last executing test programs: 10.403252925s ago: executing program 4 (id=9053): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x6a, 0x0, 0x5, 0x1, 0x9, 0x69, "74ed49d397cd450f34ebc0b8f2da9c83cf10496550c2f1200289830eb5a2a5cc221aa4fcfedb8ba40eed51c263d924170e16207821d9d91436f73f184e577a3bbd27fb31a2a3b1d788c9c6e80393611997dd860c3a496196b5f644627334ed83ca814277cb43b2a53550"}}, 0x182) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000040)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="4004ce000000ce0df497d61d20fbd6e741498826be0bc4ca96c97024c4e050a2feb870cf0ea127a5110b405352bea751dbeb2ffe7a52c4f287941e6d9adcc3ec2a386c42282bc2a5721ed707c2ca21f166d811aef1ef34f03f9a028e705532acbf9267e25b442a77785d7cdcad663a5ecd8b1fbb62059db5501b2c07c8ece92e20d0c3591415343d243f97ce408618c33bb259a1d4dae933d70a0e6079244e0b31ed5a70f634ec0c7e0598677ea94ddacd07cb7e1b9ab3fca0d0ceba21fde10806ce24a9307ad45ff90297f140134be292523eb1"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x40, 0xf, 0xd5, "16c66b273db6e2765de2dc79142e60ac91c5f982c5e6eab15a0386ccafcab2cd8313dfbbc33fcbc2469851b1380224bbd1ab8d5af6c615a9fd594bb7995141a7bc68f12f85ca672a7491bbd2974f74ccb13d423d1244f634cf85fec51a136812cff8b3eb81a5cf7f2fe1fc00a031ca80e28062465cdb58a62d60531ff7a6643f5f4e967b29794a1b610e450a8a5719409bb4912a1e7cbfa1d0020f7d2b214aa831b5d9860a5d0b7d288387a39b1530bbb9a1e52888775e9b9f842e1dc6a44d2aa6bcc38ef8a3fd99a6ac0b47258689a0e713b47bf9"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xa8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}}) 9.575976934s ago: executing program 2 (id=9055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x6}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb819bbe7bfabee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, &(0x7f0000000240)={0x9, 0x7f, 0x2, 0x2, 0xffff, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x2, 0x6e18, 0x1, 0x8, 0x400, 0x9, 0x1, 0x9}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r5}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x48084) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40048c4, 0x0, 0x0) 9.091969439s ago: executing program 1 (id=9056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) connect(r0, &(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @loopback, 0x7}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400240000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a3200000000f37d140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'wg0\x00', {0x2, 0x0, @local}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x28, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000025c0)=@delchain={0x2484, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x2458, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x81}, @TCA_FW_ACT={0x244c, 0x4, [@m_police={0x2100, 0x11, 0x0, 0x0, {{0xb}, {0x20c0, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x0, 0x7f5, 0x8, 0x1c8, 0x1, 0xfff, 0x3ff, 0x7, 0x8, 0x10001, 0x8152, 0x7, 0x1ed, 0x9, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x3, 0x90, 0x4, 0x8001, 0x5, 0x7ff, 0x6, 0x6, 0x2, 0x1, 0x5, 0x6, 0x5ab5, 0x2, 0x9, 0x881, 0x1, 0x5, 0x5, 0x586, 0x1, 0xd, 0x4, 0x2, 0xa34, 0x7, 0xf65, 0x5, 0x4, 0x6, 0x2, 0x7ff, 0x6, 0x2, 0x40, 0x0, 0x3, 0xe30000, 0xd89d, 0x6, 0x3363, 0x9, 0xfffffffe, 0x2, 0x5, 0x1, 0x6, 0x2, 0xe, 0x6, 0x9, 0x9, 0xe000, 0x0, 0x10, 0x1, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0x81, 0xb8d, 0x3, 0x4, 0x401, 0x7fff, 0x7fffffff, 0xe1c, 0xe, 0xd85, 0x32e, 0x2, 0x5, 0x0, 0x7c9, 0x726a, 0x1ff, 0x8, 0x2, 0x9, 0x1, 0x9f2a, 0x401, 0xf, 0x6, 0x3, 0x4, 0xfff, 0x5, 0x1, 0xa, 0xc7, 0x68, 0xe, 0x0, 0x1, 0x80000001, 0x7fff, 0x36, 0x3, 0x5, 0xf3, 0x0, 0x4, 0x7, 0x9, 0x7, 0x6, 0x3ff, 0x2de9ad2, 0x7, 0x6, 0x9, 0x7ff, 0x5, 0xd5, 0x4, 0x4, 0xc6, 0x5, 0x4, 0x2, 0x7, 0x0, 0x312630a8, 0x6, 0x1, 0xc, 0x6, 0x0, 0x1000, 0xb, 0x1, 0x1, 0x8, 0x9, 0xdf, 0x8, 0x4, 0x1, 0x1, 0x9, 0x10001, 0x101, 0x2, 0x9, 0xad4, 0x66d8, 0x5, 0x54c5, 0xaf5, 0x7, 0x80000000, 0x6, 0x9, 0x8001, 0x3, 0xf6e, 0x0, 0x80000001, 0x7, 0x2, 0x0, 0x37, 0x2, 0x5, 0x9e86, 0x6, 0x0, 0x7, 0x4, 0xaef0, 0xa, 0xd, 0xc, 0x9, 0x5, 0x100, 0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0x51, 0xc8, 0x6fb5, 0x2, 0x5, 0x5, 0xffc00, 0x200, 0xe7d, 0x5, 0x4, 0xc, 0x80000001, 0xfffffff9, 0x0, 0x10001, 0x7, 0x3, 0x9, 0x7, 0x6, 0x9, 0x1, 0xbad, 0x80000001, 0xc000000, 0x10000, 0x400, 0x5, 0x0, 0x2672, 0x0, 0x5, 0x5, 0x7, 0x1, 0xa, 0x5, 0x1, 0xff, 0x80, 0x9, 0x9, 0x6, 0xc, 0x8, 0x86d, 0x3, 0x5, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9e, 0x3, 0x6, 0x4, 0x3, 0x3d46, 0x5, 0x80, 0x6, 0x4, 0x3, 0x1956, 0x51b, 0x100, 0x4, 0x5, 0xda59, 0x7, 0x0, 0xb, 0x0, 0x4, 0x4, 0x6a3f, 0x4, 0x6, 0x0, 0x5, 0xfff, 0x5, 0x2, 0x5, 0x9, 0x1, 0x3, 0x1ff, 0x100, 0xb, 0x80000000, 0x4, 0x80, 0xfffffff8, 0xd1b, 0x48, 0x3, 0x5554, 0x2000, 0x37, 0x1, 0x10, 0xffff, 0x1, 0x400, 0x8, 0x1, 0xedec, 0x7, 0xfcd, 0x3, 0x80, 0x8000, 0x8, 0x4, 0x3, 0x7, 0xd1, 0x7, 0xef, 0x9, 0x4, 0x7, 0x6, 0x2, 0x7, 0x5, 0x5, 0x7, 0x3, 0x8, 0x9166, 0x8, 0xfffffffb, 0x7f, 0x0, 0x7fffffff, 0x80, 0x5, 0x5, 0x5, 0x9, 0x98, 0x80, 0x1, 0x1000, 0x2, 0x965, 0xb, 0x1, 0x1ff, 0xffff082c, 0x6, 0x8275, 0x2, 0x8, 0x0, 0x1, 0x3ff, 0x3, 0x1000, 0x4, 0x3, 0x3, 0x2, 0x1, 0x40ed192f, 0x0, 0xfffffffd, 0x8, 0x200, 0x3be2c9cd, 0x517f, 0x9, 0x3, 0x1000, 0x7fffffff, 0x101, 0x9, 0x4, 0x9b26, 0x0, 0x2, 0x10000, 0x38000000, 0x9, 0x4, 0x6, 0x1ff, 0x4e, 0x7, 0x4b641d99, 0x0, 0x0, 0x7fffffff, 0x2, 0x8000, 0x885, 0x8, 0x200, 0x3, 0x6b5d, 0x8, 0xfffefffd, 0x8, 0x200, 0x3, 0x813, 0xe0000, 0x4, 0xffffffd3, 0x8, 0x8, 0x4, 0xc39, 0x1b, 0x7, 0x4, 0x40c, 0x1, 0x4, 0x2dcc, 0x9fc, 0x40, 0x3, 0xa, 0x100, 0x5, 0xe, 0x3, 0x5b, 0x2, 0x4, 0x1fc000, 0x7, 0x4, 0x6, 0xffff, 0x8be, 0x2, 0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0x100, 0x7fff, 0x1ff, 0x0, 0x401, 0x3, 0xfffffff9, 0x4b1f, 0x100, 0x9, 0x7fffffff, 0xffff8001, 0x8, 0xd77, 0x9f, 0xf, 0x8, 0xfffffff9, 0x3, 0xade8, 0x7, 0x7, 0x8, 0xfe9b, 0x9, 0xcd8, 0x1, 0x7, 0x2, 0xd61, 0x8, 0x9bf8, 0x4, 0x9000, 0x4, 0x6, 0x2, 0x12e, 0x7, 0x3, 0x8, 0x9, 0x3, 0xa, 0x6, 0x2, 0x88, 0x9, 0x5, 0x6, 0x100, 0x9, 0x7, 0x2, 0xfffffffa, 0x3, 0x40, 0x2, 0x6, 0x5, 0x0, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff000, 0x10000000, 0x7, 0x8, 0xffffffff, {0x5, 0x0, 0x3, 0x7, 0x10, 0x100}, {0x0, 0x3, 0x2, 0x5, 0x4, 0x7}, 0x5, 0xcc, 0x9900}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x5, 0x8, 0x10000, 0x3, 0x4, 0x4, 0x8, 0x91, 0x7, 0x84, 0x800, 0x5, 0x6, 0x4d8, 0x9, 0x8, 0x3, 0x400, 0xc, 0x6, 0x9, 0x0, 0x9, 0xffffffff, 0x0, 0x3, 0x5, 0xe, 0x1, 0x7ff, 0x9, 0xfffffff8, 0x8001, 0xd, 0x8, 0x3, 0x6, 0x180, 0x0, 0x0, 0x100, 0xffffffff, 0x1, 0x8, 0x7, 0x7fffffff, 0x4000400, 0xfffff0e5, 0x3, 0x8, 0x4, 0xe0, 0x7, 0x3, 0x3, 0x10, 0x8, 0x1, 0x9, 0x7, 0x3, 0x1000, 0xd, 0x5, 0x1, 0x6, 0x0, 0x99db, 0x7, 0x5, 0x1, 0x9, 0x2, 0x3e27d96c, 0x200, 0x6, 0xe, 0x4, 0x2, 0x8, 0x3, 0x5, 0x0, 0xe816, 0x800, 0x5, 0x7, 0x9, 0xfffffffd, 0x641, 0x4, 0x1, 0x4, 0x5, 0xba, 0x0, 0xab, 0x1, 0x4, 0x3, 0x4, 0x3, 0x75b6, 0x4, 0x9, 0x3ff, 0x8fd, 0x4b, 0xffff, 0xc, 0x5, 0x3, 0x9, 0xd, 0x851, 0x401, 0x0, 0xa, 0x4, 0x2, 0x1, 0x5, 0x1, 0x800, 0xf46, 0x5, 0xa, 0x1, 0x3a, 0x5, 0x101, 0x4, 0x3, 0x1, 0x7, 0x2, 0x6, 0xfffffffc, 0x80, 0x1000, 0x1ff, 0x1121, 0x2, 0x7, 0x2f, 0x3, 0x0, 0x401, 0x2c0, 0x5, 0x10000, 0x8, 0xc, 0x27ad, 0x1, 0xd, 0x40, 0x4, 0x9b, 0x40, 0x6, 0x1, 0x8000, 0xffffffff, 0x4, 0x3ff, 0xfffffffa, 0x1, 0x83, 0x5da, 0x1, 0x73ec, 0x8, 0x52a, 0x9, 0x1000, 0x6, 0x9, 0x9, 0x2, 0x987, 0x10001, 0x798e, 0xfffffffa, 0x2, 0x9, 0xe180, 0x1, 0x8, 0x1, 0x5e, 0x3, 0x22e, 0x9, 0xbe8, 0x0, 0x80, 0xfff, 0x6aa1, 0x7, 0x1, 0x81, 0x7fffffff, 0x960f, 0x7, 0x1, 0x3, 0x10, 0x4, 0xfffffb26, 0xf, 0x2, 0x0, 0x6, 0x200, 0x2, 0x434000, 0x2, 0x5, 0x6b6, 0x1f8, 0x4, 0x80000001, 0x38, 0xffffffff, 0x1, 0x57cf3cc0, 0x8, 0x7e86, 0x10, 0x7, 0x7f, 0x8, 0x300000, 0xf0000000, 0x553a, 0xfffffffd, 0x8, 0x6, 0x8000, 0xe, 0x5, 0x4, 0xa81, 0x1000, 0x9, 0xc4, 0xffff, 0x3c33, 0x6, 0xfffffffc, 0x40, 0x6, 0xe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x6, 0x2, 0xffff, 0x1, 0x9, 0x4, 0x2, 0xfffffff2, 0x0, 0x56e7, 0x1, 0x7fff, 0x3, 0x40, 0xa, 0x1, 0x800, 0xd, 0x7fffffff, 0xfd, 0x2, 0x2, 0x2, 0xb, 0x8, 0x5, 0x2, 0x2, 0x8, 0x9, 0x10000, 0x10001, 0x8, 0x0, 0x0, 0xaee, 0x7, 0x4, 0xfff, 0x0, 0x8, 0x0, 0xb325, 0x4, 0x1, 0xe, 0x7, 0x0, 0x6, 0x1, 0x1, 0x2, 0xf4a2, 0x101, 0x5, 0x5, 0x401, 0x7, 0xffffff81, 0x8, 0x9, 0x7, 0xc0, 0x8, 0x5, 0x6, 0x6, 0x3, 0x3, 0x6, 0xf, 0x7fffffff, 0xfffffffd, 0x80000000, 0xaf, 0xed, 0x5000000, 0x2, 0x4, 0x6, 0x8a, 0x3, 0x9, 0x3, 0x4, 0xa429, 0x9, 0xe00, 0x6e4aed20, 0x6, 0x5, 0x9, 0x4be00de8, 0x67, 0x5, 0x12, 0x7, 0xdf, 0x2, 0xa245, 0x7, 0x8, 0x0, 0x9, 0xb04, 0x92e, 0x7, 0xd, 0x81, 0x40, 0x0, 0x7, 0x4, 0xfff, 0x1, 0x4, 0x32c, 0x5, 0x4, 0x42000000, 0xffffffff, 0x1000, 0x7, 0x3, 0x2, 0x6, 0x0, 0x5, 0x8, 0x7, 0x4, 0xdd, 0xc, 0x7, 0x10000c, 0x1, 0x27808966, 0x69, 0x2, 0x8, 0x101, 0xa5, 0xfffffffc, 0x7f, 0x0, 0x4, 0x3ff, 0x401, 0x6, 0xe642, 0x2, 0x7, 0xbeb, 0x7, 0x1000, 0x1, 0x5, 0x4, 0xd6, 0x2, 0x62, 0xf157, 0x7, 0x0, 0x3, 0x7, 0x8, 0x1, 0x57, 0xf, 0x3, 0x100, 0x80000000, 0x5, 0x5, 0x7, 0xe8, 0x7, 0x0, 0x1, 0xe0, 0x401, 0x8, 0xda0c, 0x0, 0x3fc, 0xffffffff, 0x7fffffff, 0x5, 0xba, 0x7, 0xfb, 0x4, 0xffff, 0x80, 0x2, 0x7, 0x0, 0x2, 0x3, 0x3, 0xa, 0x0, 0xb87, 0x7, 0x1, 0x80a, 0x5, 0xd4, 0x8, 0x3ff, 0xad4, 0x4, 0x8, 0x6, 0x6, 0x6, 0xe02, 0x0, 0x0, 0x800, 0xe, 0x0, 0xfffffffd, 0x800, 0x7fffffff, 0x910a, 0x4, 0x2, 0xba42, 0x1, 0x5, 0x6, 0xff, 0x4, 0xf, 0x1000, 0xb72e, 0x1c3a9a98, 0xae, 0x5, 0x401, 0x1ff, 0x0, 0x15, 0x0, 0xff, 0x5, 0x4000, 0x2, 0x80, 0x9, 0x2, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x3, 0x3, 0x7f, 0x2, 0x7f, 0x2, 0x5, 0x6aac, 0x6e, 0x4, 0x9, 0x941a, 0xff, 0x8, 0x3, 0xd, 0x77, 0x5, 0x5, 0x6, 0x2, 0xffffff5f, 0x30a1, 0x5, 0x7ff, 0x7, 0x3, 0x7, 0xa2, 0x10000, 0x1, 0x0, 0x5, 0xfffffff9, 0x8, 0x5046, 0x7fff, 0x6, 0x80000001, 0x3, 0x7, 0x2, 0x4, 0x0, 0x8001, 0xfff, 0x0, 0x7, 0x8, 0x20000000, 0x6, 0x7, 0x8, 0x200, 0x6b, 0x39, 0x101, 0x1, 0x800, 0x6e, 0x4, 0xc, 0x1, 0x3, 0x9, 0x3, 0x102, 0x7, 0x56, 0x5, 0x7, 0x8, 0x7, 0x81, 0x401, 0x8001, 0x7fff, 0x800, 0x0, 0xaa6, 0x4, 0x3, 0x8, 0x7, 0x3, 0xffff, 0x5, 0x10001, 0x200, 0x2, 0x3, 0x5, 0x4, 0x2c95e45c, 0x10, 0x3, 0xf, 0x7, 0xfff, 0x6, 0x8000, 0x320, 0x0, 0x4, 0x3, 0x9, 0x538000, 0x80000000, 0x9, 0x7, 0x6, 0x4, 0x80000000, 0xe245, 0x8, 0xa7e, 0xfffffc00, 0x6, 0x3ff, 0x0, 0x0, 0x6, 0x2, 0xffffffc0, 0x35e, 0x6, 0xc88, 0x3, 0x100, 0x2, 0x5, 0x2, 0x2, 0x0, 0xcd, 0x80000000, 0x4, 0x1, 0x410, 0xffffffff, 0x4dd, 0x6, 0x7d42946e, 0x390f, 0x8a8, 0x7fff, 0x8000, 0x800, 0x2, 0x4, 0x7fffffff, 0x4, 0x2, 0xdd, 0x2, 0x691, 0x7fffffff, 0xbff, 0x200, 0x4, 0x7, 0x6, 0xffffffff, 0x6, 0x8e, 0x3, 0x7fff, 0x10001, 0x6, 0x6, 0xfffffff7, 0x64, 0x1, 0x6, 0x81, 0x8, 0xe, 0xb6, 0x9, 0xe, 0x4, 0xad, 0x3ff, 0x8, 0x9, 0x0, 0x4, 0x8, 0x200, 0xfffffb31, 0x4, 0x7, 0x41, 0x5, 0x1000, 0x3, 0x3ff, 0x9, 0x6, 0x141, 0xfea, 0x0, 0xf, 0x9, 0x7ff, 0xd, 0x987e, 0x9730000, 0x5, 0x4, 0x2, 0x2, 0x4, 0x0, 0x6, 0x4, 0x81, 0x8a7, 0x3, 0x7fffffff, 0x4c880f78, 0xff, 0xf, 0x7, 0xfffeffff, 0x4be9, 0x1, 0x0, 0xfffffff9, 0x80000000, 0x1, 0x7ee, 0xc7, 0x81, 0x4, 0x8, 0x2, 0x1, 0x5, 0x5, 0x6f, 0x401, 0x81, 0xff, 0x0, 0x5, 0x1, 0x7, 0x7, 0x0, 0x6, 0x8, 0x7ff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x4d, 0x4, 0xd, 0x1, 0x81, 0x5, 0x2, 0xd, 0x7f, 0x5, 0x7, 0x329, 0x6, 0x3, 0x1000, 0x7fff, 0xe46, 0xbc, 0xd5, 0x81, 0x4, 0xa3b4, 0xfff, 0xe3, 0xf, 0xb, 0x8001, 0x758a, 0x7, 0x4, 0x401, 0xe8, 0x310, 0x2, 0x8, 0x8, 0x2, 0x486a, 0x5, 0x8000, 0x80000000, 0x8001, 0xac1, 0x1, 0x7f, 0x3, 0xd22, 0x7f, 0xfffffffe, 0x4, 0x2, 0x4, 0x0, 0x3, 0x0, 0x1, 0x4, 0x3ff, 0x2, 0xe, 0x6, 0x5, 0x0, 0x0, 0x78, 0x7, 0x4, 0x3, 0xd6, 0xdf893b25, 0xf, 0x8, 0x7, 0xe, 0x7fffffff, 0x8, 0x9, 0x80000000, 0x3, 0x3ff, 0xff, 0x7, 0x7, 0x8, 0xb660, 0xfffffbff, 0x7, 0xdf30, 0xc, 0xc, 0x5b3, 0x80000000, 0xf, 0x8001, 0x7, 0xfff, 0xc5, 0xe1, 0x6, 0x4, 0x5, 0x7fff, 0x5, 0x1ff, 0x9c, 0x2, 0xe, 0x80000001, 0x2, 0x75, 0x50000000, 0x4, 0x81, 0x401, 0x3, 0x1000, 0xd, 0xff, 0x72e, 0x7, 0x80000001, 0xba7, 0x2, 0x3, 0xd, 0x8, 0x8, 0x101, 0x101, 0x8, 0x7, 0x7c5f723f, 0xfff, 0x7, 0x3, 0x4, 0x800, 0x4, 0x17, 0x4, 0x7, 0x0, 0x10, 0x5, 0xd, 0x8000, 0x400, 0x41, 0x3, 0x8, 0x8, 0x8, 0x9, 0xe, 0x7f, 0x0, 0x2, 0xfff, 0x4, 0x2, 0xfe7, 0x3ff, 0x9, 0x63, 0xda17, 0x0, 0x2, 0x5, 0x8, 0x7, 0x2, 0xe, 0x5, 0xfffffff7, 0xae5, 0x845d, 0xffff, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x4, 0x4, 0x9, 0x8, 0xb74, 0x0, 0x1, 0x7ff, 0x7f, 0x1, 0x9, 0xff, 0xe, 0x7, 0x9, 0xf, 0x5, 0x3ff, 0x2, 0x2, 0xffffffff, 0x8, 0xfffffffa, 0x6, 0x4, 0x141, 0x2, 0x4, 0xe, 0x7fff, 0x8, 0x100, 0x7, 0x8, 0xa, 0xc0ac, 0xc, 0x8, 0x4, 0x1, 0x490e, 0xa, 0x797, 0x1, 0x0, 0x100, 0xffffffff, 0x8, 0xff, 0x0, 0xc0000000, 0x9, 0x69a, 0x2b, 0x1, 0x6, 0x7, 0x6, 0x4, 0x8, 0x8, 0x8, 0x101, 0x4, 0x2, 0x4, 0x8, 0x7, 0x5, 0x10, 0xc6, 0x9, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x3, 0x4, 0xffff0001, 0x6a, 0xfffffffc, 0xfffffffb, 0x829, 0xffffbd9a, 0x2, 0xb, 0x1, 0x9, 0x0, 0x5, 0x2f, 0x6, 0x6ac6, 0x4, 0x3, 0x1ff, 0x0, 0x9, 0x3, 0x2, 0x5, 0x3820f32e, 0x3, 0xff, 0x99, 0x891c, 0x3, 0x20, 0x4, 0xf, 0x8c, 0x1, 0x2, 0x6, 0x10001, 0x51, 0x5, 0xfffffffd, 0x2, 0x3, 0x10, 0x0, 0x8001, 0x1, 0xb50, 0x7ae6, 0xa7b, 0xff, 0x86, 0x7, 0x1, 0x0, 0x8000, 0x1, 0x200, 0x599a3000, 0x202, 0x3ff, 0xeb89, 0x1, 0x0, 0x394, 0x7, 0x8, 0x6, 0x3, 0x9, 0xbf, 0x68d4, 0x7, 0x6, 0xfffffffa, 0x3, 0xa, 0x1ff, 0x5, 0x9, 0x80, 0x8, 0xd78, 0x3, 0x2, 0x9, 0x9, 0x1, 0x1, 0x1000, 0xfffff1a1, 0x80000000, 0x5, 0xfffffa20, 0x8, 0x11f83f2f, 0x2, 0x9, 0xef, 0x29, 0x4, 0x1, 0x9, 0xdc, 0x8f03, 0x0, 0x7, 0x2, 0xd35, 0x6, 0x8000, 0x1000, 0x100, 0x200, 0x0, 0x5, 0x4, 0xffffffff, 0x6f3, 0x9, 0x3, 0x3, 0x7, 0x5, 0xd, 0x10000, 0x8001, 0x0, 0x6345, 0x0, 0x3ff, 0x4f29dd93, 0x4, 0x6, 0xffff, 0x2, 0x6, 0xdaac, 0x6, 0x91, 0x10000, 0x55, 0x8, 0x7, 0xa72a, 0x6, 0x10000, 0x9, 0x4, 0x2, 0x2, 0x3, 0x6, 0x9, 0x1, 0x0, 0x7651, 0x4, 0x7, 0x3, 0x5, 0x4, 0x9, 0xa0de, 0x8, 0x8, 0x4, 0x40, 0xe44, 0x7, 0x7, 0x2, 0x3, 0x6, 0xef, 0x9, 0x4000000, 0x6, 0x80, 0x61936147, 0x9, 0x9, 0x7f, 0xd, 0xfffffff8, 0x5, 0x7, 0x1, 0x7ff, 0x20, 0x5, 0x6, 0x5, 0x5, 0x1f35, 0x4, 0x200, 0x95, 0x8, 0x7, 0xb, 0x2, 0xffff, 0x8, 0x3, 0x8, 0x1, 0x9, 0x8, 0x6, 0x6, 0x56d, 0xfc, 0x10, 0x0, 0xaf6, 0x7, 0xfff, 0xa12, 0x9, 0x5, 0x0, 0x1, 0x800, 0x7, 0x3, 0x4, 0xcc2, 0x5, 0x0, 0x4, 0x2, 0xf, 0xff, 0x9, 0x1, 0x6, 0xff, 0xfffffff8, 0x9, 0x5a6625b4, 0x0, 0x2, 0x8, 0x1, 0x7, 0x2, 0xffff, 0x3ff, 0x8, 0x28, 0x9, 0x101, 0x8]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x70, 0x71, 0x100, 0x7, 0xf, 0x10001, 0xe, 0x7, 0x80, 0x10000, 0x81, 0x2, 0x9, 0x2, 0xf, 0x7fff, 0x8, 0x2, 0x7f, 0x84b, 0x5, 0x2, 0x67, 0x400, 0x7, 0x9, 0xffffffff, 0x5a2875d0, 0x7ff, 0xd3ae, 0x4, 0x7, 0x7ecb, 0x4, 0x8d, 0x23f7, 0x5, 0x2, 0x2, 0x2, 0x5c1f, 0x5, 0x6, 0x4, 0x7, 0x8, 0x7, 0x4, 0x9, 0x6, 0x3, 0xfff, 0x1, 0x3, 0x0, 0x2, 0x3, 0x1, 0x4, 0x6, 0xffffffff, 0x31, 0x7, 0x2, 0xa, 0x1ff, 0x401, 0x6, 0x3, 0x7, 0x7, 0x9, 0x80000006, 0x8, 0x2b, 0x26e9, 0x5a6, 0x1, 0x2, 0x9, 0x10, 0xb, 0x5, 0x7fffffff, 0x6, 0x3ff, 0x7, 0x0, 0x0, 0x8001, 0x3, 0x1, 0x6, 0x609e000, 0xfffffffe, 0x5, 0xaef, 0x4, 0x1, 0x101, 0xffffffff, 0x79, 0x4, 0x5, 0x5, 0x4, 0x7f, 0x2, 0x4, 0x8, 0x3, 0x7, 0x7, 0x7, 0x1, 0x61, 0x7, 0xe, 0x3ff, 0x1c9, 0x6, 0xfffffffa, 0x10000, 0x1, 0x1, 0x3, 0x401, 0xb, 0x7fffffff, 0x5, 0x7, 0x7fff, 0x2, 0x7, 0x80000001, 0x3, 0x3, 0xfffffff8, 0x8, 0x2, 0x7, 0x5, 0x0, 0x200, 0xa, 0x6, 0x5e3, 0x7, 0x4, 0x5, 0x6, 0x1000, 0x80000001, 0xb9, 0x40, 0xa, 0x6, 0x0, 0x2, 0xa66, 0x7, 0xff, 0x0, 0x0, 0x3, 0x401, 0xffff, 0x7ff, 0x1ff, 0xf78, 0x7, 0x0, 0xffffffff, 0x794, 0x9, 0x5, 0x1, 0x9, 0xff, 0x3ff, 0x5, 0x8, 0xe, 0x40000000, 0x10001, 0x7, 0x1ff, 0x9, 0x9, 0x4, 0x1, 0x5, 0x5, 0xd7ac314, 0x7a, 0xe0fa351, 0x2b, 0x8, 0x8, 0x3ff, 0xe, 0x8000, 0x7, 0x0, 0x8, 0xfffffff8, 0x4, 0x2, 0x3, 0x7, 0x2, 0xdeab, 0x8, 0x9, 0x0, 0xfff, 0x1, 0x76fa00f6, 0x3, 0x5, 0xb1, 0x8, 0xfffffffb, 0x7, 0x9ed, 0x9, 0x9000000, 0x1, 0x7, 0x37d72d4c, 0x1, 0x0, 0x7, 0x4, 0xfffffffe, 0x10, 0x3, 0x7fffffff, 0x7, 0x68, 0x200, 0x8, 0xa7, 0x1, 0x80, 0x9, 0x8, 0x6, 0xb, 0x6, 0x6dac, 0x7, 0x1, 0x2, 0x1]}]]}, {0x15, 0x6, "8669d7c7ea0a8b28c8eeeaad4a0e974493"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd8, 0xa, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4a}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf07}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x8a, 0x6, "0a71488d148654421f3445528e9455e6d9cf1fabecb60c695b8e616a5f4c42b99bada100d1cce67c388fdd5a728be300209ab303ecd1940af989c1656254ae3ef556720fe4a07d2e68a44f4c83a73139667f0eb0bc1fc97232923ebc45aa9dc50b29e601729e9d32801ef821418f4cfba39bc0a517cf814b537e106d72960ed48f33ce7522c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x94, 0x1d, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xb38d, 0x20000000, 0x4, 0x4}, @local, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1000, 0x4, 0x3ff, 0x332}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}]}, {0x1b, 0x6, "4b6f0a4a0bec7f402188b67524749044ce9aa8fa0bb112"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xb0, 0xe, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x0, 0x9, 0x8}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8, 0xffffffffeffffffa, 0x200, 0x1}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x3, 0x7, 0x4, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x1, 0x0, 0x6}, 0x0, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x12c, 0x17, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xf6, 0x6, "1a04a258454fa1f9a1e20ed89151bd8aaa805c14f19083782b63107571a29447dda0450b4f9ab1d9aa620f3fce364615bc5c457127bc40543ddc187952139414bb1b45c8afc0d347b6c0e976d6ad353e3e1be824698bbdccb9ad9c4fbfc417b6a5ca96b780f46f87f7b529a4fe443c29e91a038fc991fa0793ea4091618cbfcf3b7898db108e583aae0257f21b2a0befb75b6299ec48f6d9e959798500bd3d29b030c47c32d91c53a33d1eee52a27cf62f0f27b220815f53e2181a7711f9a34612d9459a469a1231e44c50ec56fdc1fd4bbf44e5087ba496b6af231eca520185f9de2db26ebbfac348cebbc4a8192c895fe7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x2484}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000200), 0x0, &(0x7f0000000340)) getgid() sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="402c9b", 0x3}], 0x2, 0x0, 0x0, 0x1}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$MRT_ASSERT(r7, 0x0, 0xcf, &(0x7f0000000100), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, 0x0, 0x0) 8.323929872s ago: executing program 3 (id=9059): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x9, 0x8080000, 0x0, r3, 0x8}) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000200)=0xfffffffffffffffd}) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000900)=0x52) 8.076119908s ago: executing program 0 (id=9060): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 7.621955408s ago: executing program 0 (id=9061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) connect(r0, &(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @loopback, 0x7}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400f50000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a3200000000f37d140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'wg0\x00', {0x2, 0x0, @local}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x28, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000025c0)=@delchain={0x2484, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x2458, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x81}, @TCA_FW_ACT={0x244c, 0x4, [@m_police={0x2100, 0x11, 0x0, 0x0, {{0xb}, {0x20c0, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x0, 0x7f5, 0x8, 0x1c8, 0x1, 0xfff, 0x3ff, 0x7, 0x8, 0x10001, 0x8152, 0x7, 0x1ed, 0x9, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x3, 0x90, 0x4, 0x8001, 0x5, 0x7ff, 0x6, 0x6, 0x2, 0x1, 0x5, 0x6, 0x5ab5, 0x2, 0x9, 0x881, 0x1, 0x5, 0x5, 0x586, 0x1, 0xd, 0x4, 0x2, 0xa34, 0x7, 0xf65, 0x5, 0x4, 0x6, 0x2, 0x7ff, 0x6, 0x2, 0x40, 0x0, 0x3, 0xe30000, 0xd89d, 0x6, 0x3363, 0x9, 0xfffffffe, 0x2, 0x5, 0x1, 0x6, 0x2, 0xe, 0x6, 0x9, 0x9, 0xe000, 0x0, 0x10, 0x1, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0x81, 0xb8d, 0x3, 0x4, 0x401, 0x7fff, 0x7fffffff, 0xe1c, 0xe, 0xd85, 0x32e, 0x2, 0x5, 0x0, 0x7c9, 0x726a, 0x1ff, 0x8, 0x2, 0x9, 0x1, 0x9f2a, 0x401, 0xf, 0x6, 0x3, 0x4, 0xfff, 0x5, 0x1, 0xa, 0xc7, 0x68, 0xe, 0x0, 0x1, 0x80000001, 0x7fff, 0x36, 0x3, 0x5, 0xf3, 0x0, 0x4, 0x7, 0x9, 0x7, 0x6, 0x3ff, 0x2de9ad2, 0x7, 0x6, 0x9, 0x7ff, 0x5, 0xd5, 0x4, 0x4, 0xc6, 0x5, 0x4, 0x2, 0x7, 0x0, 0x312630a8, 0x6, 0x1, 0xc, 0x6, 0x0, 0x1000, 0xb, 0x1, 0x1, 0x8, 0x9, 0xdf, 0x8, 0x4, 0x1, 0x1, 0x9, 0x10001, 0x101, 0x2, 0x9, 0xad4, 0x66d8, 0x5, 0x54c5, 0xaf5, 0x7, 0x80000000, 0x6, 0x9, 0x8001, 0x3, 0xf6e, 0x0, 0x80000001, 0x7, 0x2, 0x0, 0x37, 0x2, 0x5, 0x9e86, 0x6, 0x0, 0x7, 0x4, 0xaef0, 0xa, 0xd, 0xc, 0x9, 0x5, 0x100, 0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0x51, 0xc8, 0x6fb5, 0x2, 0x5, 0x5, 0xffc00, 0x200, 0xe7d, 0x5, 0x4, 0xc, 0x80000001, 0xfffffff9, 0x0, 0x10001, 0x7, 0x3, 0x9, 0x7, 0x6, 0x9, 0x1, 0xbad, 0x80000001, 0xc000000, 0x10000, 0x400, 0x5, 0x0, 0x2672, 0x0, 0x5, 0x5, 0x7, 0x1, 0xa, 0x5, 0x1, 0xff, 0x80, 0x9, 0x9, 0x6, 0xc, 0x8, 0x86d, 0x3, 0x5, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9e, 0x3, 0x6, 0x4, 0x3, 0x3d46, 0x5, 0x80, 0x6, 0x4, 0x3, 0x1956, 0x51b, 0x100, 0x4, 0x5, 0xda59, 0x7, 0x0, 0xb, 0x0, 0x4, 0x4, 0x6a3f, 0x4, 0x6, 0x0, 0x5, 0xfff, 0x5, 0x2, 0x5, 0x9, 0x1, 0x3, 0x1ff, 0x100, 0xb, 0x80000000, 0x4, 0x80, 0xfffffff8, 0xd1b, 0x48, 0x3, 0x5554, 0x2000, 0x37, 0x1, 0x10, 0xffff, 0x1, 0x400, 0x8, 0x1, 0xedec, 0x7, 0xfcd, 0x3, 0x80, 0x8000, 0x8, 0x4, 0x3, 0x7, 0xd1, 0x7, 0xef, 0x9, 0x4, 0x7, 0x6, 0x2, 0x7, 0x5, 0x5, 0x7, 0x3, 0x8, 0x9166, 0x8, 0xfffffffb, 0x7f, 0x0, 0x7fffffff, 0x80, 0x5, 0x5, 0x5, 0x9, 0x98, 0x80, 0x1, 0x1000, 0x2, 0x965, 0xb, 0x1, 0x1ff, 0xffff082c, 0x6, 0x8275, 0x2, 0x8, 0x0, 0x1, 0x3ff, 0x3, 0x1000, 0x4, 0x3, 0x3, 0x2, 0x1, 0x40ed192f, 0x0, 0xfffffffd, 0x8, 0x200, 0x3be2c9cd, 0x517f, 0x9, 0x3, 0x1000, 0x7fffffff, 0x101, 0x9, 0x4, 0x9b26, 0x0, 0x2, 0x10000, 0x38000000, 0x9, 0x4, 0x6, 0x1ff, 0x4e, 0x7, 0x4b641d99, 0x0, 0x0, 0x7fffffff, 0x2, 0x8000, 0x885, 0x8, 0x200, 0x3, 0x6b5d, 0x8, 0xfffefffd, 0x8, 0x200, 0x3, 0x813, 0xe0000, 0x4, 0xffffffd3, 0x8, 0x8, 0x4, 0xc39, 0x1b, 0x7, 0x4, 0x40c, 0x1, 0x4, 0x2dcc, 0x9fc, 0x40, 0x3, 0xa, 0x100, 0x5, 0xe, 0x3, 0x5b, 0x2, 0x4, 0x1fc000, 0x7, 0x4, 0x6, 0xffff, 0x8be, 0x2, 0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0x100, 0x7fff, 0x1ff, 0x0, 0x401, 0x3, 0xfffffff9, 0x4b1f, 0x100, 0x9, 0x7fffffff, 0xffff8001, 0x8, 0xd77, 0x9f, 0xf, 0x8, 0xfffffff9, 0x3, 0xade8, 0x7, 0x7, 0x8, 0xfe9b, 0x9, 0xcd8, 0x1, 0x7, 0x2, 0xd61, 0x8, 0x9bf8, 0x4, 0x9000, 0x4, 0x6, 0x2, 0x12e, 0x7, 0x3, 0x8, 0x9, 0x3, 0xa, 0x6, 0x2, 0x88, 0x9, 0x5, 0x6, 0x100, 0x9, 0x7, 0x2, 0xfffffffa, 0x3, 0x40, 0x2, 0x6, 0x5, 0x0, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff000, 0x10000000, 0x7, 0x8, 0xffffffff, {0x5, 0x0, 0x3, 0x7, 0x10, 0x100}, {0x0, 0x3, 0x2, 0x5, 0x4, 0x7}, 0x5, 0xcc, 0x9900}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x5, 0x8, 0x10000, 0x3, 0x4, 0x4, 0x8, 0x91, 0x7, 0x84, 0x800, 0x5, 0x6, 0x4d8, 0x9, 0x8, 0x3, 0x400, 0xc, 0x6, 0x9, 0x0, 0x9, 0xffffffff, 0x0, 0x3, 0x5, 0xe, 0x1, 0x7ff, 0x9, 0xfffffff8, 0x8001, 0xd, 0x8, 0x3, 0x6, 0x180, 0x0, 0x0, 0x100, 0xffffffff, 0x1, 0x8, 0x7, 0x7fffffff, 0x4000400, 0xfffff0e5, 0x3, 0x8, 0x4, 0xe0, 0x7, 0x3, 0x3, 0x10, 0x8, 0x1, 0x9, 0x7, 0x3, 0x1000, 0xd, 0x5, 0x1, 0x6, 0x0, 0x99db, 0x7, 0x5, 0x1, 0x9, 0x2, 0x3e27d96c, 0x200, 0x6, 0xe, 0x4, 0x2, 0x8, 0x3, 0x5, 0x0, 0xe816, 0x800, 0x5, 0x7, 0x9, 0xfffffffd, 0x641, 0x4, 0x1, 0x4, 0x5, 0xba, 0x0, 0xab, 0x1, 0x4, 0x3, 0x4, 0x3, 0x75b6, 0x4, 0x9, 0x3ff, 0x8fd, 0x4b, 0xffff, 0xc, 0x5, 0x3, 0x9, 0xd, 0x851, 0x401, 0x0, 0xa, 0x4, 0x2, 0x1, 0x5, 0x1, 0x800, 0xf46, 0x5, 0xa, 0x1, 0x3a, 0x5, 0x101, 0x4, 0x3, 0x1, 0x7, 0x2, 0x6, 0xfffffffc, 0x80, 0x1000, 0x1ff, 0x1121, 0x2, 0x7, 0x2f, 0x3, 0x0, 0x401, 0x2c0, 0x5, 0x10000, 0x8, 0xc, 0x27ad, 0x1, 0xd, 0x40, 0x4, 0x9b, 0x40, 0x6, 0x1, 0x8000, 0xffffffff, 0x4, 0x3ff, 0xfffffffa, 0x1, 0x83, 0x5da, 0x1, 0x73ec, 0x8, 0x52a, 0x9, 0x1000, 0x6, 0x9, 0x9, 0x2, 0x987, 0x10001, 0x798e, 0xfffffffa, 0x2, 0x9, 0xe180, 0x1, 0x8, 0x1, 0x5e, 0x3, 0x22e, 0x9, 0xbe8, 0x0, 0x80, 0xfff, 0x6aa1, 0x7, 0x1, 0x81, 0x7fffffff, 0x960f, 0x7, 0x1, 0x3, 0x10, 0x4, 0xfffffb26, 0xf, 0x2, 0x0, 0x6, 0x200, 0x2, 0x434000, 0x2, 0x5, 0x6b6, 0x1f8, 0x4, 0x80000001, 0x38, 0xffffffff, 0x1, 0x57cf3cc0, 0x8, 0x7e86, 0x10, 0x7, 0x7f, 0x8, 0x300000, 0xf0000000, 0x553a, 0xfffffffd, 0x8, 0x6, 0x8000, 0xe, 0x5, 0x4, 0xa81, 0x1000, 0x9, 0xc4, 0xffff, 0x3c33, 0x6, 0xfffffffc, 0x40, 0x6, 0xe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x6, 0x2, 0xffff, 0x1, 0x9, 0x4, 0x2, 0xfffffff2, 0x0, 0x56e7, 0x1, 0x7fff, 0x3, 0x40, 0xa, 0x1, 0x800, 0xd, 0x7fffffff, 0xfd, 0x2, 0x2, 0x2, 0xb, 0x8, 0x5, 0x2, 0x2, 0x8, 0x9, 0x10000, 0x10001, 0x8, 0x0, 0x0, 0xaee, 0x7, 0x4, 0xfff, 0x0, 0x8, 0x0, 0xb325, 0x4, 0x1, 0xe, 0x7, 0x0, 0x6, 0x1, 0x1, 0x2, 0xf4a2, 0x101, 0x5, 0x5, 0x401, 0x7, 0xffffff81, 0x8, 0x9, 0x7, 0xc0, 0x8, 0x5, 0x6, 0x6, 0x3, 0x3, 0x6, 0xf, 0x7fffffff, 0xfffffffd, 0x80000000, 0xaf, 0xed, 0x5000000, 0x2, 0x4, 0x6, 0x8a, 0x3, 0x9, 0x3, 0x4, 0xa429, 0x9, 0xe00, 0x6e4aed20, 0x6, 0x5, 0x9, 0x4be00de8, 0x67, 0x5, 0x12, 0x7, 0xdf, 0x2, 0xa245, 0x7, 0x8, 0x0, 0x9, 0xb04, 0x92e, 0x7, 0xd, 0x81, 0x40, 0x0, 0x7, 0x4, 0xfff, 0x1, 0x4, 0x32c, 0x5, 0x4, 0x42000000, 0xffffffff, 0x1000, 0x7, 0x3, 0x2, 0x6, 0x0, 0x5, 0x8, 0x7, 0x4, 0xdd, 0xc, 0x7, 0x10000c, 0x1, 0x27808966, 0x69, 0x2, 0x8, 0x101, 0xa5, 0xfffffffc, 0x7f, 0x0, 0x4, 0x3ff, 0x401, 0x6, 0xe642, 0x2, 0x7, 0xbeb, 0x7, 0x1000, 0x1, 0x5, 0x4, 0xd6, 0x2, 0x62, 0xf157, 0x7, 0x0, 0x3, 0x7, 0x8, 0x1, 0x57, 0xf, 0x3, 0x100, 0x80000000, 0x5, 0x5, 0x7, 0xe8, 0x7, 0x0, 0x1, 0xe0, 0x401, 0x8, 0xda0c, 0x0, 0x3fc, 0xffffffff, 0x7fffffff, 0x5, 0xba, 0x7, 0xfb, 0x4, 0xffff, 0x80, 0x2, 0x7, 0x0, 0x2, 0x3, 0x3, 0xa, 0x0, 0xb87, 0x7, 0x1, 0x80a, 0x5, 0xd4, 0x8, 0x3ff, 0xad4, 0x4, 0x8, 0x6, 0x6, 0x6, 0xe02, 0x0, 0x0, 0x800, 0xe, 0x0, 0xfffffffd, 0x800, 0x7fffffff, 0x910a, 0x4, 0x2, 0xba42, 0x1, 0x5, 0x6, 0xff, 0x4, 0xf, 0x1000, 0xb72e, 0x1c3a9a98, 0xae, 0x5, 0x401, 0x1ff, 0x0, 0x15, 0x0, 0xff, 0x5, 0x4000, 0x2, 0x80, 0x9, 0x2, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x3, 0x3, 0x7f, 0x2, 0x7f, 0x2, 0x5, 0x6aac, 0x6e, 0x4, 0x9, 0x941a, 0xff, 0x8, 0x3, 0xd, 0x77, 0x5, 0x5, 0x6, 0x2, 0xffffff5f, 0x30a1, 0x5, 0x7ff, 0x7, 0x3, 0x7, 0xa2, 0x10000, 0x1, 0x0, 0x5, 0xfffffff9, 0x8, 0x5046, 0x7fff, 0x6, 0x80000001, 0x3, 0x7, 0x2, 0x4, 0x0, 0x8001, 0xfff, 0x0, 0x7, 0x8, 0x20000000, 0x6, 0x7, 0x8, 0x200, 0x6b, 0x39, 0x101, 0x1, 0x800, 0x6e, 0x4, 0xc, 0x1, 0x3, 0x9, 0x3, 0x102, 0x7, 0x56, 0x5, 0x7, 0x8, 0x7, 0x81, 0x401, 0x8001, 0x7fff, 0x800, 0x0, 0xaa6, 0x4, 0x3, 0x8, 0x7, 0x3, 0xffff, 0x5, 0x10001, 0x200, 0x2, 0x3, 0x5, 0x4, 0x2c95e45c, 0x10, 0x3, 0xf, 0x7, 0xfff, 0x6, 0x8000, 0x320, 0x0, 0x4, 0x3, 0x9, 0x538000, 0x80000000, 0x9, 0x7, 0x6, 0x4, 0x80000000, 0xe245, 0x8, 0xa7e, 0xfffffc00, 0x6, 0x3ff, 0x0, 0x0, 0x6, 0x2, 0xffffffc0, 0x35e, 0x6, 0xc88, 0x3, 0x100, 0x2, 0x5, 0x2, 0x2, 0x0, 0xcd, 0x80000000, 0x4, 0x1, 0x410, 0xffffffff, 0x4dd, 0x6, 0x7d42946e, 0x390f, 0x8a8, 0x7fff, 0x8000, 0x800, 0x2, 0x4, 0x7fffffff, 0x4, 0x2, 0xdd, 0x2, 0x691, 0x7fffffff, 0xbff, 0x200, 0x4, 0x7, 0x6, 0xffffffff, 0x6, 0x8e, 0x3, 0x7fff, 0x10001, 0x6, 0x6, 0xfffffff7, 0x64, 0x1, 0x6, 0x81, 0x8, 0xe, 0xb6, 0x9, 0xe, 0x4, 0xad, 0x3ff, 0x8, 0x9, 0x0, 0x4, 0x8, 0x200, 0xfffffb31, 0x4, 0x7, 0x41, 0x5, 0x1000, 0x3, 0x3ff, 0x9, 0x6, 0x141, 0xfea, 0x0, 0xf, 0x9, 0x7ff, 0xd, 0x987e, 0x9730000, 0x5, 0x4, 0x2, 0x2, 0x4, 0x0, 0x6, 0x4, 0x81, 0x8a7, 0x3, 0x7fffffff, 0x4c880f78, 0xff, 0xf, 0x7, 0xfffeffff, 0x4be9, 0x1, 0x0, 0xfffffff9, 0x80000000, 0x1, 0x7ee, 0xc7, 0x81, 0x4, 0x8, 0x2, 0x1, 0x5, 0x5, 0x6f, 0x401, 0x81, 0xff, 0x0, 0x5, 0x1, 0x7, 0x7, 0x0, 0x6, 0x8, 0x7ff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x4d, 0x4, 0xd, 0x1, 0x81, 0x5, 0x2, 0xd, 0x7f, 0x5, 0x7, 0x329, 0x6, 0x3, 0x1000, 0x7fff, 0xe46, 0xbc, 0xd5, 0x81, 0x4, 0xa3b4, 0xfff, 0xe3, 0xf, 0xb, 0x8001, 0x758a, 0x7, 0x4, 0x401, 0xe8, 0x310, 0x2, 0x8, 0x8, 0x2, 0x486a, 0x5, 0x8000, 0x80000000, 0x8001, 0xac1, 0x1, 0x7f, 0x3, 0xd22, 0x7f, 0xfffffffe, 0x4, 0x2, 0x4, 0x0, 0x3, 0x0, 0x1, 0x4, 0x3ff, 0x2, 0xe, 0x6, 0x5, 0x0, 0x0, 0x78, 0x7, 0x4, 0x3, 0xd6, 0xdf893b25, 0xf, 0x8, 0x7, 0xe, 0x7fffffff, 0x8, 0x9, 0x80000000, 0x3, 0x3ff, 0xff, 0x7, 0x7, 0x8, 0xb660, 0xfffffbff, 0x7, 0xdf30, 0xc, 0xc, 0x5b3, 0x80000000, 0xf, 0x8001, 0x7, 0xfff, 0xc5, 0xe1, 0x6, 0x4, 0x5, 0x7fff, 0x5, 0x1ff, 0x9c, 0x2, 0xe, 0x80000001, 0x2, 0x75, 0x50000000, 0x4, 0x81, 0x401, 0x3, 0x1000, 0xd, 0xff, 0x72e, 0x7, 0x80000001, 0xba7, 0x2, 0x3, 0xd, 0x8, 0x8, 0x101, 0x101, 0x8, 0x7, 0x7c5f723f, 0xfff, 0x7, 0x3, 0x4, 0x800, 0x4, 0x17, 0x4, 0x7, 0x0, 0x10, 0x5, 0xd, 0x8000, 0x400, 0x41, 0x3, 0x8, 0x8, 0x8, 0x9, 0xe, 0x7f, 0x0, 0x2, 0xfff, 0x4, 0x2, 0xfe7, 0x3ff, 0x9, 0x63, 0xda17, 0x0, 0x2, 0x5, 0x8, 0x7, 0x2, 0xe, 0x5, 0xfffffff7, 0xae5, 0x845d, 0xffff, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x4, 0x4, 0x9, 0x8, 0xb74, 0x0, 0x1, 0x7ff, 0x7f, 0x1, 0x9, 0xff, 0xe, 0x7, 0x9, 0xf, 0x5, 0x3ff, 0x2, 0x2, 0xffffffff, 0x8, 0xfffffffa, 0x6, 0x4, 0x141, 0x2, 0x4, 0xe, 0x7fff, 0x8, 0x100, 0x7, 0x8, 0xa, 0xc0ac, 0xc, 0x8, 0x4, 0x1, 0x490e, 0xa, 0x797, 0x1, 0x0, 0x100, 0xffffffff, 0x8, 0xff, 0x0, 0xc0000000, 0x9, 0x69a, 0x2b, 0x1, 0x6, 0x7, 0x6, 0x4, 0x8, 0x8, 0x8, 0x101, 0x4, 0x2, 0x4, 0x8, 0x7, 0x5, 0x10, 0xc6, 0x9, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x3, 0x4, 0xffff0001, 0x6a, 0xfffffffc, 0xfffffffb, 0x829, 0xffffbd9a, 0x2, 0xb, 0x1, 0x9, 0x0, 0x5, 0x2f, 0x6, 0x6ac6, 0x4, 0x3, 0x1ff, 0x0, 0x9, 0x3, 0x2, 0x5, 0x3820f32e, 0x3, 0xff, 0x99, 0x891c, 0x3, 0x20, 0x4, 0xf, 0x8c, 0x1, 0x2, 0x6, 0x10001, 0x51, 0x5, 0xfffffffd, 0x2, 0x3, 0x10, 0x0, 0x8001, 0x1, 0xb50, 0x7ae6, 0xa7b, 0xff, 0x86, 0x7, 0x1, 0x0, 0x8000, 0x1, 0x200, 0x599a3000, 0x202, 0x3ff, 0xeb89, 0x1, 0x0, 0x394, 0x7, 0x8, 0x6, 0x3, 0x9, 0xbf, 0x68d4, 0x7, 0x6, 0xfffffffa, 0x3, 0xa, 0x1ff, 0x5, 0x9, 0x80, 0x8, 0xd78, 0x3, 0x2, 0x9, 0x9, 0x1, 0x1, 0x1000, 0xfffff1a1, 0x80000000, 0x5, 0xfffffa20, 0x8, 0x11f83f2f, 0x2, 0x9, 0xef, 0x29, 0x4, 0x1, 0x9, 0xdc, 0x8f03, 0x0, 0x7, 0x2, 0xd35, 0x6, 0x8000, 0x1000, 0x100, 0x200, 0x0, 0x5, 0x4, 0xffffffff, 0x6f3, 0x9, 0x3, 0x3, 0x7, 0x5, 0xd, 0x10000, 0x8001, 0x0, 0x6345, 0x0, 0x3ff, 0x4f29dd93, 0x4, 0x6, 0xffff, 0x2, 0x6, 0xdaac, 0x6, 0x91, 0x10000, 0x55, 0x8, 0x7, 0xa72a, 0x6, 0x10000, 0x9, 0x4, 0x2, 0x2, 0x3, 0x6, 0x9, 0x1, 0x0, 0x7651, 0x4, 0x7, 0x3, 0x5, 0x4, 0x9, 0xa0de, 0x8, 0x8, 0x4, 0x40, 0xe44, 0x7, 0x7, 0x2, 0x3, 0x6, 0xef, 0x9, 0x4000000, 0x6, 0x80, 0x61936147, 0x9, 0x9, 0x7f, 0xd, 0xfffffff8, 0x5, 0x7, 0x1, 0x7ff, 0x20, 0x5, 0x6, 0x5, 0x5, 0x1f35, 0x4, 0x200, 0x95, 0x8, 0x7, 0xb, 0x2, 0xffff, 0x8, 0x3, 0x8, 0x1, 0x9, 0x8, 0x6, 0x6, 0x56d, 0xfc, 0x10, 0x0, 0xaf6, 0x7, 0xfff, 0xa12, 0x9, 0x5, 0x0, 0x1, 0x800, 0x7, 0x3, 0x4, 0xcc2, 0x5, 0x0, 0x4, 0x2, 0xf, 0xff, 0x9, 0x1, 0x6, 0xff, 0xfffffff8, 0x9, 0x5a6625b4, 0x0, 0x2, 0x8, 0x1, 0x7, 0x2, 0xffff, 0x3ff, 0x8, 0x28, 0x9, 0x101, 0x8]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x70, 0x71, 0x100, 0x7, 0xf, 0x10001, 0xe, 0x7, 0x80, 0x10000, 0x81, 0x2, 0x9, 0x2, 0xf, 0x7fff, 0x8, 0x2, 0x7f, 0x84b, 0x5, 0x2, 0x67, 0x400, 0x7, 0x9, 0xffffffff, 0x5a2875d0, 0x7ff, 0xd3ae, 0x4, 0x7, 0x7ecb, 0x4, 0x8d, 0x23f7, 0x5, 0x2, 0x2, 0x2, 0x5c1f, 0x5, 0x6, 0x4, 0x7, 0x8, 0x7, 0x4, 0x9, 0x6, 0x3, 0xfff, 0x1, 0x3, 0x0, 0x2, 0x3, 0x1, 0x4, 0x6, 0xffffffff, 0x31, 0x7, 0x2, 0xa, 0x1ff, 0x401, 0x6, 0x3, 0x7, 0x7, 0x9, 0x80000006, 0x8, 0x2b, 0x26e9, 0x5a6, 0x1, 0x2, 0x9, 0x10, 0xb, 0x5, 0x7fffffff, 0x6, 0x3ff, 0x7, 0x0, 0x0, 0x8001, 0x3, 0x1, 0x6, 0x609e000, 0xfffffffe, 0x5, 0xaef, 0x4, 0x1, 0x101, 0xffffffff, 0x79, 0x4, 0x5, 0x5, 0x4, 0x7f, 0x2, 0x4, 0x8, 0x3, 0x7, 0x7, 0x7, 0x1, 0x61, 0x7, 0xe, 0x3ff, 0x1c9, 0x6, 0xfffffffa, 0x10000, 0x1, 0x1, 0x3, 0x401, 0xb, 0x7fffffff, 0x5, 0x7, 0x7fff, 0x2, 0x7, 0x80000001, 0x3, 0x3, 0xfffffff8, 0x8, 0x2, 0x7, 0x5, 0x0, 0x200, 0xa, 0x6, 0x5e3, 0x7, 0x4, 0x5, 0x6, 0x1000, 0x80000001, 0xb9, 0x40, 0xa, 0x6, 0x0, 0x2, 0xa66, 0x7, 0xff, 0x0, 0x0, 0x3, 0x401, 0xffff, 0x7ff, 0x1ff, 0xf78, 0x7, 0x0, 0xffffffff, 0x794, 0x9, 0x5, 0x1, 0x9, 0xff, 0x3ff, 0x5, 0x8, 0xe, 0x40000000, 0x10001, 0x7, 0x1ff, 0x9, 0x9, 0x4, 0x1, 0x5, 0x5, 0xd7ac314, 0x7a, 0xe0fa351, 0x2b, 0x8, 0x8, 0x3ff, 0xe, 0x8000, 0x7, 0x0, 0x8, 0xfffffff8, 0x4, 0x2, 0x3, 0x7, 0x2, 0xdeab, 0x8, 0x9, 0x0, 0xfff, 0x1, 0x76fa00f6, 0x3, 0x5, 0xb1, 0x8, 0xfffffffb, 0x7, 0x9ed, 0x9, 0x9000000, 0x1, 0x7, 0x37d72d4c, 0x1, 0x0, 0x7, 0x4, 0xfffffffe, 0x10, 0x3, 0x7fffffff, 0x7, 0x68, 0x200, 0x8, 0xa7, 0x1, 0x80, 0x9, 0x8, 0x6, 0xb, 0x6, 0x6dac, 0x7, 0x1, 0x2, 0x1]}]]}, {0x15, 0x6, "8669d7c7ea0a8b28c8eeeaad4a0e974493"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd8, 0xa, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4a}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf07}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x8a, 0x6, "0a71488d148654421f3445528e9455e6d9cf1fabecb60c695b8e616a5f4c42b99bada100d1cce67c388fdd5a728be300209ab303ecd1940af989c1656254ae3ef556720fe4a07d2e68a44f4c83a73139667f0eb0bc1fc97232923ebc45aa9dc50b29e601729e9d32801ef821418f4cfba39bc0a517cf814b537e106d72960ed48f33ce7522c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x94, 0x1d, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xb38d, 0x20000000, 0x4, 0x4}, @local, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1000, 0x4, 0x3ff, 0x332}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}]}, {0x1b, 0x6, "4b6f0a4a0bec7f402188b67524749044ce9aa8fa0bb112"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xb0, 0xe, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x0, 0x9, 0x8}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8, 0xffffffffeffffffa, 0x200, 0x1}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x3, 0x7, 0x4, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x1, 0x0, 0x6}, 0x0, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x12c, 0x17, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xf6, 0x6, "1a04a258454fa1f9a1e20ed89151bd8aaa805c14f19083782b63107571a29447dda0450b4f9ab1d9aa620f3fce364615bc5c457127bc40543ddc187952139414bb1b45c8afc0d347b6c0e976d6ad353e3e1be824698bbdccb9ad9c4fbfc417b6a5ca96b780f46f87f7b529a4fe443c29e91a038fc991fa0793ea4091618cbfcf3b7898db108e583aae0257f21b2a0befb75b6299ec48f6d9e959798500bd3d29b030c47c32d91c53a33d1eee52a27cf62f0f27b220815f53e2181a7711f9a34612d9459a469a1231e44c50ec56fdc1fd4bbf44e5087ba496b6af231eca520185f9de2db26ebbfac348cebbc4a8192c895fe7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x2484}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000200), 0x0, &(0x7f0000000340)) getgid() sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="402c9b", 0x3}], 0x2, 0x0, 0x0, 0x1}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$MRT_ASSERT(r7, 0x0, 0xcf, &(0x7f0000000100), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, 0x0, 0x0) 7.447588115s ago: executing program 3 (id=9062): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r1 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x19, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a763a52f0a11d26a730cfffde5ef230de84eea7ad8ffffffffffffff00", [0x2, 0x800]}) 7.008948709s ago: executing program 1 (id=9063): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x4, 0x80, 0x9c, 0x6, @time={0x38, 0x7}, {0xe, 0xe}, {0x2, 0x9}, @connect={{0x6, 0x2}, {0x9, 0x9}}}, {0x0, 0x7, 0x7, 0x8, @time={0x85, 0x2}, {0x1, 0x4}, {0x6, 0xe}, @connect={{0x1, 0x4}, {0xe, 0x8}}}, {0xa, 0xb, 0x7, 0x7c, @time={0x5, 0x6}, {0x6, 0x9b}, {0x4, 0xe9}, @addr={0xfa, 0x7f}}, {0xb, 0x7, 0x19, 0x7, @time={0x81, 0x5}, {0xb, 0x10}, {0x0, 0xc}, @ext={0x0, 0x0}}, {0x9, 0x84, 0x2, 0x3, @time={0x5, 0x3ff}, {0x60, 0xfe}, {0x9, 0x1}, @queue={0x1, {0x6, 0x1}}}], 0x8c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f00002dc000/0x1000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104110000000000000002000000240001801400018008000100ffffffff08000200ac1414320c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000100006800c000380060001004e240000"], 0x74}}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000200)={@my=0x1, 0x2}) dup(r2) r7 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000eb1000fdff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="791001002b0000000a000100aaaaaaaaaa2d0000140012800b0001006272696467650000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@loopback}, 0x14) 6.960128853s ago: executing program 3 (id=9064): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x6}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb819bbe7bfabee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x48084) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40048c4, 0x0, 0x0) 6.893386829s ago: executing program 4 (id=9065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x520}}], 0x600, 0x0, 0x0) 5.436190145s ago: executing program 3 (id=9066): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) ptrace$setregs(0xf, r2, 0x4, &(0x7f0000000640)="7b9dceb334b1529dd642cceddcc344cbd07a2def47481857e94b3465bac8c04eaea9977c7cb871965e6355ac326e41e0d16efb0e8b7a6f53332b21ad10d821d846fa3acf8f2f9fabd2df17437b94994702286105407815fb2f31012f74bd21f86199b9c857a1c10e6ac49d24b7d254254650f54e7695c5a8661c5d5dc8b8211948ca25") socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0x200, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, {0x1}, {}, 0x0, 0x0, 0xa}}, [@sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x4e22, 0xfdd, 0x4e24, 0x5, 0x2, 0xa0, 0x2469fa308da9f049, 0x3a}, {@in6=@loopback, 0x4d4, 0x3c}, @in6=@mcast1, {0x9, 0x4, 0x400000000000962, 0x2, 0x2, 0x40002, 0xd9, 0x1}, {0x60000, 0x6, 0x7, 0xe7}, {0xca46, 0x2, 0x4}, 0x70bd28, 0x3502, 0x8, 0x0, 0x1, 0xac}}, @lifetime_val={0x24, 0x9, {0x8000000000000000, 0x9, 0x7, 0x80}}]}, 0x200}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYBLOB]) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="2503000000000400210008224040e1070000003d3482b0c34b6cbcfca96df7dfeb437d03d33b5c9e1da0fe40ecd0413a5aed20202aa0efbf9ad3205d41e278c46bf3a9cf3da482e56212b4d96413ef9efbee6ea1b604fc1a6286bccfec34918cd7a2c55dab185e6973c9674ae70ce25919d563a65185d3d381d5d2bfbf0c409ee37b54cea639f29a9f394b8b33e2b97ae4e6b5e24cfa200789180d0bd56e580045f8"], 0x14}}, 0x200000c1) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) msgsnd(0x0, 0x0, 0x51, 0x0) 4.759766356s ago: executing program 0 (id=9067): socket(0x2, 0x805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0x82, 0x1e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) r4 = fanotify_init(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$unix(r8, &(0x7f000000f6c0)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000140)="1377e32e2099e9cbc729c1878c1f796834e8fe23fadd61514740bae2d53a2b94f2dbe143ce3ddd96a3026b", 0x2b}, {&(0x7f0000000440)="ac1e0dd75241e90b63fb057c02d1d880c883aefe8665b0c0474c78c212dfeec0d734a9fd834e300f4ebceaa6ba8721011f7652b51bf4aef5350f00aeb8efb8190e4014ca3f347172aa8cb7cee45c96b9881657fe2dbd2f20552653b81f0ebdcdc6b90f2501f397e5fc7bbff1021487f4799bf19bc59e94e01a73e237c0abe198ce83155cc1b286a2ecb9f3", 0x8b}, {&(0x7f00000002c0)="39525c0758adf69948de4bb9f33a94e7e21ebb339ec377e81d998aabfa450affcb84dd1db869ce0f542d8fa23be2c637ef8e6baf5cd2a9b3bfa00eb82cfae11e7d5a683ab379add6c6e8db8635b4dc103e74fa206d7c5871640b63d9583b1d41a0b7185a179af88a58ec842131614a520c1fa71797812e767ca14d69", 0x7c}, {&(0x7f0000000580)="11573b36380de9b8ea436788c622c138be68df57ea3e80a84f1c33f9bfe27448edba3c03bd522d86e0f627d67cc5c5cfec2d1ed7f6106a68462ce48d5c95cdbf96a3978aab008c8d15c717b4fae25a011c1660aa54a1f55141a1327db490b01cf066f16c7d3341027127f34148bd4b2f09b9405e2ac0b744bb5ff9d5d2d3fa16d2adf6212b9308f875ea76ba66ad2339b5b8413f1551974dac4fa2211f0176122fe69664e4360402ba24411a9b2311360bf61daa54d487ca23e89993a01ba3a7aa1a69985eb227dd9dfd8a2f5689983c538107b92f1c5e87ac964d123825fa4a74b5085cd237ed871cd844df5553d466684ce2", 0xf3}, {&(0x7f0000000680)="6d08ee8c4a589f5b30766d7fc447aac320f115ef9dfb0c2f7afcec803d52c572e3988c6131be872738820256410b6a6122aec9e806ffc0e8a4fbd50d33a537a5515080be58781ebd7fa8a42659b3c9d1f1ae37830a7a315f00716d2250b6988353ce77202b12b976e52bd99cdee35853275a0201e97ef577a38f0ab13e25157bb68f338076af2bee78d2500bd9b7b0dfdbacf2b19409d5808ce9cfecbc3635f6d33d6ae895037234927fcf6f415797147e557dcda4c875d82184d0fcac4f740938f7999f20bdda8d2525bd006fb99bf099255f04020c76d8db4f8942e9ecaebb73d9643fea4323b7b51575a5dd0e11dc", 0xf0}, {&(0x7f0000000780)="8be1060673bae22d92713cfa95afd5a4b663efda9a5dd432ec29005d02be7d5d1b1bec9382216866fbea73a37d6dd3b0b5fd56270710987947e978053f1fb95e743cb8f43b0348c077516179e7ba9313d44ce057fb05e59c8c258ebdd29ddba96d4279a97f07d1b4c3ce704b4aff682bd8d074840a5212c8a85988c3813c3d11dea8f1357baea394b9f3c822d9fb777736faa86069bf914a47b5fb78420197855a56f274f1bd64006fe2cfc71b4821d9d63ff19ea340228d67766837c283e805819c8fe6cd35ae96301995f98c65bf", 0xcf}, {&(0x7f0000000380)="585925f412eac1682a83b50ca91f8de1697a25bc2fdffe5e99795334558458d9d5e070eeaefd7f63157fb7b4e9c4dbfa50f147f06bcdb7e5f360a92abf4772ac01087c86e9c8c4f75573", 0x4a}, {&(0x7f0000000880)="fae6d0fe13ebd169ca50967dd4e4cce265f7afbb08372acb83cf944926ca5b0ad03ae554dfc04363198100189463c6cc4fac8775ddee8678fec9d42399666ed66c57b4a1332b626e317f31bd7e2bda8c67f4c5e2d5daf67451790a78346b3b1557c8d4dda3ff063f92", 0x69}, {&(0x7f0000000500)="fba61ac89f429c30186dfdb1fad5c45e2a4488c4607e35bb910465949e7eec", 0x1f}], 0x9, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r9, r6, r8]}}, @rights={{0x1c, 0x1, 0x1, [r3, r6, r1]}}, @rights={{0x20, 0x1, 0x1, [r3, r2, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x118, 0x4104}}, {{&(0x7f000000c3c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000c700)=[{&(0x7f000000c440)="1b7f2915403910dab91685ce95d189a5b93ec7d812a0429b9866a4f9e8f378e37514e09112a91e5dbcd2c9ee740fc369826657a5b94ea5ba733d42865041331975c81f1d5839ea7ba746ea007f094a9c9cfe9d5ef7d6eb84e78f62955e9103f3b10bba81cd97a8cdf81351de270f2bb53c77f43a281c1ebadd1297b80058fceca66a7bb458411da34657131000afcfe57cc391756b132e871f0ab39e1fc11d1b94528ed3fcb3e3d10688f9b1524952df351171a0cf8d5afaeae7cdef03c584d4eefb561d5a957958d9", 0xc9}, {&(0x7f000000c540)="d0be0ba1442aad664b8c294345d9700b178b357215d484086e702dfaca1b", 0x1e}, {&(0x7f00000009c0)="9ad5736e147c23306968476d171859d41de37e763999c9a0ddc3557f0f785d0adb78f5ea5fe6770437b1118485f1a147beff0b7ef10b9f908ae4f71f63b0591dfee364ff54f542595fb644f5658ca951f718c2e3acd72c2e023d9ab7e0e50a927c", 0x61}, {&(0x7f000000c600)="5a0b2d1b9d1fdab74f79a89673d142c8455911370a0a9bb0863837dc6bdbe0c8f91579ba8c38ba5bed58bf0cd11ba7a491f8029720fda8c6836e63aaa9082f562c1a5e2f97e8107a1bd3b7016f84bd8cc3ad059162f5c192e6e0", 0x5a}, {&(0x7f000000c680)="faf4795600dc977c0f04a109ba7e56631b733ab6b2f4da44a8f874beaa1a632d79481d497620500d6bb653e3d4b39d94121e182b4cc2e7290adda35ba5067aacee673d994e7db10ba92d02e0484a9af0c6eb7f4ff93c5a12e112d5eb9d0d6b6c14424c6bc7a3c26af0d48188", 0x6c}], 0x5, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x0, 0x1, 0x2, {r5}}}, @cred, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4800}}, {{&(0x7f000000ca40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000e080)=[{&(0x7f000000cac0)="ed17de5eff90add173528e28f038d3a467083e1d1059499c2f9ce5bace209121dc25f4ccab2fec8382e6848a145819b42c06c2d0242e9080765553d07591e5410f3062098ebf122efa5f0c5cf5ba974209360040fe7867a6e18af3f1802bfc586cc185bbb4861b871613171f64bce061857f05ae81b05f1520800887efb1f150955d9308cbfd9b8cec4ca14b1f3b6bf870bbe40aafcbd55842e79671ebfbfde992f04a1c8112e0541276e4250f67627d7bf33a066b3cc66cc594c3246bb4735024e93ed5d781d19ac3ff5571", 0xcc}, {&(0x7f000000cbc0)="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", 0x1000}, {&(0x7f000000dbc0)="fb432efbd63a009012213fc2274eb1b1f36bb71288a0c7d0f9a1b4ba9789f4e7b42755751b07004a4d3e3a3cd9f47e32842da5264657febfb6158589077c77a3a1e9580a2e03a8660bf28934c54f32", 0x4f}, {&(0x7f000000dc40)="51eb442f362a36b77bc696e0abffa9515094d4e319968efd478044bf3e9f4c689a142466533b8cdfc10b73d6d77724590fff66ce123d76c933ae38afb51526aab321ec1180e0b9c453c7e6c51115b54421f1b717c9c7e4ceed4ef232fcdbccb97d3eadb0b600a1af3b67d047b2a65999f31d7224ae7982cb0bc9ece2402ecc6f3cd0f562c7bfe9d1eb866dcba9551b51b0584b8be3fc65a05f809e97f89e7854", 0xa0}, {&(0x7f000000dd00)="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", 0xfd}, {&(0x7f000000de00)="0795e57d81108f80a19a7cdf69b159b367d4eb1ba9fa42541a1a9896fe54b4ebf2018f0ff50550c8abcd66c819e3aff441fce6cf8b94f54269bf77a103bf408948e46865ec4d6d2a7117735de75d01350e2bb5acb1a160fb31fea6cb5770262e2d7c371683ce80ca111bd57c898b0a5e05cb049bded99e61cbc55ae9c62265baf810db2397c7636de479786a515c222cd29072b0d47fd8d07cbf67a782a4b3f2883d11966656d200736b006f881168ce1150fa5ac5a1794808bf96a53d9dacb0e1a60c938245aa2f23493854b4b37d7f5c839e265faf10a1b98781f6bd39397d0eaeb9756ec2d7d5685c208796b143967cda79c4", 0xf4}, {&(0x7f000000df00)="64a07187daebd3a35bb3c0c50e41d60353efccaf8ba426eddebdcf7ab46acf03c17c7c66365da85e0a6968759a5611cb8907c174328a1bc7d8996c835a1bbef13308da99d505e9d911bb01", 0x4b}, {&(0x7f000000df80)="1102c1ecbedbc9515c0bcb6d444a09c56deb05231090c8ee525a4bee59cb2903eb506f3675d910a474b561d80955f1f22964e306827cc0ebe80f76db5ea3ff56fa9f9621e8074a447f695c252e64eb3a6179db51ca5d72fc735c7b6e1fddf45dab8e3d01037202be01712577d1ba9085e8119fdbacc690a3ad15a3c08bef11d1d8bb8daf86cea58156ceec92638a196066353df366451f5bda85c3a5ce1ee1253bad9d843363006358c4b7d78e908640f2be9f33ee8c27c161192d", 0xbb}, {&(0x7f000000e040)="e67956f2ade5a55d39416b7e1f318fc74422914e4de2f3", 0xfffffffffffffc6e}], 0x9, &(0x7f000000e140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r9]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6]}}], 0x50, 0x4008040}}, {{&(0x7f000000e1c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000f400)=[{&(0x7f000000e240)="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", 0x1000}, {&(0x7f000000f240)="ae0cdff24cc22d72a48cfb241c7203622c7faeca69bdffcdb08363c5d3f81c038c2948f51b020095abf508b03ee09b", 0x2f}, {&(0x7f000000f280)="13fcf21fd6f6217981e3c564e83a9b5a0dd3ac610bd69f85822bca4262e2a5c9bcd6df3be836148058dc789a029558801ca1a633b441690cb31d4520e0a144aa46fe3e0bb2", 0x45}, {&(0x7f000000f300)="463794f85327f3e7db6aa20c2d688952d4531a69c8e558f866eb8260faf6356d5f19bdb1207561360003a0cf24c5894a91013cdda9bfc10c86528b8d3ce57c06b6f63bda6d2eac007e3b953e2a2627bcebb7942ee088b7ad8a95b5a079a6ad66132e4d70d0ace9b324a2d1f851a61d2ad6ab118e08d3ffc4a2b3fe0d8321af55ce456d42df7c73d6a065fa56db782fb3a4a6f3a1a6c380bfcf56f48435053dc55699fa934a8ac1333766bc1e9c406c0469b3ba22a25c7cb84ef28a15b81c978152ccd659c9fcc0cf3284b3fefbd0d270e6ae736bcdcd4059c522fb2d108e353c", 0xe0}], 0x4, &(0x7f000000f580)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0x118, 0xc005}}], 0x4, 0x24040c84) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r10, 0x40086603, &(0x7f0000000040)) unshare(0x62040200) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000100001000000001a0000000000000000", @ANYRES32=0x0, @ANYBLOB="010900000000000008001b00"], 0x28}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 4.74891578s ago: executing program 1 (id=9068): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 4.132783662s ago: executing program 1 (id=9069): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x3, 0x8, 0x5, "c5320120", "b185072b"}}, 0x0}, 0x0) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xd7, {0xd7, 0x21, "4791e0d858b3c474bb340d353cf6744693f785bf5821eb252837a521a63255fb3f9ee8fbc62e410b163c8a30d035668eb3da6d8f360ca8e42dfe51289589ff2652abd441fdeff0516cfcb8d3c26890b58ec70d10eb5920c741a9dfbfcfaff986ca7098d23f11180a146f3c43da4ba727f14795c421b3c59ad295eebac3355a1db6e4429aa7cc5e5b04d10ab662fa54d68528f5d8c41078ea439bb9e34b6bc80e435633a11b661e3832368905cb4789fabe61d2299ddd445e4eb82b6075a33c2960e168cea02e71128e0efb581481a2b361fe9fc766"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0x8, 0x8b, "bb958c431aa892953cc57e5df1d71df9d2f0d59c91163ac8d33e8ad09fd3a81cb73da81796739e263db553d45878fde187bcb5673b3e9b088489e06929a1b2155cd8edb70385ba3c508a733a2b897f772f3787c0eb7cb9618cbb45892ad7af7a3936c73b7186b4e6ad7aca16fcfdcea2c35de92f653111d564d2cf65e83c8bb826ab750415808017ddca69"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0xd26}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "a3017e4448cf7b0b080a4f51c0fd4256ee74d37eb03a28a572c242c3a234f412bc186fa62ae7c38ed9a6c7083245e6"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(r0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, &(0x7f0000000200), 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_ethernet(0xfe4, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfd6, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb3b508a77aac3b30d79231a937fbb2e2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3a78e1cce474c1b13dc068ac4f2a8d7afa5857a72"}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000013c0)={0x2c, &(0x7f00000011c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0}) 3.917185831s ago: executing program 2 (id=9070): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460003"], 0x48) unshare(0x64000600) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000080), 0x0}, 0x20) 3.524296238s ago: executing program 4 (id=9071): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.483608788s ago: executing program 4 (id=9072): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_open_dev$video(0x0, 0x7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 3.259402111s ago: executing program 2 (id=9073): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103fffffff500000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc0884123, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 2.569394123s ago: executing program 3 (id=9074): bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xffffffffffffffb0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x44) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1.509565819s ago: executing program 0 (id=9075): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2, 0xee01}, {0x0, 0x0, 0x4000, 0x0, 0x0, 0x2}, {0x4, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x9, r0, 'id1\x00'}) openat(r3, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB="2c6787c49781b5e44b146a11e734c1c107726f75705f", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) ptrace(0x4207, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r8, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r8, 0x0, 0xfdef) write$binfmt_elf64(r8, 0x0, 0x78) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) 1.414711149s ago: executing program 2 (id=9076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000009940)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @loopback, 0x3b1}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@tclass={{0x14, 0x29, 0x43, 0x5}}], 0x18}}], 0x1, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x21, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x1000) 1.385823973s ago: executing program 0 (id=9077): r0 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000140)={0xc1, 0x0, 0x1}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x30, 0x7, 0x0, 0xfffff02c}, {0x6}]}, 0x10) r5 = dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000000201050000000000000020000a0000053c0002800c000280050001002f0000002c00018013f60300fc01000000000000000000000000000114000400fc0100000000000000000000000000000c001980080002008a"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000800) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="d80000001d0081054e81f783db4cb904020000000091b49b74fc3ca10a0015000600142603600e1208000f0000000401040001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad509d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.095516409s ago: executing program 2 (id=9078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xcf0f041, 0xb680}) pwritev(r2, 0x0, 0x0, 0x80, 0xfffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x40003) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x80000000) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080081000040"]) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) unshare(0x8000000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r8, 0x401, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000101010300001c00000000000a000000100001800c00028005000100010000000c0019800800010008080000"], 0x30}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) 1.092639204s ago: executing program 1 (id=9079): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1", 0x1c}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 1.000611254s ago: executing program 0 (id=9080): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x6}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb819bbe7bfabee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, &(0x7f0000000240)={0x9, 0x7f, 0x2, 0x2, 0xffff, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x2, 0x6e18, 0x1, 0x8, 0x400, 0x9, 0x1, 0x9}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r5}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x48084) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40048c4, 0x0, 0x0) 933.763849ms ago: executing program 1 (id=9081): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r7], 0x3c}}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r5, @ANYRESHEX, @ANYRESOCT=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xfffffe3d, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="610000005000030425bd70000000000000000000", @ANYRES64=r5, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) 368.34717ms ago: executing program 4 (id=9082): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540000000000800024000000024080001"], 0xc8}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) read$char_usb(r1, &(0x7f00000001c0)=""/112, 0x70) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 289.970181ms ago: executing program 3 (id=9083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x20, 0x40, 0x7ff, 0x9, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x34}}}}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003041000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) (async, rerun: 32) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000000}) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) (async, rerun: 64) r7 = semget$private(0x0, 0x6, 0x0) (rerun: 64) semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) (async) semop(r7, 0x0, 0x0) (async) semop(r7, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r7, 0x1, 0xf, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000200)={0xffffffff, 0x2, 0x7, 0x6, 0x1, "8a2d8c3fa88ea34cd4b66fd09f38854a6a5f64"}) (async, rerun: 32) r8 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r11, 0x1, 0x100000000, 0x80000000) 82.780105ms ago: executing program 4 (id=9084): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001020030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x80}}, 0x8000) r8 = socket(0x10, 0x3, 0x0) rt_sigpending(0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0) openat$cgroup_ro(r9, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) sched_getattr(0x0, &(0x7f0000000400)={0x38}, 0x38, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r10, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000680)="e6", 0x1}], 0x1}}], 0x1, 0x200400c0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) 0s ago: executing program 2 (id=9085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x62800, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0xffffeffc, 0x6, 0xb49, 0x9, 0x8, 0x0, 0x5}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x0, 0x0, 0x0, 0x14b, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) writev(r5, &(0x7f0000000880)=[{&(0x7f0000000180)="2998337eab75ba710a8542ed", 0xc}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, r4, 0x5, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '\xff\xff', '1![\xb0\xfd\x00', ',\'\x92*\x00', '+\x00'], 0x11}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) readahead(0xffffffffffffffff, 0x100, 0x96) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kernel console output (not intermixed with test programs): 5/0xb0 [ 2548.041329][ T5744] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 2548.041351][ T5744] ? __pfx__copy_from_iter+0x10/0x10 [ 2548.041370][ T5744] ? __build_skb_around+0x257/0x3e0 [ 2548.041389][ T5744] ? netlink_sendmsg+0x642/0xb30 [ 2548.041404][ T5744] ? skb_put+0x11b/0x210 [ 2548.041423][ T5744] netlink_sendmsg+0x6b2/0xb30 [ 2548.041446][ T5744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2548.041465][ T5744] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2548.041481][ T5744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2548.041497][ T5744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2548.041513][ T5744] __sock_sendmsg+0x219/0x270 [ 2548.041538][ T5744] ____sys_sendmsg+0x505/0x830 [ 2548.041561][ T5744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2548.041586][ T5744] ? import_iovec+0x74/0xa0 [ 2548.041608][ T5744] ___sys_sendmsg+0x21f/0x2a0 [ 2548.041628][ T5744] ? __pfx____sys_sendmsg+0x10/0x10 [ 2548.041672][ T5744] ? __fget_files+0x2a/0x420 [ 2548.041684][ T5744] ? __fget_files+0x3a0/0x420 [ 2548.041705][ T5744] __x64_sys_sendmsg+0x19b/0x260 [ 2548.041725][ T5744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2548.041751][ T5744] ? __pfx_ksys_write+0x10/0x10 [ 2548.041769][ T5744] ? rcu_is_watching+0x15/0xb0 [ 2548.041788][ T5744] ? do_syscall_64+0xbe/0x3b0 [ 2548.041807][ T5744] do_syscall_64+0xfa/0x3b0 [ 2548.041822][ T5744] ? lockdep_hardirqs_on+0x9c/0x150 [ 2548.041836][ T5744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2548.041851][ T5744] ? clear_bhb_loop+0x60/0xb0 [ 2548.041868][ T5744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2548.041883][ T5744] RIP: 0033:0x7fa162f8eba9 [ 2548.041896][ T5744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2548.041909][ T5744] RSP: 002b:00007fa1611f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2548.041925][ T5744] RAX: ffffffffffffffda RBX: 00007fa1631d5fa0 RCX: 00007fa162f8eba9 [ 2548.041936][ T5744] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2548.041945][ T5744] RBP: 00007fa1611f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2548.041955][ T5744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2548.041970][ T5744] R13: 00007fa1631d6038 R14: 00007fa1631d5fa0 R15: 00007fa1632ffa28 [ 2548.041992][ T5744] [ 2549.503809][ T5755] binder: BINDER_SET_CONTEXT_MGR already set [ 2549.510335][ T5755] binder: 5751:5755 ioctl 4018620d 200000004a80 returned -16 [ 2549.683914][ T5765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8398'. [ 2549.715502][ T5765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8398'. [ 2550.374854][ T2777] usb 4-1: USB disconnect, device number 127 [ 2550.818819][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8402'. [ 2551.830471][ T5808] QAT: Stopping all acceleration devices. [ 2552.916905][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8407'. [ 2553.035768][ T5813] bridge_slave_1: left allmulticast mode [ 2553.041621][ T5813] bridge_slave_1: left promiscuous mode [ 2553.047772][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.101849][ T5813] bridge_slave_0: left allmulticast mode [ 2553.178781][ T5813] bridge_slave_0: left promiscuous mode [ 2553.184829][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.962074][ T5818] netlink: 368 bytes leftover after parsing attributes in process `syz.3.8410'. [ 2554.789641][ T5832] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8411'. [ 2556.319739][ T5843] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8413'. [ 2558.480742][ T5861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8418'. [ 2558.539150][ T5861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8418'. [ 2558.646761][ T5862] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8418'. [ 2558.927610][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8422'. [ 2559.052132][ T5877] tipc: Enabled bearer , priority 0 [ 2559.060699][ T5877] syzkaller0: entered promiscuous mode [ 2559.066235][ T5877] syzkaller0: entered allmulticast mode [ 2559.097006][ T5877] tipc: Resetting bearer [ 2559.371264][ T5890] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8426'. [ 2559.399117][ T5868] tipc: Resetting bearer [ 2559.797967][ T5868] tipc: Disabling bearer [ 2564.543611][ T5934] loop9: detected capacity change from 0 to 3 [ 2564.603963][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2564.627306][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2564.653135][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2564.731060][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2564.812902][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2564.848252][ T5941] netlink: 'syz.2.8438': attribute type 10 has an invalid length. [ 2565.135373][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2565.321861][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2565.350176][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2565.374235][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2565.395805][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2565.793346][ T5951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8442'. [ 2565.838917][ T5951] netlink: 'syz.0.8442': attribute type 21 has an invalid length. [ 2566.088290][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8443'. [ 2566.214889][ T5956] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2569.313228][ T5982] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8452'. [ 2569.431584][T30817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2569.480385][T30817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2569.532492][T30817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2569.590188][T30817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2569.612583][T30817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2571.231975][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 2571.588428][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 2571.600297][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2571.627524][ T5993] bridge_slave_0: entered allmulticast mode [ 2571.653985][ T5993] bridge_slave_0: entered promiscuous mode [ 2571.668231][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 2571.687646][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2571.707792][ T5993] bridge_slave_1: entered allmulticast mode [ 2571.708984][ T2580] Bluetooth: hci0: command tx timeout [ 2571.778373][ T5993] bridge_slave_1: entered promiscuous mode [ 2572.038642][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2572.074884][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2572.254453][ T5993] team0: Port device team_slave_0 added [ 2572.272994][ T5993] team0: Port device team_slave_1 added [ 2572.558543][ T5987] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2572.730712][ T5987] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2572.756066][ T5987] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2572.795200][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2572.802756][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2572.862676][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2572.868610][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2572.877186][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2572.945335][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2573.020121][ T5987] usb 1-1: config 0 descriptor?? [ 2573.022596][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2573.147595][ T5987] pwc: Askey VC010 type 2 USB webcam detected. [ 2573.309950][ T5993] hsr_slave_0: entered promiscuous mode [ 2573.339256][ T5993] hsr_slave_1: entered promiscuous mode [ 2573.365579][ T5993] debugfs: 'hsr0' already exists in 'hsr' [ 2573.396998][ T5993] Cannot create hsr debugfs directory [ 2573.414224][ T6036] tipc: Started in network mode [ 2573.433275][ T6036] tipc: Node identity , cluster identity 4711 [ 2573.447851][ T6036] tipc: Failed to obtain node identity [ 2573.458016][ T6036] tipc: Enabling of bearer rejected, failed to enable media [ 2573.493240][ T5987] pwc: recv_control_msg error -71 req 02 val 2b00 [ 2573.510015][ T5987] pwc: recv_control_msg error -71 req 02 val 2700 [ 2573.535520][ T5987] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2573.559034][ T5987] pwc: recv_control_msg error -71 req 04 val 1000 [ 2573.580075][ T5987] pwc: recv_control_msg error -71 req 04 val 1300 [ 2573.601123][ T5987] pwc: recv_control_msg error -71 req 04 val 1400 [ 2573.619438][ T5987] pwc: recv_control_msg error -71 req 02 val 2000 [ 2573.639442][ T5987] pwc: recv_control_msg error -71 req 02 val 2100 [ 2573.662486][ T5987] pwc: recv_control_msg error -71 req 04 val 1500 [ 2573.735272][ T5987] pwc: recv_control_msg error -71 req 02 val 2500 [ 2573.749554][ T5987] pwc: recv_control_msg error -71 req 02 val 2400 [ 2573.763947][ T5987] pwc: recv_control_msg error -71 req 02 val 2600 [ 2573.788663][ T2580] Bluetooth: hci0: command tx timeout [ 2573.797651][ T5987] pwc: recv_control_msg error -71 req 02 val 2900 [ 2573.875815][ T5987] pwc: recv_control_msg error -71 req 02 val 2800 [ 2573.924085][ T5987] pwc: recv_control_msg error -71 req 04 val 1100 [ 2573.970095][ T5987] pwc: recv_control_msg error -71 req 04 val 1200 [ 2574.011962][ T5987] pwc: Registered as video103. [ 2574.061814][ T5987] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input228 [ 2574.132433][ T5987] usb 1-1: USB disconnect, device number 117 [ 2574.271075][ T6050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2574.592121][ T5987] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2574.673994][ T5993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2574.778599][ T5987] usb 1-1: Using ep0 maxpacket: 16 [ 2574.821946][ T5987] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 2574.835928][ T5987] usb 1-1: config 0 has no interface number 0 [ 2574.845586][ T5987] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=cd.0f [ 2574.855582][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.944821][ T5987] usb 1-1: Product: syz [ 2574.952533][ T5987] usb 1-1: Manufacturer: syz [ 2574.974591][ T5987] usb 1-1: SerialNumber: syz [ 2574.986374][ T6065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2575.007131][ T5993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2575.061547][ T5987] usb 1-1: config 0 descriptor?? [ 2575.068284][ T6066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2575.073184][ T5987] usb 1-1: active config #0 != 1 ?? [ 2575.135251][ T6069] netlink: 536 bytes leftover after parsing attributes in process `syz.2.8470'. [ 2575.144545][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8470'. [ 2575.337750][ T5993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2575.362282][ T30] audit: type=1804 audit(1757952394.593:9730): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8463" name="/newroot/195/file0" dev="tmpfs" ino=1013 res=1 errno=0 [ 2575.386709][T15796] usb 1-1: USB disconnect, device number 118 [ 2575.588149][ T5993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2575.869155][ T2580] Bluetooth: hci0: command tx timeout [ 2576.702249][ T5993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2576.724395][ T5993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2576.751021][ T5993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2576.777728][ T5993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2577.554688][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2577.713550][ T6101] netlink: 'syz.4.8476': attribute type 12 has an invalid length. [ 2577.722118][ T6101] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.8476'. [ 2577.738589][ T5987] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2577.775737][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 2577.895793][T32542] bridge0: port 1(bridge_slave_0) entered blocking state [ 2577.903013][T32542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2577.944802][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 2577.949191][ T2580] Bluetooth: hci0: command tx timeout [ 2577.961090][T32542] bridge0: port 2(bridge_slave_1) entered blocking state [ 2577.968369][T32542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2578.041753][ T5987] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2578.063191][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.091870][ T5987] usb 4-1: Product: syz [ 2578.105382][ T5987] usb 4-1: Manufacturer: syz [ 2578.168629][ T2777] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 2578.179457][ T5987] usb 4-1: SerialNumber: syz [ 2578.185220][ T5993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2578.227799][ T5987] usb 4-1: config 0 descriptor?? [ 2578.260569][ T5987] gspca_main: sq905-2.14.0 probing 2770:9120 [ 2578.398535][ T2777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2578.454441][ T2777] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2578.470252][ T2777] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2578.507900][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2578.533731][ T2777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2578.563573][ T2777] usb 3-1: SerialNumber: syz [ 2578.603226][ T2777] usb 3-1: 0:2 : does not exist [ 2578.680912][ T5987] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 2578.698792][ T5987] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 2578.720389][ T6099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8477'. [ 2578.750749][ T6099] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8477'. [ 2578.778814][ T5987] usb 4-1: USB disconnect, device number 2 [ 2578.795193][ T6099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8477'. [ 2578.828282][ T6099] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8477'. [ 2579.120002][ T5993] veth0_vlan: entered promiscuous mode [ 2579.156530][ T5993] veth1_vlan: entered promiscuous mode [ 2579.445934][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2579.459749][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2579.633636][ T2777] usb 3-1: USB disconnect, device number 13 [ 2580.009434][ T5993] veth0_macvtap: entered promiscuous mode [ 2580.091415][ T5993] veth1_macvtap: entered promiscuous mode [ 2580.166698][ T5236] Dev loop6: unable to read RDB block 1 [ 2580.183593][ T5236] loop6: unable to read partition table [ 2580.203079][ T5236] loop6: partition table beyond EOD, truncated [ 2580.237463][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2580.334009][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2580.633822][T32542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.702588][T32542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.916061][T32542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.946782][T32542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.777548][T15338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2582.138860][T15338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2582.180071][T32534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2582.263135][T32534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2582.649452][ T6152] ip6tnl1: entered promiscuous mode [ 2582.658775][ T6152] ip6tnl1: entered allmulticast mode [ 2582.941388][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8489'. [ 2583.333867][ T6162] tipc: Failed to remove unknown binding: 66,1,1/0:586292313/586292315 [ 2583.560994][ T6162] tipc: Failed to remove unknown binding: 66,1,1/0:586292313/586292315 [ 2583.649488][ T6162] tipc: Failed to remove unknown binding: 66,1,1/0:586292313/586292315 [ 2584.088634][ T8644] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2584.288541][ T8644] usb 2-1: Using ep0 maxpacket: 8 [ 2584.334283][ T8644] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 2584.353303][ T8644] usb 2-1: config 2 has no interface number 0 [ 2584.398901][ T8644] usb 2-1: config 2 interface 31 has no altsetting 0 [ 2584.460697][ T8644] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2584.492137][ T8644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.576403][ T8644] usb 2-1: Product: syz [ 2584.588996][ T8644] usb 2-1: Manufacturer: syz [ 2584.594048][ T8644] usb 2-1: SerialNumber: syz [ 2584.689347][ T8644] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 2585.288925][ T30] audit: type=1326 audit(1757952404.483:9731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.8493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9804f8eba9 code=0x0 [ 2587.292067][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8499'. [ 2587.338841][T15797] usb 2-1: USB disconnect, device number 36 [ 2587.374511][ T6196] geneve2: entered promiscuous mode [ 2587.382282][ T6196] geneve2: entered allmulticast mode [ 2588.664328][ T5236] Dev loop6: unable to read RDB block 1 [ 2588.684650][ T5236] loop6: unable to read partition table [ 2588.762253][ T6237] loop9: detected capacity change from 0 to 3 [ 2589.150717][ T5236] loop6: partition table beyond EOD, truncated [ 2589.470097][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2589.511466][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2589.743758][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2589.785647][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2589.879109][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2589.899754][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2589.912837][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2589.953773][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2589.966945][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2590.029622][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2590.582582][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.589172][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.204439][ T6260] netlink: 'syz.3.8514': attribute type 12 has an invalid length. [ 2591.212737][ T6260] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.8514'. [ 2593.444280][ T6286] loop9: detected capacity change from 0 to 3 [ 2594.540819][ T6300] netdevsim netdevsim2: Direct firmware load for . [ 2594.540819][ T6300] failed with error -2 [ 2594.553109][ T6300] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2594.553109][ T6300] [ 2595.724228][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8528'. [ 2595.759413][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8528'. [ 2597.580662][ T6333] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.8535'. [ 2598.319590][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8538'. [ 2599.062972][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8538'. [ 2599.114101][ T6343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2599.266015][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2599.299550][ T6348] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 2599.682201][ T6352] netlink: 'syz.1.8539': attribute type 1 has an invalid length. [ 2599.733887][ T6353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8539'. [ 2600.178308][ T6363] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2600.178308][ T6363] The task syz.2.8540 (6363) triggered the difference, watch for misbehavior. [ 2600.419887][ T6349] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 2600.436918][ T6349] bond2 (unregistering): Released all slaves [ 2600.479726][ T2777] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2600.558288][ T5236] Dev loop6: unable to read RDB block 1 [ 2600.583771][ T5236] loop6: unable to read partition table [ 2600.598778][ T5236] loop6: partition table beyond EOD, truncated [ 2600.650622][ T2777] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 2600.678825][ T2777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2600.738494][ T2777] usb 3-1: config 0 has no interface number 0 [ 2600.770449][ T2777] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2600.808067][ T2777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.840025][ T2777] usb 3-1: Product: syz [ 2600.853357][ T2777] usb 3-1: Manufacturer: syz [ 2600.862704][ T6377] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.8546'. [ 2600.863628][ T2777] usb 3-1: SerialNumber: syz [ 2600.899372][ T2777] usb 3-1: config 0 descriptor?? [ 2600.937501][ T2777] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 2600.966066][ T2777] usb 3-1: No valid video chain found. [ 2601.262511][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2601.424983][ T6387] dummy0: entered promiscuous mode [ 2601.480412][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2601.536828][ T6387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2602.130986][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2602.176515][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2603.468387][ T6401] fuse: Unknown parameter 'r!ÒµRooœmode' [ 2603.647870][ T2777] usb 3-1: USB disconnect, device number 14 [ 2604.699192][T22053] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 2604.913886][T22053] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2604.925836][T22053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.092663][ T8644] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2605.103663][T22053] usb 3-1: Product: syz [ 2605.107950][T22053] usb 3-1: Manufacturer: syz [ 2605.188887][T22053] usb 3-1: SerialNumber: syz [ 2605.251748][T22053] usb 3-1: config 0 descriptor?? [ 2605.278016][ T8644] usb 1-1: Using ep0 maxpacket: 32 [ 2605.299796][ T8644] usb 1-1: config index 0 descriptor too short (expected 2210, got 1175) [ 2605.335024][ T8644] usb 1-1: config 0 has an invalid interface number: 241 but max is 2 [ 2605.500958][ T8644] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2605.525713][T22053] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2605.589514][ T5236] Dev loop6: unable to read RDB block 1 [ 2605.595941][ T5236] loop6: unable to read partition table [ 2605.606473][ T8644] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2605.625488][ T5236] loop6: partition table beyond EOD, truncated [ 2605.652299][ T8644] usb 1-1: config 0 has no interface number 0 [ 2605.785736][ T8644] usb 1-1: config 0 interface 241 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2605.878366][ T8644] usb 1-1: config 0 interface 241 altsetting 4 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 2605.956285][ T8644] usb 1-1: config 0 interface 241 altsetting 4 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2605.996894][ T8644] usb 1-1: config 0 interface 241 altsetting 4 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2606.068871][ T8644] usb 1-1: config 0 interface 241 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 2606.113151][ T8644] usb 1-1: config 0 interface 241 has no altsetting 0 [ 2606.146142][ T8644] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e0.70 [ 2606.175992][ T8644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.206386][ T8644] usb 1-1: Product: syz [ 2606.234415][ T8644] usb 1-1: Manufacturer: syz [ 2606.258883][ T8644] usb 1-1: SerialNumber: syz [ 2606.280442][ T8644] usb 1-1: config 0 descriptor?? [ 2606.659059][ T8644] usb 1-1: USB disconnect, device number 119 [ 2607.000564][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.009677][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.031777][T22053] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2607.046120][T22053] usb 3-1: USB disconnect, device number 15 [ 2608.707649][ T6449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2609.622892][ T6457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2611.045556][ T6468] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.8568'. [ 2611.158689][ T8644] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2611.193882][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8569'. [ 2611.263912][ T6471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2611.338054][ T8644] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2611.353167][ T8644] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2611.354023][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2611.377241][ T6471] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 2611.393546][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8569'. [ 2611.427920][ T8644] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2611.437240][ T8644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2611.446172][ T8644] usb 1-1: SerialNumber: syz [ 2611.489619][ T6466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2611.658668][ T7293] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2611.712769][ T8644] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 2611.731923][ T8644] usb 1-1: USB disconnect, device number 120 [ 2611.803848][ T7293] usb 3-1: device descriptor read/64, error -71 [ 2612.102942][ T6471] bond6 (unregistering): (slave batadv2): Releasing backup interface [ 2612.124217][ T6471] bond6 (unregistering): Released all slaves [ 2612.157828][ T6482] loop9: detected capacity change from 0 to 3 [ 2612.191589][T14977] buffer_io_error: 10 callbacks suppressed [ 2612.191611][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.218940][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.230297][ T7293] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2612.231060][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.247687][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.293820][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.312249][ T6486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8573'. [ 2612.337903][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.366505][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.400664][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.401094][ T7293] usb 3-1: device descriptor read/64, error -71 [ 2612.425901][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.464738][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2612.569507][ T7293] usb usb3-port1: attempt power cycle [ 2612.940245][ T7293] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2612.969310][ T7293] usb 3-1: device descriptor read/8, error -71 [ 2613.208627][ T7293] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2613.230957][ T7293] usb 3-1: device descriptor read/8, error -71 [ 2613.339298][ T7293] usb usb3-port1: unable to enumerate USB device [ 2614.436083][ T6511] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.8580'. [ 2615.965885][ T6519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2616.068569][T15797] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2616.518530][T15797] usb 1-1: Using ep0 maxpacket: 8 [ 2616.548064][T15797] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2616.565577][T15797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2616.627313][T15797] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2616.680598][T15797] pvrusb2: ********** [ 2616.693564][T15797] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2616.727012][T15797] pvrusb2: Important functionality might not be entirely working. [ 2616.771698][T15797] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2617.025430][T15797] pvrusb2: ********** [ 2617.065961][ T2345] pvrusb2: Invalid write control endpoint [ 2617.310329][ T2345] pvrusb2: Invalid write control endpoint [ 2617.326528][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2617.409240][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2617.417353][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2617.451550][ T2345] pvrusb2: Device being rendered inoperable [ 2617.461138][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2617.515932][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2617.644069][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2617.726533][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2617.771553][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2618.756802][ T6550] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.8591'. [ 2618.769194][ T2777] usb 1-1: USB disconnect, device number 121 [ 2619.130178][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8594'. [ 2619.857522][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8596'. [ 2620.609341][ T6574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2623.019521][ T6594] vlan2: entered allmulticast mode [ 2623.193110][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8606'. [ 2623.228563][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8606'. [ 2623.538861][ T2777] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2623.689701][ T2777] usb 2-1: Using ep0 maxpacket: 8 [ 2623.696541][ T2777] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 2623.708125][ T2777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.719816][ T2777] usb 2-1: config 0 descriptor?? [ 2623.766362][ T2777] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 2623.792119][ T2777] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 2623.830732][ T2777] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2623.919865][ T2777] usb-storage 2-1:0.0: device ignored [ 2623.940797][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2623.954181][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2624.214375][ T2777] usb 2-1: USB disconnect, device number 37 [ 2626.098574][T15797] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2626.559338][T15797] usb 3-1: Using ep0 maxpacket: 8 [ 2626.673777][ T6644] lo: entered promiscuous mode [ 2626.699654][ T6644] tunl0: entered promiscuous mode [ 2626.705375][ T6644] gre0: entered promiscuous mode [ 2626.759390][ T6644] gretap0: entered promiscuous mode [ 2626.769062][ T6644] erspan0: entered promiscuous mode [ 2626.775448][ T6644] ip_vti0: entered promiscuous mode [ 2626.782416][ T6644] ip6_vti0: entered promiscuous mode [ 2626.789846][ T6644] sit0: entered promiscuous mode [ 2626.798602][ T6644] ip6tnl0: entered promiscuous mode [ 2626.807277][ T6644] ip6gre0: entered promiscuous mode [ 2626.814293][ T6644] syz_tun: entered promiscuous mode [ 2626.820862][ T6644] ip6gretap0: entered promiscuous mode [ 2626.827293][ T6644] bridge0: entered promiscuous mode [ 2626.833584][ T6644] vcan0: entered promiscuous mode [ 2626.839248][ T6644] bond0: entered promiscuous mode [ 2626.844414][ T6644] bond_slave_0: entered promiscuous mode [ 2626.850801][ T6644] bond_slave_1: entered promiscuous mode [ 2626.858490][ T6644] team0: entered promiscuous mode [ 2626.863665][ T6644] team_slave_0: entered promiscuous mode [ 2626.869753][ T6644] team_slave_1: entered promiscuous mode [ 2626.877418][ T6644] dummy0: entered promiscuous mode [ 2626.884313][ T6644] nlmon0: entered promiscuous mode [ 2626.982396][ T6644] caif0: entered promiscuous mode [ 2626.987677][ T6644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2627.019729][T15797] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2627.227579][T15797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2627.678327][T15797] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2627.706461][T15797] pvrusb2: ********** [ 2627.712060][T15797] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2627.723295][T15797] pvrusb2: Important functionality might not be entirely working. [ 2627.732440][T15797] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2627.745282][T15797] pvrusb2: ********** [ 2627.911640][ T2345] pvrusb2: Invalid write control endpoint [ 2628.076751][ T2345] pvrusb2: Invalid write control endpoint [ 2628.111432][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2628.389348][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2628.396959][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2628.407814][ T2345] pvrusb2: Device being rendered inoperable [ 2628.424595][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2628.433149][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2628.479785][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2628.485290][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2628.664460][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2629.753081][ T8644] usb 3-1: USB disconnect, device number 20 [ 2633.438909][T22053] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2633.955647][T22053] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2633.969064][T22053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.051005][T22053] usb 3-1: config 0 descriptor?? [ 2634.071298][T22053] cp210x 3-1:0.0: cp210x converter detected [ 2634.482188][T22053] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2634.494714][T22053] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 2634.544763][T22053] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2634.594485][T22053] usb 3-1: USB disconnect, device number 21 [ 2634.669375][T22053] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2634.724954][T22053] cp210x 3-1:0.0: device disconnected [ 2636.230300][ T6723] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8635'. [ 2636.261769][ T6723] sit1: entered promiscuous mode [ 2637.230646][ T6734] netdevsim netdevsim4: Direct firmware load for . [ 2637.230646][ T6734] failed with error -2 [ 2637.241704][ T6734] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2637.241704][ T6734] [ 2637.524032][ T6743] loop9: detected capacity change from 0 to 3 [ 2637.855045][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2637.868284][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2638.210084][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2638.220752][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2638.269386][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2638.491968][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2638.629729][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2638.669156][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2638.694601][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2638.822497][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2640.563216][ T6760] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8645'. [ 2640.583948][ T6760] sctp: [Deprecated]: syz.4.8645 (pid 6760) Use of int in max_burst socket option. [ 2640.583948][ T6760] Use struct sctp_assoc_value instead [ 2640.749075][ T5987] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2640.883028][ T6764] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2640.889584][ T6764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2640.909121][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 2640.955017][ T5987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2641.059654][ T5987] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2641.118649][ T6764] vhci_hcd vhci_hcd.0: Device attached [ 2641.138289][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8646'. [ 2641.151729][ T5987] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2641.182210][ T5987] usb 4-1: Product: syz [ 2641.192219][ T6764] netdevsim netdevsim4: Direct firmware load for 0 failed with error -2 [ 2641.207388][ T5987] usb 4-1: Manufacturer: syz [ 2641.225194][ T5987] usb 4-1: SerialNumber: syz [ 2641.241864][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8646'. [ 2641.283378][ T6764] netdevsim netdevsim4: Falling back to sysfs fallback for: 0 [ 2641.398567][ T8644] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 2641.482379][ T5987] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 2641.544571][ T5987] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2641.580009][ T5987] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2641.663654][ T6765] vhci_hcd: connection reset by peer [ 2641.679157][T32529] vhci_hcd: stop threads [ 2641.693786][T32529] vhci_hcd: release socket [ 2641.709943][ T5987] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2641.711127][T32529] vhci_hcd: disconnect device [ 2641.746881][ T6781] netdevsim netdevsim0: Direct firmware load for . [ 2641.746881][ T6781] failed with error -2 [ 2641.795610][ T6781] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2641.795610][ T6781] [ 2641.855264][ T5987] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 2641.867535][ T5987] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 2642.554224][ T5987] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2642.638404][ T5987] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2642.703774][ T5987] usb 4-1: USB disconnect, device number 3 [ 2642.749653][ T5987] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2642.899178][ T5236] Dev loop6: unable to read RDB block 1 [ 2642.904940][ T5236] loop6: unable to read partition table [ 2642.953513][ T5987] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2642.975158][ T5236] loop6: partition table beyond EOD, truncated [ 2643.060845][ T5987] visor 4-1:1.0: device disconnected [ 2643.535572][ T6797] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8652'. [ 2644.081160][ T6800] netlink: 'syz.2.8653': attribute type 12 has an invalid length. [ 2644.089196][ T6800] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.8653'. [ 2646.287230][ T6818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2646.558632][ T8644] vhci_hcd: vhci_device speed not set [ 2648.698567][ T8644] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2648.868525][ T8644] usb 1-1: Using ep0 maxpacket: 8 [ 2648.889077][ T8644] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2648.934399][ T8644] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2649.265831][ T8644] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2649.299113][ T8644] usb 1-1: Product: syz [ 2649.306850][ T8644] usb 1-1: Manufacturer: syz [ 2649.311662][ T8644] usb 1-1: SerialNumber: syz [ 2649.397249][ T6843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2649.501981][ T6843] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2649.546942][ T6843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2649.563760][ T6843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2649.573595][ T6843] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2649.667397][ T8644] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 2649.697839][ T8644] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2649.727460][ T6843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2649.738810][ T6843] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2649.746624][ T8644] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2649.757932][ T8644] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2649.768788][ T6843] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2649.886493][ T8644] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 2650.225150][ T8644] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 2650.268881][ T2777] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2650.342295][ T8644] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2650.364740][ T6855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2650.410631][ T8644] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2650.429079][ T2777] usb 2-1: Using ep0 maxpacket: 8 [ 2650.452097][ T2777] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2650.470289][ T2777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.488476][ T8644] usb 1-1: USB disconnect, device number 122 [ 2650.552368][ T8644] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2650.589350][ T8644] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2650.612499][ T2777] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2650.809085][ T8644] visor 1-1:1.0: device disconnected [ 2650.818806][ T2777] pvrusb2: ********** [ 2650.825849][ T2777] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2650.849409][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8668'. [ 2650.868796][ T2777] pvrusb2: Important functionality might not be entirely working. [ 2650.876690][ T2777] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2651.247939][ T2777] pvrusb2: ********** [ 2651.256792][ T2345] pvrusb2: Invalid write control endpoint [ 2651.387063][ T2345] pvrusb2: Invalid write control endpoint [ 2651.468645][ T2580] Bluetooth: hci3: command 0x0406 tx timeout [ 2651.578988][ T2580] Bluetooth: hci1: command 0x0405 tx timeout [ 2651.585086][ T2580] Bluetooth: hci5: command 0x0c1a tx timeout [ 2651.609491][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2651.631034][T30817] Bluetooth: hci2: command 0x0406 tx timeout [ 2651.638576][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2651.669877][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2651.688533][ T2345] pvrusb2: Device being rendered inoperable [ 2651.699713][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2651.720105][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2651.733134][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2651.743847][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2651.759971][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2651.788863][T30817] Bluetooth: hci0: command 0x0405 tx timeout [ 2651.971132][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.977486][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.566755][ T6891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2653.645153][ T6893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2653.723021][T30817] Bluetooth: hci2: command 0x0406 tx timeout [ 2653.767836][ T8644] usb 2-1: USB disconnect, device number 38 [ 2653.959677][T30817] Bluetooth: hci0: command 0x0405 tx timeout [ 2654.381245][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8675'. [ 2654.400182][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8675'. [ 2654.808606][T22053] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 2654.938652][T22053] usb 2-1: device descriptor read/64, error -71 [ 2655.208510][T22053] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 2655.458639][T22053] usb 2-1: device descriptor read/64, error -71 [ 2655.583055][T22053] usb usb2-port1: attempt power cycle [ 2655.878941][ T7293] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2655.938651][T22053] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 2655.969432][T22053] usb 2-1: device descriptor read/8, error -71 [ 2656.068910][ T7293] usb 3-1: Using ep0 maxpacket: 8 [ 2656.069518][ T6911] netdevsim netdevsim3: Direct firmware load for . [ 2656.069518][ T6911] failed with error -2 [ 2656.084674][T30817] Bluetooth: hci0: command 0x0405 tx timeout [ 2656.086871][ T7293] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 2656.144697][ T7293] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 2656.158941][ T7293] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 2656.167493][ T7293] usb 3-1: Product: syz [ 2656.171841][ T7293] usb 3-1: Manufacturer: syz [ 2656.176484][ T7293] usb 3-1: SerialNumber: syz [ 2656.219148][T22053] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 2656.250141][T22053] usb 2-1: device descriptor read/8, error -71 [ 2656.250146][ T7293] usb 3-1: config 0 descriptor?? [ 2656.276239][ T6911] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 2656.276239][ T6911] [ 2656.548267][T22053] usb usb2-port1: unable to enumerate USB device [ 2656.726454][ T7293] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 2657.509571][ T7293] gspca_sunplus: reg_w_riv err -110 [ 2657.524438][ T7293] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 2659.634997][T15797] usb 3-1: USB disconnect, device number 22 [ 2659.688005][ T6948] FAULT_INJECTION: forcing a failure. [ 2659.688005][ T6948] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.855954][ T6948] CPU: 0 UID: 0 PID: 6948 Comm: syz.1.8687 Not tainted syzkaller #0 PREEMPT(full) [ 2659.855985][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2659.856000][ T6948] Call Trace: [ 2659.856009][ T6948] [ 2659.856019][ T6948] dump_stack_lvl+0x189/0x250 [ 2659.856050][ T6948] ? __pfx____ratelimit+0x10/0x10 [ 2659.856073][ T6948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2659.856099][ T6948] ? __pfx__printk+0x10/0x10 [ 2659.856133][ T6948] ? __pfx___might_resched+0x10/0x10 [ 2659.856158][ T6948] should_fail_ex+0x414/0x560 [ 2659.856194][ T6948] should_failslab+0xa8/0x100 [ 2659.856227][ T6948] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2659.856257][ T6948] ? __alloc_skb+0x112/0x2d0 [ 2659.856279][ T6948] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2659.856315][ T6948] __alloc_skb+0x112/0x2d0 [ 2659.856342][ T6948] pfkey_sendmsg+0x1dd/0x1090 [ 2659.856374][ T6948] ? __pfx___might_resched+0x10/0x10 [ 2659.856392][ T6948] ? __lock_acquire+0xab9/0xd20 [ 2659.856429][ T6948] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2659.856474][ T6948] ? aa_sk_perm+0x81e/0x950 [ 2659.856511][ T6948] ? __pfx_aa_sk_perm+0x10/0x10 [ 2659.856539][ T6948] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2659.856570][ T6948] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2659.856593][ T6948] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2659.856617][ T6948] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2659.856641][ T6948] __sock_sendmsg+0x219/0x270 [ 2659.856677][ T6948] ____sys_sendmsg+0x505/0x830 [ 2659.856709][ T6948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2659.856746][ T6948] ? import_iovec+0x74/0xa0 [ 2659.856778][ T6948] ___sys_sendmsg+0x21f/0x2a0 [ 2659.856807][ T6948] ? __pfx____sys_sendmsg+0x10/0x10 [ 2659.856871][ T6948] ? __fget_files+0x2a/0x420 [ 2659.856889][ T6948] ? __fget_files+0x3a0/0x420 [ 2659.856919][ T6948] __x64_sys_sendmsg+0x19b/0x260 [ 2659.856950][ T6948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2659.856987][ T6948] ? __pfx_ksys_write+0x10/0x10 [ 2659.857012][ T6948] ? rcu_is_watching+0x15/0xb0 [ 2659.857040][ T6948] ? do_syscall_64+0xbe/0x3b0 [ 2659.857067][ T6948] do_syscall_64+0xfa/0x3b0 [ 2659.857088][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 2659.857109][ T6948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2659.857130][ T6948] ? clear_bhb_loop+0x60/0xb0 [ 2659.857156][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2659.857176][ T6948] RIP: 0033:0x7f9804f8eba9 [ 2659.857196][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2659.857214][ T6948] RSP: 002b:00007f9805ed1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2659.857236][ T6948] RAX: ffffffffffffffda RBX: 00007f98051d5fa0 RCX: 00007f9804f8eba9 [ 2659.857252][ T6948] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2659.857265][ T6948] RBP: 00007f9805ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 2659.857279][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2659.857292][ T6948] R13: 00007f98051d6038 R14: 00007f98051d5fa0 R15: 00007f98052ffa28 [ 2659.857325][ T6948] [ 2660.516044][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8690'. [ 2660.932239][ T7293] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2661.305965][ T7293] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 2661.343516][ T7293] usb 2-1: config 0 has no interface number 0 [ 2661.368572][ T7293] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 2661.503563][ T7293] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 2661.546558][ T7293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2661.565811][ T7293] usb 2-1: Product: syz [ 2661.574863][ T7293] usb 2-1: Manufacturer: syz [ 2661.585276][ T7293] usb 2-1: SerialNumber: syz [ 2661.779759][ T7293] usb 2-1: config 0 descriptor?? [ 2661.857177][ T6957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2662.293687][ T2580] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2662.323574][ T2580] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2662.332934][ T2580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2662.385557][ T2580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2662.394295][ T2580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2663.025533][ T7293] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2663.071422][ T7293] usb 2-1: MIDIStreaming interface descriptor not found [ 2663.211202][ T7293] usb 2-1: USB disconnect, device number 43 [ 2663.502066][T15794] udevd[15794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2663.790663][ T7293] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2663.980519][ T7293] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2664.055983][ T7293] usb 2-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 2664.120744][ T7293] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2664.138819][ T7293] usb 2-1: config 1 has no interface number 1 [ 2664.208308][ T7293] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2664.298996][ T7293] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 2664.333468][ T7293] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2664.375629][ T7293] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0401, bcdDevice= 0.00 [ 2664.407855][ T7293] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2664.425413][ T6974] chnl_net:caif_netlink_parms(): no params data found [ 2664.439657][ T7293] usb 2-1: Product: syz [ 2664.456108][ T7293] usb 2-1: SerialNumber: syz [ 2664.508641][ T2580] Bluetooth: hci4: command tx timeout [ 2664.817454][ T7293] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2664.848531][ T7293] usb 2-1: MIDIStreaming interface descriptor not found [ 2664.981916][ T7293] usb 2-1: USB disconnect, device number 44 [ 2665.097603][T16841] udevd[16841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2665.185675][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 2665.247941][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state [ 2665.292301][ T6974] bridge_slave_0: entered allmulticast mode [ 2665.328191][ T6974] bridge_slave_0: entered promiscuous mode [ 2665.367292][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state [ 2665.381079][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 2665.392159][ T6974] bridge_slave_1: entered allmulticast mode [ 2665.412436][ T6974] bridge_slave_1: entered promiscuous mode [ 2665.561877][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2665.607706][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2665.735572][ T6974] team0: Port device team_slave_0 added [ 2665.850350][ T6974] team0: Port device team_slave_1 added [ 2666.609238][ T2580] Bluetooth: hci4: command tx timeout [ 2666.626616][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2666.672387][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2666.790693][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2666.873644][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2666.902398][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2667.062292][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2668.090004][ T6974] hsr_slave_0: entered promiscuous mode [ 2668.107385][ T6974] hsr_slave_1: entered promiscuous mode [ 2668.138052][ T6974] debugfs: 'hsr0' already exists in 'hsr' [ 2668.174535][ T6974] Cannot create hsr debugfs directory [ 2668.668714][ T2580] Bluetooth: hci4: command tx timeout [ 2669.426554][ T6974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2669.862713][ T6974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2670.037660][ T6974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2670.190534][ T6974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2670.749880][ T2580] Bluetooth: hci4: command tx timeout [ 2670.812517][ T7034] ipvlan1: mtu less than device minimum [ 2671.851815][ T6974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2671.896167][ T6974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2671.956821][ T6974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2672.261345][ T6974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2672.534772][ T7064] netlink: 'syz.2.8713': attribute type 12 has an invalid length. [ 2672.545399][ T7064] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.8713'. [ 2672.971828][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2673.461319][ T6974] 8021q: adding VLAN 0 to HW filter on device team0 [ 2673.648916][T24782] bridge0: port 1(bridge_slave_0) entered blocking state [ 2673.656056][T24782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2673.668750][ T5987] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2673.791186][T24782] bridge0: port 2(bridge_slave_1) entered blocking state [ 2673.798516][T24782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2673.819213][ T5987] usb 2-1: Using ep0 maxpacket: 32 [ 2673.828537][ T5987] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2673.850395][ T5987] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2673.913995][ T5987] usb 2-1: config 1 has no interface number 1 [ 2673.938713][ T5987] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2674.011077][ T5987] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2674.031691][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.071895][ T5987] usb 2-1: Product: syz [ 2674.092921][ T5987] usb 2-1: Manufacturer: syz [ 2674.125634][ T5987] usb 2-1: SerialNumber: syz [ 2674.231974][ T6974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2674.566672][ T6974] veth0_vlan: entered promiscuous mode [ 2674.607344][ T6974] veth1_vlan: entered promiscuous mode [ 2674.959048][ T6974] veth0_macvtap: entered promiscuous mode [ 2675.708275][ T5987] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 2675.728646][ T5987] usb 2-1: 2:1 : format type 6 is not supported yet [ 2675.848847][ T6974] veth1_macvtap: entered promiscuous mode [ 2675.894124][ T5987] usb 2-1: USB disconnect, device number 45 [ 2675.966277][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2676.005161][T14977] udevd[14977]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2676.056797][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2676.142860][T32534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.175970][T32534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.299847][T32534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.461384][T32534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.781190][T15338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2676.806270][T15338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2677.273644][ T7099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2677.622900][T32529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2677.719778][T32529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2679.689175][ T7123] binfmt_misc: register: failed to install interpreter file ./file0 [ 2679.841318][ T7127] netdevsim netdevsim1: Direct firmware load for . [ 2679.841318][ T7127] failed with error -2 [ 2679.852583][ T7127] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2679.852583][ T7127] [ 2680.392339][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8733'. [ 2681.776636][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8735'. [ 2683.537588][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8737'. [ 2683.600234][ T7152] geneve2: entered promiscuous mode [ 2683.605515][ T7152] geneve2: entered allmulticast mode [ 2684.246568][ T7164] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 2684.253229][ T7164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2684.366483][ T7164] vhci_hcd vhci_hcd.0: Device attached [ 2684.392957][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 2684.402318][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 2684.423101][ T7164] netdevsim netdevsim4: Direct firmware load for 0 failed with error -2 [ 2684.447175][ T7164] netdevsim netdevsim4: Falling back to sysfs fallback for: 0 [ 2684.458377][ T7170] binfmt_misc: register: failed to install interpreter file ./file0 [ 2684.628669][ T8644] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 2684.919092][ T7090] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2685.036252][ T7165] vhci_hcd: connection reset by peer [ 2685.049144][ T7090] usb 2-1: device descriptor read/64, error -71 [ 2685.086691][T32529] vhci_hcd: stop threads [ 2685.092388][T32529] vhci_hcd: release socket [ 2685.101361][T32529] vhci_hcd: disconnect device [ 2685.194278][ T7178] FAULT_INJECTION: forcing a failure. [ 2685.194278][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2685.211724][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.0.8746 Not tainted syzkaller #0 PREEMPT(full) [ 2685.211755][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2685.211769][ T7178] Call Trace: [ 2685.211778][ T7178] [ 2685.211788][ T7178] dump_stack_lvl+0x189/0x250 [ 2685.211819][ T7178] ? __pfx____ratelimit+0x10/0x10 [ 2685.211841][ T7178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2685.211866][ T7178] ? __pfx__printk+0x10/0x10 [ 2685.211896][ T7178] ? __might_fault+0xb0/0x130 [ 2685.211937][ T7178] should_fail_ex+0x414/0x560 [ 2685.211972][ T7178] _copy_from_iter+0x1de/0x1790 [ 2685.212004][ T7178] ? rcu_is_watching+0x15/0xb0 [ 2685.212028][ T7178] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 2685.212058][ T7178] ? __pfx__copy_from_iter+0x10/0x10 [ 2685.212085][ T7178] ? __build_skb_around+0x257/0x3e0 [ 2685.212113][ T7178] ? skb_put+0x11b/0x210 [ 2685.212141][ T7178] pfkey_sendmsg+0x230/0x1090 [ 2685.212171][ T7178] ? __pfx___might_resched+0x10/0x10 [ 2685.212190][ T7178] ? __lock_acquire+0xab9/0xd20 [ 2685.212227][ T7178] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2685.212258][ T7178] ? aa_sk_perm+0x81e/0x950 [ 2685.212295][ T7178] ? __pfx_aa_sk_perm+0x10/0x10 [ 2685.212324][ T7178] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2685.212354][ T7178] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2685.212376][ T7178] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2685.212399][ T7178] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2685.212423][ T7178] __sock_sendmsg+0x219/0x270 [ 2685.212457][ T7178] ____sys_sendmsg+0x505/0x830 [ 2685.212490][ T7178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2685.212526][ T7178] ? import_iovec+0x74/0xa0 [ 2685.212557][ T7178] ___sys_sendmsg+0x21f/0x2a0 [ 2685.212586][ T7178] ? __pfx____sys_sendmsg+0x10/0x10 [ 2685.212654][ T7178] ? __fget_files+0x2a/0x420 [ 2685.212672][ T7178] ? __fget_files+0x3a0/0x420 [ 2685.212702][ T7178] __x64_sys_sendmsg+0x19b/0x260 [ 2685.212738][ T7178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2685.212774][ T7178] ? __pfx_ksys_write+0x10/0x10 [ 2685.212800][ T7178] ? rcu_is_watching+0x15/0xb0 [ 2685.212826][ T7178] ? do_syscall_64+0xbe/0x3b0 [ 2685.212853][ T7178] do_syscall_64+0xfa/0x3b0 [ 2685.212874][ T7178] ? lockdep_hardirqs_on+0x9c/0x150 [ 2685.212894][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2685.212915][ T7178] ? clear_bhb_loop+0x60/0xb0 [ 2685.212941][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2685.212961][ T7178] RIP: 0033:0x7fd1b2b8eba9 [ 2685.212980][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2685.212998][ T7178] RSP: 002b:00007fd1b3a29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2685.213020][ T7178] RAX: ffffffffffffffda RBX: 00007fd1b2dd5fa0 RCX: 00007fd1b2b8eba9 [ 2685.213036][ T7178] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2685.213049][ T7178] RBP: 00007fd1b3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 2685.213062][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2685.213074][ T7178] R13: 00007fd1b2dd6038 R14: 00007fd1b2dd5fa0 R15: 00007fd1b2effa28 [ 2685.213107][ T7178] [ 2685.697150][ T7090] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2685.838829][ T7090] usb 2-1: device descriptor read/64, error -71 [ 2685.853081][ T7190] netlink: 'syz.2.8748': attribute type 12 has an invalid length. [ 2685.861838][ T7190] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.8748'. [ 2685.949140][ T7090] usb usb2-port1: attempt power cycle [ 2686.251401][ T7197] dummy0: entered promiscuous mode [ 2686.359367][ T7090] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2686.476647][ T7197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2686.624402][ T7090] usb 2-1: device descriptor read/8, error -71 [ 2686.929854][ T7090] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2687.049626][ T7090] usb 2-1: device descriptor read/8, error -71 [ 2687.102380][ T7200] netlink: 124 bytes leftover after parsing attributes in process `syz.4.8751'. [ 2687.198925][ T7090] usb usb2-port1: unable to enumerate USB device [ 2688.642305][ T7222] netdevsim netdevsim4: Direct firmware load for . [ 2688.642305][ T7222] failed with error -2 [ 2688.654967][ T7222] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2688.654967][ T7222] [ 2688.869405][ T7215] Invalid logical block size (7) [ 2689.788781][ T8644] vhci_hcd: vhci_device speed not set [ 2690.577162][ T7237] ip6tnl3: entered promiscuous mode [ 2690.975180][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8762'. [ 2691.227908][ T7250] random: crng reseeded on system resumption [ 2693.994025][ T7285] FAULT_INJECTION: forcing a failure. [ 2693.994025][ T7285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2694.078573][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.1.8773 Not tainted syzkaller #0 PREEMPT(full) [ 2694.078605][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2694.078619][ T7285] Call Trace: [ 2694.078627][ T7285] [ 2694.078634][ T7285] dump_stack_lvl+0x189/0x250 [ 2694.078657][ T7285] ? __pfx____ratelimit+0x10/0x10 [ 2694.078673][ T7285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2694.078691][ T7285] ? __pfx__printk+0x10/0x10 [ 2694.078721][ T7285] should_fail_ex+0x414/0x560 [ 2694.078747][ T7285] _copy_to_user+0x31/0xb0 [ 2694.078769][ T7285] simple_read_from_buffer+0xe1/0x170 [ 2694.078795][ T7285] proc_fail_nth_read+0x1b3/0x220 [ 2694.078815][ T7285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2694.078836][ T7285] ? rw_verify_area+0x2a6/0x4d0 [ 2694.078854][ T7285] ? __lock_acquire+0xab9/0xd20 [ 2694.078875][ T7285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2694.078893][ T7285] vfs_read+0x1fd/0xa30 [ 2694.078912][ T7285] ? fdget_pos+0x247/0x320 [ 2694.078928][ T7285] ? __pfx___mutex_lock+0x10/0x10 [ 2694.078945][ T7285] ? __pfx_vfs_read+0x10/0x10 [ 2694.078965][ T7285] ? __fget_files+0x2a/0x420 [ 2694.078982][ T7285] ? __fget_files+0x3a0/0x420 [ 2694.078994][ T7285] ? __fget_files+0x2a/0x420 [ 2694.079022][ T7285] ksys_read+0x145/0x250 [ 2694.079054][ T7285] ? __pfx_ksys_read+0x10/0x10 [ 2694.079095][ T7285] ? do_syscall_64+0xbe/0x3b0 [ 2694.079117][ T7285] do_syscall_64+0xfa/0x3b0 [ 2694.079132][ T7285] ? lockdep_hardirqs_on+0x9c/0x150 [ 2694.079147][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2694.079167][ T7285] ? clear_bhb_loop+0x60/0xb0 [ 2694.079192][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2694.079212][ T7285] RIP: 0033:0x7f9804f8d5bc [ 2694.079230][ T7285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2694.079249][ T7285] RSP: 002b:00007f9805eb0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2694.079270][ T7285] RAX: ffffffffffffffda RBX: 00007f98051d6090 RCX: 00007f9804f8d5bc [ 2694.079281][ T7285] RDX: 000000000000000f RSI: 00007f9805eb00a0 RDI: 0000000000000003 [ 2694.079291][ T7285] RBP: 00007f9805eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2694.079301][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2694.079310][ T7285] R13: 00007f98051d6128 R14: 00007f98051d6090 R15: 00007f98052ffa28 [ 2694.079334][ T7285] [ 2694.324204][ C1] vkms_vblank_simulate: vblank timer overrun [ 2695.363987][ T5236] Dev loop6: unable to read RDB block 1 [ 2695.659425][ T5236] loop6: unable to read partition table [ 2695.686025][ T5236] loop6: partition table beyond EOD, truncated [ 2696.278746][T15797] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2696.473993][T15797] usb 2-1: Using ep0 maxpacket: 32 [ 2696.495703][T15797] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2696.529478][T15797] usb 2-1: config 0 has no interface number 0 [ 2696.623526][T15797] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2696.718594][T15797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.794673][T15797] usb 2-1: Product: syz [ 2696.819021][T15797] usb 2-1: Manufacturer: syz [ 2696.834020][T15797] usb 2-1: SerialNumber: syz [ 2696.910275][T15797] usb 2-1: config 0 descriptor?? [ 2697.160758][T15797] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2697.230849][T15797] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2697.267438][T15797] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2697.521551][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 14 [ 2697.746014][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2697.757366][T15796] usb 2-1: USB disconnect, device number 50 [ 2697.798864][T15796] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2697.890281][T15796] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2697.969579][T15796] quatech2 2-1:0.51: device disconnected [ 2698.514457][ T7319] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.8782'. [ 2698.738880][ T5987] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2698.769985][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8784'. [ 2698.928510][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 2698.966235][ T5987] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 2699.004688][ T7331] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8783'. [ 2699.073523][ T7331] sit1: entered promiscuous mode [ 2699.118489][ T5987] usb 2-1: config 1 has no interface number 0 [ 2699.138084][ T5987] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2699.307181][ T5987] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2699.334988][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8786'. [ 2699.351149][ T5987] usb 2-1: config 1 interface 105 has no altsetting 0 [ 2699.361470][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8786'. [ 2699.371769][ T5987] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2699.381289][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2699.390712][ T5987] usb 2-1: Product: syz [ 2699.395532][ T5987] usb 2-1: Manufacturer: syz [ 2699.401203][ T5987] usb 2-1: SerialNumber: syz [ 2699.428649][ T7320] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2699.437423][ T7320] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2699.927943][ T7320] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2699.935499][ T7320] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2699.998976][ T5987] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 2700.014964][ T5987] aqc111 2-1:1.105: probe with driver aqc111 failed with error -32 [ 2700.133180][ T7342] program syz.4.8788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2700.199119][ T5987] usb 2-1: USB disconnect, device number 51 [ 2702.066412][ T7367] netdevsim netdevsim1: Direct firmware load for . [ 2702.066412][ T7367] failed with error -2 [ 2702.105664][ T7367] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2702.105664][ T7367] [ 2704.151156][ T7394] loop9: detected capacity change from 0 to 3 [ 2704.696572][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.845255][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.865179][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.874166][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.883175][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.891958][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.900754][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.910661][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.919408][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2704.927843][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2706.655962][ T7414] netlink: 'syz.0.8806': attribute type 10 has an invalid length. [ 2707.288796][T15796] IPVS: starting estimator thread 0... [ 2707.361958][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8810'. [ 2707.499965][ T7432] IPVS: using max 28 ests per chain, 67200 per kthread [ 2707.583861][ T7438] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002 [ 2708.660412][ T7456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8815'. [ 2708.794865][ T7460] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8816'. [ 2711.048723][ T1569] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2711.088633][ T5987] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2711.199128][ T1569] usb 3-1: Using ep0 maxpacket: 16 [ 2711.208291][ T1569] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2711.232625][ T1569] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2711.242846][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 2711.254713][ T5987] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 2711.263934][ T5987] usb 4-1: config 0 has no interface number 0 [ 2711.285248][ T5987] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2711.339542][ T1569] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2711.358580][ T1569] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2711.369669][ T5987] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2711.389755][ T1569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2711.411262][ T5987] usb 4-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 2711.428812][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2711.447825][ T1569] usb 3-1: config 0 descriptor?? [ 2711.498319][ T5987] usb 4-1: Product: syz [ 2711.518159][ T5987] usb 4-1: Manufacturer: syz [ 2711.526050][ T5987] usb 4-1: SerialNumber: syz [ 2711.574380][ T5987] usb 4-1: config 0 descriptor?? [ 2711.653362][ T7476] FAULT_INJECTION: forcing a failure. [ 2711.653362][ T7476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2711.672462][ T7476] CPU: 1 UID: 0 PID: 7476 Comm: syz.0.8821 Not tainted syzkaller #0 PREEMPT(full) [ 2711.672496][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2711.672510][ T7476] Call Trace: [ 2711.672519][ T7476] [ 2711.672537][ T7476] dump_stack_lvl+0x189/0x250 [ 2711.672568][ T7476] ? __pfx____ratelimit+0x10/0x10 [ 2711.672590][ T7476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2711.672616][ T7476] ? __pfx__printk+0x10/0x10 [ 2711.672646][ T7476] ? __might_fault+0xb0/0x130 [ 2711.672687][ T7476] should_fail_ex+0x414/0x560 [ 2711.672723][ T7476] _copy_from_user+0x2d/0xb0 [ 2711.672751][ T7476] do_seccomp+0x1a4/0xd90 [ 2711.672774][ T7476] ? __fget_files+0x3a0/0x420 [ 2711.672802][ T7476] ? __pfx_do_seccomp+0x10/0x10 [ 2711.672824][ T7476] ? ksys_write+0x22a/0x250 [ 2711.672854][ T7476] ? __pfx_ksys_write+0x10/0x10 [ 2711.672879][ T7476] ? rcu_is_watching+0x15/0xb0 [ 2711.672906][ T7476] ? do_syscall_64+0xbe/0x3b0 [ 2711.672934][ T7476] do_syscall_64+0xfa/0x3b0 [ 2711.672958][ T7476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2711.672978][ T7476] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2711.672999][ T7476] ? clear_bhb_loop+0x60/0xb0 [ 2711.673025][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2711.673046][ T7476] RIP: 0033:0x7fd1b2b8eba9 [ 2711.673066][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2711.673084][ T7476] RSP: 002b:00007fd1b3a29038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2711.673106][ T7476] RAX: ffffffffffffffda RBX: 00007fd1b2dd5fa0 RCX: 00007fd1b2b8eba9 [ 2711.673122][ T7476] RDX: 00002000000003c0 RSI: 000000000000000c RDI: 0000000000000001 [ 2711.673136][ T7476] RBP: 00007fd1b3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 2711.673149][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2711.673162][ T7476] R13: 00007fd1b2dd6038 R14: 00007fd1b2dd5fa0 R15: 00007fd1b2effa28 [ 2711.673196][ T7476] [ 2711.951705][ T5987] iowarrior 4-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 2712.167699][ T1569] hid (null): report_id 3323596431 is invalid [ 2712.175009][ T1569] hid (null): unknown global tag 0xe [ 2712.181092][ T7313] usb 4-1: USB disconnect, device number 4 [ 2712.181506][ T1569] hid (null): unknown global tag 0xe [ 2712.228599][ T1569] hid (null): unknown global tag 0xe [ 2712.234346][ T1569] hid (null): unknown global tag 0x63 [ 2712.258671][ T1569] hid (null): unknown global tag 0xd [ 2712.278858][ T7478] loop6: detected capacity change from 1 to 0 [ 2712.430076][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8824'. [ 2712.457151][ T5987] usb 3-1: USB disconnect, device number 23 [ 2712.482296][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8824'. [ 2712.552281][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8824'. [ 2712.595821][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8824'. [ 2712.810360][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8827'. [ 2713.465101][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.471597][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.013584][ T7515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2715.391050][ T30] audit: type=1326 audit(1757952534.623:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.8834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32a338eba9 code=0x0 [ 2715.771694][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8838'. [ 2715.781564][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8838'. [ 2717.002921][ T7551] FAULT_INJECTION: forcing a failure. [ 2717.002921][ T7551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2717.058724][ T7551] CPU: 1 UID: 0 PID: 7551 Comm: syz.3.8842 Not tainted syzkaller #0 PREEMPT(full) [ 2717.058754][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2717.058767][ T7551] Call Trace: [ 2717.058776][ T7551] [ 2717.058785][ T7551] dump_stack_lvl+0x189/0x250 [ 2717.058816][ T7551] ? __pfx____ratelimit+0x10/0x10 [ 2717.058838][ T7551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2717.058864][ T7551] ? __pfx__printk+0x10/0x10 [ 2717.058906][ T7551] should_fail_ex+0x414/0x560 [ 2717.058942][ T7551] _copy_to_user+0x31/0xb0 [ 2717.058972][ T7551] simple_read_from_buffer+0xe1/0x170 [ 2717.059008][ T7551] proc_fail_nth_read+0x1b3/0x220 [ 2717.059060][ T7551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2717.059088][ T7551] ? rw_verify_area+0x2a6/0x4d0 [ 2717.059114][ T7551] ? __lock_acquire+0xab9/0xd20 [ 2717.059143][ T7551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2717.059168][ T7551] vfs_read+0x1fd/0xa30 [ 2717.059194][ T7551] ? fdget_pos+0x247/0x320 [ 2717.059217][ T7551] ? __pfx___mutex_lock+0x10/0x10 [ 2717.059241][ T7551] ? __pfx_vfs_read+0x10/0x10 [ 2717.059270][ T7551] ? __fget_files+0x2a/0x420 [ 2717.059300][ T7551] ? __fget_files+0x3a0/0x420 [ 2717.059317][ T7551] ? __fget_files+0x2a/0x420 [ 2717.059345][ T7551] ksys_read+0x145/0x250 [ 2717.059373][ T7551] ? __pfx_ksys_read+0x10/0x10 [ 2717.059407][ T7551] ? do_syscall_64+0xbe/0x3b0 [ 2717.059434][ T7551] do_syscall_64+0xfa/0x3b0 [ 2717.059455][ T7551] ? lockdep_hardirqs_on+0x9c/0x150 [ 2717.059476][ T7551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2717.059497][ T7551] ? clear_bhb_loop+0x60/0xb0 [ 2717.059523][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2717.059543][ T7551] RIP: 0033:0x7fa73dd8d5bc [ 2717.059562][ T7551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2717.059580][ T7551] RSP: 002b:00007fa73ebbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2717.059602][ T7551] RAX: ffffffffffffffda RBX: 00007fa73dfd6090 RCX: 00007fa73dd8d5bc [ 2717.059618][ T7551] RDX: 000000000000000f RSI: 00007fa73ebbf0a0 RDI: 0000000000000008 [ 2717.059631][ T7551] RBP: 00007fa73ebbf090 R08: 0000000000000000 R09: 0000000000000000 [ 2717.059644][ T7551] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2717.059658][ T7551] R13: 00007fa73dfd6128 R14: 00007fa73dfd6090 R15: 00007fa73e0ffa28 [ 2717.059691][ T7551] [ 2718.211103][ T7577] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2718.835759][ T7587] FAULT_INJECTION: forcing a failure. [ 2718.835759][ T7587] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.938490][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.4.8853 Not tainted syzkaller #0 PREEMPT(full) [ 2718.938520][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2718.938534][ T7587] Call Trace: [ 2718.938544][ T7587] [ 2718.938554][ T7587] dump_stack_lvl+0x189/0x250 [ 2718.938585][ T7587] ? __pfx____ratelimit+0x10/0x10 [ 2718.938607][ T7587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2718.938633][ T7587] ? __pfx__printk+0x10/0x10 [ 2718.938668][ T7587] ? __pfx___might_resched+0x10/0x10 [ 2718.938688][ T7587] ? fs_reclaim_acquire+0x7d/0x100 [ 2718.938711][ T7587] should_fail_ex+0x414/0x560 [ 2718.938745][ T7587] should_failslab+0xa8/0x100 [ 2718.938777][ T7587] __kmalloc_noprof+0xcb/0x4f0 [ 2718.938803][ T7587] ? pfkey_add+0xf65/0x2e00 [ 2718.938832][ T7587] pfkey_add+0xf65/0x2e00 [ 2718.938874][ T7587] ? __pfx_pfkey_add+0x10/0x10 [ 2718.938910][ T7587] ? kmem_cache_free+0x18f/0x400 [ 2718.938952][ T7587] pfkey_sendmsg+0xbfe/0x1090 [ 2718.938993][ T7587] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2718.939044][ T7587] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2718.939067][ T7587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2718.939090][ T7587] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2718.939115][ T7587] __sock_sendmsg+0x219/0x270 [ 2718.939150][ T7587] ____sys_sendmsg+0x505/0x830 [ 2718.939182][ T7587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2718.939219][ T7587] ? import_iovec+0x74/0xa0 [ 2718.939258][ T7587] ___sys_sendmsg+0x21f/0x2a0 [ 2718.939287][ T7587] ? __pfx____sys_sendmsg+0x10/0x10 [ 2718.939353][ T7587] ? __fget_files+0x2a/0x420 [ 2718.939370][ T7587] ? __fget_files+0x3a0/0x420 [ 2718.939400][ T7587] __x64_sys_sendmsg+0x19b/0x260 [ 2718.939429][ T7587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2718.939466][ T7587] ? __pfx_ksys_write+0x10/0x10 [ 2718.939491][ T7587] ? rcu_is_watching+0x15/0xb0 [ 2718.939519][ T7587] ? do_syscall_64+0xbe/0x3b0 [ 2718.939546][ T7587] do_syscall_64+0xfa/0x3b0 [ 2718.939567][ T7587] ? lockdep_hardirqs_on+0x9c/0x150 [ 2718.939587][ T7587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2718.939608][ T7587] ? clear_bhb_loop+0x60/0xb0 [ 2718.939633][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2718.939653][ T7587] RIP: 0033:0x7f32a338eba9 [ 2718.939672][ T7587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2718.939690][ T7587] RSP: 002b:00007f32a4148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2718.939712][ T7587] RAX: ffffffffffffffda RBX: 00007f32a35d5fa0 RCX: 00007f32a338eba9 [ 2718.939727][ T7587] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2718.939741][ T7587] RBP: 00007f32a4148090 R08: 0000000000000000 R09: 0000000000000000 [ 2718.939754][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2718.939766][ T7587] R13: 00007f32a35d6038 R14: 00007f32a35d5fa0 R15: 00007f32a36ffa28 [ 2718.939799][ T7587] [ 2719.421734][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8854'. [ 2720.604047][ T7602] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8855'. [ 2721.443267][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2721.936189][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8862'. [ 2725.568534][ T1569] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2725.861655][ T7293] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2725.870064][ T1569] usb 1-1: device descriptor read/64, error -71 [ 2726.046890][ T7293] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2726.076837][ T7293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2726.112793][ T7293] usb 4-1: Product: syz [ 2726.117014][ T7293] usb 4-1: Manufacturer: syz [ 2726.121872][ T1569] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2726.168788][ T7293] usb 4-1: SerialNumber: syz [ 2726.326129][ T1569] usb 1-1: device descriptor read/64, error -71 [ 2726.439862][ T1569] usb usb1-port1: attempt power cycle [ 2726.988573][ T1569] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2727.048182][ T1569] usb 1-1: device descriptor read/8, error -71 [ 2727.365674][ T7673] binder: 7672:7673 ioctl c018937e 2000000002c0 returned -22 [ 2727.410700][ T1569] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2727.443301][ T1569] usb 1-1: device descriptor read/8, error -71 [ 2727.579185][ T1569] usb usb1-port1: unable to enumerate USB device [ 2727.692105][ T7682] tipc: Can't bind to reserved service type 2 [ 2727.959079][ T1569] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2728.361176][ T1569] usb 3-1: Using ep0 maxpacket: 32 [ 2728.404746][ T1569] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2728.645426][ T1569] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2728.809988][ T1569] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2729.055086][ T8644] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 2729.288833][ T7696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2729.331089][ T1569] usb 3-1: config 1 has no interface number 0 [ 2729.337294][ T1569] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2729.389378][ T1569] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2729.428923][ T1569] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2729.469289][ T1569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.522189][ T1569] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2729.530050][ T8644] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2729.559658][ T8644] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2729.708762][ T8644] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2729.729668][ T1569] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 2729.751919][ T8644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.764005][ T8644] usb 1-1: config 0 descriptor?? [ 2729.976677][ T8644] Bluetooth: Can't get state to change to load ram patch err [ 2730.012879][ T8644] Bluetooth: Loading patch file failed [ 2730.029772][ T8644] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 2730.191584][ T8644] usb 1-1: USB disconnect, device number 127 [ 2730.751975][ T1569] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 2731.230821][ T7293] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -ETIMEDOUT [ 2731.304884][ T7293] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -110 [ 2731.366583][ T30] audit: type=1326 audit(1757952550.593:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2731.421568][ T7293] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2731.469454][ T30] audit: type=1326 audit(1757952550.593:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2731.499717][T15796] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2731.551614][ T7293] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -110 [ 2731.573607][T15796] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2731.652270][ T7293] usb 4-1: USB disconnect, device number 5 [ 2731.671106][ T30] audit: type=1326 audit(1757952550.633:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2731.863064][ T30] audit: type=1326 audit(1757952550.633:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2732.050074][ T30] audit: type=1326 audit(1757952550.633:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2732.121152][ T7716] netdevsim netdevsim3: Direct firmware load for . [ 2732.121152][ T7716] failed with error -2 [ 2732.135158][ T7716] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 2732.135158][ T7716] [ 2732.213546][ T30] audit: type=1326 audit(1757952550.633:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2732.488941][ T30] audit: type=1326 audit(1757952550.633:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2732.814997][ T30] audit: type=1326 audit(1757952550.633:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2732.958632][ T30] audit: type=1326 audit(1757952550.643:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2733.103186][ T30] audit: type=1326 audit(1757952550.643:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.8884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b2b8eba9 code=0x7ffc0000 [ 2733.179783][T15797] usb 3-1: USB disconnect, device number 24 [ 2733.187385][T15797] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2736.069217][ T7749] vlan2: entered allmulticast mode [ 2736.568748][ T7750] loop6: detected capacity change from 0 to 1 [ 2736.731201][ T7756] program syz.2.8896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2736.774362][ T7757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2736.812188][ T5236] Dev loop6: unable to read RDB block 1 [ 2736.817790][ T5236] loop6: unable to read partition table [ 2736.834121][ T5236] loop6: partition table beyond EOD, truncated [ 2737.514702][ T7772] FAULT_INJECTION: forcing a failure. [ 2737.514702][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.542702][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: syz.2.8902 Not tainted syzkaller #0 PREEMPT(full) [ 2737.542724][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2737.542734][ T7772] Call Trace: [ 2737.542740][ T7772] [ 2737.542747][ T7772] dump_stack_lvl+0x189/0x250 [ 2737.542770][ T7772] ? __pfx____ratelimit+0x10/0x10 [ 2737.542786][ T7772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2737.542804][ T7772] ? __pfx__printk+0x10/0x10 [ 2737.542838][ T7772] ? __pfx___might_resched+0x10/0x10 [ 2737.542852][ T7772] ? fs_reclaim_acquire+0x7d/0x100 [ 2737.542870][ T7772] should_fail_ex+0x414/0x560 [ 2737.542896][ T7772] should_failslab+0xa8/0x100 [ 2737.542919][ T7772] __kmalloc_cache_noprof+0x70/0x3d0 [ 2737.542939][ T7772] ? __request_module+0x2b5/0x5e0 [ 2737.542965][ T7772] __request_module+0x2b5/0x5e0 [ 2737.542987][ T7772] ? __lock_acquire+0xab9/0xd20 [ 2737.543012][ T7772] ? __pfx___request_module+0x10/0x10 [ 2737.543037][ T7772] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 2737.543060][ T7772] ? __xfrm_init_state+0x7ef/0x13f0 [ 2737.543085][ T7772] __xfrm_init_state+0x852/0x13f0 [ 2737.543105][ T7772] ? __xfrm_init_state+0x7ef/0x13f0 [ 2737.543130][ T7772] xfrm_init_state+0x18/0xa0 [ 2737.543148][ T7772] pfkey_add+0x1d38/0x2e00 [ 2737.543180][ T7772] ? __pfx_pfkey_add+0x10/0x10 [ 2737.543195][ T7772] ? kmem_cache_free+0x18f/0x400 [ 2737.543225][ T7772] pfkey_sendmsg+0xbfe/0x1090 [ 2737.543253][ T7772] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2737.543289][ T7772] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2737.543305][ T7772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2737.543322][ T7772] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2737.543339][ T7772] __sock_sendmsg+0x219/0x270 [ 2737.543364][ T7772] ____sys_sendmsg+0x505/0x830 [ 2737.543387][ T7772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2737.543412][ T7772] ? import_iovec+0x74/0xa0 [ 2737.543435][ T7772] ___sys_sendmsg+0x21f/0x2a0 [ 2737.543455][ T7772] ? __pfx____sys_sendmsg+0x10/0x10 [ 2737.543501][ T7772] ? __fget_files+0x2a/0x420 [ 2737.543514][ T7772] ? __fget_files+0x3a0/0x420 [ 2737.543535][ T7772] __x64_sys_sendmsg+0x19b/0x260 [ 2737.543556][ T7772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2737.543581][ T7772] ? __pfx_ksys_write+0x10/0x10 [ 2737.543599][ T7772] ? rcu_is_watching+0x15/0xb0 [ 2737.543618][ T7772] ? do_syscall_64+0xbe/0x3b0 [ 2737.543642][ T7772] do_syscall_64+0xfa/0x3b0 [ 2737.543657][ T7772] ? lockdep_hardirqs_on+0x9c/0x150 [ 2737.543672][ T7772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2737.543687][ T7772] ? clear_bhb_loop+0x60/0xb0 [ 2737.543705][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2737.543719][ T7772] RIP: 0033:0x7f405f98eba9 [ 2737.543733][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2737.543746][ T7772] RSP: 002b:00007f40607fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2737.543763][ T7772] RAX: ffffffffffffffda RBX: 00007f405fbd5fa0 RCX: 00007f405f98eba9 [ 2737.543774][ T7772] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2737.543784][ T7772] RBP: 00007f40607fe090 R08: 0000000000000000 R09: 0000000000000000 [ 2737.543793][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2737.543802][ T7772] R13: 00007f405fbd6038 R14: 00007f405fbd5fa0 R15: 00007f405fcffa28 [ 2737.543825][ T7772] [ 2738.338215][ T7784] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2738.344792][ T7784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2738.392637][ T7784] vhci_hcd vhci_hcd.0: Device attached [ 2738.408276][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8903'. [ 2738.417755][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8903'. [ 2738.470295][ T7784] netdevsim netdevsim0: Direct firmware load for 0 failed with error -2 [ 2738.488052][ T7784] netdevsim netdevsim0: Falling back to sysfs fallback for: 0 [ 2738.618212][ T7793] loop9: detected capacity change from 0 to 3 [ 2738.629709][ T7293] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 2738.821806][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2738.834826][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2738.877972][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2738.901712][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2738.996804][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2739.055287][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2739.094436][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2739.115275][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2739.162864][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2739.189757][T14977] Buffer I/O error on dev loop9, logical block 0, async page read [ 2739.614653][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'. [ 2739.653050][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'. [ 2739.676733][ T7803] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2739.683292][ T7803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2739.712857][ T7785] vhci_hcd: connection reset by peer [ 2739.725182][T32529] vhci_hcd: stop threads [ 2739.729752][T32529] vhci_hcd: release socket [ 2739.739314][T32529] vhci_hcd: disconnect device [ 2739.771097][ T7803] vhci_hcd vhci_hcd.0: Device attached [ 2740.038563][ T8644] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 2740.050573][ T7804] vhci_hcd: connection closed [ 2740.063672][T32529] vhci_hcd: stop threads [ 2740.078349][T32529] vhci_hcd: release socket [ 2740.088529][T32529] vhci_hcd: disconnect device [ 2741.671810][ T7699] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 2743.778697][ T7293] vhci_hcd: vhci_device speed not set [ 2743.908559][ T7846] netdevsim netdevsim3: Direct firmware load for . [ 2743.908559][ T7846] failed with error -2 [ 2743.961107][ T7846] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 2743.961107][ T7846] [ 2745.148625][ T8644] vhci_hcd: vhci_device speed not set [ 2745.702318][ T7857] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.8923'. [ 2746.523151][ T7869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8929'. [ 2746.677066][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8930'. [ 2749.434734][ T7910] ip6tnl4: entered allmulticast mode [ 2751.308308][ T7929] program syz.3.8944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2752.258532][ T7313] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2752.497705][ T7313] usb 4-1: Using ep0 maxpacket: 16 [ 2752.586375][ T7938] veth0_to_bridge: entered promiscuous mode [ 2755.071210][ T7934] veth0_to_bridge: left promiscuous mode [ 2755.276435][ T7313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2755.310327][ T7313] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2755.346126][ T7313] usb 4-1: can't read configurations, error -71 [ 2755.585594][ T7973] loop2: detected capacity change from 0 to 7 [ 2755.640407][ T7973] loop2: [POWERTEC] p1 p2 p3 [ 2755.665557][ T7973] loop2: p1 size 4456448 extends beyond EOD, truncated [ 2755.787216][ T7978] netdevsim netdevsim1: Direct firmware load for . [ 2755.787216][ T7978] failed with error -2 [ 2755.798975][ T7978] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2755.798975][ T7978] [ 2755.828770][ T7973] loop2: p2 size 67108864 extends beyond EOD, truncated [ 2755.952818][ T7973] loop2: p3 start 557058 is beyond EOD, truncated [ 2756.052327][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8955'. [ 2756.271428][T15060] udevd[15060]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 2756.287972][T14977] udevd[14977]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 2758.650531][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8961'. [ 2758.889604][ T7997] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.8962'. [ 2759.189052][ T7999] loop6: detected capacity change from 1 to 0 [ 2760.652177][ T8023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2761.008863][ T7313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2761.201010][ T7313] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2761.211856][ T7313] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2761.263020][ T7313] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2761.401394][ T7313] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2761.423207][ T7313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2761.453174][ T7313] usb 1-1: Product: syz [ 2761.501184][ T7313] usb 1-1: Manufacturer: syz [ 2761.528940][ T7313] usb 1-1: SerialNumber: syz [ 2761.607745][ T7313] hub 1-1:1.0: bad descriptor, ignoring hub [ 2761.654366][ T7313] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2761.777828][ T7313] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2762.108823][ T7313] usb 1-1: USB disconnect, device number 2 [ 2762.145825][ T7313] usblp0: removed [ 2762.455975][ T7313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2762.678869][ T7313] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2762.688995][ T7313] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2762.718608][ T7313] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2762.772434][ T7313] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2762.798820][ T7313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2762.830923][ T7313] usb 1-1: Product: syz [ 2762.835152][ T7313] usb 1-1: Manufacturer: syz [ 2762.865728][ T7313] usb 1-1: SerialNumber: syz [ 2762.914215][ T7313] hub 1-1:1.0: bad descriptor, ignoring hub [ 2762.931576][ T7313] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2763.079810][ T8035] veth1_macvtap: left promiscuous mode [ 2763.174419][ T8035] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 2764.471606][ T7313] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2764.549294][ T7313] usb 1-1: USB disconnect, device number 3 [ 2764.594300][ T7313] usblp0: removed [ 2764.602224][ T8053] loop9: detected capacity change from 0 to 3 [ 2764.719391][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2764.740999][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2764.795284][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2764.815653][ T8055] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.8976'. [ 2764.838062][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2764.852073][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2764.891412][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2764.937417][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2764.977782][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2765.093428][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2765.316180][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2766.802819][ T8076] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8980'. [ 2767.639632][ T8089] ip6tnl1: entered promiscuous mode [ 2767.644906][ T8089] ip6tnl1: entered allmulticast mode [ 2767.832552][ T8096] netdevsim netdevsim0: Direct firmware load for . [ 2767.832552][ T8096] failed with error -2 [ 2767.862717][ T8096] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2767.862717][ T8096] [ 2767.904297][ T8095] vlan2: entered allmulticast mode [ 2768.007187][ T8101] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.8988'. [ 2768.241854][T30997] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2768.276165][ T7293] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2768.285753][T30997] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2768.517533][ T8644] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2768.775935][ T8117] loop9: detected capacity change from 0 to 3 [ 2769.165382][ T7293] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2770.645969][ T8126] tipc: Started in network mode [ 2770.665734][ T8126] tipc: Node identity , cluster identity 4711 [ 2770.729056][ T8126] tipc: Failed to obtain node identity [ 2770.735195][ T8126] tipc: Enabling of bearer rejected, failed to enable media [ 2771.865424][ T8148] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.9001'. [ 2772.108688][ T8644] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2772.380307][ T7313] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2772.484242][ T8644] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2772.508962][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2772.523352][ T8644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.539021][ T7313] usb 3-1: Using ep0 maxpacket: 16 [ 2772.549252][ T7313] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2772.557511][ T8644] usb 2-1: Product: syz [ 2772.560703][ T7313] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2772.570048][ T7313] usb 3-1: can't read configurations, error -61 [ 2772.608493][ T8644] usb 2-1: Manufacturer: syz [ 2772.634627][ T8644] usb 2-1: SerialNumber: syz [ 2772.828833][ T7313] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2773.128895][ T7313] usb 3-1: Using ep0 maxpacket: 16 [ 2773.135052][ T7313] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2773.175497][ T7313] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2773.219050][ T7313] usb 3-1: can't read configurations, error -61 [ 2773.241305][ T7313] usb usb3-port1: attempt power cycle [ 2773.528441][ T8644] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2773.581411][ T8644] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2773.599110][ T7313] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2773.603789][ T8644] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2773.717231][ T7313] usb 3-1: Using ep0 maxpacket: 16 [ 2773.723597][ T7313] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2773.740942][ T8644] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2773.788632][ T7313] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2773.790475][ T8644] usb 2-1: USB disconnect, device number 52 [ 2773.802843][ T7313] usb 3-1: can't read configurations, error -61 [ 2773.976841][ T7313] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2773.999429][ T7313] usb 3-1: Using ep0 maxpacket: 16 [ 2774.005422][ T7313] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2774.015971][ T7313] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2774.024211][ T7313] usb 3-1: can't read configurations, error -61 [ 2774.032811][ T7313] usb usb3-port1: unable to enumerate USB device [ 2774.833040][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.853454][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.271225][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9009'. [ 2775.339555][ T8180] geneve2: entered promiscuous mode [ 2775.370329][ T8180] geneve2: entered allmulticast mode [ 2775.389266][ T8644] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2775.550620][ T8644] usb 3-1: config 0 has an invalid interface number: 187 but max is 0 [ 2775.559322][ T8644] usb 3-1: config 0 has no interface number 0 [ 2775.576663][ T8644] usb 3-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2775.603796][ T8644] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 2775.617361][ T8644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2775.668547][ T8644] usb 3-1: Product: syz [ 2775.680285][ T8644] usb 3-1: Manufacturer: syz [ 2775.695320][ T8644] usb 3-1: SerialNumber: syz [ 2775.743540][ T8644] usb 3-1: config 0 descriptor?? [ 2775.770650][ T8177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2775.787158][ T8193] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.9013'. [ 2775.828030][ T8194] loop9: detected capacity change from 0 to 3 [ 2776.290873][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2776.694853][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2776.947189][T15060] buffer_io_error: 10 callbacks suppressed [ 2776.947206][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2776.966037][ T8644] usb 3-1: USB disconnect, device number 29 [ 2776.992019][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2777.014408][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2777.027560][ T8196] program syz.3.9014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2777.082538][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2777.105610][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2777.215234][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2777.250916][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2777.284906][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2777.317890][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2777.397910][T15060] Buffer I/O error on dev loop9, logical block 0, async page read [ 2779.689370][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2779.689393][ T30] audit: type=1326 audit(1757952598.913:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.0.9026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1b2b8eba9 code=0x0 [ 2780.977878][ T8258] loop9: detected capacity change from 0 to 3 [ 2781.498522][T15797] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2781.506203][T15796] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2781.638966][T15796] usb 3-1: device descriptor read/64, error -71 [ 2781.658538][T15797] usb 1-1: Using ep0 maxpacket: 8 [ 2781.666085][T15797] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2781.695224][T15797] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2781.705048][T15797] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2781.726581][T15797] usb 1-1: Product: syz [ 2781.731361][T15797] usb 1-1: Manufacturer: syz [ 2781.736371][T15797] usb 1-1: SerialNumber: syz [ 2781.868611][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2781.881878][T15796] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2781.893738][T22053] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2782.581427][T15797] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 2782.623206][T15797] visor 1-1:1.0: probe with driver visor failed with error -110 [ 2782.738529][T15796] usb 3-1: device descriptor read/64, error -71 [ 2782.748844][T22053] usb 4-1: Using ep0 maxpacket: 8 [ 2782.758734][T22053] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2782.758769][T22053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2782.788112][T22053] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2782.788136][T22053] pvrusb2: ********** [ 2782.788146][T22053] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2782.788161][T22053] pvrusb2: Important functionality might not be entirely working. [ 2782.788173][T22053] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2782.788186][T22053] pvrusb2: ********** [ 2782.849325][T15796] usb usb3-port1: attempt power cycle [ 2783.188744][T15796] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2783.221351][T15796] usb 3-1: device descriptor read/8, error -71 [ 2783.785826][T15796] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2783.938889][T15796] usb 3-1: device descriptor read/8, error -71 [ 2784.049256][T15796] usb usb3-port1: unable to enumerate USB device [ 2784.192412][ T7090] usb 1-1: USB disconnect, device number 4 [ 2785.311372][ T8644] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2785.518925][ T8644] usb 3-1: Using ep0 maxpacket: 8 [ 2785.538992][ T8644] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2785.567859][ T8644] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2785.590969][ T2345] pvrusb2: Invalid write control endpoint [ 2785.593398][T22053] usb 4-1: USB disconnect, device number 8 [ 2785.637118][ T8644] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2785.655546][ T8644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2785.735509][ T8644] usb 3-1: Product: syz [ 2785.759175][ T8644] usb 3-1: Manufacturer: syz [ 2785.763867][ T8644] usb 3-1: SerialNumber: syz [ 2785.951933][ T2345] pvrusb2: Invalid write control endpoint [ 2785.957769][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2786.082383][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2786.120663][ T8644] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2786.158428][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2786.217276][ T2345] pvrusb2: Device being rendered inoperable [ 2786.250431][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2786.253117][ T7090] usb 3-1: USB disconnect, device number 34 [ 2786.272783][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2786.333022][ T7090] usblp0: removed [ 2786.339790][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2786.360113][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2786.469485][ T8295] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9042'. [ 2786.499249][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2786.550059][ T30] audit: type=1326 audit(1757952605.773:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.2.9043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f405f98eba9 code=0x80000000 [ 2787.157409][T30817] Bluetooth: hci4: command 0x0406 tx timeout [ 2787.464540][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9045'. [ 2788.686203][ T8313] input: syz0 as /devices/virtual/input/input231 [ 2790.748767][ T2580] Bluetooth: hci5: command 0x0c1a tx timeout [ 2790.748915][T22053] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2790.800677][T22053] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 2790.856519][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9057'. [ 2791.012263][ T8338] FAULT_INJECTION: forcing a failure. [ 2791.012263][ T8338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2791.302502][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.0.9058 Not tainted syzkaller #0 PREEMPT(full) [ 2791.302530][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2791.302542][ T8338] Call Trace: [ 2791.302550][ T8338] [ 2791.302560][ T8338] dump_stack_lvl+0x189/0x250 [ 2791.302590][ T8338] ? __pfx____ratelimit+0x10/0x10 [ 2791.302608][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2791.302632][ T8338] ? __pfx__printk+0x10/0x10 [ 2791.302683][ T8338] should_fail_ex+0x414/0x560 [ 2791.302747][ T8338] _copy_to_user+0x31/0xb0 [ 2791.302778][ T8338] simple_read_from_buffer+0xe1/0x170 [ 2791.302816][ T8338] proc_fail_nth_read+0x1b3/0x220 [ 2791.302849][ T8338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2791.302879][ T8338] ? rw_verify_area+0x2a6/0x4d0 [ 2791.302906][ T8338] ? __lock_acquire+0xab9/0xd20 [ 2791.302939][ T8338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2791.302967][ T8338] vfs_read+0x1fd/0xa30 [ 2791.302995][ T8338] ? fdget_pos+0x247/0x320 [ 2791.303022][ T8338] ? __pfx___mutex_lock+0x10/0x10 [ 2791.303049][ T8338] ? __pfx_vfs_read+0x10/0x10 [ 2791.303080][ T8338] ? __fget_files+0x2a/0x420 [ 2791.303115][ T8338] ? __fget_files+0x3a0/0x420 [ 2791.303134][ T8338] ? __fget_files+0x2a/0x420 [ 2791.303166][ T8338] ksys_read+0x145/0x250 [ 2791.303200][ T8338] ? __pfx_ksys_read+0x10/0x10 [ 2791.303227][ T8338] ? rcu_is_watching+0x15/0xb0 [ 2791.303260][ T8338] ? do_syscall_64+0xbe/0x3b0 [ 2791.303292][ T8338] do_syscall_64+0xfa/0x3b0 [ 2791.303315][ T8338] ? lockdep_hardirqs_on+0x9c/0x150 [ 2791.303339][ T8338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2791.303361][ T8338] ? clear_bhb_loop+0x60/0xb0 [ 2791.303389][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2791.303413][ T8338] RIP: 0033:0x7fd1b2b8d5bc [ 2791.303434][ T8338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2791.303454][ T8338] RSP: 002b:00007fd1b3a29030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2791.303478][ T8338] RAX: ffffffffffffffda RBX: 00007fd1b2dd5fa0 RCX: 00007fd1b2b8d5bc [ 2791.303495][ T8338] RDX: 000000000000000f RSI: 00007fd1b3a290a0 RDI: 0000000000000004 [ 2791.303511][ T8338] RBP: 00007fd1b3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 2791.303524][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.303539][ T8338] R13: 00007fd1b2dd6038 R14: 00007fd1b2dd5fa0 R15: 00007fd1b2effa28 [ 2791.303594][ T8338] [ 2792.924659][ T2580] Bluetooth: hci1: command 0x0405 tx timeout [ 2792.965318][T22053] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2792.975454][T22053] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2793.421609][ T8367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2795.069274][ T8379] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.9068'. [ 2795.148614][T22053] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2795.154860][T22053] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 2795.268093][ T2580] Bluetooth: hci2: command 0x0406 tx timeout [ 2795.633733][ T8383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2795.978513][T15796] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2796.451697][T15796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2796.522100][T15796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2796.558476][T15796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2796.704893][T15796] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2796.802382][T15796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2797.008597][T15796] usb 2-1: config 0 descriptor?? [ 2797.037852][T15796] hub 2-1:0.0: USB hub found [ 2797.382124][T15796] hub 2-1:0.0: 14 ports detected [ 2797.389523][T15796] hub 2-1:0.0: insufficient power available to use all downstream ports [ 2797.500000][ T2580] Bluetooth: hci0: command 0x0405 tx timeout [ 2797.583446][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2797.615813][T22053] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2797.632830][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2797.718486][T15796] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 2797.735806][T22053] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 2797.748455][T15796] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 2797.889991][T15796] usb 2-1: USB disconnect, device number 53 [ 2798.243973][ T8407] binfmt_misc: register: failed to install interpreter file ./file0 [ 2798.424592][ T8411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9077'. [ 2798.443481][ T30] audit: type=1326 audit(1757952617.673:9778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405f98eba9 code=0x7ffc0000 [ 2798.531352][ T30] audit: type=1326 audit(1757952617.673:9779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405f98eba9 code=0x7ffc0000 [ 2798.576374][ T30] audit: type=1326 audit(1757952617.673:9780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f405f98eba9 code=0x7ffc0000 [ 2798.657821][ T8415] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.9079'. [ 2798.732831][ T30] audit: type=1326 audit(1757952617.673:9781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405f98eba9 code=0x7ffc0000 [ 2799.148643][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2799.219465][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9081'. [ 2799.530204][ T8427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9082'. [ 2799.872184][T22053] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 2799.878338][T22053] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 2799.887772][ C1] ------------[ cut here ]------------ [ 2799.894373][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 2799.901189][ C1] WARNING: CPU: 1 PID: 8429 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0 [ 2799.910269][ C1] Modules linked in: [ 2799.914881][ C1] CPU: 1 UID: 0 PID: 8429 Comm: syz.3.9083 Not tainted syzkaller #0 PREEMPT(full) [ 2799.924279][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2799.934348][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 2799.939656][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 53 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 e1 89 8b 4c 89 fa e8 99 39 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 8a 9c 35 00 90 0f 0b 90 e9 dd fc ff [ 2799.959278][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 2799.965375][ C1] RAX: fcda255cb481fb00 RBX: 0000000000000100 RCX: ffff88802e760000 [ 2799.973388][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2799.981378][ C1] RBP: 1ffff1100a9ab238 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 2799.989366][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 2799.997345][ C1] R13: ffff88806103c988 R14: 0000000000000008 R15: ffff888054d59178 [ 2800.005333][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 2800.014274][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2800.020868][ C1] CR2: 00002000001ac030 CR3: 0000000056c14000 CR4: 00000000003526f0 [ 2800.028856][ C1] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 2800.036847][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2800.044834][ C1] Call Trace: [ 2800.048144][ C1] [ 2800.051038][ C1] call_timer_fn+0x17b/0x5f0 [ 2800.055719][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2800.061579][ C1] ? call_timer_fn+0xbe/0x5f0 [ 2800.066311][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2800.071491][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 2800.076801][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2800.082662][ C1] __run_timer_base+0x646/0x860 [ 2800.087566][ C1] ? ktime_get+0x3e/0x1f0 [ 2800.091949][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2800.097455][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 2800.103849][ C1] run_timer_softirq+0xb7/0x180 [ 2800.108796][ C1] handle_softirqs+0x283/0x870 [ 2800.113775][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2800.118591][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2800.123921][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2800.129169][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2800.133820][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2800.139178][ C1] irq_exit_rcu+0x9/0x30 [ 2800.143460][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2800.149142][ C1] [ 2800.152102][ C1] [ 2800.155071][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2800.161097][ C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150 [ 2800.167037][ C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 ab 88 14 f6 e8 76 e3 4b f6 fb bf 01 00 00 00 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 2800.186817][ C1] RSP: 0018:ffffc90003597680 EFLAGS: 00000282 [ 2800.192932][ C1] RAX: fcda255cb481fb00 RBX: 0000000000000000 RCX: fcda255cb481fb00 [ 2800.200941][ C1] RDX: 0000000000000006 RSI: ffffffff8d9b9e62 RDI: 0000000000000001 [ 2800.209006][ C1] RBP: ffffc90003597730 R08: ffffffff8fa3a537 R09: 1ffffffff1f474a6 [ 2800.217070][ C1] R10: dffffc0000000000 R11: fffffbfff1f474a7 R12: 0000000000000000 [ 2800.225091][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006b2ed0 [ 2800.233282][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2800.239057][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2800.244878][ C1] irqentry_exit+0x6f/0x90 [ 2800.249313][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2800.254782][ C1] RIP: 0010:lockdep_unregister_key+0x2c5/0x310 [ 2800.260968][ C1] Code: 65 48 8b 05 4d 1d 03 11 48 3b 44 24 10 0f 84 26 fe ff ff e8 0d c4 dc 09 e8 38 c5 dc 09 41 f7 c7 00 02 00 00 74 bd fb 40 84 ed <75> bc eb cd 90 0f 0b 90 e9 19 ff ff ff 90 0f 0b 90 e9 2a ff ff ff [ 2800.280587][ C1] RSP: 0018:ffffc900035977f8 EFLAGS: 00000202 [ 2800.286668][ C1] RAX: fcda255cb481fb00 RBX: 0000000000000001 RCX: fcda255cb481fb00 [ 2800.294648][ C1] RDX: ffffffff93647338 RSI: ffffffff8d9cd9ce RDI: ffffffff8be33e80 [ 2800.302645][ C1] RBP: ffff888079e62201 R08: 0000000000000000 R09: ffffffff81aa9548 [ 2800.310656][ C1] R10: dffffc0000000000 R11: fffffbfff1f474a7 R12: 0000000000000000 [ 2800.318661][ C1] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000a03 [ 2800.326681][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 2800.332829][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 2800.338841][ C1] __qdisc_destroy+0x166/0x420 [ 2800.343642][ C1] dev_shutdown+0x34c/0x440 [ 2800.348164][ C1] unregister_netdevice_many_notify+0xe0f/0x1ff0 [ 2800.354552][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2800.361343][ C1] ? __queue_work+0xc56/0xfb0 [ 2800.366120][ C1] ? queue_delayed_work_on+0x11a/0x280 [ 2800.371675][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2800.376898][ C1] unregister_netdevice_queue+0x33c/0x380 [ 2800.382639][ C1] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 2800.388463][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2800.394726][ C1] ? linkwatch_urgent_event+0x318/0x3a0 [ 2800.400298][ C1] __tun_detach+0xda4/0x1560 [ 2800.404935][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 2800.410083][ C1] tun_chr_close+0x10a/0x1c0 [ 2800.414778][ C1] __fput+0x44c/0xa70 [ 2800.418822][ C1] task_work_run+0x1d1/0x260 [ 2800.423444][ C1] ? __pfx_task_work_run+0x10/0x10 [ 2800.428591][ C1] do_exit+0x6b5/0x2300 [ 2800.432817][ C1] ? preempt_schedule_common+0x83/0xd0 [ 2800.438423][ C1] ? preempt_schedule+0xae/0xc0 [ 2800.443317][ C1] ? __pfx_do_exit+0x10/0x10 [ 2800.448071][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2800.453476][ C1] do_group_exit+0x21c/0x2d0 [ 2800.458101][ C1] __x64_sys_exit_group+0x3f/0x40 [ 2800.463154][ C1] x64_sys_call+0x21f7/0x2200 [ 2800.467853][ C1] do_syscall_64+0xfa/0x3b0 [ 2800.472375][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2800.477589][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2800.483671][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2800.488393][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2800.494316][ C1] RIP: 0033:0x7fa73dd8eba9 [ 2800.498750][ C1] Code: Unable to access opcode bytes at 0x7fa73dd8eb7f. [ 2800.505785][ C1] RSP: 002b:00007fa73e0ff578 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2800.514210][ C1] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fa73dd8eba9 [ 2800.522191][ C1] RDX: 00007fa73dd461c7 RSI: 0000000000000000 RDI: 000000000000000b [ 2800.530264][ C1] RBP: 0000000000000003 R08: 00007fa73e0ffa27 R09: 000000000000000b [ 2800.538275][ C1] R10: 00007fa73dfd5fa0 R11: 0000000000000246 R12: 00007fa73dfd627c [ 2800.546267][ C1] R13: 00007fa73dfd6270 R14: 000000000000163d R15: 0000000000000003 [ 2800.554275][ C1] [ 2800.557307][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2800.564628][ C1] CPU: 1 UID: 0 PID: 8429 Comm: syz.3.9083 Not tainted syzkaller #0 PREEMPT(full) [ 2800.573917][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2800.583983][ C1] Call Trace: [ 2800.587274][ C1] [ 2800.590140][ C1] dump_stack_lvl+0x99/0x250 [ 2800.594751][ C1] ? __asan_memcpy+0x40/0x70 [ 2800.599352][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2800.604577][ C1] ? __pfx__printk+0x10/0x10 [ 2800.609233][ C1] vpanic+0x281/0x750 [ 2800.613227][ C1] ? __pfx__printk+0x10/0x10 [ 2800.617831][ C1] ? __pfx_vpanic+0x10/0x10 [ 2800.622364][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 2800.627681][ C1] panic+0xb9/0xc0 [ 2800.631420][ C1] ? __pfx_panic+0x10/0x10 [ 2800.635865][ C1] __warn+0x31b/0x4b0 [ 2800.639879][ C1] ? __queue_work+0xd38/0xfb0 [ 2800.644567][ C1] ? __queue_work+0xd38/0xfb0 [ 2800.649251][ C1] report_bug+0x2be/0x4f0 [ 2800.653590][ C1] ? __queue_work+0xd38/0xfb0 [ 2800.658270][ C1] ? __queue_work+0xd38/0xfb0 [ 2800.663038][ C1] ? __queue_work+0xd3a/0xfb0 [ 2800.667737][ C1] handle_bug+0x84/0x160 [ 2800.672007][ C1] exc_invalid_op+0x1a/0x50 [ 2800.676520][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2800.681377][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 2800.686673][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 53 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 e1 89 8b 4c 89 fa e8 99 39 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 8a 9c 35 00 90 0f 0b 90 e9 dd fc ff [ 2800.706286][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 2800.712367][ C1] RAX: fcda255cb481fb00 RBX: 0000000000000100 RCX: ffff88802e760000 [ 2800.720431][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2800.728429][ C1] RBP: 1ffff1100a9ab238 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 2800.736413][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 2800.744444][ C1] R13: ffff88806103c988 R14: 0000000000000008 R15: ffff888054d59178 [ 2800.752451][ C1] call_timer_fn+0x17b/0x5f0 [ 2800.757059][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2800.762868][ C1] ? call_timer_fn+0xbe/0x5f0 [ 2800.767553][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2800.772693][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 2800.777898][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2800.783718][ C1] __run_timer_base+0x646/0x860 [ 2800.788598][ C1] ? ktime_get+0x3e/0x1f0 [ 2800.792958][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2800.798331][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 2800.804608][ C1] run_timer_softirq+0xb7/0x180 [ 2800.809565][ C1] handle_softirqs+0x283/0x870 [ 2800.814355][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2800.819126][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2800.824418][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2800.829627][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2800.834751][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2800.839964][ C1] irq_exit_rcu+0x9/0x30 [ 2800.844217][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2800.849890][ C1] [ 2800.852839][ C1] [ 2800.855786][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2800.861773][ C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150 [ 2800.867669][ C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 ab 88 14 f6 e8 76 e3 4b f6 fb bf 01 00 00 00 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 2800.887381][ C1] RSP: 0018:ffffc90003597680 EFLAGS: 00000282 [ 2800.893462][ C1] RAX: fcda255cb481fb00 RBX: 0000000000000000 RCX: fcda255cb481fb00 [ 2800.901496][ C1] RDX: 0000000000000006 RSI: ffffffff8d9b9e62 RDI: 0000000000000001 [ 2800.909492][ C1] RBP: ffffc90003597730 R08: ffffffff8fa3a537 R09: 1ffffffff1f474a6 [ 2800.917475][ C1] R10: dffffc0000000000 R11: fffffbfff1f474a7 R12: 0000000000000000 [ 2800.925454][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006b2ed0 [ 2800.933450][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2800.939186][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2800.945086][ C1] irqentry_exit+0x6f/0x90 [ 2800.949501][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2800.954963][ C1] RIP: 0010:lockdep_unregister_key+0x2c5/0x310 [ 2800.961134][ C1] Code: 65 48 8b 05 4d 1d 03 11 48 3b 44 24 10 0f 84 26 fe ff ff e8 0d c4 dc 09 e8 38 c5 dc 09 41 f7 c7 00 02 00 00 74 bd fb 40 84 ed <75> bc eb cd 90 0f 0b 90 e9 19 ff ff ff 90 0f 0b 90 e9 2a ff ff ff [ 2800.981092][ C1] RSP: 0018:ffffc900035977f8 EFLAGS: 00000202 [ 2800.987179][ C1] RAX: fcda255cb481fb00 RBX: 0000000000000001 RCX: fcda255cb481fb00 [ 2800.995163][ C1] RDX: ffffffff93647338 RSI: ffffffff8d9cd9ce RDI: ffffffff8be33e80 [ 2801.003155][ C1] RBP: ffff888079e62201 R08: 0000000000000000 R09: ffffffff81aa9548 [ 2801.011134][ C1] R10: dffffc0000000000 R11: fffffbfff1f474a7 R12: 0000000000000000 [ 2801.019126][ C1] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000a03 [ 2801.027107][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 2801.032942][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 2801.038499][ C1] __qdisc_destroy+0x166/0x420 [ 2801.043283][ C1] dev_shutdown+0x34c/0x440 [ 2801.047796][ C1] unregister_netdevice_many_notify+0xe0f/0x1ff0 [ 2801.054147][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2801.060941][ C1] ? __queue_work+0xc56/0xfb0 [ 2801.065639][ C1] ? queue_delayed_work_on+0x11a/0x280 [ 2801.071103][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2801.076310][ C1] unregister_netdevice_queue+0x33c/0x380 [ 2801.082040][ C1] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 2801.087852][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2801.094099][ C1] ? linkwatch_urgent_event+0x318/0x3a0 [ 2801.099669][ C1] __tun_detach+0xda4/0x1560 [ 2801.104284][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 2801.109423][ C1] tun_chr_close+0x10a/0x1c0 [ 2801.114027][ C1] __fput+0x44c/0xa70 [ 2801.118028][ C1] task_work_run+0x1d1/0x260 [ 2801.122625][ C1] ? __pfx_task_work_run+0x10/0x10 [ 2801.127767][ C1] do_exit+0x6b5/0x2300 [ 2801.131940][ C1] ? preempt_schedule_common+0x83/0xd0 [ 2801.137397][ C1] ? preempt_schedule+0xae/0xc0 [ 2801.142264][ C1] ? __pfx_do_exit+0x10/0x10 [ 2801.146863][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2801.152249][ C1] do_group_exit+0x21c/0x2d0 [ 2801.156849][ C1] __x64_sys_exit_group+0x3f/0x40 [ 2801.161884][ C1] x64_sys_call+0x21f7/0x2200 [ 2801.166568][ C1] do_syscall_64+0xfa/0x3b0 [ 2801.171076][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2801.176275][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2801.182341][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2801.187021][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2801.192933][ C1] RIP: 0033:0x7fa73dd8eba9 [ 2801.197349][ C1] Code: Unable to access opcode bytes at 0x7fa73dd8eb7f. [ 2801.204362][ C1] RSP: 002b:00007fa73e0ff578 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2801.212784][ C1] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fa73dd8eba9 [ 2801.220760][ C1] RDX: 00007fa73dd461c7 RSI: 0000000000000000 RDI: 000000000000000b [ 2801.228745][ C1] RBP: 0000000000000003 R08: 00007fa73e0ffa27 R09: 000000000000000b [ 2801.236736][ C1] R10: 00007fa73dfd5fa0 R11: 0000000000000246 R12: 00007fa73dfd627c [ 2801.244708][ C1] R13: 00007fa73dfd6270 R14: 000000000000163d R15: 0000000000000003 [ 2801.252700][ C1] [ 2801.256078][ C1] Kernel Offset: disabled [ 2801.260408][ C1] Rebooting in 86400 seconds..