T5873] usb 1-1: device descriptor read/64, error -71 [ 206.857751][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.871166][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.880213][ T10] usb 3-1: Manufacturer: syz [ 206.891021][ T7401] bridge1: port 1(veth3) entered blocking state [ 206.898458][ T7401] bridge1: port 1(veth3) entered disabled state [ 206.907113][ T7401] veth3: entered allmulticast mode [ 206.914636][ T7401] veth3: entered promiscuous mode [ 206.935433][ T10] usb 3-1: config 0 descriptor?? [ 206.943209][ T7402] bridge1: port 2(veth0_to_bond) entered blocking state [ 206.954861][ T5873] usb usb1-port1: attempt power cycle [ 206.994599][ T7402] bridge1: port 2(veth0_to_bond) entered disabled state [ 207.010571][ T7402] veth0_to_bond: entered allmulticast mode [ 207.019296][ T7402] veth0_to_bond: entered promiscuous mode [ 207.048366][ T7407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.365'. [ 207.133188][ T7401] bridge1: port 3(veth5) entered blocking state [ 207.172105][ T7401] bridge1: port 3(veth5) entered disabled state [ 207.224475][ T10] rc_core: IR keymap rc-hauppauge not found [ 207.261154][ T10] Registered IR keymap rc-empty [ 207.272749][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.284120][ T7401] veth5: entered allmulticast mode [ 207.344272][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.351140][ T7401] veth5: entered promiscuous mode [ 207.358062][ T5873] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 207.391616][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 207.573787][ T5873] usb 1-1: device descriptor read/8, error -71 [ 207.586504][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 207.613105][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.727329][ T7411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.786233][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.823779][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.868249][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.886532][ T5873] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 207.897190][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.934567][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.937201][ T5873] usb 1-1: device descriptor read/8, error -71 [ 208.151279][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.165331][ T5873] usb usb1-port1: unable to enumerate USB device [ 208.185139][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.304593][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.354458][ T5873] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 208.364133][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.387489][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.418534][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 208.436029][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.527542][ T5873] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 208.544402][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.552473][ T5873] usb 2-1: Product: syz [ 208.558723][ T10] usb 3-1: USB disconnect, device number 13 [ 208.579055][ T5873] usb 2-1: Manufacturer: syz [ 208.583723][ T5873] usb 2-1: SerialNumber: syz [ 208.692302][ T5873] usb 2-1: config 0 descriptor?? [ 208.740142][ T5873] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 208.789478][ T7422] input: syz0 as /devices/virtual/input/input19 [ 208.872280][ T5833] IPVS: starting estimator thread 0... [ 209.001448][ T7432] IPVS: using max 30 ests per chain, 72000 per kthread [ 209.237988][ T7440] fuse: Bad value for 'fd' [ 209.326343][ T7440] __nla_validate_parse: 1 callbacks suppressed [ 209.326357][ T7440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 209.846946][ T7446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.501166][ T7454] tipc: Started in network mode [ 210.518079][ T7454] tipc: Node identity , cluster identity 4711 [ 210.524201][ T7454] tipc: Failed to obtain node identity [ 210.540926][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 210.572441][ T7454] tipc: Enabling of bearer rejected, failed to enable media [ 210.599254][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 210.769858][ T7456] syzkaller0: entered promiscuous mode [ 210.816994][ T7456] syzkaller0: entered allmulticast mode [ 211.220380][ T7467] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 211.253473][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 211.445072][ T7472] bridge3: port 1(veth3) entered blocking state [ 211.466392][ T7472] bridge3: port 1(veth3) entered disabled state [ 211.475629][ T7472] veth3: entered allmulticast mode [ 211.494093][ T7472] veth3: entered promiscuous mode [ 211.561772][ T7474] bridge3: port 2(veth0_to_bond) entered blocking state [ 211.573604][ T7474] bridge3: port 2(veth0_to_bond) entered disabled state [ 211.587787][ T7474] veth0_to_bond: entered allmulticast mode [ 211.597067][ T7474] veth0_to_bond: entered promiscuous mode [ 211.625365][ T7472] bridge3: port 3(veth5) entered blocking state [ 211.633645][ T7472] bridge3: port 3(veth5) entered disabled state [ 211.653691][ T7472] veth5: entered allmulticast mode [ 211.672162][ T7472] veth5: entered promiscuous mode [ 211.754452][ T5902] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 211.884477][ T5902] usb 5-1: device descriptor read/64, error -71 [ 212.065757][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 212.066663][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.073721][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 212.078123][ T7451] Bluetooth: hci2: command 0x0406 tx timeout [ 212.090888][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 212.112173][ T5873] usb 2-1: USB disconnect, device number 14 [ 212.159527][ T7486] input: syz0 as /devices/virtual/input/input20 [ 212.165560][ T5902] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 212.235552][ T7489] fuse: Bad value for 'fd' [ 212.247281][ T5932] hid_parser_main: 22 callbacks suppressed [ 212.247303][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x7 [ 212.274875][ T5932] hid-generic 0000:0000:0000.000D: ignoring exceeding usage max [ 212.291530][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 212.309176][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3 [ 212.318898][ T7492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.387'. [ 212.335276][ T5902] usb 5-1: device descriptor read/64, error -71 [ 212.345086][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3 [ 212.364647][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3 [ 212.373260][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3 [ 212.402234][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3 [ 212.414118][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 212.433386][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3 [ 212.448010][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3 [ 212.456532][ T5902] usb usb5-port1: attempt power cycle [ 212.489100][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 212.504480][ T5932] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3 [ 212.537582][ T5932] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 212.655786][ T7503] FAULT_INJECTION: forcing a failure. [ 212.655786][ T7503] name failslab, interval 1, probability 0, space 0, times 0 [ 212.676712][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.0.392 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.676748][ T7503] Tainted: [L]=SOFTLOCKUP [ 212.676756][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.676769][ T7503] Call Trace: [ 212.676778][ T7503] [ 212.676787][ T7503] dump_stack_lvl+0xe8/0x150 [ 212.676822][ T7503] should_fail_ex+0x412/0x560 [ 212.676853][ T7503] should_failslab+0xa8/0x100 [ 212.676881][ T7503] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 212.676917][ T7503] ? __alloc_skb+0x186/0x7d0 [ 212.676944][ T7503] ? __alloc_skb+0x1d0/0x7d0 [ 212.676968][ T7503] ? __local_bh_enable_ip+0xd0/0x130 [ 212.677001][ T7503] __alloc_skb+0x1d0/0x7d0 [ 212.677033][ T7503] sock_wmalloc+0xb2/0x130 [ 212.677067][ T7503] packet_sendmsg_spkt+0x54c/0x11d0 [ 212.677090][ T7503] ? packet_sendmsg_spkt+0x221/0x11d0 [ 212.677123][ T7503] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.677145][ T7503] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 212.677171][ T7503] ? aa_sock_msg_perm+0xf1/0x1b0 [ 212.677198][ T7503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.677224][ T7503] __sys_sendto+0x709/0x7a0 [ 212.677255][ T7503] ? __pfx___sys_sendto+0x10/0x10 [ 212.677306][ T7503] ? fput+0xa0/0xd0 [ 212.677342][ T7503] ? ksys_write+0x242/0x270 [ 212.677369][ T7503] __ia32_sys_sendto+0xdd/0x100 [ 212.677401][ T7503] __do_fast_syscall_32+0x20d/0x640 [ 212.677423][ T7503] ? do_fast_syscall_32+0x33/0x70 [ 212.677443][ T7503] ? asm_int80_emulation+0x1a/0x20 [ 212.677463][ T7503] ? do_int80_emulation+0x274/0x4d0 [ 212.677482][ T7503] ? trace_irq_disable+0x3b/0x150 [ 212.677516][ T7503] do_fast_syscall_32+0x33/0x70 [ 212.677536][ T7503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.677560][ T7503] RIP: 0023:0xf701ef6c [ 212.677578][ T7503] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 212.677595][ T7503] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 212.677617][ T7503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 212.677631][ T7503] RDX: 00000000000005ee RSI: 0000000000000800 RDI: 0000000080000040 [ 212.677644][ T7503] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 212.677656][ T7503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 212.677668][ T7503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.677697][ T7503] [ 212.752482][ T7499] fido_id[7499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.875215][ T5902] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 212.957955][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 213.135698][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 213.147150][ T5902] usb 5-1: device descriptor read/8, error -71 [ 213.155319][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 213.196297][ T5873] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 213.350577][ T7517] syzkaller0: entered promiscuous mode [ 213.357332][ T7517] syzkaller0: entered allmulticast mode [ 213.386073][ T5902] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 213.416423][ T5902] usb 5-1: device descriptor read/8, error -71 [ 213.524830][ T5902] usb usb5-port1: unable to enumerate USB device [ 213.649479][ T7521] bridge2: port 1(veth3) entered blocking state [ 213.661018][ T7521] bridge2: port 1(veth3) entered disabled state [ 213.668268][ T7521] veth3: entered allmulticast mode [ 213.679225][ T7521] veth3: entered promiscuous mode [ 213.716585][ T7521] bridge2: port 2(veth0_to_bond) entered blocking state [ 213.726100][ T7521] bridge2: port 2(veth0_to_bond) entered disabled state [ 213.733649][ T7521] veth0_to_bond: entered allmulticast mode [ 213.742992][ T7521] veth0_to_bond: entered promiscuous mode [ 213.875415][ T7521] bridge2: port 3(veth5) entered blocking state [ 213.899937][ T7521] bridge2: port 3(veth5) entered disabled state [ 213.930476][ T7521] veth5: entered allmulticast mode [ 213.993921][ T7521] veth5: entered promiscuous mode [ 214.175851][ T5873] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 214.297774][ T7534] input: syz0 as /devices/virtual/input/input21 [ 214.334810][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 214.345123][ T5873] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 214.360972][ T5873] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 214.396709][ T5873] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.415602][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.456761][ T5873] usb 2-1: Product: syz [ 214.463230][ T5873] usb 2-1: Manufacturer: syz [ 214.470150][ T5873] usb 2-1: SerialNumber: syz [ 214.597169][ T7539] __nla_validate_parse: 1 callbacks suppressed [ 214.597188][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.403'. [ 214.831544][ T5902] usb 2-1: USB disconnect, device number 15 [ 214.864947][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 214.910929][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 214.954458][ T5833] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 215.081017][ T7546] fuse: Bad value for 'fd' [ 215.121825][ T5833] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.140114][ T5833] usb 4-1: not running at top speed; connect to a high speed hub [ 215.163142][ T5910] hid-generic 0000:0000:0000.000F: ignoring exceeding usage max [ 215.172817][ T5833] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 215.189379][ T5833] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 215.221929][ T5910] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 215.234683][ T7547] bridge2: port 1(veth7) entered blocking state [ 215.242649][ T5833] usb 4-1: config 5 has no interface number 0 [ 215.248966][ T7547] bridge2: port 1(veth7) entered disabled state [ 215.256399][ T7547] veth7: entered allmulticast mode [ 215.271054][ T5833] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 215.286657][ T5833] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.383817][ T5833] usb 4-1: config 5 interface 246 has no altsetting 0 [ 215.395156][ T7547] veth7: entered promiscuous mode [ 215.427506][ T5833] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 215.464980][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.481053][ T7548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'. [ 215.498336][ T5833] usb 4-1: Product: syz [ 215.516382][ T5833] usb 4-1: Manufacturer: syz [ 215.521053][ T5833] usb 4-1: SerialNumber: syz [ 215.538950][ T7553] fido_id[7553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.590047][ T5901] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 215.802466][ T36] usb 4-1: Failed to submit usb control message: -71 [ 215.810534][ T5833] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 215.819031][ T7550] veth0_to_bond: left allmulticast mode [ 215.824675][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 215.842010][ T36] usb 4-1: unable to get target info from device [ 215.849045][ T5833] usb 4-1: USB disconnect, device number 10 [ 215.855153][ T36] usb 4-1: could not get target info (-71) [ 215.863517][ T36] usb 4-1: could not probe fw (-71) [ 215.911125][ T7550] veth0_to_bond: left promiscuous mode [ 215.992619][ T7550] bridge1: port 2(veth0_to_bond) entered disabled state [ 216.100637][ T7550] bridge2: port 2(veth0_to_bond) entered blocking state [ 216.128267][ T7550] bridge2: port 2(veth0_to_bond) entered disabled state [ 216.167656][ T7550] veth0_to_bond: entered allmulticast mode [ 216.266722][ T7550] veth0_to_bond: entered promiscuous mode [ 216.389240][ T7556] bridge2: port 3(veth9) entered blocking state [ 216.439616][ T7556] bridge2: port 3(veth9) entered disabled state [ 216.460484][ T7556] veth9: entered allmulticast mode [ 216.516997][ T7556] veth9: entered promiscuous mode [ 216.860484][ T7581] input: syz0 as /devices/virtual/input/input22 [ 216.938317][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 217.356227][ T7586] bridge4: port 1(veth7) entered blocking state [ 217.362830][ T7586] bridge4: port 1(veth7) entered disabled state [ 217.369626][ T7586] veth7: entered allmulticast mode [ 217.380090][ T7586] veth7: entered promiscuous mode [ 217.388803][ T7587] veth0_to_bond: left allmulticast mode [ 217.424975][ T7587] veth0_to_bond: left promiscuous mode [ 217.431674][ T7587] bridge3: port 2(veth0_to_bond) entered disabled state [ 217.515946][ T7587] bridge4: port 2(veth0_to_bond) entered blocking state [ 217.634738][ T7587] bridge4: port 2(veth0_to_bond) entered disabled state [ 217.642012][ T7587] veth0_to_bond: entered allmulticast mode [ 217.726832][ T7587] veth0_to_bond: entered promiscuous mode [ 218.128176][ T7594] FAULT_INJECTION: forcing a failure. [ 218.128176][ T7594] name failslab, interval 1, probability 0, space 0, times 0 [ 218.141517][ T7594] CPU: 0 UID: 0 PID: 7594 Comm: syz.4.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.141550][ T7594] Tainted: [L]=SOFTLOCKUP [ 218.141557][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.141570][ T7594] Call Trace: [ 218.141580][ T7594] [ 218.141589][ T7594] dump_stack_lvl+0xe8/0x150 [ 218.141635][ T7594] should_fail_ex+0x412/0x560 [ 218.141665][ T7594] should_failslab+0xa8/0x100 [ 218.141694][ T7594] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 218.141730][ T7594] ? __alloc_skb+0x1d0/0x7d0 [ 218.141755][ T7594] ? __local_bh_enable_ip+0xd0/0x130 [ 218.141789][ T7594] __alloc_skb+0x1d0/0x7d0 [ 218.141820][ T7594] arp_create+0x19e/0xa00 [ 218.141864][ T7594] ? __pfx_arp_create+0x10/0x10 [ 218.141904][ T7594] arp_send_dst+0xa7/0x2a0 [ 218.141942][ T7594] arp_solicit+0xbe0/0xe40 [ 218.141975][ T7594] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.142019][ T7594] ? arp_solicit+0x119/0xe40 [ 218.142053][ T7594] ? __pfx_arp_solicit+0x10/0x10 [ 218.142089][ T7594] ? __neigh_event_send+0xe9d/0x1530 [ 218.142118][ T7594] ? __pfx_arp_solicit+0x10/0x10 [ 218.142149][ T7594] __neigh_event_send+0xf05/0x1530 [ 218.142182][ T7594] ? addr_resolve+0x1156/0x1fb0 [ 218.142211][ T7594] addr_resolve+0x194f/0x1fb0 [ 218.142250][ T7594] ? __pfx_addr_resolve+0x10/0x10 [ 218.142278][ T7594] ? pcpu_alloc+0x10/0x360 [ 218.142322][ T7594] ? timer_init_key+0x161/0x2f0 [ 218.142348][ T7594] rdma_resolve_ip+0x444/0x840 [ 218.142383][ T7594] rdma_resolve_addr+0x84a/0x21d0 [ 218.142414][ T7594] ? rcu_is_watching+0x15/0xb0 [ 218.142447][ T7594] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 218.142472][ T7594] ? __mutex_lock+0x319/0x1300 [ 218.142503][ T7594] ? ucma_resolve_ip+0x302/0x490 [ 218.142525][ T7594] ? xa_load+0x60/0x210 [ 218.142561][ T7594] ? do_raw_spin_unlock+0xf5/0x210 [ 218.142587][ T7594] ucma_resolve_ip+0x338/0x490 [ 218.142613][ T7594] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 218.142664][ T7594] ucma_write+0x24e/0x2f0 [ 218.142688][ T7594] ? __pfx_ucma_write+0x10/0x10 [ 218.142708][ T7594] ? security_file_permission+0x75/0x260 [ 218.142744][ T7594] ? rw_verify_area+0x255/0x4d0 [ 218.142764][ T7594] ? __pfx_ucma_write+0x10/0x10 [ 218.142788][ T7594] vfs_write+0x29a/0xb90 [ 218.142817][ T7594] ? __pfx_vfs_write+0x10/0x10 [ 218.142840][ T7594] ? __fget_files+0x2a/0x420 [ 218.142872][ T7594] ? __fget_files+0x2a/0x420 [ 218.142901][ T7594] ? __fget_files+0x3a0/0x420 [ 218.142929][ T7594] ? __fget_files+0x2a/0x420 [ 218.142967][ T7594] ksys_write+0x150/0x270 [ 218.142990][ T7594] ? __pfx_ksys_write+0x10/0x10 [ 218.143022][ T7594] __do_fast_syscall_32+0x20d/0x640 [ 218.143044][ T7594] ? do_fast_syscall_32+0x33/0x70 [ 218.143063][ T7594] ? asm_int80_emulation+0x1a/0x20 [ 218.143083][ T7594] ? do_int80_emulation+0x274/0x4d0 [ 218.143101][ T7594] ? trace_irq_disable+0x3b/0x150 [ 218.143135][ T7594] do_fast_syscall_32+0x33/0x70 [ 218.143156][ T7594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.143182][ T7594] RIP: 0023:0xf704ef6c [ 218.143203][ T7594] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 218.143222][ T7594] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 218.143244][ T7594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 218.143258][ T7594] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.143270][ T7594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.143282][ T7594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.143294][ T7594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.143321][ T7594] [ 218.696651][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 218.745376][ T7586] bridge4: port 3(veth9) entered blocking state [ 218.764661][ T7586] bridge4: port 3(veth9) entered disabled state [ 218.771164][ T7586] veth9: entered allmulticast mode [ 218.911645][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 218.937748][ T7586] veth9: entered promiscuous mode [ 219.371882][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.418'. [ 219.497768][ T7612] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 219.509945][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 219.549020][ T5901] hid_parser_main: 84 callbacks suppressed [ 219.549039][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 219.644106][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 219.657579][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 219.675820][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 219.693339][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 219.711504][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 219.720624][ T7616] bridge3: port 1(veth7) entered blocking state [ 219.727150][ T7616] bridge3: port 1(veth7) entered disabled state [ 219.733747][ T7616] veth7: entered allmulticast mode [ 219.824083][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 219.832488][ T7616] veth7: entered promiscuous mode [ 219.837477][ T7618] veth0_to_bond: left allmulticast mode [ 219.844784][ T7618] veth0_to_bond: left promiscuous mode [ 219.853672][ T7618] bridge2: port 2(veth0_to_bond) entered disabled state [ 219.931647][ T7618] bridge3: port 2(veth0_to_bond) entered blocking state [ 219.933703][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 219.964874][ T7618] bridge3: port 2(veth0_to_bond) entered disabled state [ 219.978537][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 220.009195][ T7618] veth0_to_bond: entered allmulticast mode [ 220.013259][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 220.033734][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 220.050919][ T5901] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 220.135807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.186844][ T7618] veth0_to_bond: entered promiscuous mode [ 220.397762][ T7622] bridge3: port 3(veth9) entered blocking state [ 220.420035][ T7622] bridge3: port 3(veth9) entered disabled state [ 220.446037][ T7622] veth9: entered allmulticast mode [ 220.464783][ T7631] input: syz0 as /devices/virtual/input/input23 [ 220.493127][ T7625] fido_id[7625]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.565727][ T7622] veth9: entered promiscuous mode [ 220.746132][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 220.852034][ T7640] netlink: 830 bytes leftover after parsing attributes in process `syz.2.428'. [ 220.880739][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 221.102860][ T7642] bridge1: port 1(veth3) entered blocking state [ 221.195438][ T7642] bridge1: port 1(veth3) entered disabled state [ 221.205420][ T7642] veth3: entered allmulticast mode [ 221.230976][ T7642] veth3: entered promiscuous mode [ 221.374684][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 221.873667][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 222.007142][ T7642] bridge1: port 2(veth5) entered blocking state [ 222.053398][ T7642] bridge1: port 2(veth5) entered disabled state [ 222.071704][ T7642] veth5: entered allmulticast mode [ 222.154862][ T7642] veth5: entered promiscuous mode [ 222.562849][ T7647] bridge3: port 1(veth11) entered blocking state [ 222.572962][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 222.583366][ T7647] bridge3: port 1(veth11) entered disabled state [ 222.593720][ T7647] veth11: entered allmulticast mode [ 222.613054][ T7647] veth11: entered promiscuous mode [ 222.623232][ T7650] veth0_to_bond: left allmulticast mode [ 222.639918][ T7650] veth0_to_bond: left promiscuous mode [ 222.651811][ T7650] bridge2: port 2(veth0_to_bond) entered disabled state [ 222.662698][ T7650] bridge3: port 2(veth0_to_bond) entered blocking state [ 222.670357][ T7650] bridge3: port 2(veth0_to_bond) entered disabled state [ 222.682160][ T7650] veth0_to_bond: entered allmulticast mode [ 223.172989][ T7650] veth0_to_bond: entered promiscuous mode [ 223.241833][ T7653] bridge3: port 3(veth13) entered blocking state [ 223.257137][ T7653] bridge3: port 3(veth13) entered disabled state [ 223.273999][ T7653] veth13: entered allmulticast mode [ 223.292593][ T7653] veth13: entered promiscuous mode [ 223.650408][ T7682] input: syz0 as /devices/virtual/input/input24 [ 223.679114][ T7672] bridge5: port 1(veth11) entered blocking state [ 223.694746][ T7672] bridge5: port 1(veth11) entered disabled state [ 223.703430][ T7672] veth11: entered allmulticast mode [ 223.715189][ T7672] veth11: entered promiscuous mode [ 223.744461][ T5932] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 223.758893][ T7675] veth0_to_bond: left allmulticast mode [ 223.765692][ T7675] veth0_to_bond: left promiscuous mode [ 223.771413][ T7675] bridge4: port 2(veth0_to_bond) entered disabled state [ 223.807854][ T7675] bridge5: port 2(veth0_to_bond) entered blocking state [ 223.895449][ T7675] bridge5: port 2(veth0_to_bond) entered disabled state [ 223.909170][ T7675] veth0_to_bond: entered allmulticast mode [ 224.029518][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 224.038528][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 224.101908][ T7675] veth0_to_bond: entered promiscuous mode [ 224.132998][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.172780][ T5932] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.188804][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.226771][ T7676] bridge5: port 3(veth13) entered blocking state [ 224.233720][ T7676] bridge5: port 3(veth13) entered disabled state [ 224.237354][ T5932] usb 2-1: Product: syz [ 224.245127][ T7676] veth13: entered allmulticast mode [ 224.276027][ T7678] raw_sendmsg: syz.3.435 forgot to set AF_INET. Fix it! [ 224.277004][ T5932] usb 2-1: Manufacturer: syz [ 224.292655][ T7676] veth13: entered promiscuous mode [ 224.456084][ T5932] usb 2-1: SerialNumber: syz [ 224.485282][ T5932] usb 2-1: config 0 descriptor?? [ 224.502499][ T5932] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 224.528042][ T5932] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 224.658774][ T7703] 8021q: VLANs not supported on syzkaller0 [ 224.668868][ T7703] syzkaller0: left promiscuous mode [ 224.674210][ T7703] syzkaller0: left allmulticast mode [ 224.970958][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'. [ 225.005089][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 225.145661][ T5932] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 225.446067][ T7707] block device autoloading is deprecated and will be removed. [ 225.535412][ T5873] IPVS: starting estimator thread 0... [ 225.566299][ T5932] em28xx 2-1:0.0: Config register raw data: 0x41 [ 225.636298][ T7713] IPVS: using max 37 ests per chain, 88800 per kthread [ 225.924536][ T7698] program syz.4.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.942757][ T5932] usb 2-1: USB disconnect, device number 16 [ 225.951013][ T5932] em28xx 2-1:0.0: Disconnecting em28xx [ 226.032445][ T5932] em28xx 2-1:0.0: Freeing device [ 226.357982][ T7725] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 227.602925][ T24] hid_parser_main: 22 callbacks suppressed [ 227.602943][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 227.620398][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 227.630706][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 227.691075][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 227.752802][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 227.768510][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 227.783483][ T7741] input: syz0 as /devices/virtual/input/input25 [ 227.794933][ T5932] hid-generic 0000:0000:0000.0013: unknown main item tag 0x7 [ 227.853236][ T5932] hid-generic 0000:0000:0000.0013: ignoring exceeding usage max [ 227.862973][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 227.873205][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.450'. [ 227.927790][ T5932] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 227.938404][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 227.997528][ T24] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 228.028769][ T5932] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz0] on syz0 [ 228.305628][ T7753] fido_id[7753]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.347841][ T7752] fido_id[7752]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.383096][ T7757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.454'. [ 228.464716][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 230.038311][ T7787] input: syz0 as /devices/virtual/input/input26 [ 230.344671][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 230.470597][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'. [ 230.554163][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 230.614146][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.645238][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 230.696577][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 230.718948][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 230.817649][ T10] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 230.829971][ T10] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 230.840640][ T10] usb 1-1: Product: syz [ 230.846378][ T10] usb 1-1: Manufacturer: syz [ 230.858420][ T10] usb 1-1: SerialNumber: syz [ 230.880508][ T10] usb 1-1: config 0 descriptor?? [ 230.898415][ T10] usb 1-1: NFC: intf ffff888029ed7000 id ffffffff8f1d0280 [ 230.960231][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 230.989903][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 231.574498][ T5833] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 231.748973][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.761461][ T24] usb 1-1: USB disconnect, device number 22 [ 231.778482][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.824011][ T5833] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.833831][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.848448][ T5833] usb 4-1: SerialNumber: syz [ 232.039727][ T7827] input: syz0 as /devices/virtual/input/input27 [ 232.637136][ T24] hid_parser_main: 37 callbacks suppressed [ 232.637160][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x7 [ 232.675426][ T24] hid-generic 0000:0000:0000.0014: ignoring exceeding usage max [ 232.708641][ T7838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.478'. [ 232.723468][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 232.738747][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x3 [ 232.840290][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x3 [ 232.876586][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x3 [ 232.914391][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x3 [ 232.958176][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x3 [ 232.990407][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x3 [ 233.010753][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x3 [ 233.038610][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x3 [ 233.081092][ T24] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 233.533555][ T7845] fido_id[7845]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.619115][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 233.766292][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 233.846977][ T7853] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 233.868595][ T7853] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 234.356877][ T7861] input: syz0 as /devices/virtual/input/input28 [ 234.429315][ T5833] usb 4-1: 0:2 : does not exist [ 234.459022][ T5833] usb 4-1: unit 5: unexpected type 0x09 [ 234.525948][ T5833] usb 4-1: USB disconnect, device number 11 [ 234.534448][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 234.647040][ T7865] tipc: Enabled bearer , priority 10 [ 234.673481][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.715103][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 234.754223][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.805102][ T24] usb 2-1: config 0 descriptor?? [ 235.048040][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 235.048060][ T30] audit: type=1326 audit(1771508481.660:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.127167][ T30] audit: type=1326 audit(1771508481.690:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.172737][ T30] audit: type=1326 audit(1771508481.690:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.207654][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 235.218249][ T30] audit: type=1326 audit(1771508481.690:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.245472][ T30] audit: type=1326 audit(1771508481.690:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.268442][ T30] audit: type=1326 audit(1771508481.690:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.302329][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 235.330559][ T24] usb 2-1: Cannot set MAC address [ 235.337065][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 235.346594][ T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 235.359475][ T30] audit: type=1326 audit(1771508481.690:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.435091][ T24] usb 2-1: USB disconnect, device number 17 [ 235.441327][ T30] audit: type=1326 audit(1771508481.690:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.490022][ T30] audit: type=1326 audit(1771508481.690:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.609506][ T30] audit: type=1326 audit(1771508481.690:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 235.894508][ T5833] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 236.207889][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 236.467019][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 236.513519][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.560575][ T5833] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 236.578169][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.590889][ T5833] usb 3-1: Product: syz [ 236.596322][ T5833] usb 3-1: Manufacturer: syz [ 236.606596][ T5833] usb 3-1: SerialNumber: syz [ 236.648477][ T5833] usb 3-1: config 0 descriptor?? [ 236.724120][ T5833] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 236.734467][ T5833] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 236.821381][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 236.904946][ T7891] delete_channel: no stack [ 236.999127][ T7907] input: syz0 as /devices/virtual/input/input29 [ 237.309496][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.340662][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.383572][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.452667][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.474454][ T10] usb 1-1: SerialNumber: syz [ 237.481424][ T5833] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 237.755503][ T5833] em28xx 3-1:0.0: Config register raw data: 0x41 [ 238.115136][ T5910] usb 3-1: USB disconnect, device number 14 [ 238.125964][ T5910] em28xx 3-1:0.0: Disconnecting em28xx [ 238.178276][ T5910] em28xx 3-1:0.0: Freeing device [ 239.195002][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.506'. [ 239.237606][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 239.285811][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 239.841395][ T10] usb 1-1: 0:2 : does not exist [ 239.854101][ T10] usb 1-1: unit 5: unexpected type 0x09 [ 239.990714][ T10] usb 1-1: USB disconnect, device number 23 [ 240.042023][ T7940] input: syz0 as /devices/virtual/input/input30 [ 240.119861][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.339899][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 240.339919][ T30] audit: type=1326 audit(1771508486.950:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.1.513" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0 [ 240.466161][ T30] audit: type=1326 audit(1771508487.080:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 240.513397][ T30] audit: type=1326 audit(1771508487.080:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 240.563137][ T30] audit: type=1326 audit(1771508487.100:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 240.587597][ T30] audit: type=1326 audit(1771508487.100:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 240.610654][ T30] audit: type=1326 audit(1771508487.100:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 240.640491][ T30] audit: type=1326 audit(1771508487.110:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 240.708419][ T7949] macsec1: entered promiscuous mode [ 240.734562][ T30] audit: type=1326 audit(1771508487.110:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 240.761921][ T30] audit: type=1326 audit(1771508487.110:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 240.787630][ T7951] geneve1: Caught tx_queue_len zero misconfig [ 240.820787][ T30] audit: type=1326 audit(1771508487.110:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 241.091678][ T7950] syzkaller0: entered promiscuous mode [ 241.130222][ T7950] syzkaller0: entered allmulticast mode [ 241.204531][ T5932] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 241.274940][ T7955] syzkaller0: entered promiscuous mode [ 241.281412][ T7955] syzkaller0: entered allmulticast mode [ 241.355595][ T5932] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 241.364727][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.375807][ T5932] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.386872][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.429208][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.444799][ T5932] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.484582][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.534865][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.548179][ T5932] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.576751][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.584780][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.595328][ T5932] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.626943][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.667259][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.697393][ T5932] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.770113][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.519'. [ 241.781100][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.822965][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.837523][ T5932] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.848985][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.856961][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.857749][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 241.867133][ T5932] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.898978][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.915844][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 241.926891][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.936925][ T5932] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.954409][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.967291][ T5932] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 241.986761][ T5932] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 242.002960][ T5932] usb 1-1: Product: syz [ 242.011713][ T5932] usb 1-1: Manufacturer: syz [ 242.024403][ T5932] usb 1-1: SerialNumber: syz [ 242.039165][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 242.048917][ T5833] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 242.061985][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 242.071347][ T5932] usb 1-1: config 0 descriptor?? [ 242.095014][ T5932] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 242.205624][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 242.213427][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 242.227765][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.243885][ T5833] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.254106][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.262648][ T5833] usb 5-1: Product: syz [ 242.268111][ T5833] usb 5-1: Manufacturer: syz [ 242.272758][ T5833] usb 5-1: SerialNumber: syz [ 242.285517][ T5833] usb 5-1: config 0 descriptor?? [ 242.302297][ T5833] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.312550][ T5833] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 242.350545][ T5932] usb 1-1: USB disconnect, device number 24 [ 242.380688][ T5932] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 242.928156][ T7979] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 242.943312][ T5833] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 243.256229][ T5833] em28xx 5-1:0.0: Config register raw data: 0x41 [ 243.482387][ T5833] usb 5-1: USB disconnect, device number 16 [ 243.490277][ T5833] em28xx 5-1:0.0: Disconnecting em28xx [ 243.509499][ T5833] em28xx 5-1:0.0: Freeing device [ 243.730170][ T7995] input: syz0 as /devices/virtual/input/input31 [ 243.753046][ T7996] macvlan0: entered promiscuous mode [ 243.809070][ T7996] netlink: 'syz.3.524': attribute type 2 has an invalid length. [ 243.837379][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 245.355844][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.532'. [ 245.431863][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 245.605876][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 245.614939][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 245.838691][ T8032] bond0: entered promiscuous mode [ 245.844468][ T8032] bond_slave_0: entered promiscuous mode [ 245.850463][ T8032] bond_slave_1: entered promiscuous mode [ 246.314725][ T8036] mmap: syz.3.536 (8036) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 246.675510][ T8044] input: syz0 as /devices/virtual/input/input32 [ 246.817028][ T8046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.866017][ T8041] qrtr: Invalid version 48 [ 247.081074][ T8028] bond0: left promiscuous mode [ 247.086366][ T8028] bond_slave_0: left promiscuous mode [ 247.093452][ T8028] bond_slave_1: left promiscuous mode [ 247.354477][ T5932] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 247.632167][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.647933][ T5932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.681058][ T5932] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.731034][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.759827][ T5932] usb 3-1: SerialNumber: syz [ 248.000093][ T5932] usb 3-1: 0:2 : does not exist [ 248.064765][ T8064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.373648][ T5932] usb 3-1: USB disconnect, device number 15 [ 248.383380][ T8066] FAULT_INJECTION: forcing a failure. [ 248.383380][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 248.414533][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.3.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.414569][ T8066] Tainted: [L]=SOFTLOCKUP [ 248.414577][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.414602][ T8066] Call Trace: [ 248.414610][ T8066] [ 248.414620][ T8066] dump_stack_lvl+0xe8/0x150 [ 248.414656][ T8066] should_fail_ex+0x412/0x560 [ 248.414687][ T8066] should_failslab+0xa8/0x100 [ 248.414714][ T8066] __kmalloc_cache_noprof+0x88/0x660 [ 248.414736][ T8066] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 248.414765][ T8066] ? sctp_add_bind_addr+0x8c/0x370 [ 248.414796][ T8066] sctp_add_bind_addr+0x8c/0x370 [ 248.414828][ T8066] sctp_copy_local_addr_list+0x314/0x4f0 [ 248.414858][ T8066] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 248.414886][ T8066] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 248.414914][ T8066] ? sctp_v6_is_any+0x64/0x80 [ 248.414943][ T8066] ? sctp_copy_one_addr+0x93/0x360 [ 248.414973][ T8066] sctp_bind_addr_copy+0xb3/0x3c0 [ 248.414999][ T8066] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 248.415026][ T8066] sctp_connect_new_asoc+0x2ff/0x6b0 [ 248.415060][ T8066] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 248.415099][ T8066] ? __local_bh_enable_ip+0xd0/0x130 [ 248.415124][ T8066] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 248.415146][ T8066] ? security_sctp_bind_connect+0x7e/0x2c0 [ 248.415181][ T8066] sctp_sendmsg+0x1528/0x2c10 [ 248.415228][ T8066] ? __pfx_sctp_sendmsg+0x10/0x10 [ 248.415257][ T8066] ? aa_sk_perm+0x15a/0x960 [ 248.415282][ T8066] ? aa_sk_perm+0x82d/0x960 [ 248.415312][ T8066] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.415338][ T8066] ? sock_rps_record_flow+0x19/0x400 [ 248.415374][ T8066] ? inet_sendmsg+0x2f4/0x370 [ 248.415410][ T8066] ____sys_sendmsg+0x894/0xad0 [ 248.415450][ T8066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.415506][ T8066] ___sys_sendmsg+0x2a5/0x360 [ 248.415542][ T8066] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.415577][ T8066] ? kstrtoull+0x12f/0x1d0 [ 248.415625][ T8066] ? __fget_files+0x2a/0x420 [ 248.415654][ T8066] ? __fget_files+0x3a0/0x420 [ 248.415691][ T8066] __sys_sendmmsg+0x2e7/0x4e0 [ 248.415729][ T8066] ? __pfx___sys_sendmmsg+0x10/0x10 [ 248.415791][ T8066] ? fput+0xa0/0xd0 [ 248.415819][ T8066] ? ksys_write+0x242/0x270 [ 248.415849][ T8066] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 248.415882][ T8066] __do_fast_syscall_32+0x20d/0x640 [ 248.415906][ T8066] ? do_fast_syscall_32+0x33/0x70 [ 248.415925][ T8066] ? asm_int80_emulation+0x1a/0x20 [ 248.415944][ T8066] ? do_int80_emulation+0x274/0x4d0 [ 248.415964][ T8066] ? trace_irq_disable+0x3b/0x150 [ 248.415999][ T8066] do_fast_syscall_32+0x33/0x70 [ 248.416020][ T8066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.416047][ T8066] RIP: 0023:0xf7fd6f6c [ 248.416067][ T8066] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 248.416086][ T8066] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 248.416109][ T8066] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80 [ 248.416124][ T8066] RDX: 0000000000000001 RSI: 000000000004c040 RDI: 0000000000000000 [ 248.416137][ T8066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.416149][ T8066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.416162][ T8066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.416193][ T8066] [ 248.896928][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.454622][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'. [ 249.526667][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 249.545530][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 249.612745][ T8087] input: syz0 as /devices/virtual/input/input33 [ 249.726621][ T5833] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 249.916945][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 249.926821][ T5833] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 249.936556][ T5833] usb 2-1: config 0 has no interface number 0 [ 249.943081][ T5833] usb 2-1: config 0 interface 161 has no altsetting 0 [ 249.984627][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 250.214907][ T5833] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 250.225489][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.233814][ T5833] usb 2-1: Product: syz [ 250.244533][ T5833] usb 2-1: Manufacturer: syz [ 250.249364][ T5833] usb 2-1: SerialNumber: syz [ 250.275164][ T5833] usb 2-1: config 0 descriptor?? [ 250.293460][ T5833] em28xx 2-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 250.306927][ T5833] em28xx 2-1:0.161: Video interface 161 found: bulk [ 250.332609][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.344668][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.393733][ T24] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 250.403024][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.424411][ T24] usb 4-1: Product: syz [ 250.428645][ T24] usb 4-1: Manufacturer: syz [ 250.433364][ T24] usb 4-1: SerialNumber: syz [ 250.480568][ T24] usb 4-1: config 0 descriptor?? [ 250.516846][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 250.561374][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.593523][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 250.622837][ T24] usb 4-1: media controller created [ 250.680997][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.988073][ T24] DVB: Unable to find symbol tda10046_attach() [ 251.004831][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 251.042876][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 251.083501][ T24] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 251.128658][ T8105] netlink: 'syz.4.555': attribute type 21 has an invalid length. [ 251.143451][ T24] usb 4-1: USB disconnect, device number 12 [ 251.164494][ T8105] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.178804][ T8105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.186189][ T8105] IPv6: NLM_F_CREATE should be set when creating new route [ 251.193599][ T8105] IPv6: NLM_F_CREATE should be set when creating new route [ 251.200934][ T8105] IPv6: NLM_F_CREATE should be set when creating new route [ 251.319028][ T8108] netlink: 'syz.4.555': attribute type 21 has an invalid length. [ 251.337674][ T8108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.395399][ T5833] em28xx 2-1:0.161: unknown em28xx chip ID (0) [ 251.530588][ T5833] em28xx 2-1:0.161: failed to trigger read from i2c address 0xa0 (error=-5) [ 251.572249][ T5833] em28xx 2-1:0.161: board has no eeprom [ 251.634533][ T5833] em28xx 2-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 251.663714][ T5833] em28xx 2-1:0.161: analog set to bulk mode. [ 251.681880][ T10] em28xx 2-1:0.161: Registering V4L2 extension [ 251.800177][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 251.812960][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0x48 (error=-5) [ 251.843178][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0x42 (error=-5) [ 251.852813][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0x40 (error=-5) [ 251.923693][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0x84 (error=-5) [ 251.984727][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 251.994017][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0x86 (error=-5) [ 252.016707][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0x94 (error=-5) [ 252.047331][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0x96 (error=-5) [ 252.140289][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 252.257910][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0xc0 (error=-5) [ 252.261344][ T24] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 252.282952][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 252.295846][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 252.311483][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0xc2 (error=-5) [ 252.332936][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0xc4 (error=-5) [ 252.354916][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0xc6 (error=-5) [ 252.373680][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 252.388399][ T10] em28xx 2-1:0.161: failed to trigger read from i2c address 0xc8 (error=-5) [ 252.399077][ T10] em28xx 2-1:0.161: Config register raw data: 0xfffffffb [ 252.442358][ T10] em28xx 2-1:0.161: AC97 chip type couldn't be determined [ 252.462503][ T10] em28xx 2-1:0.161: No AC97 audio processor [ 252.467366][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 252.508943][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.542505][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.555464][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.580732][ T10] usb 2-1: Decoder not found [ 252.594205][ T10] em28xx 2-1:0.161: failed to create media graph [ 252.685560][ T10] em28xx 2-1:0.161: V4L2 device video103 deregistered [ 252.793454][ T24] usb 1-1: usb_control_msg returned -32 [ 252.799825][ T24] usbtmc 1-1:16.0: can't read capabilities [ 252.881800][ T10] em28xx 2-1:0.161: Remote control support is not available for this card. [ 253.013794][ T8128] ================================================================== [ 253.021911][ T8128] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 253.029394][ T8128] Read of size 8 at addr ffff888033620748 by task v4l_id/8128 [ 253.037124][ T8128] [ 253.039468][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 253.039491][ T8128] Tainted: [L]=SOFTLOCKUP [ 253.039497][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.039507][ T8128] Call Trace: [ 253.039515][ T8128] [ 253.039522][ T8128] dump_stack_lvl+0xe8/0x150 [ 253.039548][ T8128] print_report+0xba/0x230 [ 253.039567][ T8128] ? v4l2_fh_open+0xac/0x420 [ 253.039581][ T8128] kasan_report+0x117/0x150 [ 253.039601][ T8128] ? v4l2_fh_open+0xac/0x420 [ 253.039617][ T8128] v4l2_fh_open+0xac/0x420 [ 253.039632][ T8128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 253.039659][ T8128] em28xx_v4l2_open+0x157/0x9a0 [ 253.039679][ T8128] ? do_raw_spin_lock+0x12b/0x2f0 [ 253.039698][ T8128] v4l2_open+0x1bf/0x3a0 [ 253.039715][ T8128] chrdev_open+0x4cd/0x5e0 [ 253.039734][ T8128] ? __pfx_chrdev_open+0x10/0x10 [ 253.039753][ T8128] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 253.039780][ T8128] ? __pfx_chrdev_open+0x10/0x10 [ 253.039797][ T8128] do_dentry_open+0x785/0x14e0 [ 253.039822][ T8128] vfs_open+0x3b/0x340 [ 253.039842][ T8128] ? path_openat+0x2df0/0x3860 [ 253.039907][ T8128] path_openat+0x2e08/0x3860 [ 253.039928][ T8128] ? __pfx_stack_trace_save+0x10/0x10 [ 253.039946][ T8128] ? stack_depot_save_flags+0x33/0x810 [ 253.039968][ T8128] ? __pfx_path_openat+0x10/0x10 [ 253.039982][ T8128] ? __x64_sys_openat+0x138/0x170 [ 253.040002][ T8128] ? do_syscall_64+0x14d/0xf80 [ 253.040024][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.040043][ T8128] ? __lock_acquire+0x6b5/0x2cf0 [ 253.040064][ T8128] do_file_open+0x23e/0x4a0 [ 253.040081][ T8128] ? __pfx_do_file_open+0x10/0x10 [ 253.040104][ T8128] ? _raw_spin_unlock+0x28/0x50 [ 253.040125][ T8128] ? alloc_fd+0x64b/0x6c0 [ 253.040148][ T8128] do_sys_openat2+0x113/0x200 [ 253.040170][ T8128] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.040191][ T8128] ? exc_page_fault+0x6a/0xc0 [ 253.040214][ T8128] ? do_user_addr_fault+0xc6f/0x1340 [ 253.040235][ T8128] __x64_sys_openat+0x138/0x170 [ 253.040257][ T8128] do_syscall_64+0x14d/0xf80 [ 253.040279][ T8128] ? trace_irq_disable+0x3b/0x150 [ 253.040301][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.040316][ T8128] ? clear_bhb_loop+0x40/0x90 [ 253.040333][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.040349][ T8128] RIP: 0033:0x7f01820a7407 [ 253.040363][ T8128] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 253.040377][ T8128] RSP: 002b:00007ffdeb4de9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 253.040394][ T8128] RAX: ffffffffffffffda RBX: 00007f0182838880 RCX: 00007f01820a7407 [ 253.040406][ T8128] RDX: 0000000000000000 RSI: 00007ffdeb4dff1b RDI: ffffffffffffff9c [ 253.040416][ T8128] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 253.040425][ T8128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 253.040435][ T8128] R13: 00007ffdeb4debf0 R14: 00007f018299f000 R15: 0000563d634db4d8 [ 253.040452][ T8128] [ 253.040458][ T8128] [ 253.062359][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.559'. [ 253.065962][ T8128] Allocated by task 10: [ 253.065978][ T8128] kasan_save_track+0x3e/0x80 [ 253.066004][ T8128] __kasan_kmalloc+0x93/0xb0 [ 253.066024][ T8128] __kmalloc_cache_noprof+0x31c/0x660 [ 253.066043][ T8128] em28xx_v4l2_init+0x10b/0x2e70 [ 253.066064][ T8128] em28xx_init_extension+0x120/0x1c0 [ 253.066083][ T8128] process_scheduled_works+0xb02/0x1830 [ 253.066106][ T8128] worker_thread+0xa50/0xfc0 [ 253.066138][ T8128] kthread+0x388/0x470 [ 253.066155][ T8128] ret_from_fork+0x51e/0xb90 [ 253.401011][ T8128] ret_from_fork_asm+0x1a/0x30 [ 253.405831][ T8128] [ 253.408186][ T8128] Freed by task 10: [ 253.412000][ T8128] kasan_save_track+0x3e/0x80 [ 253.416693][ T8128] kasan_save_free_info+0x46/0x50 [ 253.421746][ T8128] __kasan_slab_free+0x5c/0x80 [ 253.426538][ T8128] kfree+0x1c1/0x630 [ 253.430472][ T8128] em28xx_v4l2_init+0x1683/0x2e70 [ 253.435527][ T8128] em28xx_init_extension+0x120/0x1c0 [ 253.440923][ T8128] process_scheduled_works+0xb02/0x1830 [ 253.446579][ T8128] worker_thread+0xa50/0xfc0 [ 253.451190][ T8128] kthread+0x388/0x470 [ 253.455279][ T8128] ret_from_fork+0x51e/0xb90 [ 253.459895][ T8128] ret_from_fork_asm+0x1a/0x30 [ 253.464693][ T8128] [ 253.467042][ T8128] The buggy address belongs to the object at ffff888033620000 [ 253.467042][ T8128] which belongs to the cache kmalloc-8k of size 8192 [ 253.481109][ T8128] The buggy address is located 1864 bytes inside of [ 253.481109][ T8128] freed 8192-byte region [ffff888033620000, ffff888033622000) [ 253.495103][ T8128] [ 253.497454][ T8128] The buggy address belongs to the physical page: [ 253.504087][ T8128] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33620 [ 253.512910][ T8128] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 253.521428][ T8128] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 253.529105][ T8128] page_type: f5(slab) [ 253.533131][ T8128] raw: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 253.541842][ T8128] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 253.550469][ T8128] head: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 253.559196][ T8128] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 253.568086][ T8128] head: 00fff00000000003 ffffea0000cd8801 00000000ffffffff 00000000ffffffff [ 253.576879][ T8128] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 253.585567][ T8128] page dumped because: kasan: bad access detected [ 253.592014][ T8128] page_owner tracks the page as allocated [ 253.597856][ T8128] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5813, tgid 5813 (sh), ts 80992105692, free_ts 71844775547 [ 253.617690][ T8128] post_alloc_hook+0x231/0x280 [ 253.622484][ T8128] get_page_from_freelist+0x24dc/0x2580 [ 253.628049][ T8128] __alloc_frozen_pages_noprof+0x18d/0x380 [ 253.633881][ T8128] allocate_slab+0x77/0x660 [ 253.638426][ T8128] refill_objects+0x331/0x3c0 [ 253.643123][ T8128] __pcs_replace_empty_main+0x2b9/0x620 [ 253.648688][ T8128] __kmalloc_cache_noprof+0x392/0x660 [ 253.654076][ T8128] tomoyo_init_log+0x112e/0x1fb0 [ 253.659038][ T8128] tomoyo_supervisor+0x353/0x1570 [ 253.664092][ T8128] tomoyo_env_perm+0x151/0x1f0 [ 253.668988][ T8128] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 253.674731][ T8128] tomoyo_bprm_check_security+0x11b/0x180 [ 253.680475][ T8128] security_bprm_check+0x85/0x240 [ 253.685527][ T8128] bprm_execve+0x896/0x1460 [ 253.690044][ T8128] do_execveat_common+0x50d/0x690 [ 253.695085][ T8128] __x64_sys_execve+0x97/0xc0 [ 253.700040][ T8128] page last free pid 5800 tgid 5800 stack trace: [ 253.706378][ T8128] __free_frozen_pages+0xc00/0xd90 [ 253.711517][ T8128] __slab_free+0x263/0x2b0 [ 253.715979][ T8128] qlist_free_all+0x97/0x100 [ 253.720602][ T8128] kasan_quarantine_reduce+0x148/0x160 [ 253.726102][ T8128] __kasan_slab_alloc+0x22/0x80 [ 253.731001][ T8128] __kmalloc_noprof+0x316/0x760 [ 253.735870][ T8128] tomoyo_realpath_from_path+0xe3/0x5d0 [ 253.741436][ T8128] tomoyo_path_perm+0x283/0x560 [ 253.746304][ T8128] security_inode_getattr+0x12b/0x310 [ 253.751699][ T8128] __x64_sys_newfstat+0x13b/0x270 [ 253.756835][ T8128] do_syscall_64+0x14d/0xf80 [ 253.761456][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.767464][ T8128] [ 253.769812][ T8128] Memory state around the buggy address: [ 253.775462][ T8128] ffff888033620600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.783630][ T8128] ffff888033620680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.791792][ T8128] >ffff888033620700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.799866][ T8128] ^ [ 253.806292][ T8128] ffff888033620780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.814371][ T8128] ffff888033620800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.822535][ T8128] ================================================================== [ 253.855201][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 253.855220][ T30] audit: type=1326 audit(1771508499.690:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 253.887023][ T30] audit: type=1326 audit(1771508499.690:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 253.985378][ T30] audit: type=1326 audit(1771508499.690:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd6f6c code=0x7ffc0000 [ 253.986856][ T8128] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.986935][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 253.987042][ T8128] Tainted: [L]=SOFTLOCKUP [ 253.987071][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.987104][ T8128] Call Trace: [ 253.987127][ T8128] [ 253.987149][ T8128] vpanic+0x56c/0xa60 [ 253.987243][ T8128] ? __pfx_vpanic+0x10/0x10 [ 253.987336][ T8128] panic+0xc5/0xd0 [ 253.987402][ T8128] ? __pfx_panic+0x10/0x10 [ 253.987476][ T8128] ? preempt_schedule_thunk+0x16/0x30 [ 253.987546][ T8128] ? preempt_schedule_thunk+0x16/0x30 [ 253.987603][ T8128] ? v4l2_fh_open+0xac/0x420 [ 253.987657][ T8128] check_panic_on_warn+0x89/0xb0 [ 253.987719][ T8128] ? v4l2_fh_open+0xac/0x420 [ 253.987775][ T8128] end_report+0x73/0x180 [ 253.987849][ T8128] ? v4l2_fh_open+0xac/0x420 [ 253.987894][ T8128] kasan_report+0x128/0x150 [ 253.987966][ T8128] ? v4l2_fh_open+0xac/0x420 [ 253.988016][ T8128] v4l2_fh_open+0xac/0x420 [ 253.988070][ T8128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 253.988164][ T8128] em28xx_v4l2_open+0x157/0x9a0 [ 253.988241][ T8128] ? do_raw_spin_lock+0x12b/0x2f0 [ 253.988306][ T8128] v4l2_open+0x1bf/0x3a0 [ 253.988390][ T8128] chrdev_open+0x4cd/0x5e0 [ 253.988475][ T8128] ? __pfx_chrdev_open+0x10/0x10 [ 253.988538][ T8128] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 253.988632][ T8128] ? __pfx_chrdev_open+0x10/0x10 [ 253.988689][ T8128] do_dentry_open+0x785/0x14e0 [ 253.988787][ T8128] vfs_open+0x3b/0x340 [ 253.988860][ T8128] ? path_openat+0x2df0/0x3860 [ 253.988915][ T8128] path_openat+0x2e08/0x3860 [ 253.988988][ T8128] ? __pfx_stack_trace_save+0x10/0x10 [ 253.989038][ T8128] ? stack_depot_save_flags+0x33/0x810 [ 253.989114][ T8128] ? __pfx_path_openat+0x10/0x10 [ 253.989165][ T8128] ? __x64_sys_openat+0x138/0x170 [ 253.989238][ T8128] ? do_syscall_64+0x14d/0xf80 [ 253.989315][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.989387][ T8128] ? __lock_acquire+0x6b5/0x2cf0 [ 253.989461][ T8128] do_file_open+0x23e/0x4a0 [ 253.989517][ T8128] ? __pfx_do_file_open+0x10/0x10 [ 253.989601][ T8128] ? _raw_spin_unlock+0x28/0x50 [ 253.989666][ T8128] ? alloc_fd+0x64b/0x6c0 [ 253.989781][ T8128] do_sys_openat2+0x113/0x200 [ 253.989871][ T8128] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.989948][ T8128] ? exc_page_fault+0x6a/0xc0 [ 253.990027][ T8128] ? do_user_addr_fault+0xc6f/0x1340 [ 253.990101][ T8128] __x64_sys_openat+0x138/0x170 [ 253.990178][ T8128] do_syscall_64+0x14d/0xf80 [ 253.990262][ T8128] ? trace_irq_disable+0x3b/0x150 [ 253.990337][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.990392][ T8128] ? clear_bhb_loop+0x40/0x90 [ 253.990455][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.990509][ T8128] RIP: 0033:0x7f01820a7407 [ 253.990561][ T8128] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 253.990614][ T8128] RSP: 002b:00007ffdeb4de9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 253.990677][ T8128] RAX: ffffffffffffffda RBX: 00007f0182838880 RCX: 00007f01820a7407 [ 253.990720][ T8128] RDX: 0000000000000000 RSI: 00007ffdeb4dff1b RDI: ffffffffffffff9c [ 253.990764][ T8128] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 253.990797][ T8128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 253.990830][ T8128] R13: 00007ffdeb4debf0 R14: 00007f018299f000 R15: 0000563d634db4d8 [ 253.990894][ T8128] [ 254.008014][ T8128] Kernel Offset: disabled